last executing test programs: 2m49.988233666s ago: executing program 2 (id=21): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8100, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}, 0x115905, 0x4, 0x0, 0x2, 0x6, 0xa, 0x1, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x2, 0xffffffffffffffff, 0x1) r0 = socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYBLOB="0000060000000000b7020000140000008500000005000000bc0908000000000035090100"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000040)="100000002d000b02", 0x8}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x1005d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0xf8d, 0x7c0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ffffffffc}, 0x0, 0x7, 0xffffffffffffffff, 0xa) recvmsg(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="720ac4ff000000007110ab000000000095000000000000000bda7ece3783a05490f63afba9df3fcc4a3a791abb6126d48335157ff9f49267a57a5e686410c27e01", @ANYRES64=r4, @ANYRESHEX=r1], &(0x7f0000000480)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000003940)=[{&(0x7f0000000500)=""/4086, 0xff6}], 0x1}, 0x0) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f020033000b35d25a806c8c6f94f90f24fc60100007000c000300053582c137153e37000c0980fc0b10070300", 0x33fe0}], 0x1}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe00006a"], 0xfe33) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x100, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x5}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0], 0x0, 0xd9, &(0x7f0000000400)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x9f, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000006c0), 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) 2m49.177341253s ago: executing program 2 (id=24): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x40009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xffffffffffffffff, 0x3fff8000}, 0x0, 0xff, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0x1000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000057700000000000000000000182ec0002020702500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb70200000800c309b703000024000000850000000600000018010000786c6c2500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0xc}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x4, &(0x7f0000000c80)=@framed={{}, [@ldst={0x5c6ccd1daf94070, 0x1, 0x1, 0x0, 0x8}]}, &(0x7f0000000000)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000540)={0x7, 0x80, 0xb, 0xc0, 0x7, 0x6, 0x0, 0x5, 0x100, 0x4, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0x1}, 0x8, 0x5, 0x6, 0x9, 0x7, 0x35b, 0x7, 0x0, 0x2, 0x0, 0x8}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x1a220, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000dc0)={0x0, 0x80, 0x0, 0x5, 0x8, 0x6, 0x0, 0xd, 0x20002, 0xf, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0xfb, 0x4, @perf_config_ext={0x5, 0x8}, 0x2a0f, 0xc046, 0x3e, 0xa, 0x0, 0x7, 0x8, 0x0, 0x8, 0x0, 0x4}, r3, 0xc, r2, 0x0) socket$kcm(0xa, 0x2, 0x3a) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"}) recvmsg$unix(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000e40)}, 0x3) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket$kcm(0xa, 0x7, 0x88) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000100)={&(0x7f0000000180)="8621457b1771c16215fa9f61f75cf2b7f246ca4726d77339de5f19bddf0e5e56d67a9c943710e1856ef4ad79e01a9e315c18d7cfe9f2b7527bb11ccb33e891fa895730a87e5468f436edbb5d4eba1e745b31397bed3c53a4c68eaf5697a2c64ed886ef9b468a17df0d", &(0x7f0000000280)=""/154, 0x0, &(0x7f0000000340)="784be7fc6158bb0b3359fdfa2a5268088c9a001d031aeebbe7ea32e7d7471d6a12035e3e287920198e1e8b7f4b9ea835cd3507f75eeb3d14aaf87b67cd380c6aca71308453aa304c285216186aa407310c25a9cdc6f262efe072fe58b303a96c51616cffa3f1235c60d84dd19034455c78646b6318116eef81d035553dc7f149e23c84b72fc2cd5363fbe9411d5f4c8ac8a75c352e0e4a24a1c50f95d3d2e6eb9c4d4afff03860fe1455a9fc8b2ddcdc38cbee31137a544b36fa3690d6449ea78c1a3702c99a11ccbb998d210cb81c5c", 0x8a8, 0xffffffffffffffff, 0x4}, 0x38) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0xfffffffffffffd5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_lsm={0x1d, 0x8, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xe}, [@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}]}, &(0x7f0000000640)='GPL\x00', 0xfffffff9, 0x1a, &(0x7f0000000680)=""/26, 0x41100, 0x35, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000700)={0x1, 0xd, 0xd, 0x5}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000740)=[{0x3, 0x2, 0x3, 0x3}, {0x0, 0x2, 0x2, 0xa}], 0x10, 0x9921}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000940)={r6, r7}) recvmsg$kcm(r5, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)=[{0x0}], 0x1}, 0x40000042) 2m46.007738268s ago: executing program 2 (id=35): bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x1}, {0x0, 0x3, 0x8}, {0x0, 0x4, 0x10004}]}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'dvmrp0\x00', 0x2}) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={&(0x7f00000009c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000840)=[{&(0x7f0000000540)="b32d8c9ec55c9dc957894f080143113b5dd243b582ea9c8c01943f5cfa47bae961b212e0e15db90125110c9529c7f71f29f639a69d977d0e4d7cc82e029e5b44f373a8e422bb7edf236a69f37a38df694f84e62d2cebfef5dee3c6c01c24d7c7e29021fae57df150e22d395a5973fc2f0fe2050c78a486806a61def9f9be48b5392e7244b39c8999833c93cb4f90a99bbfc77db25b21a1d006131018eb8e257aa81c1e8620c0ec6767ae6abdc1f434d3b418b82b", 0xb4}, {&(0x7f00000006c0)="1af5c796b80ee3a942be943e91c5bf901b1cc9094cebba42380f3da3c671f350213df818f66b9a6af525d5b9ecbab40a29157ce4dc27b2561faa88b1410c31be894f0ff55d48f6279ea852161a86656c6d6198f642d9d939009692d2f0224eaeba56fffe9018137f78eec3320678b8c904c6e604a425f775f45cf776a4729712840b4b643f0b7ebb341c8e2f03d94e4d7e4bcf25efba91c329357fd066c6127c6c6a09e9cc6f489cd9", 0xa9}, {&(0x7f0000000280)="08c278da222061aabb7f4a4ae333b1b21adf1695cc177edab4", 0x19}, {&(0x7f0000000780)="7930d8e141a8b8e53cebb0f2196a81dbcc2cfda33112a9ed0e38b318ce321bbf5d13ba96aaf3ec655289118a12b1d3bbbff2551ce5b8c2d6f7ce32b02b44657c382d27f2de8a21d4f03f9139d73370099ef6c542b6cc018a69c88ff26c9261359eb592856527c2bec2385a415a1f842235d090262f51ae7a97188535a71c9e7f763dbfa0181d941c47c4eca9f220cc0b5b", 0x91}, {&(0x7f0000000dc0)="8e83622a8768b45a55a3c290facffd3afcde5367c77250af3df8c6ac97863026a4eea416824e3572f694ed5a6ef3a2696c0708a3d8c4968a1cb7677e9e3b8a4bebc548a4fbb6baea50ae47467657c11e96c263dbd4f5b912eb0f8083faacc5fa9cf35e04dbb75fbea4023933ac96459294789817bbde2413037c71bebb6f6a7f7fd925c732b8b4def4b7c5c6ce3fd4e1c5ed91891179a1a7930611840fe1fae8c395f1e1443650d1a636899a9e50134f0262aa13b925088c0a9e41948c1a33346b8210a13e511d8a33967b2542cc680af652569b0da65b5b41fc3cfdf5663244e186c992c4d549732de844fecb51ef1747ef3d16e2468242f79b5072348ff6eac42ac7ae110e5ba5b8d5c90fcaf03124e14e147d465072014510e5fb9f3773c3abef2e74a5bf8a461ad863bbd26c3f1de058f8cd2cfe32129aa8eb0c05f6a5e4759dc692f3e7baf4d312de0527f151a5d25031b50594adfcc32ae848dc0829b240e4701e32d3f4492afe8ff971bedfcb7255bd63cbc2bb04e49c772e8fa40cea052c8a1d230643641f8238a5da499f6d58ce26a41301dea398867aeffc4d103aa7d76afef41b636e16dca3eb0655fb03aa3b6f1401a6e00b50f0816dce4f032e2e18f8772b37ffbd05a92fbac565fc74dc23674d8cee4436f5b47147513f6f991da03f65d3c1bf2a8e5cbc9910b0fddc38cdec1b1cd5605b2400a304f0206ed4d009c635e514f6ad875c1888a05c82d475e6feb7eda24833d828de67059033e8f1e2d87d46d643de94a64684b132bcd8eb6eadf0adff01e4669efb988c63926f6e8fd38fe5b134d92e3828614ac497be0209b90d57df91ac149f1e39f8ba0ce029347ab91ebaee03a086bae217da432690934c389082833242f1ab277fa2e583b9166b3fb10035b298d1f6e622320e78f10ecf62e2b9915f1b8600d6e065958a33a172225bceec2e52dfccf147bd6ba6fd0bb33ef3ad2d4e7e975f9e98cb4f97f6093f4bcb6165840e8a242e0313e297a6c730b355504b03397767ea2a2fe47b4d02eb9a0641cc38eebb7b408625213587ae2951de756852309fe1cb7a0b98c0712aaf30526ca70691ad9b4254047070377b1d805aeda0004bc9f1a5a3d390ed5785873c090a2d7bc9534d21336d9a293a477ee523a13184dbd0a33ceae3779d5eb40171c6f6722ecdaa9dc6ea7c7ad95faca6b5d667f42b757eaa5cf141af5ce8c9b7ca1cb2844a82ddaee8292adfed2e3eb2c10990bc331486825a1a8b9def16bf08f2f71bc99e0aa6ac7d93bfbfc5dcb2e4973de413cf5b83defbdcc7178315b7a0c24a9cad6472f98b27c8320b67da655678b609cbb0583a27a9fa7070ab8b6d2ae512e8f7584d0e90d15d7796c2ecb36c0a0d8666492186b8b4d30ffee8c330e453ba99b46a85711c4134ca9d3d4a74a7fe9ce4e464bf69aa778d9660c80df1ac1d6c41e47e2fd48be820750e43fce13eb1d73277f8f7131a699258329e8930f249b85aaaa6a97b83b70a9f486d11bfd2142b4d4022303b9b9f60a307b7ca7aac52a6e2cbc0e19769b4ece7c0b06b4ad01d472651972f71af8de758514be325e28bcacc157c888e074bb873152442e681a56c64e65c726145b4785c12d0d006bbf8974d6f50da5a0a338cd663885ec3afb6f1f9002f3c053f39e1262e2d55af42ca4871be410883e528c07486198dcfc5f7a2db48c204903383e2d413349c551e7532a40c6b37131c3f833d97003fd8a5bb68951a3a4af8350f7342fb50d957f31e0b4338fe1a176cdae7e188f0f69393c60c4cf8d0f08648fda6ca54d0debc9702cc881236448c5af135f93d5dd4c02fa0cb9a9062158f7223b4700d044d3c2c09133cb785831c421e7d74efd866b9e44899035de41d1166aee6ee1a9670fc5ad955f7862eddac7b22c581d88e66f3cc8ac70e35fc5fc363e4bf85a832da1a7b2289ef2de345cab3039157c988c601a63c786bcd60457a33aa1e49616daac9238aaf9ae0afb0c082792213864d174fecdf9ac9d14a217d96f4170474c23d5f3576ac6427cddad9cc2ab55cff8ddafb6518323d9d33c0b3dfd6696fd16ee24599e1aa2725cba0b3785dadc1c241724f162806efd820f1b96d36ca212dadbf48ca9dd6323325e1f675c8cf3208d702beee30021f129382f81349a2fe659da79756dd62bab16ac97cae1030b2312f3635354d0b97396b706c355462a6a5c8cbfea64189c3f3dd70a560cf9b4a33f9b8ba473a907985d80c3bd0152d7b5cb3094a0d9fe14d6de2563a529b78832b650a17fbf6bd395c4598882409b9254ae580121138ccab8d65d0ebab845acec8a51319cc535401e725f76034455bc4f653b9b94a5e97231177dcc9313d4966b7732d7dde4ed8f0bc10ea4c5fe31c2aca50c8c3a192c26689b3e28a3283dcd7b4e00d0d7d7c9dfefc573f8967b38206a7e3b3bc8730e447b926c1c8fe984a7f93135464ea06469083982ce567f1b9c09193482e48ae757640b27bfcedfa0d2eaa8b716ffebc96d762702a203057eefd605d87448837a2c0611b176820d4bd2917f26d6d8ef8b8ab7db5fafdff90e544e6ce8555aa68f21803707e8dabb992faa6e5a171b90fd7a3fe3dd5a5b5d412969b0c50abd8537ec9789ff07816b8f7b56b53469c111aebda1d5e689f38f965cd540a21a21ac77fd06fa1d2f27a5902f6831ea6afb3dcd25c0ea3f4430f5ff467d315e14022df8f0b876a41397eb1ba4b9d5c0d9d02e362f4072f884277172c64fd2770875633465f1f9abc656e2464f5b93044944e68a1f863e976456ff20885098ffb8930066bcbe14122f28df90a4c8f6ee55af9ff9bb2a8fea0f4731ce1aced3ddd78ef99a126403458af5f8904400da9e2350ee27847c1612f12f104fe82f0e7eba6e6ab21bea53d4af64ae6b3ee8b3a59ed5cba7540f422cef73e8a438e97fa38074f391fde771d68735aad51a885591d9c7db157ca39f52aecc376dac0a7662e6b0e90410bc9df344b6e84061a6e9dca3fdcdb72915dfa9804c1b9b65c5313ea9c7a74d59c45e7da16b069ab97fd8a3f56ef265fb93be00d0747dd00a8bf4f1d4df13ca0c53a7e495513abaa28608bd0297bb35815e493a6124eab2d17fea7a71a3ce431d0d65d6adbdeef9b58c9073e6b7d136ca3a5b722e06e274aafdb394355cc1b142f5d34d521c9c9c0d12a1da8c7dc840753f0d8a25638e9bd019f49272fb89023ac2984c7d232bd8398201ababbc6c78a5d372b80b8927cb4cf91d56d83c7d04902faa3eb6295cddcb362fef4682383a91d16e4c6b1aacded5ad23ef7e01d41022e66b6eacc8f890ad7a2ec5f220e95caa376a403d065146de33cce88654bf327977db4f118e6d1a4844b18d62c28a567a37bf30064a25c826677f5e253777f9cd3ac7462b8d87fe2ce4fc18179953220525240e4daa796ad926582dfeabfe23e6229ba6db9c1d9d7a78d60c0d65cc9e09e020f23fe2925414535b137a87cf97dd0b5d40bbdca4661986a4544b93428be4e2f3ffca2d443bcef62eba95933fde3dc4477a99c3a711dcecd81e9f6329f7822d25277e481be3193e70c5dcba66c908ebd31112007f3355b5dace72a131b852adcb2c73ee95e2280c090a111ef0c26a9f7f391eedcf7716dffd66abcec69c9acec70e85b549e53e6425d87256f8f4e8a5f38d754abb51a7cc9b798f1e0b9f3aa2d07ab5de97136f71480644ebcafbc0ad8ce53635a6a547b8d1f039648c43be8f9adc7e21de553956c37bebcd749640ce1c5ea4b4b554b0da1d1e23e0decbf90f57a6ba1431b0e7ac987c8d0b2b5119770bab33e87f83e33eb821e5d9b16ad785754a631309c997e0dbccccf669ed4a97e365b91832f3fafe3fff11484ef8adacb4dd8cd7781a2b5ac54e2be2d09c503360956ac0c80dab97aa142997f92b61fbd527ff0793a1add1deacedb33d364b2a11ba78b902ce6921fb736d97eff827422634460cc350a340205c7240e44ec5b87468da62e85b6eb88fffc1f245cafcc601ad4ff1627a64ca6422b37d7019926e1c292b225156f7d03eb2563aa76e23e63018e103e68b6bac6f1e6518203661d2ff4d9dd1b6c0a5611cf3c2a16460cf4355886e6df0e39e651faa3cb6792c6358be50f5db0f998b693619fe23f80677af0a777951838b01d4c99b20080101a2646e046fb2b4df3b16629aad6667d59873b738b1952f5dc7b0273e86a51c3ae2a2c486c8d03d421e596e4e8f474cd424f9d7e9bfeee0596b7a5c553689320c2374f2e06b04d5a50f2762dcd78f14d5c17441be3fd42ba12403c5a8b017cbef5e0da2a0c40ca50e1a83eddc12ba4137267c2c51ad0b0d1711c43575fb2d3fbd037492e210fa62dce747946befb4ccc931b9b84e961e9eb7419d732582f1c0839f44309b60f7134f574ce8f395ed650246b7958a7147156a8568a61b6cbcf3a05a0707521960374c41467ad1bf96d072e42cff733c33c3dedcae7b2e12b373def04e8c64763dd517b39bcbbb68f35303eb3a6744064fb03dfdb131a860e718e0bc7b3c8fc224a33b57ad4e58b93b974ba482df13e306c61440731cb776685238731568fd6e583a771699a050a302e8caba7d7f42b8972566a8d1d55a0c03ed9d9231588c9e653391338898804615553b1b8b1bbd04acc5cd41a7a3efd802d02e4ccd2f75a6bf681edfec35bb7271829364c34805c3cdc63cfef640aac27c978bcf09e1e579d00f081541c346be4a15ed69b8521fb989149e27ac95c04eb0511d0c924f131f5e1c4a5efba1accd8c2d328f646c2fa304a8b11125e9d6a6c323b02c58720e4374058e8c80dc03a34cb52af2704b4d5eecb0da8c6192ed1293d5963b5885d9d6248f22975c9e3d10587e7094f1ebcc65d8a839e217be8f38e91ce571f75392765796b81e3c6397e308554cd6ec841d83b8b00ed7b6bbb370d961f92ea3c06cf599c76b855d76df68dac9217bd8add75b6f3bd8ec2643dd171c2f5c2378ce751dc830b0dfdeebd38e041a553cacb8c1de21e04565fd13b888471707af898f8b6fb97bf0d3b43241464fd868920405d11ad61d2fdf071abc509eac6546395a10d5f11fe4966d44dff21f50cc7596f391c45a397a8261a6f9dff04649525ca8cd249f2e13c59a797d4f538622914e508ee73aff404e149461c4896b8b302215203c4812c344ff01fc90f7fa4a3c58ba1f19408b2742c1f6d730e309b89f85525c47c1b9982220cd72a1df6d174ff3a71be874dbd0b00a82213ee0ec0db4c59d5cc38917ff76cb1b547c9deb63ad0781c4e98bb21c10b457c044e6b8bf43de3ead8dbaf4f14542887b4a415c56162e170ca0b968a409f08b8992dcb9c97ff84d24052076ef64a7e1bcd06a201a969accc4b4ce063e7211874cba96f4c6c0693c7af6716d37f2a455cce42f92bb8a7e9d628225ddcc73e06ba8b9a8785b8e0af17429554d23c97f57cdcf396966e2c57c12b80b67b8b66bc740d3dfacf2fdde139206f7fb7cf31ae1ed0f252b51c47e19ad69fa5c7fcb697a51701f81d2efb0c3f74e5f59df2c83d016e3472cc04e8837d8ee028501b985a9d4792873c9441e3e23ff1858a0790608a51156c07370f1a51bd55c6fe144b7e11c3302fc69a99f06b67a04bf3acc61a74fad6c236b7220f540616c4a392560a1c217904e17cc1f15c538ef1a4eacfcc7fb1d0a01ab3f8f2b9d8a4e857162d82f9b0f2fe797beabf7fd212febf000a83dabe2114d4ebb5bc4b30cbd6a590723271a95fd5f9211ea2d332c4b76246ad5a96a551fd3cbb35486b033a68034feae67c", 0x1000}, {&(0x7f0000000400)="8b16f4aeb92fc59815329facfc48382c9e4242bd25cd3552e395a0d5c7ed9ee958cdfb13a89dae8bc3797a23f4554ee34e9afa6afe1b3e74d516a16c37a34162cdadb53f97956e5fb2023fdbac0a1588813d6e581decd5b7f28d6473020a58fbc7", 0x61}], 0x6}, 0x24004014) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x440}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f00000008c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x28, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f00000002c0)=[{0x30, 0x1, 0x0, 0xfffff024}, {0x6, 0x0, 0x0, 0x7}]}) r2 = gettid() r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000980), 0x8) perf_event_open(&(0x7f0000000900)={0x0, 0x80, 0x5, 0xb1, 0x7, 0x2, 0x0, 0x5, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x8}, 0x2200, 0x2, 0x9, 0x0, 0xfffffffffffffffb, 0x2, 0x1, 0x0, 0x1, 0x0, 0x6}, r2, 0x7, r3, 0x9) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x10, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r4, @ANYBLOB="0000000002000000b70500000800000085000000aa00000095"], &(0x7f0000000500)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000000000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f000001000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f000001ac141400000000001c00000000000000000000004700000044aa00210a2101"], 0x230}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000000c0)={'veth0_vlan\x00', @remote}) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x26e1, 0x0) r6 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, &(0x7f0000000500)=r5, 0x4) sendmsg$inet(r6, &(0x7f00000004c0)={&(0x7f0000000240)={0x2, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x200440e4) setsockopt$sock_attach_bpf(r6, 0x1, 0x19, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000140)={0x2, 0x0, @local}, 0x10, 0x0}, 0x4008804) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x7, 0x2, 0x1, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2m45.002868026s ago: executing program 2 (id=38): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe, 0xffffffffffbffffd}, 0x0, 0x7, 0x200, 0x4, 0x7}, 0x0, 0x8, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x10d105, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x22, 0x2, 0x21) r0 = perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x88, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x3, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x200000000000006, 0x0) recvmsg$kcm(r1, &(0x7f0000001540)={0x0, 0x0, 0x0}, 0x40010140) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYRES32=0x1, @ANYBLOB="a8dd00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000040000000200"/21], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r2, 0x58, &(0x7f0000000380)}, 0x10) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x23, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f0000001240)={0x0, 0x0, 0x0}, 0x44091) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000100)=0x8, 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000000094957de3999ce7b2d4057a219d5a7d6e3f6d6d6f6bc511ae6c1a5f09c62ab256fb3b85f0cbd8b7bfe545a10eda4744bb3b19548195da8eb81e1a2ab24ec5f1839486e9205b58b603ae9938b878ac83e2e70469d983b102302cf01839304766c34de97a8983d05d96add73e98aad15479515b0a196821768d71c44b33da8ecd99877654ce73c4a40bcebe294469d42cd93f26fef2d2a60b05d8f657c513cf16a7c35a0013f1fc0f28d1e5ed4b2856fbc0ea5c84afff32c17acd9fd9775667eca58f98dac1332656ebc6e3878ab31b7f2604054d456d3f5185", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) ioctl$SIOCSIFHWADDR(r5, 0x4030582b, &(0x7f0000000000)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x401, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c9a01c4, 0x1, @perf_bp={0x0, 0x1}, 0x20100, 0x5, 0x1, 0x3, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, r0, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703300000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="130000010000006d530000faffffff0600030000b4b576abedc87fcd33a2f8254466578e3c3a3056eada57efed181f15e8bc7e00f4d6d2c2db1cc6e296920208e44970e8aba61823b69bfa580b299a2526490595e99b4c12dc4c890e2bee5c8d0cc7d498677a1b8c43", @ANYRES32=0x1, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="01000000040000000500"/24, @ANYRES32=r5, @ANYBLOB], 0x50) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000340)={&(0x7f0000000280)="f3f04adf755578c2243d42210a6961cdb4eb94e2d074bc86779604cab59075227adfecf147b4e0cb818326bb167f841be45756fe9eda82692504abb37a356d0b1a0e5ca09032032f7d58a8bdb5bc163e25399b6f49431fbd91549f7d04681abf129b9c1dff", &(0x7f0000001580)=""/4096, &(0x7f0000000580)="1c0000c6da9b6f2ff2c0f70a806b776a1c58f10fac2f4a803bbb82cf9deab8a42564a6a86f8fc991467628ecc2aa9639a0a39f83f0391301de934a7b4b116217d3cf86d459e9da7877c0d2dea61d7354d4cd1533b125c93f9889941c03e36bf95739f6c7bbebd0f398c23ee801cf0022878b39ba91e0e74f8a0b8bd81b82018eedc7e458c74054f02833632236094fad27091b2b11c5aeb73942e58227c2d63162810468d828db32f16acd417836", &(0x7f0000000700)="2ba07d7adaf8b649ba5258f900c567f46b6f80c5e8e229e27e2c2d109a216d6fdc59693f2d3af08ca1c60f53e518cd5abd3b7a38715ca5c324d384a8df8333f432a54bb73d944bc56896167beb13ac2e9267b7095ec496546fb6d5f607f946d3fec007a3f0c7f54fbb5d9ecb08c84e360c6e0d", 0x0, 0xffffffffffffffff, 0x4}, 0x38) 2m44.58932793s ago: executing program 2 (id=40): bpf$TOKEN_CREATE(0x24, &(0x7f0000000400), 0x8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x2f, &(0x7f0000000400), 0xa5e) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f0300", 0x4}], 0x1}, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8912, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x8, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$kcm(0xa, 0x2, 0x3a) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x7, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext={0xfffffffffffffffc, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) socketpair(0x2, 0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) unlink(&(0x7f0000000340)='./file0\x00') r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) openat$cgroup_procs(r2, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000040), 0x1) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x4, 0x1, 0x0, 0x7ff2, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_bp={&(0x7f0000000180), 0x2}, 0x14141, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x4, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000c70000000000000000000000488006000000000095000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) r4 = socket$kcm(0x25, 0x1, 0x0) recvmsg$kcm(r4, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x40010102) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d80000002000811f4e81f782db44b90402000000e8fe55a1180015000600142603600e1209000a0000000401a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970100040000", 0xd8}], 0x1}, 0x0) 2m44.100048439s ago: executing program 2 (id=45): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x40009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xffffffffffffffff, 0x3fff8000}, 0x0, 0xff, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0x1000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000057700000000000000000000182ec0002020702500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb70200000800c309b703000024000000850000000600000018010000786c6c2500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0xc}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x4, &(0x7f0000000c80)=@framed={{}, [@ldst={0x5c6ccd1daf94070, 0x1, 0x1, 0x0, 0x8}]}, &(0x7f0000000000)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000540)={0x7, 0x80, 0xb, 0xc0, 0x7, 0x6, 0x0, 0x5, 0x100, 0x4, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0x1}, 0x8, 0x5, 0x6, 0x9, 0x7, 0x35b, 0x7, 0x0, 0x2, 0x0, 0x8}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x1a220, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000dc0)={0x0, 0x80, 0x0, 0x5, 0x8, 0x6, 0x0, 0xd, 0x20002, 0xf, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0xfb, 0x4, @perf_config_ext={0x5, 0x8}, 0x2a0f, 0xc046, 0x3e, 0xa, 0x0, 0x7, 0x8, 0x0, 0x8, 0x0, 0x4}, r3, 0xc, r2, 0x0) socket$kcm(0xa, 0x2, 0x3a) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"}) recvmsg$unix(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000e40)}, 0x3) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket$kcm(0xa, 0x7, 0x88) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000100)={&(0x7f0000000180), &(0x7f0000000280)=""/154, 0x0, &(0x7f0000000340)="784be7fc6158bb0b3359fdfa2a5268088c9a001d031aeebbe7ea32e7d7471d6a12035e3e287920198e1e8b7f4b9ea835cd3507f75eeb3d14aaf87b67cd380c6aca71308453aa304c285216186aa407310c25a9cdc6f262efe072fe58b303a96c51616cffa3f1235c60d84dd19034455c78646b6318116eef81d035553dc7f149e23c84b72fc2cd5363fbe9411d5f4c8ac8a75c352e0e4a24a1c50f95d3d2e6eb9c4d4afff03860fe1455a9fc8b2ddcdc38cbee31137a544b36fa3690d6449ea78c1a3702c99a11ccbb998d210cb81c5c", 0x8a8, 0xffffffffffffffff, 0x4}, 0x38) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0xfffffffffffffd5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_lsm={0x1d, 0x8, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xe}, [@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}]}, &(0x7f0000000640)='GPL\x00', 0xfffffff9, 0x1a, &(0x7f0000000680)=""/26, 0x41100, 0x35, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000700)={0x1, 0xd, 0xd, 0x5}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000740)=[{0x3, 0x2, 0x3, 0x3}, {0x0, 0x2, 0x2, 0xa}], 0x10, 0x9921}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000940)={r6, r7}) recvmsg$kcm(r5, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)=[{0x0}], 0x1}, 0x40000042) 2m28.864312488s ago: executing program 32 (id=45): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x40009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xffffffffffffffff, 0x3fff8000}, 0x0, 0xff, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0x1000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000057700000000000000000000182ec0002020702500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb70200000800c309b703000024000000850000000600000018010000786c6c2500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0xc}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x4, &(0x7f0000000c80)=@framed={{}, [@ldst={0x5c6ccd1daf94070, 0x1, 0x1, 0x0, 0x8}]}, &(0x7f0000000000)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000540)={0x7, 0x80, 0xb, 0xc0, 0x7, 0x6, 0x0, 0x5, 0x100, 0x4, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0x1}, 0x8, 0x5, 0x6, 0x9, 0x7, 0x35b, 0x7, 0x0, 0x2, 0x0, 0x8}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x1a220, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000dc0)={0x0, 0x80, 0x0, 0x5, 0x8, 0x6, 0x0, 0xd, 0x20002, 0xf, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0xfb, 0x4, @perf_config_ext={0x5, 0x8}, 0x2a0f, 0xc046, 0x3e, 0xa, 0x0, 0x7, 0x8, 0x0, 0x8, 0x0, 0x4}, r3, 0xc, r2, 0x0) socket$kcm(0xa, 0x2, 0x3a) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"}) recvmsg$unix(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000e40)}, 0x3) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket$kcm(0xa, 0x7, 0x88) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000100)={&(0x7f0000000180), &(0x7f0000000280)=""/154, 0x0, &(0x7f0000000340)="784be7fc6158bb0b3359fdfa2a5268088c9a001d031aeebbe7ea32e7d7471d6a12035e3e287920198e1e8b7f4b9ea835cd3507f75eeb3d14aaf87b67cd380c6aca71308453aa304c285216186aa407310c25a9cdc6f262efe072fe58b303a96c51616cffa3f1235c60d84dd19034455c78646b6318116eef81d035553dc7f149e23c84b72fc2cd5363fbe9411d5f4c8ac8a75c352e0e4a24a1c50f95d3d2e6eb9c4d4afff03860fe1455a9fc8b2ddcdc38cbee31137a544b36fa3690d6449ea78c1a3702c99a11ccbb998d210cb81c5c", 0x8a8, 0xffffffffffffffff, 0x4}, 0x38) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0xfffffffffffffd5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_lsm={0x1d, 0x8, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xe}, [@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}]}, &(0x7f0000000640)='GPL\x00', 0xfffffff9, 0x1a, &(0x7f0000000680)=""/26, 0x41100, 0x35, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000700)={0x1, 0xd, 0xd, 0x5}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000740)=[{0x3, 0x2, 0x3, 0x3}, {0x0, 0x2, 0x2, 0xa}], 0x10, 0x9921}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000940)={r6, r7}) recvmsg$kcm(r5, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)=[{0x0}], 0x1}, 0x40000042) 5.777416352s ago: executing program 0 (id=687): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x20, 0xfc, 0xc5, 0xfffff030}, {0x6, 0x0, 0xff, 0x9}]}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r1, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x7f, '\x00', r2, 0xffffffffffffffff, 0x1, 0x0, 0x5}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%-010d \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r3, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)='%pB \x00'}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup, 0x1e, 0x1, 0xc9, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f00000003c0)=[0x0], &(0x7f0000000400)=[0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x17, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa260, 0x0, 0x0, 0x0, 0x7}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @exit, @map_fd={0x18, 0x8, 0x1, 0x0, r1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @map_fd={0x18, 0x8, 0x1, 0x0, r3}, @call={0x85, 0x0, 0x0, 0x1a}]}, &(0x7f0000000700)='GPL\x00', 0xa, 0x17, &(0x7f0000000740)=""/23, 0x41100, 0xc, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x4, 0x1, 0x8, 0x3}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000800)=[r4, r1, 0xffffffffffffffff, r3, r1, r4], &(0x7f0000000840)=[{0x3, 0x1, 0x7, 0xc}, {0x5, 0x5, 0x9, 0x6}], 0x10, 0x1}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000940)={0x7}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000980)={@fallback=r4, r5, 0x2e, 0x0, 0x0, @void, @value=r5, @void, @void, r6}, 0xfffffffffffffe88) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x102, 0x0, 0x1}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0xc, 0x8, 0x40, 0xc0, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r7}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r7, &(0x7f0000000080), &(0x7f0000000180)=""/40}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffff8}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0xc5}}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 5.214078786s ago: executing program 3 (id=685): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000300)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d004892e822a6abc02ad2602a5ad6f7007ea60864160af365935cfaea3f49d8df1931a0e64ffc4c78029ee517d34460bc06000000938037e70e457ae2bb24ef6697070000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000700)=""/223, 0xdf}, {&(0x7f0000000200)=""/101, 0x65}, {&(0x7f0000000380)=""/139, 0x8b}, {&(0x7f0000002080)=""/4083, 0xff3}, {&(0x7f0000000c00)=""/4083, 0xff3}, {&(0x7f00000000c0)=""/161, 0xa1}], 0x6}, 0x0) recvmsg$kcm(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ea4}, 0x10182) 4.996126968s ago: executing program 0 (id=686): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0, 0x2663}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000014006b03000000d86e6c1d0010ffff0af32c6e586575f800250002000f00000017d34460bc24eab556a705251e6182949a369f3d3b48dfd8cdbf9367b4fa51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r6 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000001780)={&(0x7f00000003c0)=@caif=@rfm={0x25, 0x15, "fb95785b587f23ba61bfb990191a2af1"}, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001800)="a5", 0x48}], 0x1}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x0) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000680)=ANY=[], &(0x7f00000006c0)='syzkaller\x00', 0x7, 0xb, &(0x7f0000000700)=""/11, 0x40f00, 0x71, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000740)={0x0, 0x8, 0x7, 0xfffffffc}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000840)=[{0x2, 0x4, 0xa, 0x2}, {0x3, 0x4, 0xf, 0x2}, {0x1, 0x2, 0xb, 0x4}, {0x4, 0x5, 0x7, 0x5}, {0x2, 0x3, 0xc, 0x3}, {0x4, 0x5, 0x0, 0xa}, {0x0, 0x4, 0xa, 0x1}, {0x0, 0x1, 0x3, 0x4}], 0x10, 0x5}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r8) close(0xffffffffffffffff) r9 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r9, 0x29, 0x24, &(0x7f00000000c0), 0x19) sendmsg$kcm(r9, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x10000009, @mcast1, 0x9, 0x3}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000180)="f4000900062b2b05fe80000000000000dc8b850f693c66ccfe808100000000000000613a2e", 0x25}], 0x1}, 0x20000084) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f0000000200)=""/195, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x37}, 0x94) r10 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956", 0x15}], 0x1}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 4.331882907s ago: executing program 3 (id=690): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x30, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r2, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) sendmsg$inet(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)}, 0x4000080) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_ext={0x1c, 0x10, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x261, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x21, &(0x7f00000000c0)=""/33, 0x40f00, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x5, 0xa, 0xe62, 0xfffffff7}, 0x10, 0x168d0, r0, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000300)=[{0x1, 0x5, 0x1, 0x1}, {0x4, 0x2, 0xb, 0xa}], 0x10, 0x9}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r0, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000003c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000400)=[0x0], &(0x7f0000000580)=[0x0], 0x0, 0x24, &(0x7f00000006c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000700), &(0x7f0000000740), 0x8, 0x55, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@fallback=r0, r3, 0x23, 0x24, 0x0, @void, @void, @void, @value=r4}, 0x20) 4.010447355s ago: executing program 4 (id=693): socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8940, &(0x7f0000000080)) 3.924651661s ago: executing program 0 (id=694): r0 = socket$kcm(0xa, 0x922000000003, 0x11) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3f, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0xa, 0x300) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688a24c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000d0000000000000000000000850000000500000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0xe, 0x0, &(0x7f00000001c0)="581f9239658ea95ed371ea3dd361", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r11, 0x40042408, r12) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_lsm={0x1d, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000007000000000000000800000085200012050000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x7, 0xcd, &(0x7f0000000300)=""/205, 0x40f00, 0x8, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xc, 0x0, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000840)=[r7, r7, r7], 0x0, 0x10, 0x1}, 0x94) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRESOCT=r10], 0x128}, 0x0) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r14, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r13, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) ioctl$TUNSETIFF(r2, 0xb701, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x21, 0x0, 0x0) 3.744021001s ago: executing program 3 (id=695): perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0x17, &(0x7f0000000040)=r2, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x18, 0x3, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1f0000000400000008000000ff07000008000000", @ANYRES32=r2, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000500000000000000001f00"/28], 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r3, &(0x7f00000001c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x100) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x838, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) socket$kcm(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r4}, 0x0, 0x0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r4, &(0x7f0000000200)}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x402, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x100}, 0x86bf2056334f3ae6, 0x9, 0x0, 0x0, 0x3, 0x3, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0xa, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x0, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x64, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x4, 0xf, 0x9409, 0x7}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=[{0x5, 0x4, 0x10, 0x4}, {0x3, 0x1, 0x8}, {0x5, 0x1, 0x10, 0xb}, {0x0, 0x2, 0xd, 0x6}], 0x10, 0x5}, 0x94) r5 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r5, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) bpf$ENABLE_STATS(0x20, &(0x7f00000003c0), 0x4) sendmsg(r5, &(0x7f00000008c0)={0x0, 0x241, &(0x7f0000000580)=[{&(0x7f0000000440)="a6", 0xffffff58}], 0x1}, 0x40001) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000380), 0x4) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r2, &(0x7f00000000c0)="387f1ea67f9c1a4fb38767e942a1d3ea91eb8808287bbeeaddae3e7d44c61170a0446c1a265be9e84c52426679eb7d7c5d2cf0ecdb726fe1c94304c1a60373cbd2e52db08edba4a261a570f57749e52170077e80"}, 0x20) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20004180) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000100)={0x57d0fd9288e41b84, 0x80, 0x31, 0x80, 0x9, 0x4, 0x0, 0x5, 0x4020, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f00000000c0), 0x2}, 0x610, 0xc, 0x2, 0x1, 0x4, 0x400, 0x8ce7, 0x0, 0x2, 0x0, 0x2}) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f91424fc60040f030047000000053582c137153e370248018000f01700d1bd", 0x2e}], 0x1}, 0x0) 3.613948219s ago: executing program 4 (id=696): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x100000001, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x73) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x17, 0x0, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0x4003, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r1, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f00000002c0)=[0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xf3, &(0x7f0000000380)=[{}, {}], 0x10, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0xd0, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000740)=ANY=[@ANYBLOB="9feb010018000000000000007000000070007c13cbaa6d84188f00000000000200000000000000000300000d00e38929777c6a9acf678ce08138d5900000000c0000000000000008000000040000000d00000000000000070000000000000e05000000895c77550b0000fba16db621588bb1000c00000000000008040000000e0064b5a31b943650ede6c0000000000012030000000800000000000009010000000030306100"], &(0x7f0000000580), 0x8d, 0x0, 0x0, 0x6, 0x10000, @value=r2}, 0x28) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000a00)=r4, 0x4) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0200002004000000080000000100000080000000", @ANYRES32=r1, @ANYBLOB="0600"/20, @ANYRES32=r3, @ANYRES32=r1, @ANYBLOB="03000000010000000400"/28], 0x50) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_tracing={0x1a, 0x24, &(0x7f0000000840)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xf}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ldst={0x2, 0x1, 0x4, 0x4, 0x5, 0xffffffffffffffff, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfcf1}}, @call={0x85, 0x0, 0x0, 0x46}]}, &(0x7f0000000580)='GPL\x00', 0x7, 0x42, &(0x7f0000000980)=""/66, 0x41000, 0x14, '\x00', r3, 0x19, r6, 0x8, &(0x7f0000000a40)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000a80)={0x3, 0x1, 0x2, 0x200}, 0x10, 0x1cc53, r1, 0x5, &(0x7f0000000b40)=[r7, r1, r5], &(0x7f0000000b80)=[{0x4, 0x5, 0xc}, {0x3, 0x1, 0x10, 0x7}, {0x0, 0x2, 0x3, 0x2}, {0x5, 0x1, 0x6, 0x3}, {0x4, 0x1, 0x0, 0x4}], 0x10, 0x9b2}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r8, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r9 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d0002117ea6e070d6064e22000300000000250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="d8000000180081034e81f783db4cb9040a1d080006007c00000000a10a0015000600142603600e1208000f0000000401a8000100fec0ffff00000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000009fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a25ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d930000000000000000000000000006000000", 0xd8}], 0x1}, 0x20048000) r10 = socket$kcm(0x10, 0x2, 0x0) r11 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r11, 0x29, 0x21, &(0x7f0000000100), 0x120) socket$kcm(0x29, 0x5, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r12}, &(0x7f0000000800), &(0x7f0000000840)=r13}, 0x20) r14 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r14, 0x40082406, &(0x7f00000000c0)='\f\x00\x10kqlle\x94\x00') sendmsg$kcm(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181004000000004000000000000000e000a000d00000002800200121f", 0x2e}], 0x1}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r15, 0x8b0f, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) 2.22427795s ago: executing program 0 (id=697): bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x4008, r2}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000900)={0xffffffffffffffff, 0x20, &(0x7f00000008c0)={&(0x7f0000000800)=""/25, 0x19, 0x0, &(0x7f0000000840)=""/120, 0x78}}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1d, 0x11, &(0x7f0000000bc0)=ANY=[@ANYBLOB="18000000040000000000000009000000181100", @ANYRES32=r3, @ANYBLOB="000000000000a200b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018320000020000000000000000000000bf91000000000000b7020000020000008500000084000000b700000000000000950000000000000041ca88030e7a91077f7ca7d52f4190af0362d46301812c76be24307406e195704aeb9daf45dd15"], &(0x7f0000000240)='syzkaller\x00', 0x40000, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @lsm=0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x5, 0x4}, 0x8, 0x10, &(0x7f00000007c0)={0x4, 0x2, 0x29}, 0x10, r4, 0xffffffffffffffff, 0x4, 0x0, &(0x7f0000000940)=[{0x3, 0x5, 0x4, 0x6}, {0x2, 0x2, 0x9, 0x7}, {0x2, 0x3, 0x4, 0xb}, {0x1, 0x1, 0x1, 0x2}], 0x10, 0x4}, 0x94) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r6, 0x10) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0x1a000}], 0x1}, 0x80d1) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1f00000704000000060000000700000080130000", @ANYRESHEX=r2, @ANYRES8=r1, @ANYRES32=r5, @ANYRES32=0x0, @ANYBLOB="000000000000000001"], 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff", 0x24}], 0x1, 0x0, 0x0, 0x7400}, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b9040a", 0x11}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000580)=ANY=[], 0xfe33) 2.148111054s ago: executing program 3 (id=698): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2c, 0x1, 0x3, 0x0, 0x0, 0x9, 0x40000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x106b7f, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x80, 0x2f, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r0, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x60, &(0x7f00000002c0), 0x0, 0x0, 0x0, &(0x7f0000000340), 0x8, 0x2f, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00', 0x8000}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80400, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x2, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180200000000000000000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x1b, 0xffffffffffffffff}, 0x94) ioctl$TUNSETIFF(r4, 0x400454da, &(0x7f00000002c0)={'netdevsim0\x00', 0x4000}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="b4050000200080006110490000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be20000d072f5b89c3043c47c896ce0bc8731fa595b6b4d45ef26dcca5582054d54d53cd2b685b431c70ea948259c4c869b4fc8db714e4b94bdae214fa68a051d4dca7d2647bec1fc89398d2b9000f224891060017c4700de60beac671e8e8f00cb03588aa6007e71f871ab5c2ff88afc6002084e5b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c59005cff414ed55b0d18a9d446935fb332bb593ee341ab59016f81860324b800c00000000000092d9c5fe34ccb80a61ffcb3363073fd8962823ee45f5d7394e9510f4ac6c702cfabe8a9c55c8dafcdb110036e14c1035cafdfef6a358cbfadb3579a285580a3c080d4e0a48d7bdc38a0437c8c1b3aa408a0000000000002248950b000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) socket$kcm(0xa, 0x3, 0x3a) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000006c0)={0x0, r2, 0x0, 0x4, &(0x7f0000000680)='GPL\x00'}, 0x30) r5 = socket$kcm(0x2, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x541b, &(0x7f00000000c0)) r6 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r6, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x2000003, @local, 0x1}, 0x80, &(0x7f0000002540)}, 0x48044) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r7) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000140)=0xffffffffffffffff, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000200)) r8 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000440)={&(0x7f0000000080)=@hci={0x1f, 0x3, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x28}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x533, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x202, 0x4, 0xffffffff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2.098079378s ago: executing program 4 (id=699): perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7, 0x400000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003, 0x3, @perf_config_ext={0x2, 0x162}, 0x0, 0x0, 0x6, 0x0, 0x3ff, 0x9, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0xc3000, 0x48, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x38000, 0x9e4, 0x5, 0x1, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001040)={r1, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000840), 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000014006b20000000d86e6c1d0010ffff0af32c6e586575f800250002000f00000017d34460bc24eab556a705251e6182949a369f3d3b48dfd8cdbf9367b4fa51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000240)={&(0x7f00000001c0)=@abs, 0x6e, &(0x7f0000000080)=[{&(0x7f0000000500)=""/195, 0xc3}, {&(0x7f00000002c0)=""/80, 0x50}], 0x2, &(0x7f00000006c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x140}, 0x40000120) r4 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r4, &(0x7f0000001280)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x12}}, 0x80, &(0x7f0000000080)}, 0x48811) perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_bp={&(0x7f0000001240), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x29, 0xf, 0x0, 0x0, 0x0, 0x40000004, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x9, 0x1}, 0x12000, 0x10000, 0x0, 0x5, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="0600000004000000ff2100005e00000000000000", @ANYRES32, @ANYBLOB="800200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000feffffbda71da0076218824d203b0000f3ff0000c7000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES16=r4], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r7, 0x0, 0x2000409d) setsockopt$sock_attach_bpf(r7, 0x1, 0xd, 0x0, 0x0) close(r7) socket$kcm(0xa, 0x1, 0x106) 1.89014575s ago: executing program 1 (id=701): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{}, &(0x7f00000004c0), &(0x7f0000000680)}, 0x20) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e"], 0xfe33) 1.803843054s ago: executing program 1 (id=702): r0 = getpid() r1 = perf_event_open(0x0, r0, 0x4, 0xffffffffffffffff, 0x0) r2 = getpid() sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000980), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x4a046) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0), 0x48) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a7000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a800000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x19}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) write$cgroup_subtree(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="33fe00004a00530c8e", @ANYRESHEX=0x0], 0xfe33) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={r6, 0x58, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) perf_event_open(0x0, r2, 0x0, r1, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x69, 0x12, 0x18}, [@ldst={0x7, 0x3, 0x5, 0x0, 0x0, 0x1}]}, &(0x7f0000003ff6)='GPL\x00', 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r8, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0xd}, 0x10}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$kcm(0x2, 0x3, 0x84) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f00000002c0)={r9}) ioctl$sock_kcm_SIOCKCMATTACH(r9, 0x8917, &(0x7f0000000100)) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000010000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e1a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080e71113610e10d858e8327edb1fb6c86adac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18c65ae1bd4f4390af9a9ceafd07ed00b0000002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a469398685211bbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72c7ead0509d380578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9624d37c10223fdae7ed04935c3c9068000000bc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b40000000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f3ca1664fe2f3ced8416dc180604b60c2499d16d7d9158ffffffff00000000ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a9e90d7676074a0bde4471414c99d4894ee7f8139dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8070000001fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b2042b8ff8c21ad702cca54728acad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd20785f653b621491d04aaee0d409731091f4fb94c06006e3c1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e1590bab105b0cb578af7dc7d5e87d48d376444e2de02f47c61e8e84ff828de453f34c2b08660b080efc707e676e1fb4d5865c0ca177a4c7fbb4e829ab0894a1062b445c00f576b2b5cc7f819abd0f885cc4806f47ffb966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d3676329bb8cda690d192a070886df42b2708398773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169cdfaa4252d4ea6b8f6216ff202b5b5a182cb5e8380100632d03a7ca6f6d0339f9953c30930804fdc3690d10ecb65dc5b47481edbf1eee2e8893e903054d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026def743f1213bf817becd9e5a225d67521d1128eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979030000007081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f324661351df747aa6a65872dfdcfa68f65bd06b4082d43e121861b5cc09b986bf56c747d9a1cc5b506892c3a16ff10feea20bdac89bfb758cf3500000000000000000000000000000098e6db5a96055e764a3bfd4ccb20d2e800994f4b602d25b2c076f21c7102687e054bb93b2d013be6227fd99902b074c0de00733128c81c48c5e140b17d71ac48f137d10798c4272826d2ba55bbda0059636528c132ed06759d880d1bc291a76456ed7ee8bcb392fdf886dbc74879ec4b831904d7c101ebbaef3c0ae6d0cf0000000000000000000000000000000011cb735f66a559ef0cdb5163a15c0bb986474bf5d9542e3e48805ce53127e4c076d69d868df543717aaaa07d7aca056f7f036c2bcba0795d1a64868a29ac5321b3cd6ef5b1a741afc7124ee3df3a35e8014d6cb5fd6c054a10bb2146174c1d68b45fcfd7e531090ceae2f05536a4d5d6a4081e743827fb9c031d1fc9f195c2da189c49eaed6c30c71da0452e502ef393efeb02ebe82b1851cae5fa7c958ba23110b5e0e5b890803f28a356b2920e74564e0f8377b0ba5187fed2882b4780a1bcb583f1cb1470003ef9b592b9461328cfc01ebfce0ecdcea714a517dc40000000000000000000000000006bd0561e1cc72880cc3ec1bdf35eb670a9040e3b53cd826b94ad8aeb014e74787fe89fb3247a87d8bfb6d400142369f88964708d1d4db5a5df9d62ea6d805dfce568b885a50ed8e2eaf8a932287a1d3bfac17774e58875a63b77e07298e4b4f515189c6fcac3cd35dac9240e633219bb6a5a25865e6ed8e16caa5406b56702afe0befcabbc9a2a772a1a087f0d633d457bceb695b2cba3a1a2daa2dda796373cc0fe0a53236d028fc1076bb746b2717c8b6052f58c91bb8cc19474ab9d4d2160773829f078727f6c684ca749136a7f46ca28b00bb4237695b409859a3cb7dbf298c7802264387811e20a0d78489eab0b0e"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r11 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r11, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) recvmsg(r11, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/23, 0x17}, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r10, 0x2e0, 0xfe, 0x0, &(0x7f0000000100)="b9ff0307604423acb89e0cf0ac141414e000000162079f4b4d2f87e5feca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf7a92283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x3f, 0x51, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f90931dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x1, 0x3}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) r12 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r12, 0x10d, 0x1b, &(0x7f0000000100), 0x120) 1.70323568s ago: executing program 3 (id=703): r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00'}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x0, 0x23, &(0x7f0000000140)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0xa6, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x118, 0x118, 0xb, [@union={0xb, 0x3, 0x0, 0x5, 0x0, 0x3, [{0x8, 0x4, 0x9}, {0xa, 0x2, 0x7fff}, {0xd, 0x4, 0x9}]}, @fwd={0x2}, @union={0xb, 0x2, 0x0, 0x5, 0x1, 0x8, [{0x1, 0x3, 0xffff}, {0xa, 0x0, 0x8}]}, @type_tag={0x6, 0x0, 0x0, 0x12, 0x3}, @enum64={0xb, 0x3, 0x0, 0x13, 0x1, 0x0, [{0x7, 0x80000, 0x9}, {0x1, 0x8000, 0x38c}, {0xf, 0x40}]}, @const={0xe, 0x0, 0x0, 0xa, 0x1}, @int={0xb, 0x0, 0x0, 0x1, 0x0, 0x21, 0x0, 0x4b, 0x4}, @struct={0x5, 0x6, 0x0, 0x4, 0x0, 0x205b, [{0x7, 0x401, 0x6}, {0xa, 0x4, 0x9}, {0x2, 0x2}, {0xb, 0x5, 0x3}, {0x0, 0x2, 0x5}, {0x1, 0x1, 0x5}]}, @func={0x10, 0x0, 0x0, 0xc, 0x5}]}, {0x0, [0x2e, 0x30, 0x30, 0x0, 0x30, 0x0, 0x5f, 0x0, 0x3e]}}, &(0x7f0000000540)=""/231, 0x13b, 0xe7, 0x0, 0x101, 0x8eda13972c883d7c}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x7, 0x1000, 0x40, 0x4a000, r0, 0x6, '\x00', r1, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x8, @value=r2}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000680)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x7, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5a, &(0x7f0000000740)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000780), &(0x7f00000007c0), 0x8, 0xb9, 0x8, 0x8, &(0x7f0000000800)}}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a00)={{r3, 0xffffffffffffffff}, &(0x7f0000000980), &(0x7f00000009c0)}, 0x20) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000dc0)=@bpf_ext={0x1c, 0x1e, &(0x7f0000000a80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x84c}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@exit, @ldst={0x2, 0x3, 0x3, 0x6, 0xb, 0x1, 0xfffffffffffffffc}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffd}, @cb_func={0x18, 0x8, 0x4, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b80)='syzkaller\x00', 0x1, 0xa3, &(0x7f0000000bc0)=""/163, 0x41000, 0x0, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c80)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000cc0)={0x3, 0xf, 0xf, 0x77}, 0x10, 0xb921, 0xffffffffffffffff, 0x5, &(0x7f0000000d00)=[r0, r0, r0], &(0x7f0000000d40)=[{0x4, 0x2, 0x7, 0x4}, {0x1, 0x1, 0xb, 0xb}, {0x3, 0x2, 0x4, 0x5}, {0x0, 0x5, 0xf, 0x4}, {0x1, 0x3, 0xb, 0x5}]}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000ec0)={{r5, 0xffffffffffffffff}, &(0x7f0000000a40), &(0x7f0000000e80)=r6}, 0x20) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000f00)={0x1b, 0x0, 0x0, 0xae, 0x0, 0x1, 0xd3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x5}, 0x50) r9 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000fc0)=@o_path={&(0x7f0000000f80)='./file0\x00', 0x0, 0x4000, r2}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001100)={@map=r5, 0x24, 0x307c3a57bf6dd9d, 0x9, &(0x7f0000001000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f0000001040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000010c0)=[0x0], 0x0}, 0x40) r12 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000001180)='io.pressure\x00', 0x2, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001140)={@fallback=r12, r9, 0x25, 0x2035, r6, @void, @void, @value, @void, r11}, 0x20) r13 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000011c0)={0x3, 0x4, 0x4, 0xa, 0x0, r8, 0x48, '\x00', r1, r2, 0x3, 0x4, 0x3}, 0x50) socketpair(0x11, 0x3, 0x3, &(0x7f0000001240)) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001280)={r10, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x8, 0x15, &(0x7f00000012c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x21fa, 0x0, 0x0, 0x0, 0xffffffff}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x18}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r14}}, @map_val={0x18, 0x4, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, @alu={0x4, 0x1, 0xc, 0x1, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffa}]}, &(0x7f0000001380)='syzkaller\x00', 0x50, 0xb6, &(0x7f00000013c0)=""/182, 0x41000, 0x2, '\x00', r1, @fallback=0x35, r2, 0x8, &(0x7f0000001480)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000014c0)={0x5, 0x8, 0x6, 0x2}, 0x10, 0x0, r9, 0x8, 0x0, &(0x7f0000001500)=[{0x3, 0x1, 0xb}, {0x4, 0x2, 0x10, 0x6}, {0x1, 0x1, 0xf, 0x6}, {0x2, 0x5, 0xc, 0x2}, {0x4, 0x4, 0xb, 0xc}, {0x3, 0x4, 0x3, 0x6}, {0x2, 0x5, 0xb, 0x2}, {0x1, 0x5, 0x8, 0x7}], 0x10, 0x9ae}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000016c0)={{r14, 0xffffffffffffffff}, &(0x7f0000001640), &(0x7f0000001680)='%ps \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001780)={{r10, 0xffffffffffffffff}, &(0x7f0000001700), &(0x7f0000001740)='%pB \x00'}, 0x20) r17 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001940)={0x0, 0x0, 0x18}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a00)={0x11, 0x15, &(0x7f00000017c0)=@raw=[@map_fd={0x18, 0x4, 0x1, 0x0, r15}, @jmp={0x5, 0x0, 0x0, 0x0, 0xa, 0xfffffffffffffff4, 0x1}, @map_fd={0x18, 0x3, 0x1, 0x0, r16}, @map_idx={0x18, 0x3, 0x5, 0x0, 0xa}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r14}}, @ldst={0x0, 0x2, 0x3, 0x8, 0x2, 0xc}], &(0x7f0000001880)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x30, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000018c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001900)={0x2, 0x4, 0x9, 0x6}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000001980)=[r10, r10, r0, r5, r17, r0, 0x1, 0xffffffffffffffff], &(0x7f00000019c0)=[{0x2, 0x1, 0x9, 0x8}, {0x0, 0x2, 0xc, 0x5}, {0x400000, 0x2, 0xc, 0xa}], 0x10, 0x8001}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001ac0)=@base={0x14, 0x0, 0x98, 0x7, 0x40, r13, 0x1000, '\x00', 0x0, r2, 0x0, 0x5}, 0x50) socket$kcm(0x29, 0x5, 0x0) r18 = bpf$MAP_CREATE(0x0, &(0x7f0000001b40)=@bloom_filter={0x1e, 0x8000, 0xffffffd1, 0xa557, 0x20001, r7, 0x1ff, '\x00', r4, 0xffffffffffffffff, 0x4, 0x4, 0x2}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000001bc0)=@base={0xb, 0x5, 0x1e, 0x6, 0x40, r18, 0x81, '\x00', r1, r2, 0x2, 0x1, 0x5}, 0x50) r19 = syz_clone(0x1040080, &(0x7f0000001c40)="011e80bf10c917acbbdbadcec955deabaa929f6c60731f4d831b99113dc1010d647292173e2335d5d61f72f5b40316a6f606d711c9b06808701703c61070bb163c20240b8d6019efc7570a1b4d9657ce68478f68cb2f22d395f18d8625ba24ceeec586be9337256e90368cf6b3df7f38f500f8f7b6330cb6576fd39c7b1b75939d36855389ab518d138278b4f79a8f584305d8c47e828a81691b2f45e145a5937799475a161cd0763a93ac2faf614692378fe04c127cad6420ebe995f7006cdfee2851daad0b701cbc8320232289e458d571ec248a1c92264c07d82ef6b4f25a58cb785c1b5751ffe13d87", 0xeb, &(0x7f0000001d40), &(0x7f0000001d80), &(0x7f0000001dc0)="83261c8797a9cf3fada6dceb8637194979a5f2f85d4bb6a27d3391db7030051851054bc1902c8eed76d0939ff75b90ab26a84394df") write$cgroup_pid(0xffffffffffffffff, &(0x7f0000001e00)=r19, 0x12) r20 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001e80)=@generic={&(0x7f0000001e40)='./file0/../file0\x00', 0x0, 0x10}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002040)=@bpf_ext={0x1c, 0x10, &(0x7f0000001ec0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x59, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r20}}, {}, [@alu={0x4, 0x0, 0x4, 0xb, 0x8, 0xfffffffffffffff4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001f40)='syzkaller\x00', 0xd9d, 0x0, 0x0, 0x1f00, 0x26, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001f80)={0x0, 0xf, 0x800000, 0x3}, 0x10, 0x21df1, r16, 0x5, 0x0, &(0x7f0000001fc0)=[{0x2, 0x2, 0x5, 0x8}, {0x0, 0x5, 0xe, 0x3}, {0x0, 0x5, 0xe, 0x5}, {0x4, 0x2, 0xb, 0xa}, {0x2, 0x4, 0x7}], 0x10, 0x4}, 0x94) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000002480)) 1.576097087s ago: executing program 4 (id=704): socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8940, &(0x7f0000000080)) 1.19004765s ago: executing program 0 (id=705): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="16000000000000000400000007"], 0x48) socket$kcm(0x29, 0x5, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x2, 0x3a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x10, 0x3, 0x10) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x4040844) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32=r1, @ANYRES16=r1], 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)=ANY=[], 0x20) r2 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x64, &(0x7f0000000000)=r5, 0x10) sendmsg$inet(r2, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) close(r2) 1.111539715s ago: executing program 4 (id=706): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x161) r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x3, 0x200}, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffe}, 0x0, 0xffffffffffffffff, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0xec, 0x5, 0xd, 0x7, 0x0, 0x7fffffff, 0x7a5d4, 0x9, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xdfffffff, 0x0, @perf_config_ext={0xffffffffffffffff, 0x10}, 0x42, 0xe, 0x7, 0x0, 0x81, 0x5, 0x9, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xa, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f0, &(0x7f0000000080)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080207000000040000a118000200e01d000000000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$kcm(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000240)="57b67fcc379d75779b27763a864c25556936e3472a73a267a8fa43e9537b29a30b3e22e02d1b472955995edafb97fdd70e3d7fb1654f600a661f4a", 0x3b}, {&(0x7f0000000280)="a4a115a952b40506c7bb3340bc15546fec67d340f95f0b15505b2fe06866587b8f4ca3016f52f087fc053d34aa781ecc2d3a5811f434f06e915f7a575d7155fca962d5e0ebf40197297f21f3c2782c3a03eba6d592ab7b3f0bdd0fe06ee677bff9776d076d291bad67381a6b55b838dbb7a3ea0477b95f0038916d43884ab7c7af808b1f7fd149ea274cb01ff01ba13fb54a45210ad9", 0x96}, {&(0x7f0000000380)="840f1d348ce45b936ab0ff579d93e544edeac326e5572f0ebd182f8c317bdcd729fab7e79917c1d7c08762559036917940061397c4a894b9e624314342837d0de18faae700d2c19dc1b6f8a594288305e1f556063fcd40b7f1c5e7f3da396c4548e6623769022a4323d7fdf693ae168bdbf6dc0b0ef4a418d5ebdd003c8d990c5d56babdbe5e7211716b7f249609736d0cc2d085b96ebef4e35b674e766c04094dfceef5ba54de09ec7d06ba2d7fef3dedbbc8ce543502f7d6", 0xb9}], 0x3, &(0x7f0000000480)=[{0xf0, 0x109, 0xda, "c5c27915d00cba3617c7dbbcd835408edb52ff95d37a66d2516b5c7beeb5082496ec01dac55dabf61699dfd59f0d069b09f5e2918cabf0da7a3d0981d5244fc62fa68b455afbcd462fc8c176869ef27157e82bf8e3df9152598191d67e2543186c8f484387d8979aa5911451dbd194adc0a2c5ab547dad4490e2f1198acf2970fee7b18c6e7c354eecee19ea8292dfd79f01c4d76eb6dfa2a208f75cecfa975a099bfe6e36b98b6dddae8ff75331653c97a5ebf005e95cbd9ddbfa61051004e06f8b6aaa37da0211a785cdf4440b84c87ba84fc64f0aacdb150706bad83498"}, {0x70, 0x107, 0x6, "e75ac8f05152b5182afdb81f7de0faa40d05f551ebd9a30c809bb025bc70a31ec48a3462108ca2b305bbd920e55c1665f72f411454c48d31dcc252855a766c108616d59abae3427da7e036cb34ef0b716ef7512b9cb66970eae1d69224d4"}, {0x48, 0x101, 0xffffffff, "36c19a07ab550f37a8ed469769de5f5655139047c96dc4d64a0f59dce702700602a387112907e91a5e08a3811439e02296f53fa4f9f4afd3"}, {0x1010, 0x1, 0x9, "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"}], 0x11b8}, 0x20000881) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d0002117ea6e070d6065e22000300000000250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) openat$cgroup_netprio_ifpriomap(r5, &(0x7f0000001680), 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @multicast2}, 0x10, 0x0}, 0x3000c085) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000001c0)={0x4, 0x80, 0x27, 0x8, 0x7, 0xed, 0x0, 0x198, 0x50, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0xff, 0x0, @perf_config_ext={0xa00, 0xffffffffffffffc0}, 0x140, 0x400, 0x400, 0x5, 0xa48, 0x80000001, 0x5, 0x0, 0x4, 0x0, 0x1}) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x24009080) 1.098503636s ago: executing program 1 (id=707): r0 = socket$kcm(0x2, 0x3, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x0, 0x0, &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9b}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x84, 0x4, 0x0, 0x0, 0x95df, 0x40040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004, 0x0, @perf_bp={0x0}, 0x0, 0x6, 0x0, 0x0, 0x8, 0x100, 0x0, 0x0, 0x5ff}, 0x0, 0x800004, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0xfffd, @remote}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000700)="fbd2b9ed29d8974a6ce75f0891", 0xd}, {&(0x7f00000007c0)="d25bf710e1be938583f8fd9d41e17de159c996072e04e91d87cc599f2c175f6b5862de3d18e2401a", 0x28}], 0x2}, 0x0) 1.02799495s ago: executing program 3 (id=708): perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0xf, 0x0, 0x0, 0x400, 0x1e37cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x401, 0x200, 0x0, 0x7, 0x0, 0x100}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb012018000000000000000c0000000c00000009000098f41aea1e8e06eacb222bf12130f71f000600000000a1496a239c86dbb67791ceeae854ec36d8f4ae5e7720d9e75ae1f09b7b39a1e495e3"], 0x0, 0x2d, 0x0, 0x1, 0x4}, 0x28) r2 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)="d80000001000810468f70082db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94000534cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x20000004) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"}) r5 = socket$kcm(0x2, 0x2, 0x73) sendmsg$inet(r5, &(0x7f0000000500)={&(0x7f0000000300)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000340)='+', 0x34000}], 0x1}, 0x900000000000000) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0xe199, 0x2}, 0x8000, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x9) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f0000000600)={0x0, 0x80, 0x3, 0x0, 0xf8, 0x49, 0x0, 0x2, 0x40, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x7fffffffffffffff, 0xfff}, 0x101804, 0x5, 0xf, 0xd, 0x101, 0x400, 0x3ff, 0x0, 0xd, 0x0, 0x100}, r6, 0x40001, r0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 810.822202ms ago: executing program 1 (id=709): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8003}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$kcm(0x10, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x9, 0x42, 0x40}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x1003, r2}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000840), 0x0, 0x3, r2}, 0x38) 594.648685ms ago: executing program 1 (id=710): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{}, &(0x7f00000004c0), &(0x7f0000000680)}, 0x20) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e"], 0xfe33) 363.372618ms ago: executing program 1 (id=711): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001580)=@l2tp6={0xa, 0x0, 0xffffffff, @loopback, 0x2}, 0x80, &(0x7f00000029c0)=[{&(0x7f0000001480)="89", 0x1}], 0x1}, 0x20000054) (fail_nth: 14) 67.579656ms ago: executing program 0 (id=712): bpf$MAP_CREATE(0x7b80, &(0x7f0000000300)=@base={0x5, 0x5, 0x19fd, 0x84, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2}, 0x50) r0 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_pid(r0, 0x0, 0x0) r1 = socket$kcm(0xa, 0x3, 0x3a) r2 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000100)={r1}) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f00000000c0)={r4}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r4, 0x58, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$inet(r5, &(0x7f0000000300)={&(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f00000007c0)=[{&(0x7f00000003c0)="a7dd2d84de358c5150e3810c7dd5ebe84109cabe8f4aed83082024c96e288d31188912307ec446febbf811e52308eee480707afeb1b78517ba44fbed58779162b16ef2779d9b9ca94f6d62839c821cb5473aa2", 0x53}, {&(0x7f00000001c0)="adf1ed29c3be97ce850c69d1dde891e4373b1d765262f458cdca1e3c7e7e2010f3c9", 0x22}, {&(0x7f0000000440)="dae6e8272502c5eb131e97f0f85e5c67e12bf963e22682bcd845e4f7268c95a2f46da7f19d2412b7d19b7c32c2e6ef9e80caaf95389ae4019f848dbe8a1ce3173df534d979f2c9c24428", 0x4a}, {&(0x7f0000000c80)="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", 0x1000}, {&(0x7f0000000580)="0ec8f836df8829c1e3b145bd5c38978b26617b606d4f1c60dd4a72f7ccf1ee8f0b40bc58d94c92b5c05effeaa5b08fbb49b09f6e5009c627fa2bfe8155d927f48d0978927fb47dcfc81f16a08281f78d9680bca33aa0d06f414f592b9f988afb3ffbe101ddc37013eceb4dc3174742c16b96c5967005b1bb1520bb26998b95487636faecc463a4c08602ba97a4fc616197ff9217b472845637ac95da5c40cbafb3f635ae8a401277d44221f4bd465f586605eb9625e4e5b0a19894", 0xbb}, {&(0x7f0000000640)="3df501a08c94c52876154bea6305404fc7b2bc8c2c1db54b57ef9c9dbe258bc7d4540242ce284cf8e574c6b9dfecb9fb653790bb93aefc8f30321c7f9e683e2f08a4c5d520e4515db726fc4f7de03c451b81623c20a2d35143c220a176ed988c7c731df3156d0f8a28f56846c900854d655be3668877599fd3e64ff7f2f5ef838021f1d81ea0a5575a85dea9c2ab6a1d78a4bfda19d505070e80699439a6b91d", 0xa0}, {&(0x7f0000000700)="b3b19e413f5182e69f361d78f25533cee27b8f29a9f6f0967459e94777f55f290b851ba405a03cf017c6d4cea38dc9b942824f612301c7719b6cc29793c6bda3d7830f5f7531e911bef6e66093d9d29680e86bd8d62c00d85f2fae98e953aa8003e1d562231e96e298728ecdda09f7a036bc9b0afa819be8d9ee2df2d5c3bbb762cc086086fea0a953", 0x89}], 0x7, &(0x7f0000000900)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=r6, @ANYBLOB="ffffffff7f000001000000001400000000000000000000000700000000000000000000001429b421350000000000000002000000f9ffffff0000000048002e48ea00000000000000000000070000008303584434c811e0000001000000080000000000000004ac1e01010000009dac1414aa00000007e0000001000000020a010101000000070014000000000000000000000002000000fbffffff0000000010000000000000000000000007"], 0xc0}, 0x4004000) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) 0s ago: executing program 4 (id=713): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0900000003000008040001ba1b007eb8a9cc55", @ANYRES32, @ANYRESHEX], 0x50) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open$cgroup(&(0x7f00000002c0)={0x3, 0x80, 0x9b, 0x7, 0x81, 0x1, 0x0, 0x3, 0x1028, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xe000000, 0x0, @perf_config_ext={0xa, 0x100000000}, 0x8048, 0x9, 0xa, 0x6, 0x7, 0x1, 0x4a46, 0x0, 0x6, 0x0, 0x52}, r1, 0x5, r0, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x3, 0x0, 0x0, 0x8, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}, 0x826, 0x0, 0x40dd, 0x6, 0x4, 0x0, 0x0, 0x0, 0x101, 0x0, 0x3}, 0x0, 0xc, 0xffffffffffffffff, 0xb) socket$kcm(0x10, 0x2, 0x10) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0xc4d07, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'pimreg\x00', 0x3}) r4 = syz_clone(0x23000000, &(0x7f0000000040)="e41c5f62a8b85b6b2b2e3fa892516095a23044e823", 0x15, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f00000006c0)="b49388096c4d0e6e39df03f7846786904c9a75da91aacbd787487574c83f92f30129395ba7633587a779d3630886fb2f767d08725829cf1b1250cf2fc1416d813d3617a5700a8b4f484ec301efb051e6a82d0dfe9b93467762b302ec9ad32fad5aea38072caf8962ac715944889dcf553f33bbb5bf5db04c8f2c3603afd6fc5ff2c50d1d70d8584603b6423b2787e4612b58fca59f2da5ea01e2195c30884f761dd4918de93b72b39e6cc84c63a08e7e7139c89f4b2925e5f051dfb4e3e18a8fce41932514") bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000005c0)={r4, r2, 0x0, 0x0, 0x0}, 0x30) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x9cdc2384056b48b8) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0900000003000008040001ba1b007eb8a9cc5500", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0000186df4b1768c36153d42", @ANYRES32, @ANYBLOB="1c00000000000300000000000000010045"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r6, 0x29, 0x30, 0x0, 0x90) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f3, &(0x7f0000000080)) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000000400000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r9}, 0xc) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r7) ioctl$TUNGETFILTER(r3, 0x801054db, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x4e, 0x0, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc070, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x20, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1}]}, &(0x7f0000000300)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): parsing attributes in process `syz.3.13'. [ 88.108384][ T5908] batman_adv: batadv0: Adding interface: hsr_slave_1 [ 88.117533][ T5908] batman_adv: batadv0: The MTU of interface hsr_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.153298][ T5908] batman_adv: batadv0: Interface activated: hsr_slave_1 [ 88.173563][ T5904] delete_channel: no stack [ 89.007595][ T5930] netlink: 142528 bytes leftover after parsing attributes in process `syz.2.21'. [ 89.274100][ T5930] netlink: 'syz.2.21': attribute type 1 has an invalid length. [ 89.499087][ T5938] netlink: 'syz.0.23': attribute type 10 has an invalid length. [ 89.518832][ T5938] netlink: 40 bytes leftover after parsing attributes in process `syz.0.23'. [ 89.539715][ T5940] netlink: 'syz.3.22': attribute type 10 has an invalid length. [ 89.554374][ T5940] netlink: 156 bytes leftover after parsing attributes in process `syz.3.22'. [ 89.608771][ T5937] delete_channel: no stack [ 90.079224][ T5944] netlink: 'syz.3.25': attribute type 10 has an invalid length. [ 90.094373][ T5944] netlink: 40 bytes leftover after parsing attributes in process `syz.3.25'. [ 90.190326][ T5943] delete_channel: no stack [ 90.494075][ T5955] netlink: 'syz.3.27': attribute type 10 has an invalid length. [ 90.510397][ T5955] netlink: 40 bytes leftover after parsing attributes in process `syz.3.27'. [ 90.549427][ T5953] delete_channel: no stack [ 92.324440][ T5973] netlink: 'syz.1.33': attribute type 21 has an invalid length. [ 92.338671][ T5973] netlink: 164 bytes leftover after parsing attributes in process `syz.1.33'. [ 92.629037][ T5977] netlink: 'syz.0.34': attribute type 10 has an invalid length. [ 92.658691][ T5977] netlink: 40 bytes leftover after parsing attributes in process `syz.0.34'. [ 92.776503][ T5974] delete_channel: no stack [ 93.423880][ T5985] netlink: 'syz.1.36': attribute type 10 has an invalid length. [ 93.438729][ T5985] netlink: 40 bytes leftover after parsing attributes in process `syz.1.36'. [ 93.450032][ T5985] batman_adv: batadv0: Adding interface: hsr_slave_1 [ 93.456902][ T5985] batman_adv: batadv0: The MTU of interface hsr_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.503423][ T5985] batman_adv: batadv0: Interface activated: hsr_slave_1 [ 93.528274][ T5989] netlink: 164 bytes leftover after parsing attributes in process `syz.0.37'. [ 93.603471][ T5980] delete_channel: no stack [ 93.926972][ T5991] netlink: 'syz.2.38': attribute type 10 has an invalid length. [ 93.946921][ T5991] netlink: 40 bytes leftover after parsing attributes in process `syz.2.38'. [ 94.009208][ T5990] delete_channel: no stack [ 94.013142][ T5993] netlink: 'syz.1.39': attribute type 10 has an invalid length. [ 94.029073][ T5993] netlink: 40 bytes leftover after parsing attributes in process `syz.1.39'. [ 94.080485][ T5992] delete_channel: no stack [ 94.247513][ T5997] netlink: 156 bytes leftover after parsing attributes in process `syz.2.40'. [ 94.431808][ T6002] validate_nla: 1 callbacks suppressed [ 94.431825][ T6002] netlink: 'syz.1.42': attribute type 10 has an invalid length. [ 94.494629][ T6002] team0: Device ipvlan1 failed to register rx_handler [ 94.741093][ T6006] netlink: 142528 bytes leftover after parsing attributes in process `syz.3.44'. [ 94.753699][ T6006] netlink: 'syz.3.44': attribute type 1 has an invalid length. [ 95.272178][ T6014] netlink: 'syz.3.46': attribute type 10 has an invalid length. [ 95.313088][ T6014] netlink: 40 bytes leftover after parsing attributes in process `syz.3.46'. [ 99.895919][ T6014] delete_channel: no stack [ 100.056972][ T6027] netlink: 'syz.0.49': attribute type 39 has an invalid length. [ 100.332755][ T6031] netlink: 'syz.1.50': attribute type 10 has an invalid length. [ 100.375624][ T6031] netlink: 40 bytes leftover after parsing attributes in process `syz.1.50'. [ 100.469175][ T6023] delete_channel: no stack [ 100.747417][ T6039] netlink: 'syz.1.61': attribute type 10 has an invalid length. [ 100.764087][ T6039] netlink: 40 bytes leftover after parsing attributes in process `syz.1.61'. [ 100.799000][ T6036] delete_channel: no stack [ 100.995629][ T6045] netlink: 'syz.1.63': attribute type 10 has an invalid length. [ 101.004549][ T6045] netlink: 40 bytes leftover after parsing attributes in process `syz.1.63'. [ 101.040123][ T6043] delete_channel: no stack [ 102.212354][ T6054] netlink: 132 bytes leftover after parsing attributes in process `syz.1.58'. [ 103.343061][ T6058] netlink: 'syz.1.60': attribute type 10 has an invalid length. [ 103.358820][ T6058] netlink: 40 bytes leftover after parsing attributes in process `syz.1.60'. [ 103.426820][ T6056] delete_channel: no stack [ 103.624656][ T6069] netlink: 'syz.1.62': attribute type 39 has an invalid length. [ 109.960624][ T6079] netlink: 164 bytes leftover after parsing attributes in process `syz.0.74'. [ 110.012433][ T6077] netlink: 196 bytes leftover after parsing attributes in process `syz.1.75'. [ 110.086768][ T6077] netlink: 'syz.1.75': attribute type 29 has an invalid length. [ 110.110601][ T6077] netlink: 'syz.1.75': attribute type 29 has an invalid length. [ 110.133504][ T6082] netlink: 'syz.1.75': attribute type 29 has an invalid length. [ 110.451454][ T6085] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 110.540240][ T5779] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 110.554717][ T5779] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 110.563769][ T5779] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 110.578067][ T5779] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 110.597425][ T6085] warning: `syz.1.67' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 110.614525][ T5779] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 110.629966][ T5779] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 112.014130][ T6086] chnl_net:caif_netlink_parms(): no params data found [ 112.063802][ T6108] netlink: 'syz.0.76': attribute type 10 has an invalid length. [ 112.086920][ T6108] netlink: 40 bytes leftover after parsing attributes in process `syz.0.76'. [ 112.139393][ T6104] delete_channel: no stack [ 112.340497][ T6086] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.384868][ T6086] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.407756][ T6086] bridge_slave_0: entered allmulticast mode [ 112.416156][ T6086] bridge_slave_0: entered promiscuous mode [ 112.425510][ T6086] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.439024][ T6086] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.457843][ T6086] bridge_slave_1: entered allmulticast mode [ 112.465850][ T6086] bridge_slave_1: entered promiscuous mode [ 112.484582][ T6124] netlink: 'syz.0.81': attribute type 3 has an invalid length. [ 112.497325][ T6124] netlink: 'syz.0.81': attribute type 1 has an invalid length. [ 112.620079][ T6086] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.668599][ T5781] Bluetooth: hci1: command tx timeout [ 112.707218][ T6086] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.747775][ T6131] netlink: 'syz.0.84': attribute type 21 has an invalid length. [ 112.759496][ T6131] netlink: 'syz.0.84': attribute type 6 has an invalid length. [ 112.767298][ T6131] netlink: 132 bytes leftover after parsing attributes in process `syz.0.84'. [ 113.173891][ T6086] team0: Port device team_slave_0 added [ 113.213847][ T6086] team0: Port device team_slave_1 added [ 115.346021][ T5781] Bluetooth: hci1: command tx timeout [ 116.033915][ T6140] netlink: 196 bytes leftover after parsing attributes in process `syz.0.85'. [ 116.104258][ T6146] netlink: 'syz.0.85': attribute type 29 has an invalid length. [ 116.195590][ T6146] netlink: 'syz.0.85': attribute type 29 has an invalid length. [ 116.302243][ T6086] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.315485][ T6086] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.342259][ T6086] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.364477][ T6147] netlink: 'syz.0.85': attribute type 29 has an invalid length. [ 116.407315][ T6086] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.415858][ T6086] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.504617][ T6086] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.594282][ T6086] hsr_slave_0: entered promiscuous mode [ 116.612637][ T6086] hsr_slave_1: entered promiscuous mode [ 116.628177][ T6086] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 116.641414][ T6086] Cannot create hsr debugfs directory [ 116.936447][ T6159] netlink: 'syz.0.89': attribute type 10 has an invalid length. [ 116.945873][ T6159] netlink: 40 bytes leftover after parsing attributes in process `syz.0.89'. [ 117.034621][ T6157] delete_channel: no stack [ 117.080435][ T6160] netlink: 'syz.3.88': attribute type 33 has an invalid length. [ 117.095212][ T6160] netlink: 36 bytes leftover after parsing attributes in process `syz.3.88'. [ 117.229123][ T6086] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 117.259440][ T6086] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 117.288148][ T6086] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 117.391229][ T5781] Bluetooth: hci1: command tx timeout [ 117.400651][ T6086] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 118.409360][ T6180] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.93'. [ 118.476935][ T6172] netlink: 'syz.3.92': attribute type 8 has an invalid length. [ 118.636635][ T6086] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.691495][ T6172] netlink: 161700 bytes leftover after parsing attributes in process `syz.3.92'. [ 118.833396][ T6086] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.903983][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.911523][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.063739][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.071048][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.235358][ T6086] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 119.469816][ T5781] Bluetooth: hci1: command tx timeout [ 119.642362][ T6192] netlink: 14 bytes leftover after parsing attributes in process `syz.0.96'. [ 119.705475][ T6192] hsr_slave_0: left promiscuous mode [ 119.903638][ T6192] hsr_slave_1: left promiscuous mode [ 120.054427][ T6198] netlink: 'syz.1.97': attribute type 10 has an invalid length. [ 120.072202][ T6198] netlink: 40 bytes leftover after parsing attributes in process `syz.1.97'. [ 120.135950][ T6086] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.181686][ T6197] delete_channel: no stack [ 120.281167][ T6196] delete_channel: no stack [ 120.387950][ T6206] netlink: 830 bytes leftover after parsing attributes in process `syz.1.99'. [ 120.818472][ T6214] netlink: 'syz.1.102': attribute type 1 has an invalid length. [ 120.830799][ T6214] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.102'. [ 120.894006][ T6086] veth0_vlan: entered promiscuous mode [ 120.926690][ T6086] veth1_vlan: entered promiscuous mode [ 120.997386][ T6086] veth0_macvtap: entered promiscuous mode [ 121.022289][ T6086] veth1_macvtap: entered promiscuous mode [ 121.112467][ T6086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.143167][ T6086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.167913][ T6086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.179294][ T6086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.189304][ T6086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.199871][ T6086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.221537][ T6086] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.251002][ T6086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.268492][ T6086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.285936][ T6086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.296994][ T6086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.315623][ T6086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.330110][ T6086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.357092][ T6086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.372050][ T6086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.395645][ T6086] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.413018][ T6086] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.425334][ T6086] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.444551][ T6086] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.455367][ T6086] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.471278][ T6227] netlink: 'syz.0.106': attribute type 10 has an invalid length. [ 121.483391][ T6227] netlink: 40 bytes leftover after parsing attributes in process `syz.0.106'. [ 124.190430][ T6224] delete_channel: no stack [ 124.658548][ T3518] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.687105][ T3518] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.726157][ T6240] netlink: 'syz.1.109': attribute type 21 has an invalid length. [ 124.755763][ T6240] netlink: 'syz.1.109': attribute type 6 has an invalid length. [ 124.774947][ T6240] netlink: 132 bytes leftover after parsing attributes in process `syz.1.109'. [ 124.906594][ T6241] netlink: 'syz.0.108': attribute type 11 has an invalid length. [ 124.944959][ T6242] netlink: 'syz.0.108': attribute type 21 has an invalid length. [ 125.017393][ T6241] netlink: 126332 bytes leftover after parsing attributes in process `syz.0.108'. [ 125.082203][ T6242] netlink: 132 bytes leftover after parsing attributes in process `syz.0.108'. [ 125.216211][ T3535] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.317521][ T3535] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.492685][ T6249] netlink: 'syz.1.112': attribute type 1 has an invalid length. [ 125.528790][ T6249] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.112'. [ 126.286442][ T6258] netlink: 164 bytes leftover after parsing attributes in process `syz.1.113'. [ 126.891753][ T6264] netlink: 'syz.4.115': attribute type 10 has an invalid length. [ 126.986444][ T6264] netlink: 40 bytes leftover after parsing attributes in process `syz.4.115'. [ 127.362431][ T6264] batman_adv: batadv0: Adding interface: hsr_slave_1 [ 127.371601][ T6264] batman_adv: batadv0: The MTU of interface hsr_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.490534][ T6264] batman_adv: batadv0: Interface activated: hsr_slave_1 [ 127.514723][ T6263] netlink: 'syz.0.116': attribute type 1 has an invalid length. [ 127.541057][ T6263] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.116'. [ 127.634997][ T6259] delete_channel: no stack [ 127.720062][ T6270] netlink: 'syz.1.117': attribute type 1 has an invalid length. [ 127.771345][ T6270] netlink: 'syz.1.117': attribute type 4 has an invalid length. [ 127.828015][ T6270] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.117'. [ 127.865783][ T6273] netlink: 60 bytes leftover after parsing attributes in process `syz.0.118'. [ 128.072122][ T6280] netlink: 60 bytes leftover after parsing attributes in process `syz.3.120'. [ 129.255307][ T6280] netlink: 60 bytes leftover after parsing attributes in process `syz.3.120'. [ 129.469523][ T6307] netlink: 'syz.1.135': attribute type 11 has an invalid length. [ 129.477465][ T6307] netlink: 126332 bytes leftover after parsing attributes in process `syz.1.135'. [ 129.611974][ T6305] netlink: 'syz.4.127': attribute type 21 has an invalid length. [ 129.623899][ T6305] netlink: 'syz.4.127': attribute type 6 has an invalid length. [ 129.667751][ T6305] netlink: 132 bytes leftover after parsing attributes in process `syz.4.127'. [ 129.693631][ T6312] netlink: 'syz.3.128': attribute type 10 has an invalid length. [ 129.725746][ T6312] netlink: 40 bytes leftover after parsing attributes in process `syz.3.128'. [ 129.778806][ T6307] netlink: 'syz.1.135': attribute type 21 has an invalid length. [ 129.840285][ T6307] netlink: 132 bytes leftover after parsing attributes in process `syz.1.135'. [ 129.916492][ T6310] delete_channel: no stack [ 130.110327][ T6317] syz.4.130 uses obsolete (PF_INET,SOCK_PACKET) [ 130.228358][ T6323] netlink: 'syz.4.130': attribute type 21 has an invalid length. [ 131.268951][ T6335] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 131.329586][ T6335] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 132.150539][ T6335] bond0 (unregistering): Released all slaves [ 132.176922][ T6337] validate_nla: 3 callbacks suppressed [ 132.176941][ T6337] netlink: 'syz.0.136': attribute type 29 has an invalid length. [ 132.212743][ T6326] __nla_validate_parse: 3 callbacks suppressed [ 132.212764][ T6326] netlink: 52 bytes leftover after parsing attributes in process `syz.3.132'. [ 132.228195][ T6326] team_slave_0: entered allmulticast mode [ 132.236942][ T6326] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 132.650701][ T6350] netlink: 'syz.0.140': attribute type 10 has an invalid length. [ 132.692045][ T6350] netlink: 40 bytes leftover after parsing attributes in process `syz.0.140'. [ 132.941120][ T6348] delete_channel: no stack [ 133.236678][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.243597][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.258451][ T6355] netlink: 'syz.3.141': attribute type 10 has an invalid length. [ 133.284411][ T6355] netlink: 40 bytes leftover after parsing attributes in process `syz.3.141'. [ 133.478843][ T6353] delete_channel: no stack [ 133.504053][ T5781] Bluetooth: hci1: unexpected event 0x06 length: 151 > 3 [ 133.980404][ T6377] FAULT_INJECTION: forcing a failure. [ 133.980404][ T6377] name failslab, interval 1, probability 0, space 0, times 0 [ 134.029123][ T6377] CPU: 1 PID: 6377 Comm: syz.4.149 Not tainted syzkaller #0 [ 134.036512][ T6377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 134.046700][ T6377] Call Trace: [ 134.050029][ T6377] [ 134.053045][ T6377] dump_stack_lvl+0x18c/0x250 [ 134.057799][ T6377] ? sctp_sendmsg+0x1575/0x28c0 [ 134.062703][ T6377] ? ___sys_sendmsg+0x2a6/0x360 [ 134.067599][ T6377] ? show_regs_print_info+0x20/0x20 [ 134.073024][ T6377] ? load_image+0x400/0x400 [ 134.077671][ T6377] should_fail_ex+0x39d/0x4d0 [ 134.082408][ T6377] should_failslab+0x9/0x20 [ 134.086966][ T6377] slab_pre_alloc_hook+0x59/0x310 [ 134.092050][ T6377] ? sctp_add_bind_addr+0x8c/0x360 [ 134.097238][ T6377] __kmem_cache_alloc_node+0x53/0x250 [ 134.102839][ T6377] ? sctp_add_bind_addr+0x8c/0x360 [ 134.108009][ T6377] kmalloc_trace+0x2a/0xe0 [ 134.112471][ T6377] sctp_add_bind_addr+0x8c/0x360 [ 134.117464][ T6377] sctp_copy_local_addr_list+0x315/0x4f0 [ 134.123163][ T6377] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 134.128934][ T6377] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 134.135052][ T6377] ? sctp_v4_is_any+0x35/0x60 [ 134.139777][ T6377] ? sctp_copy_one_addr+0x8c/0x350 [ 134.144981][ T6377] sctp_bind_addr_copy+0xb3/0x3c0 [ 134.150068][ T6377] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 134.156425][ T6377] sctp_connect_new_asoc+0x2f9/0x6a0 [ 134.161751][ T6377] ? __sctp_connect+0xd80/0xd80 [ 134.166653][ T6377] ? __local_bh_enable_ip+0x13a/0x1c0 [ 134.172068][ T6377] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 134.177648][ T6377] ? security_sctp_bind_connect+0x89/0xb0 [ 134.183402][ T6377] sctp_sendmsg+0x1575/0x28c0 [ 134.188110][ T6377] ? sctp_getsockopt+0xb60/0xb60 [ 134.193062][ T6377] ? aa_sk_perm+0x83c/0x970 [ 134.197599][ T6377] ? aa_af_perm+0x330/0x330 [ 134.202158][ T6377] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 134.208601][ T6377] ? sock_rps_record_flow+0x19/0x3f0 [ 134.213903][ T6377] ? inet_sendmsg+0xe9/0x2f0 [ 134.218592][ T6377] ? inet_send_prepare+0x260/0x260 [ 134.223979][ T6377] ____sys_sendmsg+0x5ba/0x960 [ 134.228863][ T6377] ? __lock_acquire+0x7d40/0x7d40 [ 134.234148][ T6377] ? __asan_memset+0x22/0x40 [ 134.238784][ T6377] ? __sys_sendmsg_sock+0x30/0x30 [ 134.243855][ T6377] ? __import_iovec+0x5f2/0x850 [ 134.248735][ T6377] ? import_iovec+0x73/0xa0 [ 134.253261][ T6377] ___sys_sendmsg+0x2a6/0x360 [ 134.257950][ T6377] ? get_pid_task+0x20/0x1e0 [ 134.262655][ T6377] ? __sys_sendmsg+0x2a0/0x2a0 [ 134.267457][ T6377] ? __lock_acquire+0x7d40/0x7d40 [ 134.272518][ T6377] __se_sys_sendmsg+0x1c2/0x2b0 [ 134.277474][ T6377] ? __x64_sys_sendmsg+0x80/0x80 [ 134.282789][ T6377] ? lockdep_hardirqs_on+0x98/0x150 [ 134.288007][ T6377] do_syscall_64+0x55/0xa0 [ 134.292534][ T6377] ? clear_bhb_loop+0x40/0x90 [ 134.297412][ T6377] ? clear_bhb_loop+0x40/0x90 [ 134.302116][ T6377] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 134.308020][ T6377] RIP: 0033:0x7f2fef99bf79 [ 134.312447][ T6377] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.332159][ T6377] RSP: 002b:00007f2ff07c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 134.340590][ T6377] RAX: ffffffffffffffda RBX: 00007f2fefc15fa0 RCX: 00007f2fef99bf79 [ 134.348607][ T6377] RDX: 000000000004c0e0 RSI: 00002000000006c0 RDI: 0000000000000003 [ 134.356687][ T6377] RBP: 00007f2ff07c7090 R08: 0000000000000000 R09: 0000000000000000 [ 134.364755][ T6377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 134.373022][ T6377] R13: 00007f2fefc16038 R14: 00007f2fefc15fa0 R15: 00007fff67d10898 [ 134.381155][ T6377] [ 135.169808][ T6385] netlink: 'syz.4.151': attribute type 10 has an invalid length. [ 135.189076][ T6385] netlink: 40 bytes leftover after parsing attributes in process `syz.4.151'. [ 135.253835][ T6373] netlink: 52 bytes leftover after parsing attributes in process `syz.1.148'. [ 135.276131][ T6384] delete_channel: no stack [ 135.284853][ T6373] team_slave_0: entered allmulticast mode [ 135.295997][ T6373] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 135.792691][ T5781] Bluetooth: hci2: unexpected event 0x06 length: 151 > 3 [ 136.671817][ T6427] netlink: 'syz.0.164': attribute type 10 has an invalid length. [ 136.702364][ T6427] netlink: 40 bytes leftover after parsing attributes in process `syz.0.164'. [ 136.739724][ T6426] delete_channel: no stack [ 136.808111][ T6431] syz.3.166[6431] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 136.808272][ T6431] syz.3.166[6431] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 136.895623][ T5781] Bluetooth: hci0: unexpected event 0x06 length: 151 > 3 [ 139.697097][ T6444] bridge0: port 3(ip6gretap0) entered blocking state [ 139.718329][ T6444] bridge0: port 3(ip6gretap0) entered disabled state [ 139.726561][ T6444] ip6gretap0: entered allmulticast mode [ 139.736476][ T6444] ip6gretap0: entered promiscuous mode [ 139.754300][ T6444] bridge0: port 3(ip6gretap0) entered blocking state [ 139.763546][ T6444] bridge0: port 3(ip6gretap0) entered forwarding state [ 140.178218][ T6459] netlink: 'syz.1.176': attribute type 10 has an invalid length. [ 140.196156][ T6459] netlink: 40 bytes leftover after parsing attributes in process `syz.1.176'. [ 140.253318][ T6454] delete_channel: no stack [ 140.458182][ T5781] Bluetooth: hci3: unexpected event 0x06 length: 151 > 3 [ 140.517461][ T6468] netlink: 164 bytes leftover after parsing attributes in process `syz.3.179'. [ 140.632428][ T6461] bridge0: port 3(ip6gretap0) entered blocking state [ 140.658370][ T6461] bridge0: port 3(ip6gretap0) entered disabled state [ 140.681547][ T6461] ip6gretap0: entered allmulticast mode [ 140.745768][ T6461] ip6gretap0: entered promiscuous mode [ 140.780562][ T6461] bridge0: port 3(ip6gretap0) entered blocking state [ 140.788779][ T6461] bridge0: port 3(ip6gretap0) entered forwarding state [ 140.823990][ T6473] netlink: 132 bytes leftover after parsing attributes in process `syz.4.181'. [ 141.765202][ T6492] FAULT_INJECTION: forcing a failure. [ 141.765202][ T6492] name failslab, interval 1, probability 0, space 0, times 0 [ 141.807850][ T6492] CPU: 1 PID: 6492 Comm: syz.1.188 Not tainted syzkaller #0 [ 141.815318][ T6492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 141.825478][ T6492] Call Trace: [ 141.828789][ T6492] [ 141.831750][ T6492] dump_stack_lvl+0x18c/0x250 [ 141.836476][ T6492] ? show_regs_print_info+0x20/0x20 [ 141.841807][ T6492] ? load_image+0x400/0x400 [ 141.846357][ T6492] ? __might_sleep+0xe0/0xe0 [ 141.850988][ T6492] ? __lock_acquire+0x7d40/0x7d40 [ 141.856058][ T6492] should_fail_ex+0x39d/0x4d0 [ 141.860791][ T6492] should_failslab+0x9/0x20 [ 141.865417][ T6492] slab_pre_alloc_hook+0x59/0x310 [ 141.870483][ T6492] ? tomoyo_encode+0x28b/0x540 [ 141.875285][ T6492] ? tomoyo_encode+0x28b/0x540 [ 141.880090][ T6492] __kmem_cache_alloc_node+0x53/0x250 [ 141.885517][ T6492] ? tomoyo_encode+0x28b/0x540 [ 141.890315][ T6492] __kmalloc+0xa4/0x230 [ 141.894517][ T6492] tomoyo_encode+0x28b/0x540 [ 141.899265][ T6492] tomoyo_realpath_from_path+0x592/0x5d0 [ 141.904971][ T6492] tomoyo_path_number_perm+0x248/0x620 [ 141.910510][ T6492] ? tomoyo_path_number_perm+0x217/0x620 [ 141.916225][ T6492] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 141.921777][ T6492] ? trace_call_bpf+0xc3/0x6c0 [ 141.926860][ T6492] ? trace_call_bpf+0xc3/0x6c0 [ 141.931694][ T6492] ? trace_call_bpf+0x5e9/0x6c0 [ 141.936711][ T6492] ? __fget_files+0x28/0x4b0 [ 141.941407][ T6492] ? __fget_files+0x28/0x4b0 [ 141.946200][ T6492] security_file_ioctl+0x70/0xa0 [ 141.951161][ T6492] __se_sys_ioctl+0x48/0x170 [ 141.955775][ T6492] do_syscall_64+0x55/0xa0 [ 141.960258][ T6492] ? clear_bhb_loop+0x40/0x90 [ 141.964958][ T6492] ? clear_bhb_loop+0x40/0x90 [ 141.969735][ T6492] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 141.975673][ T6492] RIP: 0033:0x7f3988d9bf79 [ 141.980491][ T6492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.000380][ T6492] RSP: 002b:00007f3989c30028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 142.008830][ T6492] RAX: ffffffffffffffda RBX: 00007f3989015fa0 RCX: 00007f3988d9bf79 [ 142.017088][ T6492] RDX: 0000200000002280 RSI: 0000000000008922 RDI: 0000000000000004 [ 142.025075][ T6492] RBP: 00007f3989c30090 R08: 0000000000000000 R09: 0000000000000000 [ 142.033148][ T6492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.041511][ T6492] R13: 00007f3989016038 R14: 00007f3989015fa0 R15: 00007ffc623f65d8 [ 142.049533][ T6492] [ 142.078564][ T6492] ERROR: Out of memory at tomoyo_realpath_from_path. [ 142.142202][ T6496] netlink: 'syz.0.187': attribute type 10 has an invalid length. [ 142.181618][ T6496] netlink: 40 bytes leftover after parsing attributes in process `syz.0.187'. [ 142.489601][ T6487] delete_channel: no stack [ 144.190795][ T6518] netlink: 164 bytes leftover after parsing attributes in process `syz.1.194'. [ 145.190361][ T6523] bridge0: port 3(ip6gretap0) entered blocking state [ 145.543301][ T6523] bridge0: port 3(ip6gretap0) entered disabled state [ 145.684934][ T6523] ip6gretap0: entered allmulticast mode [ 145.879428][ T6523] ip6gretap0: entered promiscuous mode [ 145.950249][ T6523] bridge0: port 3(ip6gretap0) entered blocking state [ 145.957170][ T6523] bridge0: port 3(ip6gretap0) entered forwarding state [ 146.304366][ T6529] bridge0: entered promiscuous mode [ 146.309860][ T6529] bridge0: entered allmulticast mode [ 147.861027][ T6555] netlink: 'syz.0.203': attribute type 29 has an invalid length. [ 147.897553][ T6555] netlink: 'syz.0.203': attribute type 29 has an invalid length. [ 148.027153][ T6557] netlink: 'syz.0.203': attribute type 29 has an invalid length. [ 148.100553][ T6555] netlink: 'syz.0.203': attribute type 29 has an invalid length. [ 148.361199][ T6552] netlink: 'syz.1.210': attribute type 10 has an invalid length. [ 148.428746][ T6552] netlink: 40 bytes leftover after parsing attributes in process `syz.1.210'. [ 149.052835][ T6549] delete_channel: no stack [ 150.395154][ T6574] netlink: 164 bytes leftover after parsing attributes in process `syz.0.207'. [ 151.300067][ T6579] netlink: 'syz.3.208': attribute type 10 has an invalid length. [ 151.308167][ T6579] netlink: 40 bytes leftover after parsing attributes in process `syz.3.208'. [ 151.459930][ T6575] delete_channel: no stack [ 151.529563][ T6583] netlink: 'syz.0.211': attribute type 9 has an invalid length. [ 151.552391][ T6583] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.211'. [ 151.939903][ T6591] netlink: 11903 bytes leftover after parsing attributes in process `syz.1.215'. [ 152.539477][ T6601] netlink: 164 bytes leftover after parsing attributes in process `syz.1.219'. [ 153.451884][ T6616] bridge0: port 3(ip6gretap0) entered disabled state [ 153.459366][ T6616] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.467938][ T6616] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.557781][ T6616] bridge0: entered allmulticast mode [ 154.106289][ T6619] netlink: 'syz.0.222': attribute type 10 has an invalid length. [ 154.126378][ T6619] netlink: 40 bytes leftover after parsing attributes in process `syz.0.222'. [ 154.154775][ T6613] delete_channel: no stack [ 154.196265][ T6623] ip6gretap0: left allmulticast mode [ 154.230312][ T6623] ip6gretap0: left promiscuous mode [ 154.257706][ T6623] bridge0: port 3(ip6gretap0) entered disabled state [ 154.725300][ T6623] bridge_slave_1: left allmulticast mode [ 154.760662][ T6623] bridge_slave_1: left promiscuous mode [ 154.769079][ T6623] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.962173][ T6623] bridge_slave_0: left allmulticast mode [ 154.967910][ T6623] bridge_slave_0: left promiscuous mode [ 155.010469][ T6623] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.939755][ T6625] netlink: 12 bytes leftover after parsing attributes in process `syz.4.224'. [ 156.139767][ T6642] FAULT_INJECTION: forcing a failure. [ 156.139767][ T6642] name failslab, interval 1, probability 0, space 0, times 0 [ 156.218616][ T6642] CPU: 1 PID: 6642 Comm: syz.3.230 Not tainted syzkaller #0 [ 156.221204][ T6644] ip6gretap0: left allmulticast mode [ 156.225959][ T6642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 156.226008][ T6642] Call Trace: [ 156.226018][ T6642] [ 156.226028][ T6642] dump_stack_lvl+0x18c/0x250 [ 156.226065][ T6642] ? show_regs_print_info+0x20/0x20 [ 156.226092][ T6642] ? load_image+0x400/0x400 [ 156.226124][ T6642] ? __lock_acquire+0x1273/0x7d40 [ 156.226146][ T6642] ? do_syscall_64+0x55/0xa0 [ 156.226182][ T6642] should_fail_ex+0x39d/0x4d0 [ 156.226215][ T6642] should_failslab+0x9/0x20 [ 156.243243][ T6644] ip6gretap0: left promiscuous mode [ 156.245060][ T6642] slab_pre_alloc_hook+0x59/0x310 [ 156.245112][ T6642] kmem_cache_alloc+0x5a/0x2d0 [ 156.245136][ T6642] ? dst_alloc+0x105/0x170 [ 156.245164][ T6642] dst_alloc+0x105/0x170 [ 156.245192][ T6642] ip_route_output_key_hash_rcu+0x14f0/0x2360 [ 156.245229][ T6642] ? ip_route_output_key_hash+0x13d/0x330 [ 156.245254][ T6642] ip_route_output_key_hash+0x1f3/0x330 [ 156.245282][ T6642] ? ip_route_input_rcu+0x30e0/0x30e0 [ 156.245309][ T6642] ? copyout_mc+0x70/0x70 [ 156.245337][ T6642] ? read_lock_is_recursive+0x20/0x20 [ 156.262591][ T6644] bridge0: port 3(ip6gretap0) entered disabled state [ 156.262753][ T6642] ip_route_output_flow+0x2a/0x150 [ 156.262783][ T6642] ? security_sk_classify_flow+0x7b/0x90 [ 156.262810][ T6642] l2tp_ip_sendmsg+0xdb4/0x14f0 [ 156.262841][ T6642] ? l2tp_ip_sendmsg+0x3b5/0x14f0 [ 156.262863][ T6642] ? inet_send_prepare+0x260/0x260 [ 156.262888][ T6642] ____sys_sendmsg+0x5ba/0x960 [ 156.376315][ T6642] ? __lock_acquire+0x7d40/0x7d40 [ 156.381372][ T6642] ? __sys_sendmsg_sock+0x30/0x30 [ 156.386405][ T6642] ? __import_iovec+0x3fa/0x850 [ 156.391372][ T6642] ? import_iovec+0x73/0xa0 [ 156.395898][ T6642] ___sys_sendmsg+0x2a6/0x360 [ 156.400678][ T6642] ? __sys_sendmsg+0x2a0/0x2a0 [ 156.405558][ T6642] ? trace_call_bpf+0xc3/0x6c0 [ 156.410369][ T6642] __se_sys_sendmsg+0x1c2/0x2b0 [ 156.415230][ T6642] ? __x64_sys_sendmsg+0x80/0x80 [ 156.420200][ T6642] ? lockdep_hardirqs_on+0x98/0x150 [ 156.425412][ T6642] do_syscall_64+0x55/0xa0 [ 156.429868][ T6642] ? clear_bhb_loop+0x40/0x90 [ 156.434639][ T6642] ? clear_bhb_loop+0x40/0x90 [ 156.439334][ T6642] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 156.445327][ T6642] RIP: 0033:0x7fea0379bf79 [ 156.449768][ T6642] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.469493][ T6642] RSP: 002b:00007fea0460a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 156.478014][ T6642] RAX: ffffffffffffffda RBX: 00007fea03a15fa0 RCX: 00007fea0379bf79 [ 156.486095][ T6642] RDX: 0000000000000080 RSI: 0000200000000340 RDI: 0000000000000005 [ 156.494081][ T6642] RBP: 00007fea0460a090 R08: 0000000000000000 R09: 0000000000000000 [ 156.502172][ T6642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.510240][ T6642] R13: 00007fea03a16038 R14: 00007fea03a15fa0 R15: 00007ffc9fbe2ff8 [ 156.518236][ T6642] [ 157.451986][ T6644] bridge_slave_1: left allmulticast mode [ 157.577133][ T6644] bridge_slave_1: left promiscuous mode [ 157.952418][ T6644] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.183152][ T6644] bridge_slave_0: left allmulticast mode [ 158.192670][ T6644] bridge_slave_0: left promiscuous mode [ 158.258458][ T6644] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.809025][ T6660] delete_channel: no stack [ 159.430524][ T6654] netlink: 164 bytes leftover after parsing attributes in process `syz.4.232'. [ 159.443561][ T6661] netlink: 'syz.3.235': attribute type 10 has an invalid length. [ 159.457068][ T6661] netlink: 40 bytes leftover after parsing attributes in process `syz.3.235'. [ 159.522258][ T6644] syz.1.231 (6644) used greatest stack depth: 20008 bytes left [ 159.662874][ T6667] netlink: 'syz.4.237': attribute type 33 has an invalid length. [ 159.846669][ T6668] syzkaller0: entered promiscuous mode [ 159.858979][ T6668] syzkaller0: entered allmulticast mode [ 160.607744][ T6678] syz.4.242 (6678) used greatest stack depth: 18984 bytes left [ 161.579389][ T6682] delete_channel: no stack [ 162.372360][ T6686] netlink: 164 bytes leftover after parsing attributes in process `syz.4.245'. [ 162.392563][ T6687] netlink: 'syz.1.244': attribute type 10 has an invalid length. [ 162.418657][ T6687] netlink: 40 bytes leftover after parsing attributes in process `syz.1.244'. [ 162.739346][ T6697] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 163.497885][ T6694] bridge_slave_1: left allmulticast mode [ 163.507055][ T6694] bridge_slave_1: left promiscuous mode [ 163.539839][ T6694] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.107107][ T6694] bridge_slave_0: left allmulticast mode [ 164.127159][ T6694] bridge_slave_0: left promiscuous mode [ 164.168637][ T6694] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.449831][ T6725] netlink: 164 bytes leftover after parsing attributes in process `syz.0.255'. [ 166.757245][ T6730] netlink: 14 bytes leftover after parsing attributes in process `syz.3.248'. [ 166.811311][ T6733] netlink: 196 bytes leftover after parsing attributes in process `syz.3.248'. [ 167.604793][ T6730] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 167.659887][ T6730] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 167.693506][ T6730] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 167.753005][ T6730] bond0 (unregistering): Released all slaves [ 167.794049][ T6742] ip6gretap0: left allmulticast mode [ 167.818944][ T6742] ip6gretap0: left promiscuous mode [ 167.913788][ T6742] bridge0: port 3(ip6gretap0) entered disabled state [ 168.148536][ T6751] netlink: 'syz.1.261': attribute type 29 has an invalid length. [ 168.529726][ T6742] bridge_slave_1: left allmulticast mode [ 168.535811][ T6742] bridge_slave_1: left promiscuous mode [ 168.543519][ T6742] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.574554][ T6742] bridge_slave_0: left promiscuous mode [ 168.586415][ T6742] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.730703][ T6746] netlink: 'syz.1.261': attribute type 10 has an invalid length. [ 168.737639][ T6759] FAULT_INJECTION: forcing a failure. [ 168.737639][ T6759] name failslab, interval 1, probability 0, space 0, times 0 [ 168.751509][ T6759] CPU: 1 PID: 6759 Comm: syz.4.264 Not tainted syzkaller #0 [ 168.759025][ T6759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 168.769406][ T6759] Call Trace: [ 168.772722][ T6759] [ 168.775681][ T6759] dump_stack_lvl+0x18c/0x250 [ 168.780380][ T6759] ? show_regs_print_info+0x20/0x20 [ 168.785587][ T6759] ? load_image+0x400/0x400 [ 168.790125][ T6759] ? mark_lock+0x94/0x320 [ 168.794493][ T6759] ? __lock_acquire+0x1347/0x7d40 [ 168.799527][ T6759] should_fail_ex+0x39d/0x4d0 [ 168.804217][ T6759] should_failslab+0x9/0x20 [ 168.808736][ T6759] slab_pre_alloc_hook+0x59/0x310 [ 168.813818][ T6759] kmem_cache_alloc+0x5a/0x2d0 [ 168.818610][ T6759] ? radix_tree_node_alloc+0x7e/0x3a0 [ 168.824003][ T6759] radix_tree_node_alloc+0x7e/0x3a0 [ 168.829399][ T6759] idr_get_free+0x2b3/0xa60 [ 168.834105][ T6759] idr_alloc_cyclic+0x27b/0x5d0 [ 168.839067][ T6759] ? idr_alloc+0x2f0/0x2f0 [ 168.843506][ T6759] ? do_raw_spin_lock+0x11f/0x2c0 [ 168.848734][ T6759] ? __radix_tree_preload+0x82/0x880 [ 168.854255][ T6759] ? btf_alloc_id+0x30/0x2d0 [ 168.858906][ T6759] btf_alloc_id+0x4f/0x2d0 [ 168.863375][ T6759] btf_new_fd+0x81b/0x9f0 [ 168.867746][ T6759] ? bpf_btf_show_fdinfo+0x80/0x80 [ 168.873138][ T6759] ? capable+0x88/0xe0 [ 168.877215][ T6759] __sys_bpf+0x670/0x890 [ 168.881466][ T6759] ? bpf_link_show_fdinfo+0x390/0x390 [ 168.886868][ T6759] ? lock_chain_count+0x20/0x20 [ 168.891726][ T6759] __x64_sys_bpf+0x7c/0x90 [ 168.896149][ T6759] do_syscall_64+0x55/0xa0 [ 168.900591][ T6759] ? clear_bhb_loop+0x40/0x90 [ 168.905277][ T6759] ? clear_bhb_loop+0x40/0x90 [ 168.910000][ T6759] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 168.915952][ T6759] RIP: 0033:0x7f2fef99bf79 [ 168.920378][ T6759] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.940099][ T6759] RSP: 002b:00007f2ff07c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 168.948524][ T6759] RAX: ffffffffffffffda RBX: 00007f2fefc15fa0 RCX: 00007f2fef99bf79 [ 168.956596][ T6759] RDX: 0000000000000028 RSI: 0000200000000040 RDI: 0000000000000012 [ 168.964753][ T6759] RBP: 00007f2ff07c7090 R08: 0000000000000000 R09: 0000000000000000 [ 168.972734][ T6759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 168.980708][ T6759] R13: 00007f2fefc16038 R14: 00007f2fefc15fa0 R15: 00007fff67d10898 [ 168.988803][ T6759] [ 168.995522][ T6746] hsr0: entered promiscuous mode [ 169.047842][ T6746] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 169.087777][ T6746] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 169.100310][ T6746] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 169.139428][ T6746] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 169.168028][ T6750] netlink: 'syz.3.262': attribute type 3 has an invalid length. [ 169.182936][ T6751] netlink: 'syz.1.261': attribute type 29 has an invalid length. [ 169.200934][ T6764] TCP: TCP_TX_DELAY enabled [ 169.540634][ T6776] netlink: 164 bytes leftover after parsing attributes in process `syz.0.268'. [ 170.925253][ T6798] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.277'. [ 170.977342][ T6794] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.277'. [ 171.029700][ T6794] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 171.087460][ T6798] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 171.130759][ T6793] delete_channel: no stack [ 171.297137][ T6812] sctp: [Deprecated]: syz.0.280 (pid 6812) Use of struct sctp_assoc_value in delayed_ack socket option. [ 171.297137][ T6812] Use struct sctp_sack_info instead [ 171.572236][ T6821] netlink: 164 bytes leftover after parsing attributes in process `syz.1.283'. [ 172.380148][ T6832] netlink: 196 bytes leftover after parsing attributes in process `syz.0.287'. [ 172.435274][ T6829] netlink: 14 bytes leftover after parsing attributes in process `syz.0.287'. [ 172.878304][ T6847] FAULT_INJECTION: forcing a failure. [ 172.878304][ T6847] name failslab, interval 1, probability 0, space 0, times 0 [ 172.892700][ T6847] CPU: 1 PID: 6847 Comm: syz.3.293 Not tainted syzkaller #0 [ 172.900246][ T6847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 172.910331][ T6847] Call Trace: [ 172.913721][ T6847] [ 172.916675][ T6847] dump_stack_lvl+0x18c/0x250 [ 172.921389][ T6847] ? show_regs_print_info+0x20/0x20 [ 172.926603][ T6847] ? load_image+0x400/0x400 [ 172.931121][ T6847] ? perf_trace_lock_acquire+0x104/0x410 [ 172.936871][ T6847] should_fail_ex+0x39d/0x4d0 [ 172.941656][ T6847] should_failslab+0x9/0x20 [ 172.946236][ T6847] slab_pre_alloc_hook+0x59/0x310 [ 172.951316][ T6847] kmem_cache_alloc+0x5a/0x2d0 [ 172.956225][ T6847] ? dst_alloc+0x105/0x170 [ 172.960766][ T6847] dst_alloc+0x105/0x170 [ 172.965037][ T6847] ip_route_output_key_hash_rcu+0x14f0/0x2360 [ 172.971141][ T6847] ? ip_route_output_key_hash+0x13d/0x330 [ 172.976885][ T6847] ip_route_output_key_hash+0x1f3/0x330 [ 172.982450][ T6847] ? ip_route_input_rcu+0x30e0/0x30e0 [ 172.988096][ T6847] ? copyout_mc+0x70/0x70 [ 172.992450][ T6847] ? read_lock_is_recursive+0x20/0x20 [ 172.997931][ T6847] ip_route_output_flow+0x2a/0x150 [ 173.003230][ T6847] ? security_sk_classify_flow+0x7b/0x90 [ 173.008940][ T6847] l2tp_ip_sendmsg+0xdb4/0x14f0 [ 173.013840][ T6847] ? l2tp_ip_sendmsg+0x3b5/0x14f0 [ 173.018882][ T6847] ? inet_send_prepare+0x260/0x260 [ 173.024016][ T6847] ____sys_sendmsg+0x5ba/0x960 [ 173.028791][ T6847] ? __lock_acquire+0x7d40/0x7d40 [ 173.033842][ T6847] ? __sys_sendmsg_sock+0x30/0x30 [ 173.038874][ T6847] ? __import_iovec+0x3fa/0x850 [ 173.043753][ T6847] ? import_iovec+0x73/0xa0 [ 173.048432][ T6847] ___sys_sendmsg+0x2a6/0x360 [ 173.053136][ T6847] ? get_pid_task+0x20/0x1e0 [ 173.057748][ T6847] ? __sys_sendmsg+0x2a0/0x2a0 [ 173.062620][ T6847] ? __lock_acquire+0x7d40/0x7d40 [ 173.067725][ T6847] __se_sys_sendmsg+0x1c2/0x2b0 [ 173.072721][ T6847] ? __x64_sys_sendmsg+0x80/0x80 [ 173.077720][ T6847] ? lockdep_hardirqs_on+0x98/0x150 [ 173.082936][ T6847] do_syscall_64+0x55/0xa0 [ 173.087412][ T6847] ? clear_bhb_loop+0x40/0x90 [ 173.092190][ T6847] ? clear_bhb_loop+0x40/0x90 [ 173.096877][ T6847] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 173.102913][ T6847] RIP: 0033:0x7fea0379bf79 [ 173.107428][ T6847] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.127238][ T6847] RSP: 002b:00007fea0460a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 173.135751][ T6847] RAX: ffffffffffffffda RBX: 00007fea03a15fa0 RCX: 00007fea0379bf79 [ 173.143993][ T6847] RDX: 0000000000000080 RSI: 0000200000000340 RDI: 0000000000000004 [ 173.151984][ T6847] RBP: 00007fea0460a090 R08: 0000000000000000 R09: 0000000000000000 [ 173.159966][ T6847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.167947][ T6847] R13: 00007fea03a16038 R14: 00007fea03a15fa0 R15: 00007ffc9fbe2ff8 [ 173.175953][ T6847] [ 173.991782][ T6864] netlink: 164 bytes leftover after parsing attributes in process `syz.1.298'. [ 174.019617][ T6861] netlink: 144 bytes leftover after parsing attributes in process `syz.3.299'. [ 174.231819][ T6861] team0: Port device team_slave_0 removed [ 174.286325][ T6861] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 174.428358][ T6870] netlink: 'syz.0.301': attribute type 22 has an invalid length. [ 174.844578][ T6882] netlink: 'syz.3.304': attribute type 23 has an invalid length. [ 175.015476][ T6884] netlink: 'syz.1.305': attribute type 39 has an invalid length. [ 175.354193][ T6882] netlink: 'syz.3.304': attribute type 10 has an invalid length. [ 175.475026][ T6882] geneve0: entered promiscuous mode [ 175.842825][ T6894] netlink: 60 bytes leftover after parsing attributes in process `syz.1.308'. [ 175.887515][ T6894] netlink: 60 bytes leftover after parsing attributes in process `syz.1.308'. [ 176.088694][ T6894] netlink: 60 bytes leftover after parsing attributes in process `syz.1.308'. [ 176.141707][ T6901] netlink: 60 bytes leftover after parsing attributes in process `syz.1.308'. [ 176.171074][ T6901] FAULT_INJECTION: forcing a failure. [ 176.171074][ T6901] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 176.246839][ T6901] CPU: 0 PID: 6901 Comm: syz.1.308 Not tainted syzkaller #0 [ 176.254304][ T6901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 176.264467][ T6901] Call Trace: [ 176.267853][ T6901] [ 176.270987][ T6901] dump_stack_lvl+0x18c/0x250 [ 176.275990][ T6901] ? show_regs_print_info+0x20/0x20 [ 176.281242][ T6901] ? load_image+0x400/0x400 [ 176.285805][ T6901] ? __lock_acquire+0x7d40/0x7d40 [ 176.290891][ T6901] ? snprintf+0xe9/0x140 [ 176.295268][ T6901] should_fail_ex+0x39d/0x4d0 [ 176.300002][ T6901] _copy_to_user+0x2f/0xa0 [ 176.304476][ T6901] simple_read_from_buffer+0xe7/0x150 [ 176.310074][ T6901] proc_fail_nth_read+0x1e8/0x260 [ 176.315153][ T6901] ? proc_fault_inject_write+0x360/0x360 [ 176.320846][ T6901] ? fsnotify_perm+0x271/0x5e0 [ 176.325778][ T6901] ? proc_fault_inject_write+0x360/0x360 [ 176.331461][ T6901] vfs_read+0x28b/0x970 [ 176.335679][ T6901] ? kernel_read+0x1e0/0x1e0 [ 176.340403][ T6901] ? __fget_files+0x28/0x4b0 [ 176.345041][ T6901] ? __fget_files+0x28/0x4b0 [ 176.349681][ T6901] ? __fget_files+0x43d/0x4b0 [ 176.354497][ T6901] ? __fdget_pos+0x2a3/0x330 [ 176.359130][ T6901] ? ksys_read+0x75/0x260 [ 176.363514][ T6901] ksys_read+0x150/0x260 [ 176.367805][ T6901] ? vfs_write+0x990/0x990 [ 176.372269][ T6901] ? lockdep_hardirqs_on+0x98/0x150 [ 176.377515][ T6901] do_syscall_64+0x55/0xa0 [ 176.381981][ T6901] ? clear_bhb_loop+0x40/0x90 [ 176.386696][ T6901] ? clear_bhb_loop+0x40/0x90 [ 176.391415][ T6901] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 176.397348][ T6901] RIP: 0033:0x7f3988d5c84e [ 176.401811][ T6901] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 176.421640][ T6901] RSP: 002b:00007f3989c0efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 176.430200][ T6901] RAX: ffffffffffffffda RBX: 00007f3989c0f6c0 RCX: 00007f3988d5c84e [ 176.438220][ T6901] RDX: 000000000000000f RSI: 00007f3989c0f0a0 RDI: 0000000000000004 [ 176.446321][ T6901] RBP: 00007f3989c0f090 R08: 0000000000000000 R09: 0000000000000000 [ 176.454336][ T6901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.462437][ T6901] R13: 00007f3989016128 R14: 00007f3989016090 R15: 00007ffc623f65d8 [ 176.470472][ T6901] [ 178.308564][ T6915] netlink: 164 bytes leftover after parsing attributes in process `syz.0.313'. [ 178.317778][ T6917] netlink: 'syz.4.314': attribute type 10 has an invalid length. [ 178.684739][ T6917] team0 (unregistering): Port device team_slave_0 removed [ 178.710519][ T6917] team0 (unregistering): Port device team_slave_1 removed [ 178.738026][ T6918] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.314'. [ 178.758112][ T6918] bridge_slave_1: default FDB implementation only supports local addresses [ 179.006237][ T6929] netlink: 'syz.0.316': attribute type 39 has an invalid length. [ 179.854172][ T6945] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.322'. [ 182.792612][ T6965] netlink: 'syz.1.326': attribute type 39 has an invalid length. [ 185.238667][ T7004] netlink: 'syz.3.338': attribute type 39 has an invalid length. [ 185.646661][ T7015] netlink: 164 bytes leftover after parsing attributes in process `syz.4.341'. [ 185.761163][ T7014] netlink: 144 bytes leftover after parsing attributes in process `syz.0.342'. [ 186.175207][ T7014] team0: Port device team_slave_0 removed [ 186.192681][ T7014] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 186.217433][ T7020] tc_dump_action: action bad kind [ 186.457292][ T7022] netlink: 'syz.3.344': attribute type 10 has an invalid length. [ 186.664059][ T7022] team0: Port device wlan1 added [ 186.704709][ T7029] netlink: 'syz.1.347': attribute type 39 has an invalid length. [ 186.950856][ T7030] netlink: 'syz.4.346': attribute type 6 has an invalid length. [ 187.218804][ T7044] netlink: 'syz.1.356': attribute type 39 has an invalid length. [ 187.536839][ T7047] netlink: 'syz.3.350': attribute type 6 has an invalid length. [ 187.579084][ T7047] FAULT_INJECTION: forcing a failure. [ 187.579084][ T7047] name failslab, interval 1, probability 0, space 0, times 0 [ 187.780336][ T7047] CPU: 0 PID: 7047 Comm: syz.3.350 Not tainted syzkaller #0 [ 187.787720][ T7047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 187.797829][ T7047] Call Trace: [ 187.801146][ T7047] [ 187.804111][ T7047] dump_stack_lvl+0x18c/0x250 [ 187.808929][ T7047] ? show_regs_print_info+0x20/0x20 [ 187.814449][ T7047] ? load_image+0x400/0x400 [ 187.819014][ T7047] ? __might_sleep+0xe0/0xe0 [ 187.823652][ T7047] ? __lock_acquire+0x7d40/0x7d40 [ 187.828817][ T7047] should_fail_ex+0x39d/0x4d0 [ 187.833543][ T7047] should_failslab+0x9/0x20 [ 187.838146][ T7047] slab_pre_alloc_hook+0x59/0x310 [ 187.843180][ T7047] ? fib_trie_table+0x33/0x1c0 [ 187.848074][ T7047] ? fib_trie_table+0x33/0x1c0 [ 187.853002][ T7047] ? fib_trie_table+0x33/0x1c0 [ 187.857893][ T7047] __kmem_cache_alloc_node+0x53/0x250 [ 187.863286][ T7047] ? fib_trie_table+0x33/0x1c0 [ 187.868336][ T7047] __kmalloc+0xa4/0x230 [ 187.872603][ T7047] fib_trie_table+0x33/0x1c0 [ 187.877300][ T7047] fib_new_table+0x135/0x2d0 [ 187.881907][ T7047] inet_rtm_newroute+0x133/0x240 [ 187.886960][ T7047] ? rcu_read_unlock+0xa0/0xa0 [ 187.891921][ T7047] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 187.897134][ T7047] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 187.902353][ T7047] ? rcu_read_unlock+0xa0/0xa0 [ 187.907130][ T7047] rtnetlink_rcv_msg+0x869/0xfa0 [ 187.912254][ T7047] ? rtnetlink_bind+0x80/0x80 [ 187.917130][ T7047] ? perf_trace_preemptirq_template+0x269/0x330 [ 187.923484][ T7047] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 187.929479][ T7047] ? lock_chain_count+0x20/0x20 [ 187.934438][ T7047] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 187.940603][ T7047] ? lockdep_hardirqs_on+0x98/0x150 [ 187.945815][ T7047] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 187.951986][ T7047] ? _raw_spin_unlock_irqrestore+0xc0/0x120 [ 187.958003][ T7047] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 187.963896][ T7047] ? _raw_spin_unlock+0x40/0x40 [ 187.968779][ T7047] ? rcu_preempt_deferred_qs_irqrestore+0x88e/0xce0 [ 187.975943][ T7047] netlink_rcv_skb+0x241/0x4d0 [ 187.980811][ T7047] ? rtnetlink_bind+0x80/0x80 [ 187.985809][ T7047] ? netlink_ack+0x1180/0x1180 [ 187.990599][ T7047] ? __lock_acquire+0x7d40/0x7d40 [ 187.995736][ T7047] ? __rcu_read_unlock+0x7c/0xd0 [ 188.000807][ T7047] ? netlink_deliver_tap+0x2e/0x1b0 [ 188.006050][ T7047] netlink_unicast+0x751/0x8d0 [ 188.011010][ T7047] netlink_sendmsg+0x8d0/0xbf0 [ 188.015899][ T7047] ? netlink_getsockopt+0x590/0x590 [ 188.021153][ T7047] ? aa_sock_msg_perm+0x94/0x150 [ 188.026110][ T7047] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 188.031435][ T7047] ? security_socket_sendmsg+0x80/0xa0 [ 188.036988][ T7047] ? netlink_getsockopt+0x590/0x590 [ 188.042302][ T7047] ____sys_sendmsg+0x5ba/0x960 [ 188.047085][ T7047] ? __asan_memset+0x22/0x40 [ 188.051788][ T7047] ? __sys_sendmsg_sock+0x30/0x30 [ 188.057000][ T7047] ? __import_iovec+0x5f2/0x850 [ 188.062036][ T7047] ? import_iovec+0x73/0xa0 [ 188.066553][ T7047] ___sys_sendmsg+0x2a6/0x360 [ 188.071240][ T7047] ? __sys_sendmsg+0x2a0/0x2a0 [ 188.076006][ T7047] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 188.082088][ T7047] ? lockdep_hardirqs_on+0x98/0x150 [ 188.087387][ T7047] ? kasan_check_range+0x6a/0x290 [ 188.092420][ T7047] __se_sys_sendmsg+0x1c2/0x2b0 [ 188.097274][ T7047] ? __x64_sys_sendmsg+0x80/0x80 [ 188.102243][ T7047] do_syscall_64+0x55/0xa0 [ 188.106682][ T7047] ? clear_bhb_loop+0x40/0x90 [ 188.111371][ T7047] ? clear_bhb_loop+0x40/0x90 [ 188.117249][ T7047] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 188.126630][ T7047] RIP: 0033:0x7fea0379bf79 [ 188.131075][ T7047] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.151096][ T7047] RSP: 002b:00007fea0460a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 188.159982][ T7047] RAX: ffffffffffffffda RBX: 00007fea03a15fa0 RCX: 00007fea0379bf79 [ 188.167969][ T7047] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 188.176031][ T7047] RBP: 00007fea0460a090 R08: 0000000000000000 R09: 0000000000000000 [ 188.184203][ T7047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 188.192294][ T7047] R13: 00007fea03a16038 R14: 00007fea03a15fa0 R15: 00007ffc9fbe2ff8 [ 188.200564][ T7047] [ 188.454654][ T7058] netlink: 'syz.1.355': attribute type 7 has an invalid length. [ 188.465116][ T7058] netlink: 140 bytes leftover after parsing attributes in process `syz.1.355'. [ 188.488656][ T7059] netlink: 164 bytes leftover after parsing attributes in process `syz.3.354'. [ 188.582994][ T5779] Bluetooth: hci1: ISO packet for unknown connection handle 2622 [ 188.601102][ T7061] netlink: 'syz.4.358': attribute type 7 has an invalid length. [ 188.616597][ T7061] netlink: 140 bytes leftover after parsing attributes in process `syz.4.358'. [ 188.654471][ T7063] netlink: 'syz.1.357': attribute type 10 has an invalid length. [ 188.708786][ T7063] team0: Port device wlan1 added [ 188.894302][ T7070] netlink: 'syz.4.361': attribute type 39 has an invalid length. [ 189.102434][ T7076] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.362'. [ 190.645021][ T7084] netlink: 60 bytes leftover after parsing attributes in process `syz.3.364'. [ 191.236578][ T7084] netlink: 60 bytes leftover after parsing attributes in process `syz.3.364'. [ 191.247144][ T7088] netlink: 60 bytes leftover after parsing attributes in process `syz.3.364'. [ 191.364103][ T7091] netlink: 60 bytes leftover after parsing attributes in process `syz.3.364'. [ 191.801255][ T7090] netlink: 180 bytes leftover after parsing attributes in process `syz.0.365'. [ 191.926460][ T7103] FAULT_INJECTION: forcing a failure. [ 191.926460][ T7103] name failslab, interval 1, probability 0, space 0, times 0 [ 191.962204][ T7103] CPU: 1 PID: 7103 Comm: syz.3.368 Not tainted syzkaller #0 [ 191.969745][ T7103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 191.979844][ T7103] Call Trace: [ 191.983161][ T7103] [ 191.986120][ T7103] dump_stack_lvl+0x18c/0x250 [ 191.990845][ T7103] ? show_regs_print_info+0x20/0x20 [ 191.996088][ T7103] ? load_image+0x400/0x400 [ 192.000646][ T7103] ? __might_sleep+0xe0/0xe0 [ 192.005443][ T7103] ? __lock_acquire+0x7d40/0x7d40 [ 192.010588][ T7103] ? mark_lock+0x94/0x320 [ 192.015036][ T7103] should_fail_ex+0x39d/0x4d0 [ 192.019827][ T7103] should_failslab+0x9/0x20 [ 192.024384][ T7103] slab_pre_alloc_hook+0x59/0x310 [ 192.029456][ T7103] ? __get_vm_area_node+0x125/0x370 [ 192.034697][ T7103] __kmem_cache_alloc_node+0x53/0x250 [ 192.040111][ T7103] ? __get_vm_area_node+0x125/0x370 [ 192.045360][ T7103] kmalloc_node_trace+0x26/0xe0 [ 192.050283][ T7103] __get_vm_area_node+0x125/0x370 [ 192.055381][ T7103] __vmalloc_node_range+0x36e/0x1330 [ 192.060807][ T7103] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 192.066387][ T7103] ? mark_lock+0x94/0x320 [ 192.070737][ T7103] ? __lock_acquire+0x1347/0x7d40 [ 192.075881][ T7103] ? verify_lock_unused+0x140/0x140 [ 192.081106][ T7103] ? free_vm_area+0x50/0x50 [ 192.085707][ T7103] ? end_current_label_crit_section+0x170/0x170 [ 192.091986][ T7103] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 192.097650][ T7103] __vmalloc+0x7a/0x90 [ 192.101739][ T7103] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 192.107306][ T7103] bpf_prog_alloc_no_stats+0x47/0x440 [ 192.112712][ T7103] ? bpf_prog_alloc+0x2b/0x1a0 [ 192.117522][ T7103] bpf_prog_alloc+0x3d/0x1a0 [ 192.122141][ T7103] bpf_prog_load+0x6eb/0x1670 [ 192.126855][ T7103] ? map_freeze+0x420/0x420 [ 192.131462][ T7103] ? __might_fault+0xaa/0x120 [ 192.136236][ T7103] ? __lock_acquire+0x7d40/0x7d40 [ 192.141382][ T7103] ? file_end_write+0x159/0x250 [ 192.146245][ T7103] ? __might_fault+0xaa/0x120 [ 192.150962][ T7103] ? __might_fault+0xc6/0x120 [ 192.155730][ T7103] ? __might_fault+0xaa/0x120 [ 192.160613][ T7103] ? bpf_lsm_bpf+0x9/0x10 [ 192.164957][ T7103] ? security_bpf+0x7e/0xa0 [ 192.169662][ T7103] __sys_bpf+0x5ba/0x890 [ 192.173922][ T7103] ? bpf_link_show_fdinfo+0x390/0x390 [ 192.179402][ T7103] ? lock_chain_count+0x20/0x20 [ 192.184291][ T7103] __x64_sys_bpf+0x7c/0x90 [ 192.188718][ T7103] do_syscall_64+0x55/0xa0 [ 192.193149][ T7103] ? clear_bhb_loop+0x40/0x90 [ 192.197860][ T7103] ? clear_bhb_loop+0x40/0x90 [ 192.202589][ T7103] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 192.208590][ T7103] RIP: 0033:0x7fea0379bf79 [ 192.213107][ T7103] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.233069][ T7103] RSP: 002b:00007fea0460a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 192.241501][ T7103] RAX: ffffffffffffffda RBX: 00007fea03a15fa0 RCX: 00007fea0379bf79 [ 192.249569][ T7103] RDX: 0000000000000094 RSI: 00002000000001c0 RDI: 0000000000000005 [ 192.257554][ T7103] RBP: 00007fea0460a090 R08: 0000000000000000 R09: 0000000000000000 [ 192.265708][ T7103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.273768][ T7103] R13: 00007fea03a16038 R14: 00007fea03a15fa0 R15: 00007ffc9fbe2ff8 [ 192.281789][ T7103] [ 192.288953][ T7103] syz.3.368: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 192.361431][ T7103] CPU: 0 PID: 7103 Comm: syz.3.368 Not tainted syzkaller #0 [ 192.368953][ T7103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 192.379048][ T7103] Call Trace: [ 192.382529][ T7103] [ 192.385490][ T7103] dump_stack_lvl+0x18c/0x250 [ 192.390223][ T7103] ? show_regs_print_info+0x20/0x20 [ 192.395475][ T7103] ? load_image+0x400/0x400 [ 192.400092][ T7103] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 192.406623][ T7103] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 192.413138][ T7103] warn_alloc+0x246/0x340 [ 192.417498][ T7103] ? __get_vm_area_node+0x125/0x370 [ 192.422810][ T7103] ? zone_watermark_ok_safe+0x230/0x230 [ 192.428546][ T7103] ? rcu_is_watching+0x15/0xb0 [ 192.433326][ T7103] ? __get_vm_area_node+0x356/0x370 [ 192.438545][ T7103] __vmalloc_node_range+0x393/0x1330 [ 192.443935][ T7103] ? mark_lock+0x94/0x320 [ 192.448280][ T7103] ? __lock_acquire+0x1347/0x7d40 [ 192.453316][ T7103] ? verify_lock_unused+0x140/0x140 [ 192.458644][ T7103] ? free_vm_area+0x50/0x50 [ 192.463166][ T7103] ? end_current_label_crit_section+0x170/0x170 [ 192.469620][ T7103] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 192.475202][ T7103] __vmalloc+0x7a/0x90 [ 192.479472][ T7103] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 192.485050][ T7103] bpf_prog_alloc_no_stats+0x47/0x440 [ 192.490489][ T7103] ? bpf_prog_alloc+0x2b/0x1a0 [ 192.495276][ T7103] bpf_prog_alloc+0x3d/0x1a0 [ 192.499884][ T7103] bpf_prog_load+0x6eb/0x1670 [ 192.504584][ T7103] ? map_freeze+0x420/0x420 [ 192.509104][ T7103] ? __might_fault+0xaa/0x120 [ 192.513804][ T7103] ? __lock_acquire+0x7d40/0x7d40 [ 192.518839][ T7103] ? file_end_write+0x159/0x250 [ 192.523880][ T7103] ? __might_fault+0xaa/0x120 [ 192.528646][ T7103] ? __might_fault+0xc6/0x120 [ 192.533330][ T7103] ? __might_fault+0xaa/0x120 [ 192.538102][ T7103] ? bpf_lsm_bpf+0x9/0x10 [ 192.542443][ T7103] ? security_bpf+0x7e/0xa0 [ 192.546961][ T7103] __sys_bpf+0x5ba/0x890 [ 192.551216][ T7103] ? bpf_link_show_fdinfo+0x390/0x390 [ 192.556608][ T7103] ? lock_chain_count+0x20/0x20 [ 192.561481][ T7103] __x64_sys_bpf+0x7c/0x90 [ 192.566174][ T7103] do_syscall_64+0x55/0xa0 [ 192.570606][ T7103] ? clear_bhb_loop+0x40/0x90 [ 192.575299][ T7103] ? clear_bhb_loop+0x40/0x90 [ 192.580072][ T7103] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 192.585975][ T7103] RIP: 0033:0x7fea0379bf79 [ 192.590401][ T7103] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.610299][ T7103] RSP: 002b:00007fea0460a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 192.618747][ T7103] RAX: ffffffffffffffda RBX: 00007fea03a15fa0 RCX: 00007fea0379bf79 [ 192.626748][ T7103] RDX: 0000000000000094 RSI: 00002000000001c0 RDI: 0000000000000005 [ 192.634728][ T7103] RBP: 00007fea0460a090 R08: 0000000000000000 R09: 0000000000000000 [ 192.642822][ T7103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.650919][ T7103] R13: 00007fea03a16038 R14: 00007fea03a15fa0 R15: 00007ffc9fbe2ff8 [ 192.658929][ T7103] [ 192.678674][ T7103] Mem-Info: [ 192.729417][ T7103] active_anon:5561 inactive_anon:0 isolated_anon:0 [ 192.729417][ T7103] active_file:16222 inactive_file:39973 isolated_file:0 [ 192.729417][ T7103] unevictable:768 dirty:203 writeback:0 [ 192.729417][ T7103] slab_reclaimable:10083 slab_unreclaimable:94753 [ 192.729417][ T7103] mapped:24640 shmem:1361 pagetables:537 [ 192.729417][ T7103] sec_pagetables:0 bounce:0 [ 192.729417][ T7103] kernel_misc_reclaimable:0 [ 192.729417][ T7103] free:1344000 free_pcp:14070 free_cma:0 [ 192.748133][ T7105] netlink: 'syz.0.369': attribute type 10 has an invalid length. [ 192.788587][ T7103] Node 0 active_anon:22244kB inactive_anon:0kB active_file:64888kB inactive_file:159692kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98560kB dirty:812kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11784kB pagetables:2148kB sec_pagetables:0kB all_unreclaimable? no [ 192.844170][ T7103] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 192.892826][ T7103] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 192.921633][ T7103] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 192.939532][ T7103] Node 0 DMA32 free:1476708kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:22300kB inactive_anon:0kB active_file:64888kB inactive_file:158872kB unevictable:1536kB writepending:812kB present:3129332kB managed:2586972kB mlocked:0kB bounce:0kB free_pcp:27968kB local_pcp:11804kB free_cma:0kB [ 192.996859][ T7103] lowmem_reserve[]: 0 0 0 0 0 [ 193.012332][ T7103] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:820kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 193.047775][ T7103] lowmem_reserve[]: 0 0 0 0 0 [ 193.068577][ T7103] Node 1 Normal free:3883924kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:27376kB local_pcp:12592kB free_cma:0kB [ 193.105861][ T7103] lowmem_reserve[]: 0 0 0 0 0 [ 193.117547][ T7103] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 193.137630][ T7103] Node 0 DMA32: 147*4kB (UME) 627*8kB (UME) 642*16kB (UM) 825*32kB (UME) 1545*64kB (UME) 536*128kB (UME) 157*256kB (UM) 48*512kB (UM) 24*1024kB (UME) 13*2048kB (UME) 281*4096kB (UM) = 1476708kB [ 193.163538][ T7103] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 193.175838][ T7103] Node 1 Normal: 285*4kB (UME) 60*8kB (UME) 38*16kB (UME) 49*32kB (UME) 15*64kB (UME) 6*128kB (UE) 2*256kB (UE) 2*512kB (UM) 2*1024kB (UE) 2*2048kB (UE) 945*4096kB (M) = 3883924kB [ 193.201384][ T7103] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 193.214170][ T7103] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 193.224568][ T7105] team0: Port device wlan1 added [ 193.239963][ T7115] netlink: 'syz.1.372': attribute type 10 has an invalid length. [ 193.244603][ T7103] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 193.286772][ T7103] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 193.296558][ T7103] 57556 total pagecache pages [ 193.327140][ T7103] 0 pages in swap cache [ 193.334263][ T7103] Free swap = 124996kB [ 193.363746][ T7103] Total swap = 124996kB [ 193.368001][ T7103] 2097051 pages RAM [ 193.398498][ T7103] 0 pages HighMem/MovableOnly [ 193.403245][ T7103] 416922 pages reserved [ 193.407522][ T7103] 0 pages cma reserved [ 193.885539][ T7127] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.376'. [ 194.673836][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.680362][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.197684][ T7127] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 195.466646][ T7154] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.382'. [ 195.501268][ T7154] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 195.524873][ T7154] CPU: 0 PID: 7154 Comm: syz.1.382 Not tainted syzkaller #0 [ 195.532330][ T7154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 195.542596][ T7154] Call Trace: [ 195.545909][ T7154] [ 195.548967][ T7154] dump_stack_lvl+0x18c/0x250 [ 195.553695][ T7154] ? show_regs_print_info+0x20/0x20 [ 195.558936][ T7154] ? load_image+0x400/0x400 [ 195.563499][ T7154] sysfs_warn_dup+0x8e/0xa0 [ 195.568037][ T7154] sysfs_do_create_link_sd+0xc0/0x110 [ 195.573447][ T7154] device_add_class_symlinks+0x1cf/0x240 [ 195.579133][ T7154] device_add+0x507/0xc20 [ 195.583700][ T7154] wiphy_register+0x1dad/0x2ae0 [ 195.588804][ T7154] ? cfg80211_event_work+0x40/0x40 [ 195.593967][ T7154] ? minstrel_ht_alloc+0x88a/0x990 [ 195.599211][ T7154] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 195.605318][ T7154] ieee80211_register_hw+0x3464/0x4250 [ 195.610844][ T7154] ? ieee80211_tasklet_handler+0x20/0x20 [ 195.616623][ T7154] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 195.622672][ T7154] ? __debug_object_init+0xec/0x450 [ 195.627957][ T7154] ? __asan_memset+0x22/0x40 [ 195.632676][ T7154] ? __hrtimer_init+0x186/0x270 [ 195.637600][ T7154] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 195.643581][ T7154] ? mac80211_hwsim_free+0x220/0x220 [ 195.648907][ T7154] ? rcu_is_watching+0x15/0xb0 [ 195.653709][ T7154] ? kstrndup+0xbd/0x140 [ 195.658002][ T7154] hwsim_new_radio_nl+0xdc9/0x1a90 [ 195.663170][ T7154] ? __nla_validate+0x50/0x50 [ 195.667913][ T7154] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 195.674332][ T7154] ? __nla_parse+0x40/0x50 [ 195.678887][ T7154] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 195.685574][ T7154] genl_family_rcv_msg_doit+0x211/0x310 [ 195.691268][ T7154] ? end_current_label_crit_section+0x170/0x170 [ 195.697811][ T7154] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 195.704133][ T7154] ? bpf_lsm_capable+0x9/0x10 [ 195.708889][ T7154] ? security_capable+0x89/0xb0 [ 195.713806][ T7154] genl_rcv_msg+0x619/0x7a0 [ 195.718621][ T7154] ? genl_bind+0x360/0x360 [ 195.723095][ T7154] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 195.729653][ T7154] ? ref_tracker_free+0x690/0x840 [ 195.734742][ T7154] netlink_rcv_skb+0x241/0x4d0 [ 195.739735][ T7154] ? genl_bind+0x360/0x360 [ 195.744589][ T7154] ? netlink_ack+0x1180/0x1180 [ 195.749579][ T7154] ? __lock_acquire+0x7d40/0x7d40 [ 195.754653][ T7154] ? down_read+0x1ac/0x2e0 [ 195.759121][ T7154] genl_rcv+0x28/0x40 [ 195.763142][ T7154] netlink_unicast+0x751/0x8d0 [ 195.767955][ T7154] netlink_sendmsg+0x8d0/0xbf0 [ 195.772773][ T7154] ? netlink_getsockopt+0x590/0x590 [ 195.778025][ T7154] ? aa_sock_msg_perm+0x94/0x150 [ 195.783200][ T7154] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 195.788527][ T7154] ? security_socket_sendmsg+0x80/0xa0 [ 195.794115][ T7154] ? netlink_getsockopt+0x590/0x590 [ 195.799354][ T7154] ____sys_sendmsg+0x5ba/0x960 [ 195.804157][ T7154] ? __asan_memset+0x22/0x40 [ 195.808793][ T7154] ? __sys_sendmsg_sock+0x30/0x30 [ 195.814099][ T7154] ? __import_iovec+0x5f2/0x850 [ 195.819005][ T7154] ? import_iovec+0x73/0xa0 [ 195.823646][ T7154] ___sys_sendmsg+0x2a6/0x360 [ 195.828377][ T7154] ? __sys_sendmsg+0x2a0/0x2a0 [ 195.833271][ T7154] __se_sys_sendmsg+0x1c2/0x2b0 [ 195.838181][ T7154] ? __x64_sys_sendmsg+0x80/0x80 [ 195.843186][ T7154] ? lockdep_hardirqs_on+0x98/0x150 [ 195.848429][ T7154] do_syscall_64+0x55/0xa0 [ 195.852896][ T7154] ? clear_bhb_loop+0x40/0x90 [ 195.857780][ T7154] ? clear_bhb_loop+0x40/0x90 [ 195.862671][ T7154] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 195.868597][ T7154] RIP: 0033:0x7f3988d9bf79 [ 195.873131][ T7154] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.893299][ T7154] RSP: 002b:00007f3989c30028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 195.901927][ T7154] RAX: ffffffffffffffda RBX: 00007f3989015fa0 RCX: 00007f3988d9bf79 [ 195.910018][ T7154] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 195.918112][ T7154] RBP: 00007f3988e327e0 R08: 0000000000000000 R09: 0000000000000000 [ 195.926292][ T7154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 195.934313][ T7154] R13: 00007f3989016038 R14: 00007f3989015fa0 R15: 00007ffc623f65d8 [ 195.942334][ T7154] [ 196.549203][ T7164] netlink: 164 bytes leftover after parsing attributes in process `syz.0.385'. [ 199.190936][ T7185] netlink: 60 bytes leftover after parsing attributes in process `syz.0.392'. [ 199.262169][ T7185] netlink: 60 bytes leftover after parsing attributes in process `syz.0.392'. [ 199.355634][ T7182] netlink: 60 bytes leftover after parsing attributes in process `syz.0.392'. [ 199.414903][ T7182] netlink: 60 bytes leftover after parsing attributes in process `syz.0.392'. [ 199.544076][ T7192] netlink: 60 bytes leftover after parsing attributes in process `syz.4.394'. [ 199.576635][ T7192] netlink: 60 bytes leftover after parsing attributes in process `syz.4.394'. [ 199.596879][ T7192] netlink: 60 bytes leftover after parsing attributes in process `syz.4.394'. [ 199.619760][ T7192] netlink: 60 bytes leftover after parsing attributes in process `syz.4.394'. [ 199.691156][ T5779] Bluetooth: hci2: unexpected event 0x08 length: 15 > 4 [ 199.767960][ T7199] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.397'. [ 199.842268][ T7202] netlink: 'syz.4.398': attribute type 39 has an invalid length. [ 199.909284][ T7199] netlink: 'syz.0.397': attribute type 12 has an invalid length. [ 200.266243][ T7214] netlink: 'syz.1.403': attribute type 12 has an invalid length. [ 200.542276][ T7219] Ÿë: port 1(veth0_to_team) entered blocking state [ 200.556823][ T7219] Ÿë: port 1(veth0_to_team) entered disabled state [ 200.564687][ T7219] veth0_to_team: entered allmulticast mode [ 200.572585][ T7219] veth0_to_team: entered promiscuous mode [ 200.811896][ T7230] FAULT_INJECTION: forcing a failure. [ 200.811896][ T7230] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 200.813308][ T7221] netlink: 'syz.0.405': attribute type 10 has an invalid length. [ 200.868609][ T7230] CPU: 0 PID: 7230 Comm: syz.1.408 Not tainted syzkaller #0 [ 200.875975][ T7230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 200.886067][ T7230] Call Trace: [ 200.889376][ T7230] [ 200.892346][ T7230] dump_stack_lvl+0x18c/0x250 [ 200.897073][ T7230] ? show_regs_print_info+0x20/0x20 [ 200.902308][ T7230] ? load_image+0x400/0x400 [ 200.906946][ T7230] ? __might_fault+0xaa/0x120 [ 200.911641][ T7221] batman_adv: batadv0: Adding interface: virt_wifi0 [ 200.911901][ T7230] ? __lock_acquire+0x7d40/0x7d40 [ 200.923911][ T7230] should_fail_ex+0x39d/0x4d0 [ 200.928681][ T7230] _copy_from_user+0x2f/0xe0 [ 200.933518][ T7230] csum_and_copy_from_iter+0x476/0x14a0 [ 200.939148][ T7230] ? iov_iter_get_pages_alloc2+0xc0/0xc0 [ 200.944925][ T7230] ? __alloc_pages+0x27a/0x460 [ 200.949823][ T7230] ? zone_statistics+0x170/0x170 [ 200.954807][ T7230] ? rcu_is_watching+0x15/0xb0 [ 200.959672][ T7230] ip_generic_getfrag+0x163/0x2f0 [ 200.964745][ T7230] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 200.966921][ T7221] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.969625][ T7230] ? skb_page_frag_refill+0x199/0x310 [ 200.969664][ T7230] __ip_append_data+0x1f30/0x3d40 [ 200.969723][ T7230] ? raw_send_hdrinc+0x1170/0x1170 [ 200.969759][ T7230] ? ip_setup_cork+0x860/0x860 [ 200.969792][ T7230] ? ip_setup_cork+0x530/0x860 [ 200.969824][ T7230] ip_append_data+0x10d/0x180 [ 200.969855][ T7230] ? raw_send_hdrinc+0x1170/0x1170 [ 200.969879][ T7230] raw_sendmsg+0x15c1/0x1c00 [ 200.969920][ T7230] ? compat_raw_ioctl+0x70/0x70 [ 200.969945][ T7230] ? __lock_acquire+0x1273/0x7d40 [ 200.969985][ T7230] ? tomoyo_socket_sendmsg_permission+0x216/0x2f0 [ 201.052377][ T7230] ? sock_rps_record_flow+0x19/0x3f0 [ 201.057725][ T7230] ? inet_sendmsg+0x7c/0x2f0 [ 201.057898][ T7221] batman_adv: batadv0: Interface activated: virt_wifi0 [ 201.062330][ T7230] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 201.062356][ T7230] ? security_socket_sendmsg+0x80/0xa0 [ 201.062376][ T7230] ? inet_send_prepare+0x260/0x260 [ 201.062409][ T7230] ____sys_sendmsg+0x5ba/0x960 [ 201.062432][ T7230] ? __lock_acquire+0x7d40/0x7d40 [ 201.062458][ T7230] ? __asan_memset+0x22/0x40 [ 201.062482][ T7230] ? __sys_sendmsg_sock+0x30/0x30 [ 201.062499][ T7230] ? __import_iovec+0x3fa/0x850 [ 201.062536][ T7230] ? import_iovec+0x73/0xa0 [ 201.062567][ T7230] ___sys_sendmsg+0x2a6/0x360 [ 201.062585][ T7230] ? get_pid_task+0x20/0x1e0 [ 201.124038][ T7230] ? __sys_sendmsg+0x2a0/0x2a0 [ 201.129041][ T7230] ? __lock_acquire+0x7d40/0x7d40 [ 201.134225][ T7230] __se_sys_sendmsg+0x1c2/0x2b0 [ 201.139127][ T7230] ? __x64_sys_sendmsg+0x80/0x80 [ 201.144131][ T7230] ? lockdep_hardirqs_on+0x98/0x150 [ 201.149379][ T7230] do_syscall_64+0x55/0xa0 [ 201.153843][ T7230] ? clear_bhb_loop+0x40/0x90 [ 201.158559][ T7230] ? clear_bhb_loop+0x40/0x90 [ 201.163284][ T7230] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 201.169226][ T7230] RIP: 0033:0x7f3988d9bf79 [ 201.173691][ T7230] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 201.193617][ T7230] RSP: 002b:00007f3989c30028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 201.202164][ T7230] RAX: ffffffffffffffda RBX: 00007f3989015fa0 RCX: 00007f3988d9bf79 [ 201.210345][ T7230] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 201.218520][ T7230] RBP: 00007f3989c30090 R08: 0000000000000000 R09: 0000000000000000 [ 201.226709][ T7230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 201.234876][ T7230] R13: 00007f3989016038 R14: 00007f3989015fa0 R15: 00007ffc623f65d8 [ 201.243078][ T7230] [ 201.662669][ T7233] __nla_validate_parse: 5 callbacks suppressed [ 201.662691][ T7233] netlink: 4 bytes leftover after parsing attributes in process `syz.3.409'. [ 201.705956][ T7236] netlink: 'syz.0.410': attribute type 39 has an invalid length. [ 201.714079][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 201.870098][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 201.876659][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 203.565582][ T7280] netlink: 'syz.4.424': attribute type 39 has an invalid length. [ 203.950443][ T5787] Bluetooth: hci2: command 0x0406 tx timeout [ 205.870054][ T7295] netlink: 144 bytes leftover after parsing attributes in process `syz.4.429'. [ 205.967194][ T7300] netlink: 'syz.3.430': attribute type 33 has an invalid length. [ 206.049273][ T7300] netlink: 152 bytes leftover after parsing attributes in process `syz.3.430'. [ 208.451077][ T7313] FAULT_INJECTION: forcing a failure. [ 208.451077][ T7313] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 208.489562][ T7313] CPU: 1 PID: 7313 Comm: syz.0.435 Not tainted syzkaller #0 [ 208.497027][ T7313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 208.507592][ T7313] Call Trace: [ 208.510904][ T7313] [ 208.513862][ T7313] dump_stack_lvl+0x18c/0x250 [ 208.518588][ T7313] ? show_regs_print_info+0x20/0x20 [ 208.523916][ T7313] ? load_image+0x400/0x400 [ 208.528456][ T7313] ? __might_fault+0xaa/0x120 [ 208.533171][ T7313] ? __lock_acquire+0x7d40/0x7d40 [ 208.538249][ T7313] should_fail_ex+0x39d/0x4d0 [ 208.543174][ T7313] _copy_from_user+0x2f/0xe0 [ 208.547817][ T7313] csum_and_copy_from_iter+0x476/0x14a0 [ 208.553596][ T7313] ? iov_iter_get_pages_alloc2+0xc0/0xc0 [ 208.559281][ T7313] ? __alloc_pages+0x27a/0x460 [ 208.564163][ T7313] ? zone_statistics+0x170/0x170 [ 208.569210][ T7313] ? rcu_is_watching+0x15/0xb0 [ 208.573994][ T7313] ip_generic_getfrag+0x163/0x2f0 [ 208.579044][ T7313] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 208.583918][ T7313] ? skb_page_frag_refill+0x199/0x310 [ 208.589315][ T7313] __ip_append_data+0x1f30/0x3d40 [ 208.594393][ T7313] ? raw_send_hdrinc+0x1170/0x1170 [ 208.599530][ T7313] ? ip_setup_cork+0x860/0x860 [ 208.604316][ T7313] ? ip_setup_cork+0x530/0x860 [ 208.609107][ T7313] ip_append_data+0x10d/0x180 [ 208.614068][ T7313] ? raw_send_hdrinc+0x1170/0x1170 [ 208.619407][ T7313] raw_sendmsg+0x15c1/0x1c00 [ 208.624056][ T7313] ? compat_raw_ioctl+0x70/0x70 [ 208.629121][ T7313] ? __lock_acquire+0x1273/0x7d40 [ 208.634211][ T7313] ? tomoyo_socket_sendmsg_permission+0x216/0x2f0 [ 208.640756][ T7313] ? sock_rps_record_flow+0x19/0x3f0 [ 208.646085][ T7313] ? inet_sendmsg+0x7c/0x2f0 [ 208.650714][ T7313] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 208.656025][ T7313] ? security_socket_sendmsg+0x80/0xa0 [ 208.661501][ T7313] ? inet_send_prepare+0x260/0x260 [ 208.666649][ T7313] ____sys_sendmsg+0x5ba/0x960 [ 208.671536][ T7313] ? __lock_acquire+0x7d40/0x7d40 [ 208.676595][ T7313] ? __asan_memset+0x22/0x40 [ 208.681310][ T7313] ? __sys_sendmsg_sock+0x30/0x30 [ 208.686361][ T7313] ? __import_iovec+0x3fa/0x850 [ 208.691845][ T7313] ? import_iovec+0x73/0xa0 [ 208.696367][ T7313] ___sys_sendmsg+0x2a6/0x360 [ 208.701055][ T7313] ? get_pid_task+0x20/0x1e0 [ 208.705664][ T7313] ? __sys_sendmsg+0x2a0/0x2a0 [ 208.710716][ T7313] ? __lock_acquire+0x7d40/0x7d40 [ 208.715862][ T7313] __se_sys_sendmsg+0x1c2/0x2b0 [ 208.720736][ T7313] ? __x64_sys_sendmsg+0x80/0x80 [ 208.726044][ T7313] ? lockdep_hardirqs_on+0x98/0x150 [ 208.731256][ T7313] do_syscall_64+0x55/0xa0 [ 208.735775][ T7313] ? clear_bhb_loop+0x40/0x90 [ 208.740462][ T7313] ? clear_bhb_loop+0x40/0x90 [ 208.745155][ T7313] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 208.751171][ T7313] RIP: 0033:0x7f9a1ef9bf79 [ 208.755792][ T7313] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.775595][ T7313] RSP: 002b:00007f9a1fe9d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 208.784121][ T7313] RAX: ffffffffffffffda RBX: 00007f9a1f215fa0 RCX: 00007f9a1ef9bf79 [ 208.792372][ T7313] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 208.800527][ T7313] RBP: 00007f9a1fe9d090 R08: 0000000000000000 R09: 0000000000000000 [ 208.808518][ T7313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 208.816496][ T7313] R13: 00007f9a1f216038 R14: 00007f9a1f215fa0 R15: 00007fffcebc7948 [ 208.824497][ T7313] [ 209.057747][ T7316] netlink: 'syz.3.437': attribute type 39 has an invalid length. [ 210.810708][ T7353] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.446'. [ 210.818971][ T7356] netlink: 'syz.0.447': attribute type 22 has an invalid length. [ 210.828148][ T7356] netlink: 4 bytes leftover after parsing attributes in process `syz.0.447'. [ 210.840231][ T7353] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 211.240037][ T7364] netlink: 'syz.3.448': attribute type 39 has an invalid length. [ 211.703172][ T7372] netlink: 'syz.3.451': attribute type 10 has an invalid length. [ 211.796650][ T7372] team0: Device ipvlan1 failed to register rx_handler [ 211.938635][ T7373] netlink: 830 bytes leftover after parsing attributes in process `syz.0.449'. [ 211.998175][ T7373] veth0_to_bond: entered promiscuous mode [ 212.055098][ T7372] syz.3.451 (7372) used greatest stack depth: 18376 bytes left [ 212.182052][ T7379] netlink: 4 bytes leftover after parsing attributes in process `syz.3.456'. [ 212.758693][ T7394] netlink: 'syz.1.460': attribute type 39 has an invalid length. [ 212.826617][ T7398] raw_sendmsg: syz.3.462 forgot to set AF_INET. Fix it! [ 213.241889][ T7406] netlink: 164 bytes leftover after parsing attributes in process `syz.3.464'. [ 213.254450][ T7408] FAULT_INJECTION: forcing a failure. [ 213.254450][ T7408] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 213.267804][ T7408] CPU: 0 PID: 7408 Comm: syz.0.465 Not tainted syzkaller #0 [ 213.275403][ T7408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 213.285667][ T7408] Call Trace: [ 213.288966][ T7408] [ 213.291938][ T7408] dump_stack_lvl+0x18c/0x250 [ 213.296650][ T7408] ? show_regs_print_info+0x20/0x20 [ 213.301953][ T7408] ? load_image+0x400/0x400 [ 213.306494][ T7408] ? perf_trace_preemptirq_template+0xac/0x330 [ 213.312770][ T7408] should_fail_ex+0x39d/0x4d0 [ 213.317490][ T7408] strncpy_from_user+0x36/0x2d0 [ 213.322358][ T7408] strncpy_from_user_nofault+0x71/0x140 [ 213.327921][ T7408] ? bpf_test_run+0x174/0x870 [ 213.332612][ T7408] bpf_probe_read_user_str+0x2a/0x70 [ 213.337920][ T7408] ? bpf_test_run+0x174/0x870 [ 213.342618][ T7408] bpf_prog_45e11498e05701bd+0x42/0x44 [ 213.348092][ T7408] bpf_test_run+0x4fa/0x870 [ 213.352623][ T7408] ? bpf_test_run+0x174/0x870 [ 213.357507][ T7408] ? convert___skb_to_skb+0x590/0x590 [ 213.362927][ T7408] ? eth_get_headlen+0x210/0x210 [ 213.367940][ T7408] ? slab_build_skb+0x25f/0x3f0 [ 213.372902][ T7408] ? convert___skb_to_skb+0x3d/0x590 [ 213.378226][ T7408] bpf_prog_test_run_skb+0xad2/0x12b0 [ 213.383838][ T7408] ? cpu_online+0x60/0x60 [ 213.388215][ T7408] bpf_prog_test_run+0x321/0x390 [ 213.393178][ T7408] __sys_bpf+0x49d/0x890 [ 213.397623][ T7408] ? bpf_link_show_fdinfo+0x390/0x390 [ 213.403376][ T7408] ? lock_chain_count+0x20/0x20 [ 213.408512][ T7408] __x64_sys_bpf+0x7c/0x90 [ 213.413225][ T7408] do_syscall_64+0x55/0xa0 [ 213.417682][ T7408] ? clear_bhb_loop+0x40/0x90 [ 213.422372][ T7408] ? clear_bhb_loop+0x40/0x90 [ 213.427062][ T7408] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 213.432993][ T7408] RIP: 0033:0x7f9a1ef9bf79 [ 213.437532][ T7408] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 213.457673][ T7408] RSP: 002b:00007f9a1fe9d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 213.466191][ T7408] RAX: ffffffffffffffda RBX: 00007f9a1f215fa0 RCX: 00007f9a1ef9bf79 [ 213.474520][ T7408] RDX: 0000000000000050 RSI: 0000200000000a40 RDI: 000000000000000a [ 213.482522][ T7408] RBP: 00007f9a1fe9d090 R08: 0000000000000000 R09: 0000000000000000 [ 213.490509][ T7408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 213.498492][ T7408] R13: 00007f9a1f216038 R14: 00007f9a1f215fa0 R15: 00007fffcebc7948 [ 213.506523][ T7408] [ 214.660620][ T7432] netlink: 'syz.4.475': attribute type 39 has an invalid length. [ 214.705101][ T7433] lo: entered allmulticast mode [ 214.808752][ T7433] lo: entered promiscuous mode [ 214.831468][ T7433] lo: left allmulticast mode [ 215.139352][ T7441] netlink: 164 bytes leftover after parsing attributes in process `syz.3.477'. [ 215.855297][ T7451] netlink: 'syz.1.482': attribute type 13 has an invalid length. [ 215.867139][ T7451] netlink: 'syz.1.482': attribute type 58 has an invalid length. [ 215.880054][ T7451] netlink: 152 bytes leftover after parsing attributes in process `syz.1.482'. [ 216.113476][ T7454] FAULT_INJECTION: forcing a failure. [ 216.113476][ T7454] name failslab, interval 1, probability 0, space 0, times 0 [ 216.148978][ T7454] CPU: 1 PID: 7454 Comm: syz.3.483 Not tainted syzkaller #0 [ 216.156480][ T7454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 216.166676][ T7454] Call Trace: [ 216.170000][ T7454] [ 216.172970][ T7454] dump_stack_lvl+0x18c/0x250 [ 216.177703][ T7454] ? show_regs_print_info+0x20/0x20 [ 216.183025][ T7454] ? load_image+0x400/0x400 [ 216.187733][ T7454] ? __might_sleep+0xe0/0xe0 [ 216.192380][ T7454] ? __lock_acquire+0x7d40/0x7d40 [ 216.197439][ T7454] should_fail_ex+0x39d/0x4d0 [ 216.202152][ T7454] should_failslab+0x9/0x20 [ 216.206672][ T7454] slab_pre_alloc_hook+0x59/0x310 [ 216.211712][ T7454] ? __lock_acquire+0x7d40/0x7d40 [ 216.216774][ T7454] ? dev_ethtool+0x129/0x18d0 [ 216.221587][ T7454] __kmem_cache_alloc_node+0x53/0x250 [ 216.227001][ T7454] ? __might_fault+0xaa/0x120 [ 216.231796][ T7454] ? dev_ethtool+0x129/0x18d0 [ 216.236490][ T7454] kmalloc_trace+0x2a/0xe0 [ 216.241114][ T7454] dev_ethtool+0x129/0x18d0 [ 216.245727][ T7454] ? ethtool_get_module_eeprom_call+0x170/0x170 [ 216.251979][ T7454] ? __lock_acquire+0x7d40/0x7d40 [ 216.257026][ T7454] ? __might_fault+0xaa/0x120 [ 216.261715][ T7454] ? full_name_hash+0x92/0xe0 [ 216.266435][ T7454] ? dev_load+0x21/0x1f0 [ 216.270697][ T7454] dev_ioctl+0x392/0x1140 [ 216.275160][ T7454] sock_do_ioctl+0x239/0x310 [ 216.279857][ T7454] ? sock_show_fdinfo+0xb0/0xb0 [ 216.284746][ T7454] sock_ioctl+0x5ba/0x7e0 [ 216.289091][ T7454] ? sock_poll+0x3e0/0x3e0 [ 216.293614][ T7454] ? bpf_lsm_file_ioctl+0x9/0x10 [ 216.298648][ T7454] ? security_file_ioctl+0x80/0xa0 [ 216.303775][ T7454] ? sock_poll+0x3e0/0x3e0 [ 216.308203][ T7454] __se_sys_ioctl+0xfd/0x170 [ 216.312825][ T7454] do_syscall_64+0x55/0xa0 [ 216.317261][ T7454] ? clear_bhb_loop+0x40/0x90 [ 216.321946][ T7454] ? clear_bhb_loop+0x40/0x90 [ 216.326635][ T7454] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 216.332536][ T7454] RIP: 0033:0x7fea0379bf79 [ 216.336959][ T7454] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.356760][ T7454] RSP: 002b:00007fea045e9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 216.365451][ T7454] RAX: ffffffffffffffda RBX: 00007fea03a16090 RCX: 00007fea0379bf79 [ 216.373617][ T7454] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000007 [ 216.381628][ T7454] RBP: 00007fea045e9090 R08: 0000000000000000 R09: 0000000000000000 [ 216.389629][ T7454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.397607][ T7454] R13: 00007fea03a16128 R14: 00007fea03a16090 R15: 00007ffc9fbe2ff8 [ 216.405867][ T7454] [ 216.597670][ T7456] netlink: 'syz.1.484': attribute type 39 has an invalid length. [ 218.236606][ T7484] netlink: 164 bytes leftover after parsing attributes in process `syz.0.492'. [ 218.555206][ T7494] netlink: 'syz.3.495': attribute type 3 has an invalid length. [ 218.589852][ T7494] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.495'. [ 218.790336][ T7499] netlink: 'syz.4.498': attribute type 39 has an invalid length. [ 220.213801][ T7520] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 220.228812][ T7520] syzkaller0: linktype set to 804 [ 220.238348][ T7520] syzkaller0: tun_chr_ioctl cmd 1074812117 [ 221.121213][ T7531] netlink: 164 bytes leftover after parsing attributes in process `syz.4.508'. [ 221.220233][ T7533] netlink: 'syz.3.510': attribute type 39 has an invalid length. [ 221.724026][ T7543] syzkaller0: entered promiscuous mode [ 221.738967][ T7543] syzkaller0: entered allmulticast mode [ 222.254593][ T7551] netlink: 164 bytes leftover after parsing attributes in process `syz.4.513'. [ 222.307214][ T7553] netlink: 'syz.0.515': attribute type 13 has an invalid length. [ 222.315483][ T7553] netlink: 'syz.0.515': attribute type 58 has an invalid length. [ 222.323923][ T7553] netlink: 152 bytes leftover after parsing attributes in process `syz.0.515'. [ 222.546926][ T7559] netlink: 'syz.0.517': attribute type 9 has an invalid length. [ 222.566000][ T7560] netlink: 'syz.3.518': attribute type 10 has an invalid length. [ 222.577432][ T7559] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.517'. [ 222.600519][ T7560] team0: Port device dummy0 added [ 222.618045][ T7560] netlink: 'syz.3.518': attribute type 10 has an invalid length. [ 222.661782][ T7560] team0: Port device dummy0 removed [ 222.810466][ T7559] netlink: 'syz.0.517': attribute type 9 has an invalid length. [ 222.821441][ T7559] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.517'. [ 222.939264][ T7570] netlink: 'syz.1.522': attribute type 39 has an invalid length. [ 223.059965][ T7564] netlink: 'syz.0.517': attribute type 9 has an invalid length. [ 223.067812][ T7564] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.517'. [ 223.491907][ T7580] netlink: 'syz.4.525': attribute type 13 has an invalid length. [ 223.508858][ T7580] netlink: 'syz.4.525': attribute type 58 has an invalid length. [ 223.524287][ T7580] netlink: 152 bytes leftover after parsing attributes in process `syz.4.525'. [ 223.731504][ T7587] netlink: 156 bytes leftover after parsing attributes in process `syz.4.528'. [ 224.577527][ T7600] netlink: 164 bytes leftover after parsing attributes in process `syz.1.531'. [ 228.145063][ T7628] validate_nla: 2 callbacks suppressed [ 228.145079][ T7628] netlink: 'syz.3.544': attribute type 39 has an invalid length. [ 228.301942][ T7638] FAULT_INJECTION: forcing a failure. [ 228.301942][ T7638] name failslab, interval 1, probability 0, space 0, times 0 [ 228.333911][ T7640] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.546'. [ 228.339984][ T7638] CPU: 1 PID: 7638 Comm: syz.1.545 Not tainted syzkaller #0 [ 228.350947][ T7638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 228.361046][ T7638] Call Trace: [ 228.364225][ T7640] openvswitch: netlink: IP tunnel attribute has 3064 unknown bytes. [ 228.364349][ T7638] [ 228.375355][ T7638] dump_stack_lvl+0x18c/0x250 [ 228.380283][ T7638] ? show_regs_print_info+0x20/0x20 [ 228.385640][ T7638] ? load_image+0x400/0x400 [ 228.390217][ T7638] ? __might_sleep+0xe0/0xe0 [ 228.394867][ T7638] ? __lock_acquire+0x7d40/0x7d40 [ 228.400035][ T7638] should_fail_ex+0x39d/0x4d0 [ 228.404781][ T7638] should_failslab+0x9/0x20 [ 228.409336][ T7638] slab_pre_alloc_hook+0x59/0x310 [ 228.414434][ T7638] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 228.420830][ T7638] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 228.427267][ T7638] __kmem_cache_alloc_node+0x53/0x250 [ 228.432882][ T7638] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 228.439380][ T7638] __kmalloc+0xa4/0x230 [ 228.443700][ T7638] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 228.449934][ T7638] genl_family_rcv_msg_doit+0xce/0x310 [ 228.455566][ T7638] ? end_current_label_crit_section+0x170/0x170 [ 228.461881][ T7638] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 228.467848][ T7638] ? apparmor_capable+0x137/0x1a0 [ 228.472933][ T7638] ? bpf_lsm_capable+0x9/0x10 [ 228.477665][ T7638] ? security_capable+0x89/0xb0 [ 228.482588][ T7638] genl_rcv_msg+0x619/0x7a0 [ 228.487704][ T7638] ? genl_bind+0x360/0x360 [ 228.492284][ T7638] ? __ip_vs_get_timeouts+0x220/0x220 [ 228.498056][ T7638] ? mark_lock+0x94/0x320 [ 228.502543][ T7638] netlink_rcv_skb+0x241/0x4d0 [ 228.507455][ T7638] ? genl_bind+0x360/0x360 [ 228.512041][ T7638] ? netlink_ack+0x1180/0x1180 [ 228.518649][ T7638] ? down_read+0x190/0x2e0 [ 228.523179][ T7638] ? down_read+0x1a2/0x2e0 [ 228.527650][ T7638] ? down_read+0x1ac/0x2e0 [ 228.532137][ T7638] genl_rcv+0x28/0x40 [ 228.536280][ T7638] netlink_unicast+0x751/0x8d0 [ 228.541122][ T7638] netlink_sendmsg+0x8d0/0xbf0 [ 228.545990][ T7638] ? netlink_getsockopt+0x590/0x590 [ 228.551345][ T7638] ? ____sys_sendmsg+0x538/0x960 [ 228.556351][ T7638] ? netlink_getsockopt+0x590/0x590 [ 228.561636][ T7638] ____sys_sendmsg+0x5ba/0x960 [ 228.566458][ T7638] ? lockdep_hardirqs_on+0x98/0x150 [ 228.571793][ T7638] ? __sys_sendmsg_sock+0x30/0x30 [ 228.576961][ T7638] ? ___sys_sendmsg+0x28b/0x360 [ 228.582043][ T7638] ___sys_sendmsg+0x2a6/0x360 [ 228.587137][ T7638] ? __sys_sendmsg+0x2a0/0x2a0 [ 228.592138][ T7638] ? perf_trace_preemptirq_template+0x269/0x330 [ 228.599101][ T7638] __se_sys_sendmsg+0x1c2/0x2b0 [ 228.604015][ T7638] ? __x64_sys_sendmsg+0x80/0x80 [ 228.609209][ T7638] ? syscall_enter_from_user_mode+0x2e/0x80 [ 228.615246][ T7638] do_syscall_64+0x55/0xa0 [ 228.619736][ T7638] ? clear_bhb_loop+0x40/0x90 [ 228.624556][ T7638] ? clear_bhb_loop+0x40/0x90 [ 228.629388][ T7638] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 228.635587][ T7638] RIP: 0033:0x7f3988d9bf79 [ 228.640489][ T7638] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 228.660493][ T7638] RSP: 002b:00007f3989c30028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 228.669048][ T7638] RAX: ffffffffffffffda RBX: 00007f3989015fa0 RCX: 00007f3988d9bf79 [ 228.677355][ T7638] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 228.685771][ T7638] RBP: 00007f3989c30090 R08: 0000000000000000 R09: 0000000000000000 [ 228.694152][ T7638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 228.702308][ T7638] R13: 00007f3989016038 R14: 00007f3989015fa0 R15: 00007ffc623f65d8 [ 228.710528][ T7638] [ 229.656554][ T7666] netlink: 'syz.3.554': attribute type 21 has an invalid length. [ 229.702934][ T7666] netlink: 16166 bytes leftover after parsing attributes in process `syz.3.554'. [ 229.750666][ T7668] netlink: 'syz.1.555': attribute type 39 has an invalid length. [ 230.872183][ T7678] netlink: 4 bytes leftover after parsing attributes in process `syz.3.557'. [ 230.938267][ T7678] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.557'. [ 231.185200][ T7681] netlink: 'syz.0.560': attribute type 11 has an invalid length. [ 231.206955][ T7681] netlink: 184116 bytes leftover after parsing attributes in process `syz.0.560'. [ 231.585735][ T7688] netlink: 'syz.1.561': attribute type 12 has an invalid length. [ 231.598704][ T7688] netlink: 132 bytes leftover after parsing attributes in process `syz.1.561'. [ 231.668558][ T7690] sit0: entered allmulticast mode [ 231.855838][ T7690] sit0: entered promiscuous mode [ 232.387251][ T7706] netlink: 'syz.0.569': attribute type 39 has an invalid length. [ 232.810292][ T7714] netlink: 65023 bytes leftover after parsing attributes in process `syz.1.571'. [ 233.622015][ T7713] sit0: left promiscuous mode [ 234.395573][ T7740] netlink: 'syz.3.581': attribute type 10 has an invalid length. [ 234.455275][ T7740] FAULT_INJECTION: forcing a failure. [ 234.455275][ T7740] name failslab, interval 1, probability 0, space 0, times 0 [ 234.468492][ T7740] CPU: 1 PID: 7740 Comm: syz.3.581 Not tainted syzkaller #0 [ 234.475844][ T7740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 234.485937][ T7740] Call Trace: [ 234.489256][ T7740] [ 234.492224][ T7740] dump_stack_lvl+0x18c/0x250 [ 234.497185][ T7740] ? show_regs_print_info+0x20/0x20 [ 234.502450][ T7740] ? load_image+0x400/0x400 [ 234.507183][ T7740] ? verify_lock_unused+0x140/0x140 [ 234.512436][ T7740] should_fail_ex+0x39d/0x4d0 [ 234.517254][ T7740] should_failslab+0x9/0x20 [ 234.521895][ T7740] slab_pre_alloc_hook+0x59/0x310 [ 234.528462][ T7740] ? nsim_fib_event_nb+0x187/0x1080 [ 234.535245][ T7740] __kmem_cache_alloc_node+0x53/0x250 [ 234.540937][ T7740] ? nsim_fib_event_nb+0x187/0x1080 [ 234.546184][ T7740] kmalloc_trace+0x2a/0xe0 [ 234.550663][ T7740] nsim_fib_event_nb+0x187/0x1080 [ 234.555752][ T7740] ? read_lock_is_recursive+0x20/0x20 [ 234.561266][ T7740] notifier_call_chain+0x197/0x380 [ 234.566431][ T7740] ? atomic_notifier_call_chain+0x26/0x180 [ 234.572394][ T7740] atomic_notifier_call_chain+0xda/0x180 [ 234.578092][ T7740] call_fib_notifiers+0x31/0x60 [ 234.582992][ T7740] fib6_del+0xfa4/0x1580 [ 234.587457][ T7740] ? fib6_del+0x661/0x1580 [ 234.591932][ T7740] ? fib6_locate_1+0x6c0/0x6c0 [ 234.597011][ T7740] ? verify_lock_unused+0x140/0x140 [ 234.602396][ T7740] fib6_clean_node+0x297/0x540 [ 234.607376][ T7740] ? node_free_rcu+0x30/0x30 [ 234.612498][ T7740] ? __local_bh_enable_ip+0x13a/0x1c0 [ 234.618406][ T7740] fib6_walk_continue+0x672/0x900 [ 234.623503][ T7740] fib6_walk+0x149/0x290 [ 234.627970][ T7740] __fib6_clean_all+0x283/0x3e0 [ 234.632893][ T7740] ? __fib6_clean_all+0xb2/0x3e0 [ 234.637881][ T7740] ? rt6_sync_down_dev+0x160/0x160 [ 234.643309][ T7740] ? fib6_clean_all+0x30/0x30 [ 234.648218][ T7740] ? node_free_rcu+0x30/0x30 [ 234.652987][ T7740] ? rt6_sync_down_dev+0x160/0x160 [ 234.658786][ T7740] rt6_disable_ip+0x12d/0x7b0 [ 234.663548][ T7740] ? fib6_ifdown+0x4b0/0x4b0 [ 234.668365][ T7740] ? __lock_acquire+0x7d40/0x7d40 [ 234.673431][ T7740] ? rcu_is_watching+0x15/0xb0 [ 234.678326][ T7740] addrconf_ifdown+0x16c/0x18c0 [ 234.683227][ T7740] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 234.689010][ T7740] ? tls_dev_event+0x74d/0xf40 [ 234.693984][ T7740] ? addrconf_cleanup+0x1e0/0x1e0 [ 234.699338][ T7740] addrconf_notify+0x6c6/0x1010 [ 234.704326][ T7740] notifier_call_chain+0x197/0x380 [ 234.709491][ T7740] __dev_notify_flags+0x16e/0x310 [ 234.714650][ T7740] ? __dev_change_flags+0x6a0/0x6a0 [ 234.719892][ T7740] ? __dev_change_flags+0x4d4/0x6a0 [ 234.725163][ T7740] ? vprintk_emit+0x53d/0x610 [ 234.729879][ T7740] ? dev_get_flags+0x1c0/0x1c0 [ 234.734708][ T7740] ? printk_sprint+0x460/0x460 [ 234.739721][ T7740] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 234.745668][ T7740] ? _raw_spin_unlock+0x40/0x40 [ 234.750642][ T7740] dev_change_flags+0xe8/0x1a0 [ 234.755454][ T7740] do_setlink+0xc58/0x4130 [ 234.759905][ T7740] ? arch_stack_walk+0x160/0x190 [ 234.764883][ T7740] ? load_image+0x400/0x400 [ 234.769427][ T7740] ? nlmsg_parse_deprecated_strict+0x110/0x110 [ 234.775612][ T7740] ? stack_trace_save+0xaa/0x100 [ 234.780689][ T7740] ? __nla_validate_parse+0x2522/0x2ea0 [ 234.786307][ T7740] ? __nla_validate+0x50/0x50 [ 234.791181][ T7740] ? validate_linkmsg+0x719/0x910 [ 234.796284][ T7740] rtnl_newlink+0x17da/0x20a0 [ 234.801120][ T7740] ? rtnl_newlink+0x501/0x20a0 [ 234.806027][ T7740] ? rtnl_setlink+0x4e0/0x4e0 [ 234.810840][ T7740] ? trace_raw_output_contention_end+0xd0/0xd0 [ 234.817051][ T7740] ? rcu_is_watching+0x15/0xb0 [ 234.821865][ T7740] ? trace_contention_end+0x39/0xe0 [ 234.827105][ T7740] ? __mutex_lock+0x315/0xcc0 [ 234.831866][ T7740] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 234.837046][ T7740] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 234.842201][ T7740] ? rtnl_setlink+0x4e0/0x4e0 [ 234.846924][ T7740] rtnetlink_rcv_msg+0x869/0xfa0 [ 234.851910][ T7740] ? rtnetlink_bind+0x80/0x80 [ 234.856626][ T7740] ? perf_trace_preemptirq_template+0x269/0x330 [ 234.862935][ T7740] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 234.868990][ T7740] ? lock_chain_count+0x20/0x20 [ 234.873902][ T7740] ? __local_bh_enable_ip+0x13a/0x1c0 [ 234.879320][ T7740] ? lockdep_hardirqs_on+0x98/0x150 [ 234.884751][ T7740] ? __local_bh_enable_ip+0x13a/0x1c0 [ 234.890178][ T7740] ? _local_bh_enable+0xa0/0xa0 [ 234.895182][ T7740] ? __dev_queue_xmit+0x26b/0x36b0 [ 234.900380][ T7740] ? __dev_queue_xmit+0x26b/0x36b0 [ 234.905554][ T7740] ? __dev_queue_xmit+0x124f/0x36b0 [ 234.910800][ T7740] ? __dev_queue_xmit+0x26b/0x36b0 [ 234.916094][ T7740] ? ref_tracker_free+0x690/0x840 [ 234.921181][ T7740] netlink_rcv_skb+0x241/0x4d0 [ 234.925999][ T7740] ? rtnetlink_bind+0x80/0x80 [ 234.930932][ T7740] ? netlink_ack+0x1180/0x1180 [ 234.935741][ T7740] ? __lock_acquire+0x7d40/0x7d40 [ 234.940889][ T7740] ? netlink_deliver_tap+0x2e/0x1b0 [ 234.946139][ T7740] netlink_unicast+0x751/0x8d0 [ 234.951226][ T7740] netlink_sendmsg+0x8d0/0xbf0 [ 234.956056][ T7740] ? netlink_getsockopt+0x590/0x590 [ 234.961497][ T7740] ? aa_sock_msg_perm+0x94/0x150 [ 234.966485][ T7740] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 234.971894][ T7740] ? security_socket_sendmsg+0x80/0xa0 [ 234.977410][ T7740] ? netlink_getsockopt+0x590/0x590 [ 234.982745][ T7740] ____sys_sendmsg+0x5ba/0x960 [ 234.987564][ T7740] ? __asan_memset+0x22/0x40 [ 234.992298][ T7740] ? __sys_sendmsg_sock+0x30/0x30 [ 234.997459][ T7740] ? __import_iovec+0x3fa/0x850 [ 235.002562][ T7740] ? import_iovec+0x73/0xa0 [ 235.007121][ T7740] ___sys_sendmsg+0x2a6/0x360 [ 235.012209][ T7740] ? __sys_sendmsg+0x2a0/0x2a0 [ 235.017170][ T7740] ? trace_call_bpf+0xc3/0x6c0 [ 235.022123][ T7740] __se_sys_sendmsg+0x1c2/0x2b0 [ 235.027031][ T7740] ? __x64_sys_sendmsg+0x80/0x80 [ 235.032072][ T7740] ? lockdep_hardirqs_on+0x98/0x150 [ 235.037337][ T7740] do_syscall_64+0x55/0xa0 [ 235.041803][ T7740] ? clear_bhb_loop+0x40/0x90 [ 235.046520][ T7740] ? clear_bhb_loop+0x40/0x90 [ 235.051250][ T7740] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 235.057330][ T7740] RIP: 0033:0x7fea0379bf79 [ 235.061882][ T7740] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 235.081881][ T7740] RSP: 002b:00007fea0460a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 235.090342][ T7740] RAX: ffffffffffffffda RBX: 00007fea03a15fa0 RCX: 00007fea0379bf79 [ 235.098447][ T7740] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 235.106468][ T7740] RBP: 00007fea0460a090 R08: 0000000000000000 R09: 0000000000000000 [ 235.114673][ T7740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 235.122775][ T7740] R13: 00007fea03a16038 R14: 00007fea03a15fa0 R15: 00007ffc9fbe2ff8 [ 235.130900][ T7740] [ 235.232127][ T7745] netlink: 'syz.0.580': attribute type 12 has an invalid length. [ 235.307075][ T7745] netlink: 132 bytes leftover after parsing attributes in process `syz.0.580'. [ 236.667823][ T7769] netlink: 164 bytes leftover after parsing attributes in process `syz.1.592'. [ 237.250730][ T7783] netlink: 164 bytes leftover after parsing attributes in process `syz.0.595'. [ 237.328834][ T7785] netlink: 'syz.1.597': attribute type 10 has an invalid length. [ 237.668211][ T7792] netlink: 'syz.0.598': attribute type 3 has an invalid length. [ 237.712517][ T7792] netlink: 'syz.0.598': attribute type 1 has an invalid length. [ 237.720537][ T7792] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.598'. [ 237.788977][ T5781] Bluetooth: hci1: command 0x0406 tx timeout [ 238.220303][ T7803] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.604'. [ 239.040143][ T7819] FAULT_INJECTION: forcing a failure. [ 239.040143][ T7819] name failslab, interval 1, probability 0, space 0, times 0 [ 239.089030][ T7819] CPU: 0 PID: 7819 Comm: syz.0.610 Not tainted syzkaller #0 [ 239.096483][ T7819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 239.106562][ T7819] Call Trace: [ 239.109943][ T7819] [ 239.112893][ T7819] dump_stack_lvl+0x18c/0x250 [ 239.117688][ T7819] ? show_regs_print_info+0x20/0x20 [ 239.122992][ T7819] ? load_image+0x400/0x400 [ 239.127530][ T7819] ? mark_lock+0x94/0x320 [ 239.131879][ T7819] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 239.137972][ T7819] should_fail_ex+0x39d/0x4d0 [ 239.142775][ T7819] should_failslab+0x9/0x20 [ 239.147392][ T7819] slab_pre_alloc_hook+0x59/0x310 [ 239.152458][ T7819] kmem_cache_alloc+0x5a/0x2d0 [ 239.157261][ T7819] ? batadv_tt_local_event+0x53/0x6f0 [ 239.162660][ T7819] batadv_tt_local_event+0x53/0x6f0 [ 239.168078][ T7819] batadv_tt_local_add+0x3cb/0x1ac0 [ 239.173300][ T7819] ? batadv_tt_local_event+0x4a6/0x6f0 [ 239.178779][ T7819] ? batadv_tt_global_entry_put+0x140/0x140 [ 239.185065][ T7819] ? batadv_tt_local_entry_put+0xc6/0x130 [ 239.191086][ T7819] ? batadv_tt_local_remove+0x1a2/0x230 [ 239.196756][ T7819] batadv_interface_set_mac_addr+0x2f6/0x4d0 [ 239.202844][ T7819] ? batadv_interface_set_mac_addr+0x19b/0x4d0 [ 239.209103][ T7819] ? batadv_interface_set_rx_mode+0x10/0x10 [ 239.215097][ T7819] ? notifier_call_chain+0x36b/0x380 [ 239.220404][ T7819] dev_set_mac_address+0x312/0x4d0 [ 239.225626][ T7819] ? dev_pre_changeaddr_notify+0x120/0x120 [ 239.231539][ T7819] ? down_write+0x16e/0x200 [ 239.236156][ T7819] ? rcu_is_watching+0x15/0xb0 [ 239.241099][ T7819] dev_set_mac_address_user+0x31/0x50 [ 239.246490][ T7819] do_setlink+0x7ac/0x4130 [ 239.250930][ T7819] ? arch_stack_walk+0x160/0x190 [ 239.255898][ T7819] ? nlmsg_parse_deprecated_strict+0x110/0x110 [ 239.262080][ T7819] ? stack_trace_save+0xaa/0x100 [ 239.267213][ T7819] ? __nla_validate_parse+0x2522/0x2ea0 [ 239.272884][ T7819] ? __nla_validate+0x50/0x50 [ 239.278125][ T7819] ? validate_linkmsg+0x719/0x910 [ 239.283356][ T7819] rtnl_newlink+0x17da/0x20a0 [ 239.288065][ T7819] ? rtnl_newlink+0x501/0x20a0 [ 239.292854][ T7819] ? rtnl_setlink+0x4e0/0x4e0 [ 239.297636][ T7819] ? trace_raw_output_contention_end+0xd0/0xd0 [ 239.303812][ T7819] ? rcu_is_watching+0x15/0xb0 [ 239.308590][ T7819] ? trace_contention_end+0x39/0xe0 [ 239.313805][ T7819] ? __mutex_lock+0x315/0xcc0 [ 239.318614][ T7819] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 239.323834][ T7819] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 239.329089][ T7819] ? rtnl_setlink+0x4e0/0x4e0 [ 239.333955][ T7819] rtnetlink_rcv_msg+0x869/0xfa0 [ 239.338921][ T7819] ? rtnetlink_bind+0x80/0x80 [ 239.343721][ T7819] ? perf_trace_preemptirq_template+0x269/0x330 [ 239.349995][ T7819] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 239.356948][ T7819] ? lock_chain_count+0x20/0x20 [ 239.361839][ T7819] ? __local_bh_enable_ip+0x13a/0x1c0 [ 239.367283][ T7819] ? lockdep_hardirqs_on+0x98/0x150 [ 239.372495][ T7819] ? __local_bh_enable_ip+0x13a/0x1c0 [ 239.377877][ T7819] ? _local_bh_enable+0xa0/0xa0 [ 239.382744][ T7819] ? __dev_queue_xmit+0x26b/0x36b0 [ 239.387871][ T7819] ? __dev_queue_xmit+0x26b/0x36b0 [ 239.393176][ T7819] ? __dev_queue_xmit+0x124f/0x36b0 [ 239.398477][ T7819] ? __dev_queue_xmit+0x26b/0x36b0 [ 239.403821][ T7819] ? ref_tracker_free+0x690/0x840 [ 239.408867][ T7819] netlink_rcv_skb+0x241/0x4d0 [ 239.413647][ T7819] ? rtnetlink_bind+0x80/0x80 [ 239.418347][ T7819] ? netlink_ack+0x1180/0x1180 [ 239.423149][ T7819] ? __lock_acquire+0x7d40/0x7d40 [ 239.428279][ T7819] ? netlink_deliver_tap+0x2e/0x1b0 [ 239.433498][ T7819] netlink_unicast+0x751/0x8d0 [ 239.438557][ T7819] netlink_sendmsg+0x8d0/0xbf0 [ 239.443348][ T7819] ? netlink_getsockopt+0x590/0x590 [ 239.448746][ T7819] ? aa_sock_msg_perm+0x94/0x150 [ 239.453708][ T7819] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 239.459008][ T7819] ? security_socket_sendmsg+0x80/0xa0 [ 239.464563][ T7819] ? netlink_getsockopt+0x590/0x590 [ 239.469782][ T7819] ____sys_sendmsg+0x5ba/0x960 [ 239.474647][ T7819] ? __asan_memset+0x22/0x40 [ 239.479429][ T7819] ? __sys_sendmsg_sock+0x30/0x30 [ 239.484461][ T7819] ? __import_iovec+0x5f2/0x850 [ 239.489340][ T7819] ? import_iovec+0x73/0xa0 [ 239.493954][ T7819] ___sys_sendmsg+0x2a6/0x360 [ 239.498745][ T7819] ? __sys_sendmsg+0x2a0/0x2a0 [ 239.503540][ T7819] ? trace_call_bpf+0xc3/0x6c0 [ 239.508456][ T7819] __se_sys_sendmsg+0x1c2/0x2b0 [ 239.513450][ T7819] ? __x64_sys_sendmsg+0x80/0x80 [ 239.518458][ T7819] ? lockdep_hardirqs_on+0x98/0x150 [ 239.523733][ T7819] do_syscall_64+0x55/0xa0 [ 239.528181][ T7819] ? clear_bhb_loop+0x40/0x90 [ 239.533185][ T7819] ? clear_bhb_loop+0x40/0x90 [ 239.537895][ T7819] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 239.543813][ T7819] RIP: 0033:0x7f9a1ef9bf79 [ 239.548331][ T7819] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.568338][ T7819] RSP: 002b:00007f9a1fe9d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 239.576871][ T7819] RAX: ffffffffffffffda RBX: 00007f9a1f215fa0 RCX: 00007f9a1ef9bf79 [ 239.584968][ T7819] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 000000000000000a [ 239.593068][ T7819] RBP: 00007f9a1fe9d090 R08: 0000000000000000 R09: 0000000000000000 [ 239.601317][ T7819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 239.609395][ T7819] R13: 00007f9a1f216038 R14: 00007f9a1f215fa0 R15: 00007fffcebc7948 [ 239.617504][ T7819] [ 239.691717][ T7822] netlink: 168 bytes leftover after parsing attributes in process `syz.1.611'. [ 239.778914][ T7827] netlink: 'syz.4.607': attribute type 12 has an invalid length. [ 239.827559][ T7827] netlink: 132 bytes leftover after parsing attributes in process `syz.4.607'. [ 241.321805][ T7839] netlink: 168 bytes leftover after parsing attributes in process `syz.0.614'. [ 242.444433][ T7863] netlink: 65023 bytes leftover after parsing attributes in process `syz.0.619'. [ 243.596801][ T7890] netlink: 'syz.0.628': attribute type 10 has an invalid length. [ 243.670074][ T7890] team0: Cannot enslave team device to itself [ 244.561078][ T7914] netlink: 'syz.0.634': attribute type 4 has an invalid length. [ 244.592830][ T7914] netlink: 195800 bytes leftover after parsing attributes in process `syz.0.634'. [ 244.758292][ T7921] netlink: 49920 bytes leftover after parsing attributes in process `syz.3.636'. [ 245.216797][ T7931] netlink: 'syz.4.637': attribute type 10 has an invalid length. [ 245.980005][ T7942] netlink: 164 bytes leftover after parsing attributes in process `syz.1.639'. [ 246.029079][ T7945] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.640'. [ 247.344466][ T7964] FAULT_INJECTION: forcing a failure. [ 247.344466][ T7964] name failslab, interval 1, probability 0, space 0, times 0 [ 247.479247][ T7964] CPU: 0 PID: 7964 Comm: syz.0.646 Not tainted syzkaller #0 [ 247.486715][ T7964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 247.496920][ T7964] Call Trace: [ 247.500240][ T7964] [ 247.503300][ T7964] dump_stack_lvl+0x18c/0x250 [ 247.508031][ T7964] ? show_regs_print_info+0x20/0x20 [ 247.513387][ T7964] ? load_image+0x400/0x400 [ 247.517953][ T7964] should_fail_ex+0x39d/0x4d0 [ 247.522683][ T7964] should_failslab+0x9/0x20 [ 247.527238][ T7964] slab_pre_alloc_hook+0x59/0x310 [ 247.532311][ T7964] kmem_cache_alloc_node+0x60/0x320 [ 247.537550][ T7964] ? __alloc_skb+0x103/0x2c0 [ 247.542204][ T7964] __alloc_skb+0x103/0x2c0 [ 247.546706][ T7964] tipc_buf_acquire+0x2b/0xe0 [ 247.551430][ T7964] tipc_msg_build+0x8c3/0xee0 [ 247.556164][ T7964] ? skb_copy_to_linear_data_offset+0x60/0x60 [ 247.562284][ T7964] ? tipc_nametbl_lookup_mcast_nodes+0x2e/0x9e0 [ 247.568574][ T7964] __tipc_sendmsg+0x1c70/0x2bb0 [ 247.573490][ T7964] ? rht_unlock+0x1d0/0x1d0 [ 247.578050][ T7964] ? register_lock_class+0xc4/0x8a0 [ 247.583289][ T7964] ? wait_woken+0x180/0x180 [ 247.587920][ T7964] ? is_dynamic_key+0x260/0x260 [ 247.592903][ T7964] ? mark_lock+0x94/0x320 [ 247.597282][ T7964] ? mark_lock+0x94/0x320 [ 247.601659][ T7964] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 247.607685][ T7964] ? lock_chain_count+0x20/0x20 [ 247.612760][ T7964] ? lockdep_hardirqs_on+0x98/0x150 [ 247.618188][ T7964] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 247.624591][ T7964] __tipc_sendstream+0x1039/0x1270 [ 247.629839][ T7964] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 247.636226][ T7964] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 247.642326][ T7964] ? lock_chain_count+0x20/0x20 [ 247.647252][ T7964] ? tsk_advance_rx_queue+0x310/0x310 [ 247.652764][ T7964] ? __local_bh_enable_ip+0x13a/0x1c0 [ 247.658368][ T7964] ? _local_bh_enable+0xa0/0xa0 [ 247.663356][ T7964] tipc_sendstream+0x55/0x70 [ 247.668367][ T7964] ? tipc_getsockopt+0x5a0/0x5a0 [ 247.673983][ T7964] ____sys_sendmsg+0x5ba/0x960 [ 247.678814][ T7964] ? lockdep_hardirqs_on+0x98/0x150 [ 247.684070][ T7964] ? __sys_sendmsg_sock+0x30/0x30 [ 247.689412][ T7964] ? ___sys_sendmsg+0x28b/0x360 [ 247.694476][ T7964] ___sys_sendmsg+0x2a6/0x360 [ 247.699202][ T7964] ? __sys_sendmsg+0x2a0/0x2a0 [ 247.704148][ T7964] ? seqcount_lockdep_reader_access+0x17b/0x1d0 [ 247.710466][ T7964] __se_sys_sendmsg+0x1c2/0x2b0 [ 247.715354][ T7964] ? __x64_sys_sendmsg+0x80/0x80 [ 247.720356][ T7964] ? syscall_enter_from_user_mode+0x2e/0x80 [ 247.726326][ T7964] do_syscall_64+0x55/0xa0 [ 247.730806][ T7964] ? clear_bhb_loop+0x40/0x90 [ 247.735547][ T7964] ? clear_bhb_loop+0x40/0x90 [ 247.740463][ T7964] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 247.746426][ T7964] RIP: 0033:0x7f9a1ef9bf79 [ 247.750895][ T7964] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 247.770669][ T7964] RSP: 002b:00007f9a1fe9d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 247.779221][ T7964] RAX: ffffffffffffffda RBX: 00007f9a1f215fa0 RCX: 00007f9a1ef9bf79 [ 247.787586][ T7964] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000006 [ 247.795781][ T7964] RBP: 00007f9a1fe9d090 R08: 0000000000000000 R09: 0000000000000000 [ 247.803905][ T7964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 247.811931][ T7964] R13: 00007f9a1f216038 R14: 00007f9a1f215fa0 R15: 00007fffcebc7948 [ 247.820254][ T7964] [ 248.071872][ T7975] netlink: 'syz.1.651': attribute type 39 has an invalid length. [ 248.198126][ T7982] netlink: 164 bytes leftover after parsing attributes in process `syz.4.653'. [ 248.389395][ T7985] FAULT_INJECTION: forcing a failure. [ 248.389395][ T7985] name failslab, interval 1, probability 0, space 0, times 0 [ 248.408910][ T7985] CPU: 0 PID: 7985 Comm: syz.1.654 Not tainted syzkaller #0 [ 248.416270][ T7985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 248.426548][ T7985] Call Trace: [ 248.429879][ T7985] [ 248.432860][ T7985] dump_stack_lvl+0x18c/0x250 [ 248.437701][ T7985] ? show_regs_print_info+0x20/0x20 [ 248.443130][ T7985] ? load_image+0x400/0x400 [ 248.447866][ T7985] ? __might_sleep+0xe0/0xe0 [ 248.452526][ T7985] ? __lock_acquire+0x7d40/0x7d40 [ 248.457844][ T7985] should_fail_ex+0x39d/0x4d0 [ 248.462677][ T7985] should_failslab+0x9/0x20 [ 248.467231][ T7985] slab_pre_alloc_hook+0x59/0x310 [ 248.472420][ T7985] kmem_cache_alloc_node+0x60/0x320 [ 248.477642][ T7985] ? __alloc_skb+0x103/0x2c0 [ 248.482432][ T7985] __alloc_skb+0x103/0x2c0 [ 248.486867][ T7985] tipc_buf_acquire+0x2b/0xe0 [ 248.491569][ T7985] tipc_msg_build+0x8c3/0xee0 [ 248.496270][ T7985] ? skb_copy_to_linear_data_offset+0x60/0x60 [ 248.502529][ T7985] ? tipc_nametbl_lookup_mcast_nodes+0x2e/0x9e0 [ 248.508884][ T7985] __tipc_sendmsg+0x1c70/0x2bb0 [ 248.513779][ T7985] ? rht_unlock+0x1d0/0x1d0 [ 248.518317][ T7985] ? perf_tp_event+0x132d/0x1450 [ 248.523392][ T7985] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 248.529389][ T7985] ? wait_woken+0x180/0x180 [ 248.533930][ T7985] ? trace_irq_disable+0xbb/0xe0 [ 248.538905][ T7985] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 248.544643][ T7985] __tipc_sendstream+0x1039/0x1270 [ 248.549779][ T7985] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 248.556035][ T7985] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 248.562201][ T7985] ? tipc_sendstream+0x47/0x70 [ 248.566982][ T7985] ? tsk_advance_rx_queue+0x310/0x310 [ 248.572364][ T7985] ? __local_bh_enable_ip+0x142/0x1c0 [ 248.577758][ T7985] ? _local_bh_enable+0xa0/0xa0 [ 248.582628][ T7985] tipc_sendstream+0x55/0x70 [ 248.587233][ T7985] ? tipc_getsockopt+0x5a0/0x5a0 [ 248.592205][ T7985] ____sys_sendmsg+0x5ba/0x960 [ 248.596985][ T7985] ? __lock_acquire+0x7d40/0x7d40 [ 248.602022][ T7985] ? __asan_memset+0x22/0x40 [ 248.606624][ T7985] ? __sys_sendmsg_sock+0x30/0x30 [ 248.611840][ T7985] ? __import_iovec+0x5f2/0x850 [ 248.616814][ T7985] ? import_iovec+0x73/0xa0 [ 248.621420][ T7985] ___sys_sendmsg+0x2a6/0x360 [ 248.626136][ T7985] ? __sys_sendmsg+0x2a0/0x2a0 [ 248.630948][ T7985] ? seqcount_lockdep_reader_access+0x17b/0x1d0 [ 248.637227][ T7985] __se_sys_sendmsg+0x1c2/0x2b0 [ 248.642090][ T7985] ? __x64_sys_sendmsg+0x80/0x80 [ 248.647172][ T7985] ? lockdep_hardirqs_on+0x98/0x150 [ 248.652500][ T7985] do_syscall_64+0x55/0xa0 [ 248.657116][ T7985] ? clear_bhb_loop+0x40/0x90 [ 248.661810][ T7985] ? clear_bhb_loop+0x40/0x90 [ 248.666500][ T7985] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 248.672407][ T7985] RIP: 0033:0x7f3988d9bf79 [ 248.676836][ T7985] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 248.696732][ T7985] RSP: 002b:00007f3989c30028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 248.705336][ T7985] RAX: ffffffffffffffda RBX: 00007f3989015fa0 RCX: 00007f3988d9bf79 [ 248.713350][ T7985] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000006 [ 248.721527][ T7985] RBP: 00007f3989c30090 R08: 0000000000000000 R09: 0000000000000000 [ 248.729979][ T7985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 248.738168][ T7985] R13: 00007f3989016038 R14: 00007f3989015fa0 R15: 00007ffc623f65d8 [ 248.746183][ T7985] [ 250.205235][ T8015] netlink: 49920 bytes leftover after parsing attributes in process `syz.0.663'. [ 252.344033][ T8053] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.186915][ T8066] netlink: 49920 bytes leftover after parsing attributes in process `syz.4.678'. [ 253.969231][ T8086] netlink: 60 bytes leftover after parsing attributes in process `syz.3.685'. [ 254.032313][ T8086] netlink: 60 bytes leftover after parsing attributes in process `syz.3.685'. [ 254.043233][ T8087] netlink: 60 bytes leftover after parsing attributes in process `syz.3.685'. [ 254.131477][ T8086] netlink: 60 bytes leftover after parsing attributes in process `syz.3.685'. [ 255.384266][ T8114] netlink: 'syz.4.696': attribute type 21 has an invalid length. [ 255.435150][ T8114] IPv6: NLM_F_CREATE should be specified when creating new route [ 256.119454][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.126116][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.253791][ T8117] netlink: 'syz.4.696': attribute type 10 has an invalid length. [ 256.537655][ T8123] netlink: 164 bytes leftover after parsing attributes in process `syz.0.697'. [ 257.698713][ T8153] netlink: 'syz.4.706': attribute type 2 has an invalid length. [ 257.737020][ T8153] netlink: 'syz.4.706': attribute type 8 has an invalid length. [ 257.777489][ T8153] netlink: 132 bytes leftover after parsing attributes in process `syz.4.706'. [ 258.202434][ T8157] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 258.410642][ T8166] FAULT_INJECTION: forcing a failure. [ 258.410642][ T8166] name failslab, interval 1, probability 0, space 0, times 0 [ 258.481796][ T8166] CPU: 0 PID: 8166 Comm: syz.1.711 Not tainted syzkaller #0 [ 258.489246][ T8166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 258.499422][ T8166] Call Trace: [ 258.502733][ T8166] [ 258.505710][ T8166] dump_stack_lvl+0x18c/0x250 [ 258.510537][ T8166] ? sctp_sendmsg+0x1575/0x28c0 [ 258.515689][ T8166] ? ___sys_sendmsg+0x2a6/0x360 [ 258.520754][ T8166] ? show_regs_print_info+0x20/0x20 [ 258.526066][ T8166] ? load_image+0x400/0x400 [ 258.530969][ T8166] should_fail_ex+0x39d/0x4d0 [ 258.535765][ T8166] should_failslab+0x9/0x20 [ 258.540497][ T8166] slab_pre_alloc_hook+0x59/0x310 [ 258.545668][ T8166] ? sctp_add_bind_addr+0x8c/0x360 [ 258.551460][ T8166] __kmem_cache_alloc_node+0x53/0x250 [ 258.556904][ T8166] ? sctp_add_bind_addr+0x8c/0x360 [ 258.562329][ T8166] kmalloc_trace+0x2a/0xe0 [ 258.566946][ T8166] sctp_add_bind_addr+0x8c/0x360 [ 258.572033][ T8166] sctp_copy_local_addr_list+0x315/0x4f0 [ 258.577820][ T8166] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 258.583692][ T8166] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 258.589827][ T8166] ? sctp_v6_is_any+0x64/0x70 [ 258.594556][ T8166] ? sctp_copy_one_addr+0x8c/0x350 [ 258.600007][ T8166] sctp_bind_addr_copy+0xb3/0x3c0 [ 258.605180][ T8166] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 258.611566][ T8166] sctp_connect_new_asoc+0x2f9/0x6a0 [ 258.617012][ T8166] ? __sctp_connect+0xd80/0xd80 [ 258.621916][ T8166] ? __local_bh_enable_ip+0x13a/0x1c0 [ 258.627427][ T8166] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 258.633062][ T8166] ? security_sctp_bind_connect+0x89/0xb0 [ 258.638836][ T8166] sctp_sendmsg+0x1575/0x28c0 [ 258.643637][ T8166] ? sctp_getsockopt+0xb60/0xb60 [ 258.648802][ T8166] ? aa_sk_perm+0x83c/0x970 [ 258.653389][ T8166] ? aa_af_perm+0x330/0x330 [ 258.657953][ T8166] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 258.664429][ T8166] ? sock_rps_record_flow+0x19/0x3f0 [ 258.670037][ T8166] ? inet_sendmsg+0xe9/0x2f0 [ 258.674760][ T8166] ? inet_send_prepare+0x260/0x260 [ 258.679941][ T8166] ____sys_sendmsg+0x5ba/0x960 [ 258.684747][ T8166] ? __lock_acquire+0x7d40/0x7d40 [ 258.689926][ T8166] ? __asan_memset+0x22/0x40 [ 258.694653][ T8166] ? __sys_sendmsg_sock+0x30/0x30 [ 258.700005][ T8166] ? __import_iovec+0x5f2/0x850 [ 258.705019][ T8166] ? import_iovec+0x73/0xa0 [ 258.709684][ T8166] ___sys_sendmsg+0x2a6/0x360 [ 258.714406][ T8166] ? __sys_sendmsg+0x2a0/0x2a0 [ 258.719244][ T8166] ? trace_call_bpf+0xc3/0x6c0 [ 258.724091][ T8166] __se_sys_sendmsg+0x1c2/0x2b0 [ 258.729080][ T8166] ? __x64_sys_sendmsg+0x80/0x80 [ 258.734069][ T8166] ? lockdep_hardirqs_on+0x98/0x150 [ 258.739308][ T8166] do_syscall_64+0x55/0xa0 [ 258.743920][ T8166] ? clear_bhb_loop+0x40/0x90 [ 258.748632][ T8166] ? clear_bhb_loop+0x40/0x90 [ 258.753550][ T8166] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 258.759666][ T8166] RIP: 0033:0x7f3988d9bf79 [ 258.764532][ T8166] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 258.784254][ T8166] RSP: 002b:00007f3989c30028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 258.792870][ T8166] RAX: ffffffffffffffda RBX: 00007f3989015fa0 RCX: 00007f3988d9bf79 [ 258.800856][ T8166] RDX: 0000000020000054 RSI: 0000200000002dc0 RDI: 0000000000000003 [ 258.808849][ T8166] RBP: 00007f3989c30090 R08: 0000000000000000 R09: 0000000000000000 [ 258.817003][ T8166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 258.825074][ T8166] R13: 00007f3989016038 R14: 00007f3989015fa0 R15: 00007ffc623f65d8 [ 258.833074][ T8166] [ 258.845303][ T28] INFO: task syz.2.45:6008 blocked for more than 143 seconds. [ 258.855388][ T28] Not tainted syzkaller #0 [ 258.862801][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 258.871916][ T28] task:syz.2.45 state:D stack:23080 pid:6008 ppid:5774 flags:0x00004006 [ 258.978815][ T28] Call Trace: [ 259.002747][ T28] [ 259.024512][ T28] __schedule+0x1553/0x45a0 [ 259.060473][ T28] ? rcu_is_watching+0x15/0xb0 [ 259.088712][ T28] ? asan.module_dtor+0x20/0x20 [ 259.116434][ T28] ? trace_contention_end+0x39/0xe0 [ 259.135715][ T28] ? task_work_cancel+0xa5/0x220 [ 259.162253][ T28] ? task_work_cancel_func+0x210/0x210 [ 259.190943][ T28] schedule+0xbd/0x170 [ 259.216235][ T8180] FAULT_INJECTION: forcing a failure. [ 259.216235][ T8180] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 259.218422][ T28] ? _free_event+0xfe/0xf30 [ 259.253808][ T28] _free_event+0x174/0xf30 [ 259.255840][ T8180] CPU: 1 PID: 8180 Comm: syz.1.715 Not tainted syzkaller #0 [ 259.265720][ T8180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 259.273959][ T28] perf_event_release_kernel+0x842/0x8d0 [ 259.276147][ T8180] Call Trace: [ 259.276159][ T8180] [ 259.276168][ T8180] dump_stack_lvl+0x18c/0x250 [ 259.293116][ T8180] ? show_regs_print_info+0x20/0x20 [ 259.298243][ T28] ? __might_sleep+0xe0/0xe0 [ 259.298347][ T8180] ? load_image+0x400/0x400 [ 259.298377][ T8180] ? __lock_acquire+0x7d40/0x7d40 [ 259.298400][ T8180] ? snprintf+0xe9/0x140 [ 259.298425][ T8180] should_fail_ex+0x39d/0x4d0 [ 259.298458][ T8180] _copy_to_user+0x2f/0xa0 [ 259.298484][ T8180] simple_read_from_buffer+0xe7/0x150 [ 259.298520][ T8180] proc_fail_nth_read+0x1e8/0x260 [ 259.298549][ T8180] ? proc_fault_inject_write+0x360/0x360 [ 259.330595][ T28] ? calc_timer_values+0x400/0x400 [ 259.333647][ T8180] ? fsnotify_perm+0x271/0x5e0 [ 259.333679][ T8180] ? proc_fault_inject_write+0x360/0x360 [ 259.360143][ T8180] vfs_read+0x28b/0x970 [ 259.364333][ T8180] ? kernel_read+0x1e0/0x1e0 [ 259.368954][ T8180] ? __fget_files+0x28/0x4b0 [ 259.373575][ T8180] ? __fget_files+0x28/0x4b0 [ 259.378268][ T8180] ? __fget_files+0x43d/0x4b0 [ 259.382967][ T8180] ? __fdget_pos+0x2a3/0x330 [ 259.387772][ T8180] ? ksys_read+0x75/0x260 [ 259.392138][ T8180] ksys_read+0x150/0x260 [ 259.396493][ T8180] ? vfs_write+0x990/0x990 [ 259.401021][ T8180] ? lockdep_hardirqs_on+0x98/0x150 [ 259.406236][ T8180] do_syscall_64+0x55/0xa0 [ 259.410704][ T8180] ? clear_bhb_loop+0x40/0x90 [ 259.415481][ T8180] ? clear_bhb_loop+0x40/0x90 [ 259.420169][ T8180] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 259.426157][ T8180] RIP: 0033:0x7f3988d5c84e [ 259.430588][ T8180] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 259.450294][ T8180] RSP: 002b:00007f3989c0efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 259.458906][ T8180] RAX: ffffffffffffffda RBX: 00007f3989c0f6c0 RCX: 00007f3988d5c84e [ 259.466975][ T8180] RDX: 000000000000000f RSI: 00007f3989c0f0a0 RDI: 0000000000000005 [ 259.475040][ T8180] RBP: 00007f3989c0f090 R08: 0000000000000000 R09: 0000000000000000 [ 259.483109][ T8180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 259.491134][ T8180] R13: 00007f3989016128 R14: 00007f3989016090 R15: 00007ffc623f65d8 [ 259.499305][ T8180] [ 259.503624][ T28] ? perf_mmap+0x15c0/0x15c0 [ 259.508300][ T28] perf_release+0x3b/0x40 [ 259.525795][ T28] __fput+0x234/0x970 [ 259.530785][ T28] task_work_run+0x1d4/0x260 [ 259.535473][ T28] ? task_work_cancel+0x220/0x220 [ 259.558480][ T28] do_exit+0x95a/0x2460 [ 259.562935][ T28] ? lock_chain_count+0x20/0x20 [ 259.567861][ T28] ? put_task_struct+0xc0/0xc0 [ 259.573557][ T28] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 259.579885][ T28] ? lockdep_hardirqs_on+0x98/0x150 [ 259.585247][ T28] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 259.591615][ T28] do_group_exit+0x21b/0x2d0 [ 259.596274][ T28] ? _raw_spin_unlock_irq+0x29/0x50 [ 259.601703][ T28] get_signal+0x12fc/0x13f0 [ 259.606298][ T28] arch_do_signal_or_restart+0xc2/0x800 [ 259.613168][ T28] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 259.619163][ T28] ? get_sigframe_size+0x20/0x20 [ 259.624196][ T28] ? exit_to_user_mode_loop+0x3b/0x110 [ 259.629964][ T28] exit_to_user_mode_loop+0x70/0x110 [ 259.635333][ T28] exit_to_user_mode_prepare+0xee/0x180 [ 259.641455][ T28] syscall_exit_to_user_mode+0x1a/0x50 [ 259.659748][ T28] do_syscall_64+0x61/0xa0 [ 259.665934][ T28] ? clear_bhb_loop+0x40/0x90 [ 259.677282][ T28] ? clear_bhb_loop+0x40/0x90 [ 259.686567][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 259.702052][ T28] RIP: 0033:0x7fe7a379bf79 [ 259.706689][ T28] RSP: 002b:00007fe7a4581028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 259.720114][ T28] RAX: ffffffffffffffa2 RBX: 00007fe7a3a15fa0 RCX: 00007fe7a379bf79 [ 259.735324][ T28] RDX: 0000000000000088 RSI: 0000000000000007 RDI: 000000000000000a [ 259.744186][ T28] RBP: 00007fe7a38327e0 R08: 0000000000000000 R09: 0000000000000000 [ 259.764822][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 259.780594][ T28] R13: 00007fe7a3a16038 R14: 00007fe7a3a15fa0 R15: 00007ffece305878 [ 259.792769][ T28] [ 259.796459][ T28] [ 259.796459][ T28] Showing all locks held in the system: [ 259.821364][ T28] 2 locks held by rcu_tasks_trace/15: [ 259.826820][ T28] #0: ffffffff8d132cd0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0xadb/0xdb0 [ 259.845780][ T28] #1: ffffffff8d137978 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3da/0x880 [ 259.877488][ T28] 1 lock held by khungtaskd/28: [ 259.887493][ T28] #0: ffffffff8d131fa0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 259.898168][ T28] 3 locks held by kworker/u4:3/49: [ 259.905318][ T28] #0: ffff888017c71538 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 259.924302][ T28] #1: ffffc90000ba7d00 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 259.936238][ T28] #2: ffffffff8d137840 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x4c/0x580 [ 259.946661][ T28] 3 locks held by kworker/u4:13/3535: [ 259.952793][ T28] #0: ffff888017c71538 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 259.964868][ T28] #1: ffffc9000d197d00 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 259.977164][ T28] #2: ffffffff8d137840 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x4c/0x580 [ 259.991209][ T28] 2 locks held by getty/5534: [ 259.996060][ T28] #0: ffff88814e7880a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 260.007520][ T28] #1: ffffc9000326e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x433/0x1390 [ 260.021327][ T28] 2 locks held by kworker/0:4/5777: [ 260.026583][ T28] #0: ffff888017c72538 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 260.050811][ T28] #1: ffffc90003d37d00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 260.067849][ T28] 1 lock held by syz.3.708/8167: [ 260.076344][ T28] #0: ffffffff8d192128 (bpf_event_mutex){+.+.}-{3:3}, at: perf_event_detach_bpf_prog+0x8b/0x310 [ 260.092264][ T28] 1 lock held by syz.4.713/8173: [ 260.097327][ T28] #0: ffffffff8d192128 (bpf_event_mutex){+.+.}-{3:3}, at: perf_event_detach_bpf_prog+0x8b/0x310 [ 260.110855][ T28] 2 locks held by syz.4.713/8174: [ 260.115943][ T28] 1 lock held by syz.1.715/8176: [ 260.122871][ T28] #0: ffffffff8d192128 (bpf_event_mutex){+.+.}-{3:3}, at: perf_event_detach_bpf_prog+0x8b/0x310 [ 260.134256][ T28] 1 lock held by syz.0.714/8178: [ 260.140646][ T28] #0: ffffffff8d192128 (bpf_event_mutex){+.+.}-{3:3}, at: perf_event_detach_bpf_prog+0x8b/0x310 [ 260.152118][ T28] [ 260.154515][ T28] ============================================= [ 260.154515][ T28] [ 260.185688][ T28] NMI backtrace for cpu 1 [ 260.190101][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 260.197336][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 260.207412][ T28] Call Trace: [ 260.210708][ T28] [ 260.213647][ T28] dump_stack_lvl+0x18c/0x250 [ 260.218349][ T28] ? nmi_cpu_backtrace+0x1b6/0x3e0 [ 260.223492][ T28] ? show_regs_print_info+0x20/0x20 [ 260.228707][ T28] ? load_image+0x400/0x400 [ 260.233404][ T28] nmi_cpu_backtrace+0x3a6/0x3e0 [ 260.238449][ T28] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 260.244791][ T28] ? _printk+0xde/0x130 [ 260.248991][ T28] ? load_image+0x400/0x400 [ 260.253515][ T28] ? load_image+0x400/0x400 [ 260.258208][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 260.264293][ T28] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 260.270294][ T28] watchdog+0xf3d/0xf80 [ 260.274460][ T28] ? watchdog+0x1e1/0xf80 [ 260.278806][ T28] kthread+0x2fa/0x390 [ 260.282894][ T28] ? hungtask_pm_notify+0x90/0x90 [ 260.287931][ T28] ? kthread_blkcg+0xd0/0xd0 [ 260.292528][ T28] ret_from_fork+0x48/0x80 [ 260.297079][ T28] ? kthread_blkcg+0xd0/0xd0 [ 260.301765][ T28] ret_from_fork_asm+0x11/0x20 [ 260.306588][ T28] [ 260.310493][ T28] Sending NMI from CPU 1 to CPUs 0: [ 260.315811][ C0] NMI backtrace for cpu 0 [ 260.315823][ C0] CPU: 0 PID: 49 Comm: kworker/u4:3 Not tainted syzkaller #0 [ 260.315838][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 260.315848][ C0] Workqueue: events_unbound toggle_allocation_gate [ 260.315874][ C0] RIP: 0010:__lock_acquire+0x121f/0x7d40 [ 260.315895][ C0] Code: b6 04 00 84 c0 0f 85 d7 5e 00 00 83 3d b9 2c c4 15 00 0f 84 3e 08 00 00 31 db 48 83 c3 40 48 89 d8 48 c1 e8 03 42 80 3c 00 00 <74> 12 48 89 df e8 c7 04 77 00 49 b8 00 00 00 00 00 fc ff df 48 83 [ 260.315908][ C0] RSP: 0018:ffffc90000ba7460 EFLAGS: 00000046 [ 260.315920][ C0] RAX: 1ffffffff2165464 RBX: ffffffff90b2a320 RCX: ffffffff81683650 [ 260.315931][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff911bf500 [ 260.315941][ C0] RBP: ffffc90000ba76a8 R08: dffffc0000000000 R09: 1ffffffff2237ea0 [ 260.315951][ C0] R10: dffffc0000000000 R11: fffffbfff2237ea1 R12: 000000003d560471 [ 260.315962][ C0] R13: ffff8880196c8000 R14: 00000000eda3d022 R15: ffff8880196c8b78 [ 260.315973][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 260.315986][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 260.315996][ C0] CR2: 00005555810ab4e8 CR3: 000000000cf32000 CR4: 00000000003506f0 [ 260.316011][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 260.316020][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 260.316030][ C0] Call Trace: [ 260.316036][ C0] [ 260.316052][ C0] ? verify_lock_unused+0x140/0x140 [ 260.316071][ C0] ? rcu_read_lock_sched_held+0x8a/0x110 [ 260.316087][ C0] ? __bpf_trace_rcu_stall_warning+0x160/0x160 [ 260.316103][ C0] ? rcu_is_watching+0x15/0xb0 [ 260.316123][ C0] ? cpufreq_update_util+0x91/0x230 [ 260.316142][ C0] lock_acquire+0x19e/0x420 [ 260.316157][ C0] ? __schedule+0x2176/0x45a0 [ 260.316177][ C0] ? __update_load_avg_se+0x6eb/0xba0 [ 260.316197][ C0] ? read_lock_is_recursive+0x20/0x20 [ 260.316214][ C0] ? rcu_read_lock_sched_held+0x8a/0x110 [ 260.316229][ C0] ? __bpf_trace_rcu_stall_warning+0x160/0x160 [ 260.316246][ C0] psi_task_switch+0x10f/0x970 [ 260.316264][ C0] ? __schedule+0x2176/0x45a0 [ 260.316282][ C0] ? psi_account_irqtime+0xf4/0x810 [ 260.316301][ C0] ? __schedule+0x2176/0x45a0 [ 260.316320][ C0] __schedule+0x2176/0x45a0 [ 260.316342][ C0] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 260.316359][ C0] ? lock_chain_count+0x20/0x20 [ 260.316375][ C0] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 260.316391][ C0] ? asan.module_dtor+0x20/0x20 [ 260.316410][ C0] ? _raw_spin_unlock+0x40/0x40 [ 260.316425][ C0] ? prepare_to_wait_event+0x3db/0x470 [ 260.316441][ C0] ? kthread_data+0x4f/0xc0 [ 260.316455][ C0] ? wq_worker_sleeping+0x63/0x240 [ 260.316471][ C0] schedule+0xbd/0x170 [ 260.316489][ C0] toggle_allocation_gate+0x16f/0x260 [ 260.316509][ C0] ? show_object+0x70/0x70 [ 260.316528][ C0] ? wake_bit_function+0x200/0x200 [ 260.316546][ C0] ? process_scheduled_works+0x96f/0x15d0 [ 260.316564][ C0] ? process_scheduled_works+0x96f/0x15d0 [ 260.316581][ C0] process_scheduled_works+0xa5d/0x15d0 [ 260.316608][ C0] ? assign_work+0x430/0x430 [ 260.316627][ C0] ? assign_work+0x3d0/0x430 [ 260.316646][ C0] worker_thread+0xa55/0xfc0 [ 260.316672][ C0] kthread+0x2fa/0x390 [ 260.316685][ C0] ? pr_cont_work+0x560/0x560 [ 260.316702][ C0] ? kthread_blkcg+0xd0/0xd0 [ 260.316715][ C0] ret_from_fork+0x48/0x80 [ 260.316732][ C0] ? kthread_blkcg+0xd0/0xd0 [ 260.316764][ C0] ret_from_fork_asm+0x11/0x20 [ 260.316796][ C0] [ 260.688281][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 260.695374][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 260.703049][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 260.713243][ T28] Call Trace: [ 260.716645][ T28] [ 260.719620][ T28] dump_stack_lvl+0x18c/0x250 [ 260.724360][ T28] ? show_regs_print_info+0x20/0x20 [ 260.729625][ T28] ? load_image+0x400/0x400 [ 260.734190][ T28] panic+0x2dc/0x730 [ 260.738215][ T28] ? schedule_preempt_disabled+0x20/0x20 [ 260.744165][ T28] ? bpf_jit_dump+0xd0/0xd0 [ 260.748887][ T28] ? __irq_work_queue_local+0x13a/0x3b0 [ 260.754486][ T28] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 260.760966][ T28] watchdog+0xf7c/0xf80 [ 260.765172][ T28] ? watchdog+0x1e1/0xf80 [ 260.769566][ T28] kthread+0x2fa/0x390 [ 260.773674][ T28] ? hungtask_pm_notify+0x90/0x90 [ 260.779021][ T28] ? kthread_blkcg+0xd0/0xd0 [ 260.783944][ T28] ret_from_fork+0x48/0x80 [ 260.788504][ T28] ? kthread_blkcg+0xd0/0xd0 [ 260.793143][ T28] ret_from_fork_asm+0x11/0x20 [ 260.798002][ T28] [ 260.801193][ T28] Kernel Offset: disabled [ 260.805608][ T28] Rebooting in 86400 seconds..