last executing test programs: 2m46.207228287s ago: executing program 1 (id=5313): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[], 0x0}, 0x94) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) socket$kcm(0x2, 0x1, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000580)=ANY=[@ANYBLOB], 0xfe33) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x101000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x28, 0x1, 0x0) 2m43.695963372s ago: executing program 1 (id=5317): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000300)={&(0x7f00000001c0)=@ieee802154={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0002}}}, 0x80, &(0x7f0000000480)=[{&(0x7f00000007c0)="27031c00f40e1400020000000000000006e1f0000000890900000002ee1680ca82973d2bd4b836954268e611c00aab971573", 0x32}, {&(0x7f0000001a80)="7cdb015fbb1990080000006a2615837b6487d32d2fb46cbd152314980741e032cef721aadbc1994f1d49784b25a274803a7caf917f73a677974c21ab81963cf096b03d0369ef39458a06a2bccd5f12f4584d19a07664fe933703f7f6030000003abfd437d1e03de09e6074561fe9216c8b8ba00820c3de3c53bdba305901d7103513c9c2b71ea428a38f832416f3cafeccc552044f00ff3570a9ab9cf26b9af6af17547bf7f4e1762be569a68d54e854db809b155cc566b08f25c90861e29ab717f760ad57bbfd48e867a91d63c1ac78aafe22fc56f053ed1cc606f09b", 0xdd}, {&(0x7f0000000800)="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", 0xe04}], 0x3}, 0x24000008) 2m43.586428347s ago: executing program 1 (id=5319): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x3a009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0xfff}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4020940d, &(0x7f00000005c0)=0x80000000000004) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000700)=[r0, r0, r0, r0, r0], 0x0, 0x10, 0x3af}, 0x94) r1 = socket$kcm(0x11, 0x2, 0x0) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r2, 0x107, 0x12, &(0x7f00000000c0)=r1, 0x8) close(r1) r3 = socket$kcm(0x11, 0x2, 0x0) r4 = perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x6c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x800}, 0x0, 0x0, 0x0, 0x7, 0x6, 0x0, 0x1}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c48", 0x15}], 0x1}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00002a0053ea"], 0xfe33) r7 = socket$kcm(0x10, 0x2, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r8) write$cgroup_devices(r8, &(0x7f00000005c0)=ANY=[], 0xfffffeff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r8, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x1f, &(0x7f0000000200)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000240), &(0x7f0000000300), 0x8, 0xcc, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x15, 0x5, &(0x7f0000000e00)=ANY=[@ANYRES64=r3], &(0x7f0000000140)='GPL\x00', 0xbe1, 0x0, 0x0, 0x0, 0x10, '\x00', r9, @fallback, r8}, 0x94) r11 = socket$kcm(0x28, 0x5, 0x0) setsockopt$sock_attach_bpf(r11, 0x28, 0x8, 0x0, 0xff79) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f00000002c0)=r10, 0x4) sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe80000a000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) 2m42.970973448s ago: executing program 1 (id=5327): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x3a009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0xfff}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff, 0x1], 0x0, 0x10, 0x8000}, 0x94) r0 = socket$kcm(0x11, 0x2, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000000c0)=r0, 0x8) close(r0) r2 = socket$kcm(0x11, 0x2, 0x0) r3 = perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x6c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x800}, 0x0, 0x0, 0x0, 0x7, 0x6, 0x0, 0x1}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f7", 0xb}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r4, 0x107, 0x12, &(0x7f00000000c0)=r2, 0x8) (fail_nth: 1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x260, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x40002, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x1000, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, 0x0) r5 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x400, 0x10506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000801, 0x1}, 0x7402, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x126400, 0x0, 0x0, 0x0, 0x0, 0x0) close(r5) 2m42.234224285s ago: executing program 1 (id=5328): perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xb) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000", 0x4}], 0x1}, 0x0) socket$kcm(0xa, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x38, &(0x7f0000000040), 0x2) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x2040) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x58, &(0x7f0000000380)}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33}, 0x94) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x3, 0xfc, 0x0, 0x1, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x2, @perf_bp={0x0, 0x6}, 0x5000, 0x8000, 0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0xfffffffd}, 0xffffffffffffffff, 0xfffffffffffffff9, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x23, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000001240)={&(0x7f0000000940)=@generic={0xa, "8ab77fa26849ff263ef30c98b353011a5990650042e2dacdc165ececece6be1862e2adacd2737d00ad6f9fa9f3d7145e15dd9fb1a7adc211220963ad5def53b911ba5b9da13641f982757012a7496de0b3a36f5849f260c603dbc317f54b901ee80ea6132ca6e88c776553e1833052ca376304313c5637786a36a4b83857"}, 0x80, 0x0}, 0x4000) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r4 = socket$kcm(0x10, 0x2, 0x4) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000200)=r1, 0x4) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_subtree(r5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r6 = socket$kcm(0x10, 0x5, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08021a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084) socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0xc000, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x10401, 0x0, 0x2, 0x2}, {0x4}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) 2m41.713677281s ago: executing program 1 (id=5332): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x3a009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0xfff}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff, 0x1], 0x0, 0x10, 0x8000}, 0x94) r1 = socket$kcm(0x11, 0x2, 0x0) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0x12, &(0x7f00000000c0)=r1, 0x8) close(r1) r3 = socket$kcm(0x11, 0x2, 0x0) r4 = perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x6c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x800}, 0x0, 0x0, 0x0, 0x7, 0x6, 0x0, 0x1}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f7", 0xb}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r5, 0x107, 0x12, &(0x7f00000000c0)=r3, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x260, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x40002, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x1000, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r6 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, 0x0) r7 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x400, 0x10506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000801, 0x1}, 0x7402, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x126400, 0x0, 0x0, 0x0, 0x0, 0x0) close(r7) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000740)={@fallback=r6, 0x2e, 0x0, 0x2, &(0x7f0000000640)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000680)=[0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0], 0x0}, 0x40) r9 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000840)='syz0\x00', 0x200002, 0x0) r10 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r10, &(0x7f00000000c0)={&(0x7f0000001040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000140)="d7", 0x1}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r11, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r10, 0x84, 0x7b, &(0x7f0000000000)=r12, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000780)={@cgroup=r9, r0, 0x36, 0x200b, 0xffffffffffffffff, @value=r12, @void, @void, @void, r8}, 0x20) 2m26.625360273s ago: executing program 32 (id=5332): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x3a009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0xfff}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff, 0x1], 0x0, 0x10, 0x8000}, 0x94) r1 = socket$kcm(0x11, 0x2, 0x0) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0x12, &(0x7f00000000c0)=r1, 0x8) close(r1) r3 = socket$kcm(0x11, 0x2, 0x0) r4 = perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x6c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x800}, 0x0, 0x0, 0x0, 0x7, 0x6, 0x0, 0x1}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f7", 0xb}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r5, 0x107, 0x12, &(0x7f00000000c0)=r3, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x260, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x40002, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x1000, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r6 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, 0x0) r7 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x400, 0x10506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000801, 0x1}, 0x7402, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x126400, 0x0, 0x0, 0x0, 0x0, 0x0) close(r7) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000740)={@fallback=r6, 0x2e, 0x0, 0x2, &(0x7f0000000640)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000680)=[0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0], 0x0}, 0x40) r9 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000840)='syz0\x00', 0x200002, 0x0) r10 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r10, &(0x7f00000000c0)={&(0x7f0000001040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000140)="d7", 0x1}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r11, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r10, 0x84, 0x7b, &(0x7f0000000000)=r12, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000780)={@cgroup=r9, r0, 0x36, 0x200b, 0xffffffffffffffff, @value=r12, @void, @void, @void, r8}, 0x20) 9.94483294s ago: executing program 4 (id=6382): r0 = gettid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000001280)="66c0c2a8709a9ad8a7cb87f88e90849ae36449bbefaa93f456b3bef4b869bb8d232ed43be8e444ff95951c61e847cc410fc44a8fe4220781cbc96cff20e957773724d9b507714e12dbd648700b76960a43d21465e6d4d3becd98e268a204b4b0eda3591d14f148828e0105745bb1412b2a019e64f3f7100a6bcc5ab9deb3", 0x7e}], 0x1, &(0x7f0000001340)=[@cred={{0x1c, 0x1, 0x2, {r0, 0xffffffffffffffff}}}], 0x20, 0x800}, 0x810) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x11, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) r1 = perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xf}, 0x90208, 0x0, 0x310c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007baaf8ff00000000b7080000341200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008"], 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r2, 0x2f, 0x28, 0x0, &(0x7f0000000640)="c1dfb080cd21d308098e000081007e2288a8", 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}, 0x10049014) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20044050) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000000)=[{0x6c}, {0x6}]}) r4 = perf_event_open(&(0x7f00000011c0)={0x7, 0x80, 0x4, 0x6, 0x0, 0x1, 0x0, 0x2, 0x4000, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3d, 0x3, @perf_bp={&(0x7f0000001140), 0xc}, 0x80, 0x4, 0x10000, 0x7, 0x7, 0x7, 0x800, 0x0, 0xfff, 0x0, 0x9}, 0x0, 0xffffffffffffffff, r1, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000001240)='pimreg0\x00') socket$kcm(0x2, 0x200000000000001, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000e6ff000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000340)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0xe, 0x0, &(0x7f0000000800)="0000000000000000606b53cc7273", 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x10002, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3, 0x10000}, 0x80, 0x0}, 0x50a0) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x4}, 0xc00, 0x0, 0x0, 0x7, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00"/13], 0x50) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0xfca804a0, 0xe, 0x0, &(0x7f0000000200)="0400000098d1db1ba91d3305a782", 0x0, 0x973, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x37) 6.674801934s ago: executing program 4 (id=6393): openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08021a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4ed", 0xcb}], 0x1}, 0x60044084) socket$kcm(0x2, 0x5, 0x84) 6.473775995s ago: executing program 3 (id=6396): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000080)=@in6={0xa, 0x4e20, 0x0, @mcast2}, 0x80, 0x0}, 0xb80b) sendmsg$kcm(r0, 0x0, 0x80) 6.472729005s ago: executing program 4 (id=6397): socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x400000002, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x40000000000001}, 0x0, 0x0, 0xc2ba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x1002, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0600000004000000400000000500000000000000", @ANYBLOB='\x00'/17, @ANYRES32=0x0, @ANYBLOB], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000002c0)={0x0, &(0x7f0000000000)=""/36, &(0x7f0000000280), &(0x7f0000001340), 0x3, r3}, 0x38) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, &(0x7f00000001c0)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xfffffffffffffe08, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0xfffffffffffffeef) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={0xffffffffffffffff, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0], 0x0, 0x0, 0xe6, &(0x7f00000006c0)=[{}, {}], 0x10, 0x0, 0x0, &(0x7f0000000740), 0x8, 0x97, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xa, 0x18, &(0x7f0000000300)=ANY=[@ANYBLOB="18120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000dd", @ANYRES32=r5, @ANYRES32, @ANYBLOB="000000000000850000000c000000b70000b0da390bbe00", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000"], 0x0, 0x4, 0x0, 0x0, 0x41100, 0x1, '\x00', r6, @fallback=0x1c, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x1, 0x3}, 0x8, 0x10, 0x0, 0x0, r7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xfffffffffffffd98, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000a40)=@generic={&(0x7f0000000a00)='./file0\x00'}, 0x18) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000080)=@in6={0xa, 0x4e20, 0xfffffffc, @private0, 0xfffffffe}, 0x80, 0x0, 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB], 0x20}, 0x0) perf_event_open(&(0x7f0000000640)={0x3, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_config_ext={0x76, 0x1ef8}, 0x11efa, 0x1, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020750d0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) 6.324535672s ago: executing program 3 (id=6401): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000080)="05804ab382844306d758e620b9dc", 0x0, 0x12c4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 6.104097203s ago: executing program 4 (id=6403): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$kcm(0xf, 0x3, 0x2) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@o_path={0x0}, 0x18) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) setsockopt$sock_attach_bpf(r2, 0x88, 0x67, &(0x7f00000000c0)=r3, 0x4) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x23, 0x2, 0x0) close(r1) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x100, 0x0, 0xee5b}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x15, 0x5, 0x0) r5 = socket$kcm(0x10, 0x400000002, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000005000000850000000800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0xe, 0x0, &(0x7f00000001c0)="29dd4c808f84a1688ccf6f00f805", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1b0000001a007f049e", 0x9}, {0x0}], 0x2}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc/1/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 6.041061476s ago: executing program 3 (id=6404): r0 = gettid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000001280)="66c0c2a8709a9ad8a7cb87f88e90849ae36449bbefaa93f456b3bef4b869bb8d232ed43be8e444ff95951c61e847cc410fc44a8fe4220781cbc96cff20e957773724d9b507714e12dbd648700b76960a43d21465e6d4d3becd98e268a204b4b0eda3591d14f148828e0105745bb1412b2a019e64f3f7100a6bcc5ab9deb3", 0x7e}], 0x1, &(0x7f0000001340)=[@cred={{0x1c, 0x1, 0x2, {r0, 0xffffffffffffffff}}}], 0x20, 0x800}, 0x810) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x11, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) r1 = perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xf}, 0x90208, 0x0, 0x310c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007baaf8ff00000000b7080000341200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008"], 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r2, 0x2f, 0x28, 0x0, &(0x7f0000000640)="c1dfb080cd21d308098e000081007e2288a8", 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}, 0x10049014) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20044050) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000000)=[{0x6c}, {0x6}]}) r4 = perf_event_open(&(0x7f00000011c0)={0x7, 0x80, 0x4, 0x6, 0x0, 0x1, 0x0, 0x2, 0x4000, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3d, 0x3, @perf_bp={&(0x7f0000001140), 0xc}, 0x80, 0x4, 0x10000, 0x7, 0x7, 0x7, 0x800, 0x0, 0xfff, 0x0, 0x9}, 0x0, 0xffffffffffffffff, r1, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000001240)='pimreg0\x00') socket$kcm(0x2, 0x200000000000001, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000e6ff000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000340)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0xe, 0x0, &(0x7f0000000800)="0000000000000000606b53cc7273", 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x10002, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3, 0x10000}, 0x80, 0x0}, 0x50a0) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x4}, 0xc00, 0x0, 0x0, 0x7, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00"/13], 0x50) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0xfca804a0, 0xe, 0x0, &(0x7f0000000200)="0400000098d1db1ba91d3305a782", 0x0, 0x973, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x37) 5.626180447s ago: executing program 4 (id=6410): bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.517595683s ago: executing program 4 (id=6411): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000080)=@in6={0xa, 0x4e20, 0x0, @mcast2}, 0x80, 0x0}, 0xb80b) sendmsg$kcm(r0, 0x0, 0x80) 5.447797606s ago: executing program 5 (id=6412): bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x2) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x1) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x7}, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000340)='cpu\t>0&&\t') r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r3, &(0x7f0000000c00)={&(0x7f0000000840)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x1, 0xfffe, 0x1, 0x0, {0xa, 0x4e24, 0x5, @rand_addr=' \x01\x00', 0x7fff}}}, 0x80, &(0x7f0000000b80)=[{0x0}, {&(0x7f0000000a00)}, {&(0x7f0000000b00)="01513a35814163ab57d33becbe37cbeffa0e06ce6fe5e0c411ed266cbceb5dad33782f4175504c5aff5f9aa5b12aac002987891b945585b0a238faca4c99d337bc24", 0x42}], 0x3}, 0x4000) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f00000001c0)={0x1, 0x80, 0xb, 0x1, 0x5, 0x7c, 0x0, 0xe1, 0x40000, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6, 0x1, @perf_config_ext={0x100}, 0x4000, 0xffff, 0xffff, 0x9, 0x5, 0x0, 0x3, 0x0, 0xc0d, 0x0, 0x6}) close(0x3) r4 = socket$kcm(0xa, 0x3, 0x87) sendmsg$kcm(r4, &(0x7f0000000580)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x28}}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000180)="ffa8", 0x2}, {&(0x7f0000000400)="3cd91c", 0x3}], 0x2}, 0x40810) r5 = socket$kcm(0x29, 0x2, 0x0) sendmsg$inet(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x2005c080) sendmsg$inet(r5, &(0x7f0000000340)={0x0, 0x7ffcb000, &(0x7f0000000300)=[{&(0x7f00000000c0)='6', 0x18000}], 0x8}, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000000100)={'bridge_slave_1\x00', @random="042200001000"}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x200000e, 0x7, 0x55, &(0x7f0000000140)="a06ad876d56a00", &(0x7f0000000380)=""/85, 0x600, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) r7 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r7, 0x1, 0x19, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2.932937543s ago: executing program 5 (id=6415): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x1d, &(0x7f0000000240)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000008500000073000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.882524875s ago: executing program 2 (id=6417): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&\x00\x00\x00\x00\x00\x00\x00'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) close(r5) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000940)=ANY=[@ANYBLOB="571a180000000000000000000000000000001801000020756c2500000000002020207b22f8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f8ffefff850000002d0600000000000050000000950000000000000018a74b6f849b4b586cb7e39e4dec27a648de146b04242fe7db73cfa1b28bb481e3c5a4b8515e8fc812c0d20e926549d323f1c08f997e8add4c"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r6}, 0xc) r7 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r7, 0x107, 0x2, &(0x7f00000000c0), 0x10) recvmsg$kcm(r7, &(0x7f0000000440)={&(0x7f0000000140)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @local}}, 0x80, &(0x7f0000000800)=[{&(0x7f00000001c0)=""/104, 0x68}, {&(0x7f0000000500)=""/158, 0x9e}, {&(0x7f0000000240)=""/100, 0x64}, {&(0x7f0000000040)=""/61, 0x3d}, {&(0x7f00000005c0)=""/79, 0x4f}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000000380)=""/10, 0xa}, {&(0x7f0000000640)=""/71, 0x47}, {&(0x7f00000006c0)=""/105, 0x69}, {&(0x7f0000000740)=""/154, 0x9a}], 0xa, &(0x7f00000008c0)=""/125, 0x7d}, 0x8041) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000000080)="05804ab382844306d758e620b9dc", 0x0, 0x12c4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 2.801117879s ago: executing program 3 (id=6418): socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x2, 0x3, 0x84) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0], 0x0, 0x89, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000280), &(0x7f0000000380), 0x8, 0x45, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8918, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c48", 0x15}], 0x1}, 0x240480d0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00002a0053ea"], 0xfe33) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) socket$kcm(0x1e, 0x4, 0x0) socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) getpid() getpid() perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xd, 0x4, 0x4, 0xc, 0x0, r2}, 0x50) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1053e0, 0x2, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c00)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x3}}]}}, &(0x7f0000000240)=""/225, 0x32, 0xe1, 0x1}, 0x28) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848420000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$kcm(0xa, 0x2, 0x3a) recvmsg(r5, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x12) socket$kcm(0x10, 0x400000002, 0x0) 2.738068652s ago: executing program 5 (id=6419): openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08021a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a9295", 0xd2}], 0x1}, 0x60044084) socket$kcm(0x2, 0x5, 0x84) 2.600388199s ago: executing program 5 (id=6420): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0x0, 0x0, 0x0, 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$ITER_CREATE(0xb, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x26, 0x5, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x40af1d, 0x1, @perf_config_ext={0xff, 0x7}, 0x100613, 0x200, 0x2, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, r0, 0x1) r1 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, 0x0, 0x0) socketpair(0x2, 0x1, 0x6652, 0x0) r2 = socket$kcm(0xa, 0x2, 0x73) r3 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r3, 0x0, 0x0) r4 = socket$kcm(0x2, 0x1, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3c, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f815108f6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2de68b885a0fd8f8b8c6c342237b632f6414a3eb3480f5f42106c5812e9bfd4e8c8dea8d08525d9aa1da7c7c2ee7ff3d31b79b211dd01e304a8ffc83a89a59f3b1e2ef5e969b6d90bea7e161066f25622fad914bff52bacd2807093dda1838b529ee57f718b374ce2841b924a42457867547a6edcb8412d85f11796742bf640b5819a9546357df778c332af5983c4373a95d9c58b52dba445eee92e6911824f0c534e7a5934d9eac9b7f6fec22002fc53a3003a3304217f567b47cd326edc5f48eb1f46bb20d1e10e72239afc9769344590cf48902aba5405b7d4baa31a912ab398a2f2d3f037614bb56a89244ece50f3a1e058d274f1e70f944eb8a305be91e561e5eb843d057a81f4deb84a6335ec81ca964cdae5f318d4e9aaea2c477cc279c00c698bcfe4b8e04c09079d8f3f5438d9d45a00f50d2f9b245c8c68eebf247e25ba8d26f8b95b21ac9ceb50c0aa2e4bdc032024db216b92f9350a90ac79341af14d3fa8ba908096e1b503341aed667bb184c672dac85fc4f335b3871c3b4e55ea219a857d2d2e135358f6b45a20b3e7de8e09b2041eb7c5084a80258fb524a983752659298a251e178b56f96bc67ae0a78ec92f92d92c9cf0edb5dcb11e739d69410ad44c8df00caa030d7d89f2ec38bd7698115c423cf3e6048793aca08ffbcdac766f1553773fa00031c1d75246e4e1eddf8948d02a3de6d67fd7329e45070f29044587f1e0db50d04e673191a63e30f96ee0d8d52738fab36a7fe2c6ab9301d401e7ca5b1f039193a580e40abbdf40c2d7e27809dec80815d37adae9fe7fb9d3a974c9fc03944d7338d000b81170be4c6792ed6b3b827194b3ae11e2acfca48498d1126aacf80f3d574256ef7f75552ff087a819e", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x42, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0xe6}, 0x108461, 0xc78, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={0xffffffffffffffff, 0x0}, 0x20) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000404000000002e"], 0x0, 0x37}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000300), 0x4) r5 = socket$kcm(0x10, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000011c0)=@generic={0x0}, 0x18) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xf00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0) 2.076072316s ago: executing program 2 (id=6422): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1458}, 0x48800) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/uts\x00') ioctl$TUNSETIFF(r0, 0xb701, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0b00000005000000010001000a00000001"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x4, 0xa, 0x40, 0x1}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x513, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x202, 0x0, 0xffffffff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d000a117ea6e070d6064e22000300000000250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000140081044e81f782db44b9040a1d080201000000040000a118000200ff020000000000000000000000000001a80016ea1f00084003bc5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f722f054f55153c6f94007134cf6ee08000a09108e8d8ef075c0100000000000000cb490000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e0060000000000000580bb9ad809d5e1cace81b341139fe3cd4032e8edb12da7a83248b009c81572d3a39b", 0xe4}], 0x1, 0x0, 0x0, 0x7400}, 0xc04) 2.036714527s ago: executing program 0 (id=6423): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000080)=@in6={0xa, 0x4e20, 0x0, @mcast2}, 0x80, 0x0}, 0xb80b) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x80) 1.905199224s ago: executing program 5 (id=6424): socket$kcm(0xa, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='cpu&\t\t') bpf$BPF_PROG_DETACH(0x8, &(0x7f00000009c0)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) 1.824988698s ago: executing program 0 (id=6425): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) close(0x3) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/mnt\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89f0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2, r1}, 0xc) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x90a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r1}, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x2}, {0x30}, {0x6}]}) close(r0) 1.79707428s ago: executing program 2 (id=6426): socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x400000002, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x40000000000001}, 0x0, 0x0, 0xc2ba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x1002, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0600000004000000400000000500000000000000", @ANYBLOB='\x00'/17, @ANYRES32=0x0, @ANYBLOB], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000002c0)={0x0, &(0x7f0000000000)=""/36, &(0x7f0000000280), &(0x7f0000001340), 0x3, r3}, 0x38) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, &(0x7f00000001c0)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xfffffffffffffe08, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0xfffffffffffffeef) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={0xffffffffffffffff, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0], 0x0, 0x0, 0xe6, &(0x7f00000006c0)=[{}, {}], 0x10, 0x0, 0x0, &(0x7f0000000740), 0x8, 0x97, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xa, 0x18, &(0x7f0000000300)=ANY=[@ANYBLOB="18120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000dd", @ANYRES32=r5, @ANYRES32, @ANYBLOB="000000000000850000000c000000b70000b0da390bbe00", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000"], 0x0, 0x4, 0x0, 0x0, 0x41100, 0x1, '\x00', r6, @fallback=0x1c, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x1, 0x3}, 0x8, 0x10, 0x0, 0x0, r7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xfffffffffffffd98, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000a40)=@generic={&(0x7f0000000a00)='./file0\x00'}, 0x18) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000080)=@in6={0xa, 0x4e20, 0xfffffffc, @private0, 0xfffffffe}, 0x80, 0x0, 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="20000000000000001301000032000000977b3d2f56cfdf8bb5f2ac6dd52d090020696de458001edb69a12079bcda553f5f14"], 0x20}, 0x0) perf_event_open(&(0x7f0000000640)={0x3, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_config_ext={0x76, 0x1ef8}, 0x11efa, 0x1, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020750d0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) 1.677025406s ago: executing program 5 (id=6427): r0 = gettid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000001280)="66c0c2a8709a9ad8a7cb87f88e90849ae36449bbefaa93f456b3bef4b869bb8d232ed43be8e444ff95951c61e847cc410fc44a8fe4220781cbc96cff20e957773724d9b507714e12dbd648700b76960a43d21465e6d4d3becd98e268a204b4b0eda3591d14f148828e0105745bb1412b2a019e64f3f7100a6bcc5ab9deb3", 0x7e}], 0x1, &(0x7f0000001340)=[@cred={{0x1c, 0x1, 0x2, {r0, 0xffffffffffffffff}}}], 0x20, 0x800}, 0x810) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x11, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) r1 = perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xf}, 0x90208, 0x0, 0x310c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007baaf8ff00000000b7080000341200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008"], 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r2, 0x2f, 0x28, 0x0, &(0x7f0000000640)="c1dfb080cd21d308098e000081007e2288a8", 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}, 0x10049014) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20044050) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000000)=[{0x6c}, {0x6}]}) r4 = perf_event_open(&(0x7f00000011c0)={0x7, 0x80, 0x4, 0x6, 0x0, 0x1, 0x0, 0x2, 0x4000, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3d, 0x3, @perf_bp={&(0x7f0000001140), 0xc}, 0x80, 0x4, 0x10000, 0x7, 0x7, 0x7, 0x800, 0x0, 0xfff, 0x0, 0x9}, 0x0, 0xffffffffffffffff, r1, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000001240)='pimreg0\x00') socket$kcm(0x2, 0x200000000000001, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000e6ff000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000340)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0xe, 0x0, &(0x7f0000000800)="0000000000000000606b53cc7273", 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x10002, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3, 0x10000}, 0x80, 0x0}, 0x50a0) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x4}, 0xc00, 0x0, 0x0, 0x7, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 1.676018476s ago: executing program 3 (id=6428): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x1d, &(0x7f0000000240)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000008500000073000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.557546502s ago: executing program 2 (id=6429): openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08021a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a9295", 0xd2}], 0x1}, 0x60044084) socket$kcm(0x2, 0x5, 0x84) 1.439287598s ago: executing program 3 (id=6430): openat$tun(0xffffffffffffff9c, 0x0, 0x80, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRES64=r0], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x7d, 0x43, 0x1}, 0x50) bpf$BPF_GET_PROG_INFO(0x4, &(0x7f0000000140)={r1, 0xe0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_lsm={0x1d, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0xfda7, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0xc, 0x31b, 0x564}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000440)=[{0x3, 0x2, 0x3, 0x5}], 0x10, 0x8000}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a80)={&(0x7f0000000780)=ANY=[@ANYBLOB], &(0x7f00000009c0)=""/129, 0x2e, 0x81, 0x1}, 0x28) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, 0x0, 0x0) socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x58, &(0x7f0000000640)}, 0x10) r5 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r5, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba3704002cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) 1.425604538s ago: executing program 2 (id=6431): socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xa, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) recvmsg$unix(r4, 0x0, 0x40000062) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4034, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f00000005c0), 0xb}, 0x1b, 0x0, 0x3, 0x0, 0x8, 0x98, 0x4, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r7 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r6}, 0x8) r8 = perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28c7f81, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x2}, r7, 0x0, 0xffffffffffffffff, 0xd) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRESDEC=r4, @ANYRES16=r8], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r9 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000705d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10000c00", 0x33fe0}], 0x1}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce8102038908000000f50000000000000000ac14140a000000000000000000000000ac1414aa"], 0xfdef) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x11, 0x4, 0x4, 0x0, 0xd90}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r11, &(0x7f0000000000), 0x0}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) setsockopt$sock_attach_bpf(r0, 0x88, 0x67, &(0x7f00000000c0)=r10, 0x4) 844.124738ms ago: executing program 0 (id=6432): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000002000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000001c0)={r1}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 752.709573ms ago: executing program 2 (id=6433): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0x0, 0x0, 0x0, 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$ITER_CREATE(0xb, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x26, 0x5, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x40af1d, 0x1, @perf_config_ext={0xff, 0x7}, 0x100613, 0x200, 0x2, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, r0, 0x1) r1 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, 0x0, 0x0) socketpair(0x2, 0x1, 0x6652, 0x0) r2 = socket$kcm(0xa, 0x2, 0x73) r3 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r3, 0x0, 0x0) r4 = socket$kcm(0x2, 0x1, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3c, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f815108f6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2de68b885a0fd8f8b8c6c342237b632f6414a3eb3480f5f42106c5812e9bfd4e8c8dea8d08525d9aa1da7c7c2ee7ff3d31b79b211dd01e304a8ffc83a89a59f3b1e2ef5e969b6d90bea7e161066f25622fad914bff52bacd2807093dda1838b529ee57f718b374ce2841b924a42457867547a6edcb8412d85f11796742bf640b5819a9546357df778c332af5983c4373a95d9c58b52dba445eee92e6911824f0c534e7a5934d9eac9b7f6fec22002fc53a3003a3304217f567b47cd326edc5f48eb1f46bb20d1e10e72239afc9769344590cf48902aba5405b7d4baa31a912ab398a2f2d3f037614bb56a89244ece50f3a1e058d274f1e70f944eb8a305be91e561e5eb843d057a81f4deb84a6335ec81ca964cdae5f318d4e9aaea2c477cc279c00c698bcfe4b8e04c09079d8f3f5438d9d45a00f50d2f9b245c8c68eebf247e25ba8d26f8b95b21ac9ceb50c0aa2e4bdc032024db216b92f9350a90ac79341af14d3fa8ba908096e1b503341aed667bb184c672dac85fc4f335b3871c3b4e55ea219a857d2d2e135358f6b45a20b3e7de8e09b2041eb7c5084a80258fb524a983752659298a251e178b56f96bc67ae0a78ec92f92d92c9cf0edb5dcb11e739d69410ad44c8df00caa030d7d89f2ec38bd7698115c423cf3e6048793aca08ffbcdac766f1553773fa00031c1d75246e4e1eddf8948d02a3de6d67fd7329e45070f29044587f1e0db50d04e673191a63e30f96ee0d8d52738fab36a7fe2c6ab9301d401e7ca5b1f039193a580e40abbdf40c2d7e27809dec80815d37adae9fe7fb9d3a974c9fc03944d7338d000b81170be4c6792ed6b3b827194b3ae11e2acfca48498d1126aacf80f3d574256ef7f75552ff087a819e", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x42, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0xe6}, 0x108461, 0xc78, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={0xffffffffffffffff, 0x0}, 0x20) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000404000000002e"], 0x0, 0x37}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000300), 0x4) r5 = socket$kcm(0x10, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000011c0)=@generic={0x0}, 0x18) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xf00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0) 685.336565ms ago: executing program 0 (id=6434): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$kcm(0xf, 0x3, 0x2) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@o_path={0x0}, 0x18) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) setsockopt$sock_attach_bpf(r2, 0x88, 0x67, &(0x7f00000000c0)=r3, 0x4) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(r2, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e22, @multicast1=0xe000004f}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000440)}], 0x1}, 0x4840) r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x23, 0x2, 0x0) close(r1) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x100, 0x0, 0xee5b}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x15, 0x5, 0x0) r5 = socket$kcm(0x10, 0x400000002, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000005000000850000000800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0xe, 0x0, &(0x7f00000001c0)="29dd4c808f84a1688ccf6f00f805", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1b0000001a007f049e", 0x9}, {0x0}], 0x2}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc/1/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 207.18866ms ago: executing program 0 (id=6435): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1458}, 0x48800) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/uts\x00') ioctl$TUNSETIFF(r0, 0xb701, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0b00000005000000010001000a00000001"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x4, 0xa, 0x40, 0x1}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x513, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x202, 0x0, 0xffffffff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d000a117ea6e070d6064e22000300000000250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000140081044e81f782db44b9040a1d080201000000040000a118000200ff020000000000000000000000000001a80016ea1f00084003bc5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f722f054f55153c6f94007134cf6ee08000a09108e8d8ef075c0100000000000000cb490000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e0060000000000000580bb9ad809d5e1cace81b341139fe3cd4032e8edb12da7a83248b009c81572d3a39b", 0xe4}], 0x1, 0x0, 0x0, 0x7400}, 0xc04) 0s ago: executing program 0 (id=6436): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x80008, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x107, 0x16, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x5450, r0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x14811, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000040)}, 0x40, 0xff, 0x0, 0x9, 0x20000000000000, 0x0, 0x2, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x8) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_ext={0x1c, 0x14, &(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000bf910000"], &(0x7f0000000340)='syzkaller\x00', 0x8b, 0x10, &(0x7f0000000380)=""/16, 0x40f00, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x2, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x22cb1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r3, 0x0, 0x0}, 0x10) r4 = socket$kcm(0xa, 0x3, 0x87) sendmsg$kcm(r4, &(0x7f0000000580)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000100)="1f75fe21cd52", 0x6}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41) recvmsg(r5, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) sendmsg$inet(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000380)="1e3a", 0x2}], 0x1}, 0x41) recvmsg(r5, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)}, 0x20) syz_clone(0x0, &(0x7f0000002980)="44c6b86d2f099653e237e88694610bb995381e97e22e7520520b97e0a6154a298c8cbdd8cbc6bb2b24f4be88f6ffbefef9265aae1b82fd23e9b191203b0c55b2522a5b5fbb7a3bfb2f89e0618556b03189fe42c62ebcf79156f35e926657", 0x5e, 0x0, 0x0, &(0x7f0000002ac0)="418668ee2c3bef5a6d47a11369bab1d1665613f4dd0804a77169") gettid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000002b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000020}, 0x20000404) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000500)="d8000000180081054e81f782db4cb904021d0800ff207c05e8fe55a10a0015000200142603600e12080005007f370401a8001600200006000500027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0) kernel console output (not intermixed with test programs): interval 1, probability 0, space 0, times 0 [ 780.388668][T21026] CPU: 0 PID: 21026 Comm: syz.2.5738 Not tainted syzkaller #0 [ 780.396334][T21026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 780.406629][T21026] Call Trace: [ 780.409952][T21026] [ 780.413175][T21026] dump_stack_lvl+0x188/0x250 [ 780.418070][T21026] ? show_regs_print_info+0x20/0x20 [ 780.423315][T21026] ? load_image+0x400/0x400 [ 780.427878][T21026] should_fail+0x38c/0x4c0 [ 780.432346][T21026] copy_page_from_iter_atomic+0x43a/0x1540 [ 780.438308][T21026] ? pipe_zero+0x370/0x370 [ 780.442863][T21026] ? shmem_write_begin+0xcd/0x1a0 [ 780.447937][T21026] generic_perform_write+0x30b/0x550 [ 780.453459][T21026] ? grab_cache_page_write_begin+0xa0/0xa0 [ 780.459465][T21026] __generic_file_write_iter+0x25f/0x4e0 [ 780.465442][T21026] generic_file_write_iter+0xa6/0x1b0 [ 780.470993][T21026] vfs_write+0x745/0xd60 [ 780.475515][T21026] ? file_end_write+0x250/0x250 [ 780.480507][T21026] ? __fget_files+0x40f/0x480 [ 780.485240][T21026] ? mutex_lock_nested+0x17/0x20 [ 780.490239][T21026] ? __fdget_pos+0x2bf/0x370 [ 780.494882][T21026] ? ksys_write+0x71/0x260 [ 780.499668][T21026] ksys_write+0x152/0x260 [ 780.504068][T21026] ? __ia32_sys_read+0x80/0x80 [ 780.508887][T21026] ? lockdep_hardirqs_on+0x94/0x140 [ 780.514459][T21026] do_syscall_64+0x4c/0xa0 [ 780.519005][T21026] ? clear_bhb_loop+0x30/0x80 [ 780.523839][T21026] ? clear_bhb_loop+0x30/0x80 [ 780.528564][T21026] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 780.534596][T21026] RIP: 0033:0x7f46e0384799 [ 780.539062][T21026] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 780.558794][T21026] RSP: 002b:00007f46de5de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 780.567246][T21026] RAX: ffffffffffffffda RBX: 00007f46e05fdfa0 RCX: 00007f46e0384799 [ 780.575261][T21026] RDX: 0000000000043451 RSI: 0000200000000200 RDI: 0000000000000005 [ 780.583606][T21026] RBP: 00007f46de5de090 R08: 0000000000000000 R09: 0000000000000000 [ 780.591721][T21026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 780.599731][T21026] R13: 00007f46e05fe038 R14: 00007f46e05fdfa0 R15: 00007ffe162ac418 [ 780.607850][T21026] [ 780.811774][T21030] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 781.634877][T21057] device bond0 entered promiscuous mode [ 781.661191][T21057] device bond_slave_0 entered promiscuous mode [ 781.685148][T21057] device bond_slave_1 entered promiscuous mode [ 781.742213][T21057] device wlan1 entered promiscuous mode [ 781.815737][T21057] device batadv_slave_0 entered promiscuous mode [ 782.185604][T21057] 8021q: adding VLAN 0 to HW filter on device bond0 [ 782.419234][T21057] team0: Port device bond0 removed [ 782.425041][T21057] bridge0: port 1(bond0) entered blocking state [ 782.435737][T21057] bridge0: port 1(bond0) entered disabled state [ 782.445330][T21065] validate_nla: 6 callbacks suppressed [ 782.445349][T21065] netlink: 'syz.5.5753': attribute type 39 has an invalid length. [ 782.478328][T21059] __nla_validate_parse: 5 callbacks suppressed [ 782.478348][T21059] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5751'. [ 782.660293][T21073] netlink: 'syz.3.5756': attribute type 4 has an invalid length. [ 782.676105][T21073] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5756'. [ 782.845187][T21080] device syzkaller0 entered promiscuous mode [ 782.986011][T21086] netlink: 'syz.3.5761': attribute type 21 has an invalid length. [ 783.014710][T21086] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5761'. [ 783.096066][T21086] netlink: 'syz.3.5761': attribute type 4 has an invalid length. [ 783.110700][T21086] netlink: 3 bytes leftover after parsing attributes in process `syz.3.5761'. [ 784.015672][T21092] netlink: 'syz.4.5762': attribute type 10 has an invalid length. [ 784.100424][T21093] tap0: tun_chr_ioctl cmd 1074025677 [ 784.106144][T21093] tap0: linktype set to 785 [ 784.192977][T21112] netlink: 55631 bytes leftover after parsing attributes in process `syz.5.5766'. [ 784.300642][T21111] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5767'. [ 784.446864][T21115] netlink: 'syz.2.5768': attribute type 39 has an invalid length. [ 784.905488][T21129] FAULT_INJECTION: forcing a failure. [ 784.905488][T21129] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 784.965955][T21129] CPU: 1 PID: 21129 Comm: syz.5.5772 Not tainted syzkaller #0 [ 784.973662][T21129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 784.983757][T21129] Call Trace: [ 784.987076][T21129] [ 784.990036][T21129] dump_stack_lvl+0x188/0x250 [ 784.994801][T21129] ? show_regs_print_info+0x20/0x20 [ 785.000143][T21129] ? load_image+0x400/0x400 [ 785.004696][T21129] ? __kasan_kmalloc+0xcc/0xf0 [ 785.009536][T21129] ? __lock_acquire+0x7d10/0x7d10 [ 785.014610][T21129] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 785.021000][T21129] should_fail+0x38c/0x4c0 [ 785.025499][T21129] _copy_from_iter+0x22e/0x1170 [ 785.030397][T21129] ? __lock_acquire+0x7d10/0x7d10 [ 785.035477][T21129] ? copy_mc_pipe_to_iter+0x7d0/0x7d0 [ 785.040994][T21129] ? __virt_addr_valid+0x3c6/0x470 [ 785.046279][T21129] ? __phys_addr_symbol+0x2b/0x70 [ 785.051529][T21129] ? __check_object_size+0x30c/0x410 [ 785.056871][T21129] kernfs_fop_write_iter+0x1a4/0x4c0 [ 785.062301][T21129] ? iov_iter_init+0xb4/0x170 [ 785.067070][T21129] vfs_write+0x745/0xd60 [ 785.071366][T21129] ? file_end_write+0x250/0x250 [ 785.076274][T21129] ? __fget_files+0x40f/0x480 [ 785.081092][T21129] ? mutex_lock_nested+0x17/0x20 [ 785.086254][T21129] ? __fdget_pos+0x2bf/0x370 [ 785.090913][T21129] ? ksys_write+0x71/0x260 [ 785.095403][T21129] ksys_write+0x152/0x260 [ 785.100126][T21129] ? __ia32_sys_read+0x80/0x80 [ 785.104940][T21129] ? lockdep_hardirqs_on+0x94/0x140 [ 785.110190][T21129] do_syscall_64+0x4c/0xa0 [ 785.114689][T21129] ? clear_bhb_loop+0x30/0x80 [ 785.119405][T21129] ? clear_bhb_loop+0x30/0x80 [ 785.124122][T21129] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 785.130141][T21129] RIP: 0033:0x7f74c380c799 [ 785.134605][T21129] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 785.154342][T21129] RSP: 002b:00007f74c1a45028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 785.162807][T21129] RAX: ffffffffffffffda RBX: 00007f74c3a86090 RCX: 00007f74c380c799 [ 785.171045][T21129] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000006 [ 785.179058][T21129] RBP: 00007f74c1a45090 R08: 0000000000000000 R09: 0000000000000000 [ 785.187435][T21129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 785.195538][T21129] R13: 00007f74c3a86128 R14: 00007f74c3a86090 R15: 00007ffcbb658e48 [ 785.203576][T21129] [ 785.747455][T21155] netlink: 'syz.3.5779': attribute type 10 has an invalid length. [ 786.032786][T21161] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5781'. [ 786.480054][T21174] tap0: tun_chr_ioctl cmd 1074025677 [ 786.485633][T21174] tap0: linktype set to 785 [ 786.537789][T21172] netlink: 'syz.4.5786': attribute type 4 has an invalid length. [ 786.556546][T21172] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5786'. [ 786.584907][T21177] netlink: 'syz.2.5787': attribute type 39 has an invalid length. [ 786.708012][T21183] FAULT_INJECTION: forcing a failure. [ 786.708012][T21183] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 786.759055][T21183] CPU: 0 PID: 21183 Comm: syz.2.5790 Not tainted syzkaller #0 [ 786.766703][T21183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 786.773255][T21181] netlink: 'syz.4.5789': attribute type 21 has an invalid length. [ 786.777042][T21183] Call Trace: [ 786.777053][T21183] [ 786.777064][T21183] dump_stack_lvl+0x188/0x250 [ 786.777090][T21183] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 786.777130][T21183] ? show_regs_print_info+0x20/0x20 [ 786.777156][T21183] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 786.777188][T21183] ? dump_stack+0x5/0x20 [ 786.777215][T21183] should_fail+0x38c/0x4c0 [ 786.777247][T21183] strncpy_from_user+0x32/0x360 [ 786.777277][T21183] bpf_prog_load+0x1f0/0x1510 [ 786.777304][T21183] ? lock_acquire+0x208/0x400 [ 786.777338][T21183] ? map_freeze+0x350/0x350 [ 786.837941][T21181] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5789'. [ 786.842015][T21183] ? rcu_is_watching+0x11/0xa0 [ 786.842061][T21183] ? __sys_bpf+0x283/0x6f0 [ 786.842087][T21183] ? bpf_lsm_bpf+0x5/0x10 [ 786.842110][T21183] ? security_bpf+0x7a/0xa0 [ 786.842135][T21183] __sys_bpf+0x532/0x6f0 [ 786.842163][T21183] ? bpf_link_show_fdinfo+0x380/0x380 [ 786.842199][T21183] ? vtime_user_exit+0x2c8/0x3e0 [ 786.842231][T21183] __x64_sys_bpf+0x78/0x90 [ 786.842257][T21183] do_syscall_64+0x4c/0xa0 [ 786.842281][T21183] ? clear_bhb_loop+0x30/0x80 [ 786.842303][T21183] ? clear_bhb_loop+0x30/0x80 [ 786.842327][T21183] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 786.842352][T21183] RIP: 0033:0x7f46e0384799 [ 786.842374][T21183] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 786.842394][T21183] RSP: 002b:00007f46de5de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 786.842421][T21183] RAX: ffffffffffffffda RBX: 00007f46e05fdfa0 RCX: 00007f46e0384799 [ 786.842439][T21183] RDX: 0000000000000070 RSI: 0000200000000440 RDI: 0000000000000005 [ 786.842455][T21183] RBP: 00007f46de5de090 R08: 0000000000000000 R09: 0000000000000000 [ 786.842470][T21183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 786.842485][T21183] R13: 00007f46e05fe038 R14: 00007f46e05fdfa0 R15: 00007ffe162ac418 [ 786.842518][T21183] [ 786.924219][T21181] netlink: 3 bytes leftover after parsing attributes in process `syz.4.5789'. [ 789.660515][T21198] validate_nla: 2 callbacks suppressed [ 789.660588][T21198] netlink: 'syz.2.5793': attribute type 10 has an invalid length. [ 790.076828][T21207] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5796'. [ 790.222547][T21219] netlink: 'syz.3.5800': attribute type 4 has an invalid length. [ 790.230928][T21219] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5800'. [ 790.246431][T21220] netlink: 'syz.4.5799': attribute type 10 has an invalid length. [ 790.366342][T21223] netlink: 'syz.3.5801': attribute type 39 has an invalid length. [ 790.844598][T21225] netlink: 'syz.2.5802': attribute type 4 has an invalid length. [ 790.863137][T21225] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5802'. [ 790.990611][T21225] wlan1: mtu less than device minimum [ 791.027982][T21230] netlink: 'syz.3.5804': attribute type 10 has an invalid length. [ 791.181206][T21233] netlink: 'syz.2.5806': attribute type 10 has an invalid length. [ 791.209226][T21233] device bond0 left promiscuous mode [ 791.214682][T21233] device bond_slave_0 left promiscuous mode [ 791.255582][T21233] device bond_slave_1 left promiscuous mode [ 791.264651][T21233] device wlan1 left promiscuous mode [ 791.271116][T21233] device batadv_slave_0 left promiscuous mode [ 791.279656][T21233] bridge0: port 1(bond0) entered disabled state [ 791.373057][T21233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 791.435752][T21233] team0: Port device bond0 added [ 791.463857][T21237] netlink: 'syz.3.5807': attribute type 10 has an invalid length. [ 791.491299][T21240] netlink: 'syz.4.5805': attribute type 10 has an invalid length. [ 791.973267][T21252] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5811'. [ 794.606669][T21276] netlink: 'syz.0.5817': attribute type 4 has an invalid length. [ 794.668356][T21276] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5817'. [ 794.842117][T21285] netlink: 'syz.2.5820': attribute type 10 has an invalid length. [ 795.076145][T21295] netlink: 'syz.4.5822': attribute type 10 has an invalid length. [ 795.171259][T21292] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5823'. [ 795.933616][T21321] netlink: 'syz.4.5834': attribute type 4 has an invalid length. [ 795.962320][T21321] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5834'. [ 796.445056][T21312] chnl_net:caif_netlink_parms(): no params data found [ 796.743554][T21341] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5839'. [ 796.994054][T21312] bridge0: port 1(bridge_slave_0) entered blocking state [ 797.023481][T21312] bridge0: port 1(bridge_slave_0) entered disabled state [ 797.087762][T21312] device bridge_slave_0 entered promiscuous mode [ 797.125889][T21312] bridge0: port 2(bridge_slave_1) entered blocking state [ 797.154239][T21312] bridge0: port 2(bridge_slave_1) entered disabled state [ 797.186093][T21312] device bridge_slave_1 entered promiscuous mode [ 797.328386][T21312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 797.357140][T21365] netlink: 'syz.0.5844': attribute type 4 has an invalid length. [ 797.370594][T21365] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5844'. [ 797.403723][T21312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 797.525148][T21312] team0: Port device team_slave_0 added [ 797.589750][T21312] team0: Port device team_slave_1 added [ 797.817150][T13113] Bluetooth: hci6: command 0x0409 tx timeout [ 798.174751][T21382] FAULT_INJECTION: forcing a failure. [ 798.174751][T21382] name failslab, interval 1, probability 0, space 0, times 0 [ 798.206675][T21382] CPU: 1 PID: 21382 Comm: syz.0.5847 Not tainted syzkaller #0 [ 798.214292][T21382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 798.224501][T21382] Call Trace: [ 798.227811][T21382] [ 798.230780][T21382] dump_stack_lvl+0x188/0x250 [ 798.235501][T21382] ? show_regs_print_info+0x20/0x20 [ 798.240747][T21382] ? load_image+0x400/0x400 [ 798.245301][T21382] ? __might_sleep+0xf0/0xf0 [ 798.250033][T21382] ? __lock_acquire+0x7d10/0x7d10 [ 798.255123][T21382] should_fail+0x38c/0x4c0 [ 798.259673][T21382] should_failslab+0x5/0x20 [ 798.264230][T21382] slab_pre_alloc_hook+0x51/0xc0 [ 798.269406][T21382] __kmalloc_node+0x6e/0x3b0 [ 798.274034][T21382] ? kvmalloc_node+0x84/0x130 [ 798.278836][T21382] kvmalloc_node+0x84/0x130 [ 798.283378][T21382] generic_map_update_batch+0x3a7/0x7d0 [ 798.289020][T21382] ? rcu_read_unlock+0x90/0x90 [ 798.293823][T21382] ? __fdget+0x18b/0x210 [ 798.298133][T21382] ? rcu_read_unlock+0x90/0x90 [ 798.302937][T21382] bpf_map_do_batch+0x466/0x600 [ 798.307926][T21382] __sys_bpf+0x671/0x6f0 [ 798.312216][T21382] ? bpf_link_show_fdinfo+0x380/0x380 [ 798.317652][T21382] ? vtime_user_exit+0x2c8/0x3e0 [ 798.322639][T21382] __x64_sys_bpf+0x78/0x90 [ 798.327121][T21382] do_syscall_64+0x4c/0xa0 [ 798.331660][T21382] ? clear_bhb_loop+0x30/0x80 [ 798.336369][T21382] ? clear_bhb_loop+0x30/0x80 [ 798.341190][T21382] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 798.347181][T21382] RIP: 0033:0x7f54290ce799 [ 798.351641][T21382] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 798.371483][T21382] RSP: 002b:00007f5427328028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 798.379945][T21382] RAX: ffffffffffffffda RBX: 00007f5429347fa0 RCX: 00007f54290ce799 [ 798.388222][T21382] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 798.396264][T21382] RBP: 00007f5427328090 R08: 0000000000000000 R09: 0000000000000000 [ 798.404273][T21382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 798.412410][T21382] R13: 00007f5429348038 R14: 00007f5429347fa0 R15: 00007ffc6bc5b0e8 [ 798.420542][T21382] [ 798.461932][T21312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 798.511555][T21312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 798.607116][T21312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 799.038119][T21312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 799.045212][T21312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 799.145032][T21312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 799.289256][T21399] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5851'. [ 799.347193][T21407] netlink: 'syz.2.5855': attribute type 4 has an invalid length. [ 799.355078][T21407] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5855'. [ 799.447131][T21312] device hsr_slave_0 entered promiscuous mode [ 799.476638][T21312] device hsr_slave_1 entered promiscuous mode [ 799.482392][T21409] FAULT_INJECTION: forcing a failure. [ 799.482392][T21409] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 799.534801][T21409] CPU: 0 PID: 21409 Comm: syz.5.5857 Not tainted syzkaller #0 [ 799.542564][T21409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 799.553026][T21409] Call Trace: [ 799.556355][T21409] [ 799.559474][T21409] dump_stack_lvl+0x188/0x250 [ 799.564219][T21409] ? show_regs_print_info+0x20/0x20 [ 799.569488][T21409] ? load_image+0x400/0x400 [ 799.574041][T21409] ? __lock_acquire+0x7d10/0x7d10 [ 799.579282][T21409] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 799.585222][T21409] should_fail+0x38c/0x4c0 [ 799.589780][T21409] _copy_from_user+0x2e/0x170 [ 799.594509][T21409] __copy_msghdr_from_user+0x48a/0x630 [ 799.600311][T21409] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 799.606167][T21409] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 799.611519][T21409] ___sys_sendmsg+0x19a/0x2e0 [ 799.616313][T21409] ? __sys_sendmsg+0x2a0/0x2a0 [ 799.621231][T21409] __se_sys_sendmsg+0x1af/0x290 [ 799.626141][T21409] ? __x64_sys_sendmsg+0x80/0x80 [ 799.631156][T21409] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 799.637122][T21409] ? trace_sys_enter+0x1f/0x80 [ 799.642106][T21409] do_syscall_64+0x4c/0xa0 [ 799.647112][T21409] ? clear_bhb_loop+0x30/0x80 [ 799.651827][T21409] ? clear_bhb_loop+0x30/0x80 [ 799.656554][T21409] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 799.662513][T21409] RIP: 0033:0x7f74c380c799 [ 799.666965][T21409] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 799.686708][T21409] RSP: 002b:00007f74c1a66028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 799.695408][T21409] RAX: ffffffffffffffda RBX: 00007f74c3a85fa0 RCX: 00007f74c380c799 [ 799.703692][T21409] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 000000000000000b [ 799.711963][T21409] RBP: 00007f74c1a66090 R08: 0000000000000000 R09: 0000000000000000 [ 799.720173][T21409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 799.728518][T21409] R13: 00007f74c3a86038 R14: 00007f74c3a85fa0 R15: 00007ffcbb658e48 [ 799.736578][T21409] [ 799.789058][T21411] netlink: 'syz.0.5858': attribute type 29 has an invalid length. [ 799.837542][T21312] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 799.845158][T21312] Cannot create hsr debugfs directory [ 799.866028][T21411] netlink: 'syz.0.5858': attribute type 29 has an invalid length. [ 799.902972][ T7] Bluetooth: hci6: command 0x041b tx timeout [ 800.072212][T21418] netlink: 'syz.2.5861': attribute type 39 has an invalid length. [ 801.977113][ T4233] Bluetooth: hci6: command 0x040f tx timeout [ 803.142906][T21312] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.320347][T21312] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.486127][T21312] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.525146][T21437] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5867'. [ 803.638332][T21312] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.678959][T21450] FAULT_INJECTION: forcing a failure. [ 803.678959][T21450] name failslab, interval 1, probability 0, space 0, times 0 [ 803.712501][T21450] CPU: 0 PID: 21450 Comm: syz.5.5870 Not tainted syzkaller #0 [ 803.720181][T21450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 803.730356][T21450] Call Trace: [ 803.733701][T21450] [ 803.737113][T21450] dump_stack_lvl+0x188/0x250 [ 803.741848][T21450] ? show_regs_print_info+0x20/0x20 [ 803.747359][T21450] ? load_image+0x400/0x400 [ 803.752090][T21450] ? __might_sleep+0xf0/0xf0 [ 803.757036][T21450] ? __lock_acquire+0x7d10/0x7d10 [ 803.763347][T21450] ? copy_from_kernel_nofault_allowed+0xb9/0x130 [ 803.769823][T21450] should_fail+0x38c/0x4c0 [ 803.774297][T21450] should_failslab+0x5/0x20 [ 803.779121][T21450] slab_pre_alloc_hook+0x51/0xc0 [ 803.784201][T21450] __kmalloc+0x6b/0x330 [ 803.788412][T21450] ? tomoyo_encode+0x27e/0x540 [ 803.793402][T21450] tomoyo_encode+0x27e/0x540 [ 803.798338][T21450] tomoyo_realpath_from_path+0x5cd/0x610 [ 803.804018][T21450] tomoyo_path_number_perm+0x242/0x660 [ 803.809599][T21450] ? verify_lock_unused+0x140/0x140 [ 803.814876][T21450] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 803.820409][T21450] ? ksys_write+0x1c6/0x260 [ 803.825190][T21450] security_file_ioctl+0x6c/0xa0 [ 803.830260][T21450] __se_sys_ioctl+0x48/0x170 [ 803.834951][T21450] do_syscall_64+0x4c/0xa0 [ 803.839388][T21450] ? clear_bhb_loop+0x30/0x80 [ 803.844163][T21450] ? clear_bhb_loop+0x30/0x80 [ 803.849007][T21450] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 803.855054][T21450] RIP: 0033:0x7f74c380c799 [ 803.859838][T21450] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 803.879943][T21450] RSP: 002b:00007f74c1a66028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 803.888514][T21450] RAX: ffffffffffffffda RBX: 00007f74c3a85fa0 RCX: 00007f74c380c799 [ 803.896623][T21450] RDX: 000000110c23003f RSI: 00000000c004743e RDI: 0000000000000003 [ 803.904811][T21450] RBP: 00007f74c1a66090 R08: 0000000000000000 R09: 0000000000000000 [ 803.912839][T21450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 803.921070][T21450] R13: 00007f74c3a86038 R14: 00007f74c3a85fa0 R15: 00007ffcbb658e48 [ 803.929595][T21450] [ 803.944231][T21446] netlink: 'syz.4.5869': attribute type 4 has an invalid length. [ 803.959598][T21446] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5869'. [ 803.971821][T21450] ERROR: Out of memory at tomoyo_realpath_from_path. [ 804.057753][ T4235] Bluetooth: hci6: command 0x0419 tx timeout [ 804.263257][T21312] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 804.297769][T21312] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 804.342846][T21312] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 804.490107][T21312] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 804.614628][T21474] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5880'. [ 804.879596][T21480] FAULT_INJECTION: forcing a failure. [ 804.879596][T21480] name failslab, interval 1, probability 0, space 0, times 0 [ 804.919920][T21312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 804.950562][T21480] CPU: 1 PID: 21480 Comm: syz.0.5882 Not tainted syzkaller #0 [ 804.958194][T21480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 804.968466][T21480] Call Trace: [ 804.971786][T21480] [ 804.974762][T21480] dump_stack_lvl+0x188/0x250 [ 804.979476][T21480] ? show_regs_print_info+0x20/0x20 [ 804.984699][T21480] ? load_image+0x400/0x400 [ 804.989228][T21480] ? __lock_acquire+0x7d10/0x7d10 [ 804.994278][T21480] should_fail+0x38c/0x4c0 [ 804.998749][T21480] should_failslab+0x5/0x20 [ 805.003380][T21480] slab_pre_alloc_hook+0x51/0xc0 [ 805.008338][T21480] kmem_cache_alloc_node_trace+0x4a/0x300 [ 805.014083][T21480] ? __get_vm_area_node+0x119/0x2d0 [ 805.019320][T21480] __get_vm_area_node+0x119/0x2d0 [ 805.024370][T21480] __vmalloc_node_range+0xef/0x8b0 [ 805.029525][T21480] ? copy_process+0x5f0/0x3e20 [ 805.034319][T21480] ? rcu_is_watching+0x11/0xa0 [ 805.039109][T21480] ? kmem_cache_alloc_node+0x162/0x2d0 [ 805.044674][T21480] dup_task_struct+0x3f5/0xb30 [ 805.049448][T21480] ? copy_process+0x5f0/0x3e20 [ 805.054236][T21480] copy_process+0x5f0/0x3e20 [ 805.059049][T21480] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 805.065071][T21480] ? __pidfd_prepare+0x140/0x140 [ 805.070039][T21480] kernel_clone+0x23f/0x990 [ 805.074566][T21480] ? create_io_thread+0x180/0x180 [ 805.079639][T21480] __x64_sys_clone+0x19a/0x210 [ 805.084440][T21480] ? __ia32_sys_vfork+0x130/0x130 [ 805.089510][T21480] do_syscall_64+0x4c/0xa0 [ 805.094005][T21480] ? clear_bhb_loop+0x30/0x80 [ 805.098698][T21480] ? clear_bhb_loop+0x30/0x80 [ 805.103404][T21480] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 805.109324][T21480] RIP: 0033:0x7f54290ce799 [ 805.113869][T21480] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 805.133906][T21480] RSP: 002b:00007f5427327fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 805.142359][T21480] RAX: ffffffffffffffda RBX: 00007f5429347fa0 RCX: 00007f54290ce799 [ 805.150457][T21480] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000126400 [ 805.158452][T21480] RBP: 00007f5427328090 R08: 0000000000000000 R09: 0000000000000000 [ 805.166691][T21480] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 805.174823][T21480] R13: 00007f5429348038 R14: 00007f5429347fa0 R15: 00007ffc6bc5b0e8 [ 805.182948][T21480] [ 805.397553][T21480] syz.0.5882: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 805.446316][T21480] CPU: 0 PID: 21480 Comm: syz.0.5882 Not tainted syzkaller #0 [ 805.453903][T21480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 805.464200][T21480] Call Trace: [ 805.467627][T21480] [ 805.470775][T21480] dump_stack_lvl+0x188/0x250 [ 805.475603][T21480] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 805.482156][T21480] ? show_regs_print_info+0x20/0x20 [ 805.487853][T21480] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 805.494066][T21480] warn_alloc+0x243/0x320 [ 805.498805][T21480] ? zone_watermark_ok_safe+0x240/0x240 [ 805.504494][T21480] ? rcu_is_watching+0x11/0xa0 [ 805.509547][T21480] ? __get_vm_area_node+0x119/0x2d0 [ 805.514798][T21480] ? __get_vm_area_node+0x2b5/0x2d0 [ 805.520423][T21480] __vmalloc_node_range+0x2b1/0x8b0 [ 805.525688][T21480] ? rcu_is_watching+0x11/0xa0 [ 805.530492][T21480] ? kmem_cache_alloc_node+0x162/0x2d0 [ 805.535979][T21480] dup_task_struct+0x3f5/0xb30 [ 805.541033][T21480] ? copy_process+0x5f0/0x3e20 [ 805.546043][T21480] copy_process+0x5f0/0x3e20 [ 805.550800][T21480] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 805.557052][T21480] ? __pidfd_prepare+0x140/0x140 [ 805.562058][T21480] kernel_clone+0x23f/0x990 [ 805.566617][T21480] ? create_io_thread+0x180/0x180 [ 805.571713][T21480] __x64_sys_clone+0x19a/0x210 [ 805.576592][T21480] ? __ia32_sys_vfork+0x130/0x130 [ 805.581658][T21480] do_syscall_64+0x4c/0xa0 [ 805.586105][T21480] ? clear_bhb_loop+0x30/0x80 [ 805.591027][T21480] ? clear_bhb_loop+0x30/0x80 [ 805.595960][T21480] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 805.602024][T21480] RIP: 0033:0x7f54290ce799 [ 805.606483][T21480] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 805.626409][T21480] RSP: 002b:00007f5427327fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 805.634960][T21480] RAX: ffffffffffffffda RBX: 00007f5429347fa0 RCX: 00007f54290ce799 [ 805.643742][T21480] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000126400 [ 805.652510][T21480] RBP: 00007f5427328090 R08: 0000000000000000 R09: 0000000000000000 [ 805.660895][T21480] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 805.669069][T21480] R13: 00007f5429348038 R14: 00007f5429347fa0 R15: 00007ffc6bc5b0e8 [ 805.677076][T21480] [ 805.682656][T21480] Mem-Info: [ 805.685819][T21480] active_anon:279 inactive_anon:6064 isolated_anon:0 [ 805.685819][T21480] active_file:18108 inactive_file:41028 isolated_file:0 [ 805.685819][T21480] unevictable:768 dirty:144 writeback:7 [ 805.685819][T21480] slab_reclaimable:20614 slab_unreclaimable:97713 [ 805.685819][T21480] mapped:35703 shmem:1630 pagetables:620 bounce:0 [ 805.685819][T21480] kernel_misc_reclaimable:0 [ 805.685819][T21480] free:1364179 free_pcp:12954 free_cma:0 [ 805.745444][T21480] Node 0 active_anon:1084kB inactive_anon:23648kB active_file:72232kB inactive_file:164112kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:142812kB dirty:576kB writeback:28kB shmem:4444kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10440kB pagetables:2480kB all_unreclaimable? no [ 805.777579][T21480] Node 1 active_anon:32kB inactive_anon:508kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2076kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 805.807833][T21480] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 805.835341][T21480] lowmem_reserve[]: 0 2539 2540 2540 2540 [ 805.841795][T21480] Node 0 DMA32 free:1531348kB min:34784kB low:43480kB high:52176kB reserved_highatomic:0KB active_anon:1084kB inactive_anon:23648kB active_file:72232kB inactive_file:164112kB unevictable:1536kB writepending:604kB present:3129332kB managed:2606552kB mlocked:0kB bounce:0kB free_pcp:39484kB local_pcp:21688kB free_cma:0kB [ 805.885507][T21480] lowmem_reserve[]: 0 0 0 0 0 [ 805.891916][T21480] Node 0 Normal free:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:660kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 805.926824][T21480] lowmem_reserve[]: 0 0 0 0 0 [ 805.932796][T21480] Node 1 Normal free:3910252kB min:55108kB low:68884kB high:82660kB reserved_highatomic:0KB active_anon:32kB inactive_anon:508kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:12316kB local_pcp:4248kB free_cma:0kB [ 805.969458][T21480] lowmem_reserve[]: 0 0 0 0 0 [ 805.977293][T21480] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 806.004956][T21480] Node 0 DMA32: 2485*4kB (UME) 1317*8kB (UME) 655*16kB (UME) 927*32kB (UME) 301*64kB (UM) 1004*128kB (UME) 451*256kB (UM) 216*512kB (UME) 82*1024kB (UM) 29*2048kB (UM) 233*4096kB (UM) = 1532172kB [ 806.033760][T21480] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 806.047813][T21480] Node 1 Normal: 61*4kB (UE) 21*8kB (UME) 17*16kB (UME) 50*32kB (UME) 28*64kB (UE) 13*128kB (UME) 4*256kB (UME) 2*512kB (U) 1*1024kB (E) 1*2048kB (M) 952*4096kB (UM) = 3910252kB [ 806.073720][T21480] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 806.085375][T21480] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 806.102413][T21480] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 806.116529][T21480] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 806.135383][T21480] 60768 total pagecache pages [ 806.140898][T21480] 0 pages in swap cache [ 806.145641][T21480] Swap cache stats: add 0, delete 0, find 0/0 [ 806.160764][T21480] Free swap = 124996kB [ 806.165093][T21480] Total swap = 124996kB [ 806.173624][T21480] 2097051 pages RAM [ 806.182866][T21480] 0 pages HighMem/MovableOnly [ 806.191748][T21480] 411490 pages reserved [ 806.195945][T21480] 0 pages cma reserved [ 807.425275][T21485] netlink: 'syz.2.5884': attribute type 4 has an invalid length. [ 807.443929][T21485] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5884'. [ 807.464343][ T5791] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 807.484882][ T5791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 807.518197][T21312] 8021q: adding VLAN 0 to HW filter on device team0 [ 807.548538][ T5781] device gretap0 left promiscuous mode [ 807.554132][ T5781] Ÿë: port 1(gretap0) entered disabled state [ 807.658288][ T5821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 807.670748][ T5821] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 807.691643][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state [ 807.698940][ T5821] bridge0: port 1(bridge_slave_0) entered forwarding state [ 807.767592][ T5821] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 807.793229][ T5825] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 807.816183][ T5825] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 807.826439][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 807.833826][ T5825] bridge0: port 2(bridge_slave_1) entered forwarding state [ 807.915833][T21499] netlink: 'syz.2.5887': attribute type 10 has an invalid length. [ 808.080360][ T5800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 808.187950][ T5800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 808.205376][ T5800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 808.239327][ T5800] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 808.277530][ T5800] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 808.396361][ T5800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 808.414923][ T5800] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 808.474866][ T5815] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 808.490607][ T5815] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 808.546461][ T5821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 808.565306][ T5821] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 808.578734][T21312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 808.861065][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.867581][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 811.556882][T21525] netlink: 'syz.5.5898': attribute type 4 has an invalid length. [ 811.566048][T21525] netlink: 152 bytes leftover after parsing attributes in process `syz.5.5898'. [ 811.695515][ T5781] bond0: (slave wlan1): Releasing backup interface [ 811.855277][ T5825] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 811.872408][ T5825] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 811.915985][T21312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 811.924412][T21537] netlink: 144 bytes leftover after parsing attributes in process `syz.5.5902'. [ 812.131368][ T5800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 812.142404][ T5800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 812.175963][ T5781] device hsr_slave_0 left promiscuous mode [ 812.213890][ T5781] device hsr_slave_1 left promiscuous mode [ 812.243459][ T5781] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 812.253425][ T5781] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 812.263532][ T5781] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 812.271967][ T5781] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 812.281341][ T5781] device bridge_slave_1 left promiscuous mode [ 812.288817][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 812.299039][T21544] FAULT_INJECTION: forcing a failure. [ 812.299039][T21544] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 812.313016][T21544] CPU: 1 PID: 21544 Comm: syz.5.5905 Not tainted syzkaller #0 [ 812.320531][T21544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 812.330720][T21544] Call Trace: [ 812.334263][T21544] [ 812.337236][T21544] dump_stack_lvl+0x188/0x250 [ 812.342101][T21544] ? show_regs_print_info+0x20/0x20 [ 812.347371][T21544] ? load_image+0x400/0x400 [ 812.351996][T21544] ? __lock_acquire+0x7d10/0x7d10 [ 812.357099][T21544] should_fail+0x38c/0x4c0 [ 812.361584][T21544] _copy_from_user+0x2e/0x170 [ 812.366684][T21544] iovec_from_user+0x142/0x370 [ 812.371509][T21544] __import_iovec+0x70/0x490 [ 812.376335][T21544] import_iovec+0x6f/0xa0 [ 812.381207][T21544] ___sys_sendmsg+0x1fd/0x2e0 [ 812.386330][T21544] ? __sys_sendmsg+0x2a0/0x2a0 [ 812.391162][T21544] ? vfs_write+0x8b2/0xd60 [ 812.395670][T21544] __se_sys_sendmsg+0x1af/0x290 [ 812.400753][T21544] ? __x64_sys_sendmsg+0x80/0x80 [ 812.406079][T21544] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 812.412830][T21544] ? lockdep_hardirqs_on+0x94/0x140 [ 812.418173][T21544] do_syscall_64+0x4c/0xa0 [ 812.422772][T21544] ? clear_bhb_loop+0x30/0x80 [ 812.427487][T21544] ? clear_bhb_loop+0x30/0x80 [ 812.432294][T21544] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 812.438335][T21544] RIP: 0033:0x7f74c380c799 [ 812.442883][T21544] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 812.462633][T21544] RSP: 002b:00007f74c1a66028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 812.471294][T21544] RAX: ffffffffffffffda RBX: 00007f74c3a85fa0 RCX: 00007f74c380c799 [ 812.479511][T21544] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 812.487760][T21544] RBP: 00007f74c1a66090 R08: 0000000000000000 R09: 0000000000000000 [ 812.495813][T21544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 812.504016][T21544] R13: 00007f74c3a86038 R14: 00007f74c3a85fa0 R15: 00007ffcbb658e48 [ 812.512361][T21544] [ 812.531727][ T5781] device veth1_macvtap left promiscuous mode [ 812.542923][ T5781] device veth0_macvtap left promiscuous mode [ 812.752094][ T5781] team0 (unregistering): Port device geneve1 removed [ 812.833601][ T5781] team0 (unregistering): Port device team_slave_1 removed [ 812.853759][ T5781] team0 (unregistering): Port device team_slave_0 removed [ 812.875065][ T5781] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 812.894415][ T5781] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 812.962626][ T5781] team0 (unregistering): Port device bond0 removed [ 812.989568][ T5781] bond0 (unregistering): Released all slaves [ 813.045605][T21542] netlink: 830 bytes leftover after parsing attributes in process `syz.2.5904'. [ 813.072793][ T5825] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 813.088124][ T5825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 813.104991][ T5825] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 813.115102][ T5825] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 813.150076][T21312] device veth0_vlan entered promiscuous mode [ 813.193139][T21312] device veth1_vlan entered promiscuous mode [ 813.316665][ T5815] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 813.328585][ T5815] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 813.337508][ T5815] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 813.346432][ T5815] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 813.371826][T21312] device veth0_macvtap entered promiscuous mode [ 813.665343][T21312] device veth1_macvtap entered promiscuous mode [ 813.718448][T21312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 813.730042][T21312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 813.740060][T21312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 813.750717][T21312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 813.764010][T21312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 813.774684][T21312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 813.808788][T21312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 813.820392][ T5825] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 813.845817][ T5825] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 813.877481][ T5825] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 813.906727][ T5825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 814.079588][T21312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 814.114562][T21312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 814.142952][T21312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 814.175645][T21312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 814.185914][T21312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 814.204752][T21312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 814.214824][T21312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 814.238735][T21312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 814.256714][T21312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 814.275460][T21312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 814.288132][T21312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 814.317766][ T5825] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 814.336901][ T5825] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 814.386885][T21312] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.416317][T21312] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.444219][T21312] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.477016][T21312] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.567759][T21563] netlink: 'syz.2.5911': attribute type 10 has an invalid length. [ 814.927058][ T5825] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 814.935020][ T5825] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 814.979217][ T5815] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 815.017556][ T5821] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 815.032397][ T5821] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 815.074223][ T5821] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 815.942728][T21589] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.5918'. [ 816.093471][T21593] netlink: 'syz.5.5920': attribute type 1 has an invalid length. [ 816.135865][T21593] netlink: 'syz.5.5920': attribute type 4 has an invalid length. [ 816.173718][T21593] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.5920'. [ 817.197737][T21607] netlink: 'syz.3.5925': attribute type 10 has an invalid length. [ 817.431876][T21607] team0: Port device geneve1 added [ 818.061870][T21621] netlink: 15231 bytes leftover after parsing attributes in process `syz.2.5930'. [ 818.152033][T21625] FAULT_INJECTION: forcing a failure. [ 818.152033][T21625] name failslab, interval 1, probability 0, space 0, times 0 [ 818.197246][T21625] CPU: 0 PID: 21625 Comm: syz.0.5932 Not tainted syzkaller #0 [ 818.205090][T21625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 818.215315][T21625] Call Trace: [ 818.218720][T21625] [ 818.221698][T21625] dump_stack_lvl+0x188/0x250 [ 818.226533][T21625] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 818.232799][T21625] ? show_regs_print_info+0x20/0x20 [ 818.238052][T21625] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 818.244273][T21625] should_fail+0x38c/0x4c0 [ 818.248751][T21625] should_failslab+0x5/0x20 [ 818.253336][T21625] slab_pre_alloc_hook+0x51/0xc0 [ 818.258327][T21625] __kmalloc+0x6b/0x330 [ 818.262654][T21625] ? bpf_test_init+0xf8/0x1b0 [ 818.267378][T21625] ? __lock_acquire+0x7d10/0x7d10 [ 818.272546][T21625] bpf_test_init+0xf8/0x1b0 [ 818.277098][T21625] bpf_prog_test_run_skb+0x181/0x1180 [ 818.282792][T21625] ? __fget_files+0x40f/0x480 [ 818.288304][T21625] ? cpu_online+0x60/0x60 [ 818.292881][T21625] bpf_prog_test_run+0x31e/0x390 [ 818.298055][T21625] __sys_bpf+0x5a5/0x6f0 [ 818.302625][T21625] ? bpf_link_show_fdinfo+0x380/0x380 [ 818.308149][T21625] __x64_sys_bpf+0x78/0x90 [ 818.312713][T21625] do_syscall_64+0x4c/0xa0 [ 818.317180][T21625] ? clear_bhb_loop+0x30/0x80 [ 818.321924][T21625] ? clear_bhb_loop+0x30/0x80 [ 818.326647][T21625] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 818.332581][T21625] RIP: 0033:0x7f54290ce799 [ 818.337133][T21625] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 818.356999][T21625] RSP: 002b:00007f5427328028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 818.365674][T21625] RAX: ffffffffffffffda RBX: 00007f5429347fa0 RCX: 00007f54290ce799 [ 818.373861][T21625] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 818.382126][T21625] RBP: 00007f5427328090 R08: 0000000000000000 R09: 0000000000000000 [ 818.390449][T21625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 818.398463][T21625] R13: 00007f5429348038 R14: 00007f5429347fa0 R15: 00007ffc6bc5b0e8 [ 818.406782][T21625] [ 821.019446][T21646] netlink: 144 bytes leftover after parsing attributes in process `syz.4.5938'. [ 821.079661][T21656] sock: sock_timestamping_bind_phc: sock not bind to device [ 821.293276][T21660] netlink: 'syz.5.5941': attribute type 39 has an invalid length. [ 822.867808][T21714] netlink: 'syz.0.5958': attribute type 39 has an invalid length. [ 823.048583][T21718] sock: sock_timestamping_bind_phc: sock not bind to device [ 823.518716][T21721] netlink: 'syz.2.5961': attribute type 10 has an invalid length. [ 823.674190][T21729] netlink: 'syz.0.5963': attribute type 1 has an invalid length. [ 823.699481][T21729] netlink: 'syz.0.5963': attribute type 4 has an invalid length. [ 823.738913][T21729] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.5963'. [ 826.989390][T21754] netlink: 'syz.3.5970': attribute type 39 has an invalid length. [ 827.435861][T21758] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 827.503728][T21769] sock: sock_timestamping_bind_phc: sock not bind to device [ 827.598802][T21772] netlink: 'syz.3.5977': attribute type 10 has an invalid length. [ 829.040137][T21815] netlink: 'syz.4.5989': attribute type 10 has an invalid length. [ 829.160474][T21823] FAULT_INJECTION: forcing a failure. [ 829.160474][T21823] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 829.194671][T21823] CPU: 0 PID: 21823 Comm: syz.3.5996 Not tainted syzkaller #0 [ 829.202206][T21823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 829.212456][T21823] Call Trace: [ 829.215811][T21823] [ 829.218860][T21823] dump_stack_lvl+0x188/0x250 [ 829.223609][T21823] ? show_regs_print_info+0x20/0x20 [ 829.228932][T21823] ? load_image+0x400/0x400 [ 829.233499][T21823] ? __kasan_kmalloc+0xcc/0xf0 [ 829.238323][T21823] ? __lock_acquire+0x7d10/0x7d10 [ 829.243620][T21823] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 829.249751][T21823] should_fail+0x38c/0x4c0 [ 829.254520][T21823] _copy_from_iter+0x22e/0x1170 [ 829.259510][T21823] ? __lock_acquire+0x7d10/0x7d10 [ 829.264591][T21823] ? copy_mc_pipe_to_iter+0x7d0/0x7d0 [ 829.270203][T21823] ? __virt_addr_valid+0x3c6/0x470 [ 829.275492][T21823] ? __phys_addr_symbol+0x2b/0x70 [ 829.280606][T21823] ? __check_object_size+0x30c/0x410 [ 829.286033][T21823] kernfs_fop_write_iter+0x1a4/0x4c0 [ 829.291390][T21823] ? iov_iter_init+0xb4/0x170 [ 829.296132][T21823] vfs_write+0x745/0xd60 [ 829.300545][T21823] ? file_end_write+0x250/0x250 [ 829.305458][T21823] ? __fget_files+0x40f/0x480 [ 829.310187][T21823] ? mutex_lock_nested+0x17/0x20 [ 829.315164][T21823] ? __fdget_pos+0x2bf/0x370 [ 829.319795][T21823] ? ksys_write+0x71/0x260 [ 829.324274][T21823] ksys_write+0x152/0x260 [ 829.328652][T21823] ? __ia32_sys_read+0x80/0x80 [ 829.333462][T21823] ? lockdep_hardirqs_on+0x94/0x140 [ 829.338711][T21823] do_syscall_64+0x4c/0xa0 [ 829.343179][T21823] ? clear_bhb_loop+0x30/0x80 [ 829.347985][T21823] ? clear_bhb_loop+0x30/0x80 [ 829.352824][T21823] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 829.358865][T21823] RIP: 0033:0x7f2ff37f4799 [ 829.363325][T21823] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 829.383072][T21823] RSP: 002b:00007f2ff1a4e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 829.391639][T21823] RAX: ffffffffffffffda RBX: 00007f2ff3a6dfa0 RCX: 00007f2ff37f4799 [ 829.399692][T21823] RDX: 0000000000000005 RSI: 0000200000000080 RDI: 0000000000000004 [ 829.407888][T21823] RBP: 00007f2ff1a4e090 R08: 0000000000000000 R09: 0000000000000000 [ 829.416144][T21823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 829.424160][T21823] R13: 00007f2ff3a6e038 R14: 00007f2ff3a6dfa0 R15: 00007fff9f02c988 [ 829.432196][T21823] [ 830.191621][T21844] netlink: 'syz.4.6003': attribute type 10 has an invalid length. [ 831.294673][T21864] chnl_net:caif_netlink_parms(): no params data found [ 832.937154][ T1108] Bluetooth: hci5: command 0x0409 tx timeout [ 833.522554][ T5791] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 833.629172][ T5791] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 833.676624][T21864] bridge0: port 1(bridge_slave_0) entered blocking state [ 833.684431][T21864] bridge0: port 1(bridge_slave_0) entered disabled state [ 833.703999][T21864] device bridge_slave_0 entered promiscuous mode [ 833.856362][ T5791] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 833.907497][T21864] bridge0: port 2(bridge_slave_1) entered blocking state [ 833.927135][T21864] bridge0: port 2(bridge_slave_1) entered disabled state [ 833.947238][T21864] device bridge_slave_1 entered promiscuous mode [ 834.018352][ T5791] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.066743][T21864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 834.149389][T21864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 834.190565][T21864] team0: Port device team_slave_0 added [ 834.251201][T21910] FAULT_INJECTION: forcing a failure. [ 834.251201][T21910] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 834.265040][T21864] team0: Port device team_slave_1 added [ 834.294573][T21910] CPU: 1 PID: 21910 Comm: syz.3.6022 Not tainted syzkaller #0 [ 834.302219][T21910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 834.312942][T21910] Call Trace: [ 834.316255][T21910] [ 834.319363][T21910] dump_stack_lvl+0x188/0x250 [ 834.324092][T21910] ? show_regs_print_info+0x20/0x20 [ 834.329342][T21910] ? load_image+0x400/0x400 [ 834.333909][T21910] ? __lock_acquire+0x7d10/0x7d10 [ 834.338993][T21910] should_fail+0x38c/0x4c0 [ 834.343458][T21910] _copy_from_user+0x2e/0x170 [ 834.348289][T21910] __copy_msghdr_from_user+0x48a/0x630 [ 834.353794][T21910] ? verify_lock_unused+0x140/0x140 [ 834.359305][T21910] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 834.364699][T21910] ___sys_sendmsg+0x19a/0x2e0 [ 834.369533][T21910] ? __sys_sendmsg+0x2a0/0x2a0 [ 834.374442][T21910] ? vfs_write+0x8b2/0xd60 [ 834.378924][T21910] __se_sys_sendmsg+0x1af/0x290 [ 834.383852][T21910] ? __x64_sys_sendmsg+0x80/0x80 [ 834.388847][T21910] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 834.395049][T21910] ? lockdep_hardirqs_on+0x94/0x140 [ 834.400652][T21910] do_syscall_64+0x4c/0xa0 [ 834.405206][T21910] ? clear_bhb_loop+0x30/0x80 [ 834.409932][T21910] ? clear_bhb_loop+0x30/0x80 [ 834.414771][T21910] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 834.420714][T21910] RIP: 0033:0x7f2ff37f4799 [ 834.425308][T21910] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 834.445202][T21910] RSP: 002b:00007f2ff1a4e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 834.453788][T21910] RAX: ffffffffffffffda RBX: 00007f2ff3a6dfa0 RCX: 00007f2ff37f4799 [ 834.461996][T21910] RDX: 0000000020040000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 834.470015][T21910] RBP: 00007f2ff1a4e090 R08: 0000000000000000 R09: 0000000000000000 [ 834.478146][T21910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 834.486426][T21910] R13: 00007f2ff3a6e038 R14: 00007f2ff3a6dfa0 R15: 00007fff9f02c988 [ 834.494463][T21910] [ 834.557153][T21905] netlink: 'syz.4.6020': attribute type 10 has an invalid length. [ 834.683788][T21864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 834.697157][T21864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 834.844466][T21864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 834.886844][T21864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 834.907287][T21864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 834.974402][T21864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 835.018179][T13113] Bluetooth: hci5: command 0x041b tx timeout [ 835.141918][T21939] FAULT_INJECTION: forcing a failure. [ 835.141918][T21939] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 835.167666][T21939] CPU: 1 PID: 21939 Comm: syz.3.6029 Not tainted syzkaller #0 [ 835.175204][T21939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 835.185572][T21939] Call Trace: [ 835.188889][T21939] [ 835.191846][T21939] dump_stack_lvl+0x188/0x250 [ 835.196682][T21939] ? show_regs_print_info+0x20/0x20 [ 835.202025][T21939] ? load_image+0x400/0x400 [ 835.206658][T21939] ? __kasan_kmalloc+0xcc/0xf0 [ 835.211480][T21939] ? __lock_acquire+0x7d10/0x7d10 [ 835.216540][T21939] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 835.222652][T21939] should_fail+0x38c/0x4c0 [ 835.227133][T21939] _copy_from_iter+0x22e/0x1170 [ 835.232127][T21939] ? __lock_acquire+0x7d10/0x7d10 [ 835.237324][T21939] ? copy_mc_pipe_to_iter+0x7d0/0x7d0 [ 835.242754][T21939] ? __virt_addr_valid+0x3c6/0x470 [ 835.248260][T21939] ? __phys_addr_symbol+0x2b/0x70 [ 835.253494][T21939] ? __check_object_size+0x30c/0x410 [ 835.258822][T21939] kernfs_fop_write_iter+0x1a4/0x4c0 [ 835.264152][T21939] ? iov_iter_init+0xb4/0x170 [ 835.268966][T21939] vfs_write+0x745/0xd60 [ 835.273245][T21939] ? file_end_write+0x250/0x250 [ 835.278122][T21939] ? __fget_files+0x40f/0x480 [ 835.282935][T21939] ? mutex_lock_nested+0x17/0x20 [ 835.287993][T21939] ? __fdget_pos+0x2bf/0x370 [ 835.292607][T21939] ? ksys_write+0x71/0x260 [ 835.297187][T21939] ksys_write+0x152/0x260 [ 835.301542][T21939] ? __ia32_sys_read+0x80/0x80 [ 835.306323][T21939] ? lockdep_hardirqs_on+0x94/0x140 [ 835.311672][T21939] do_syscall_64+0x4c/0xa0 [ 835.316120][T21939] ? clear_bhb_loop+0x30/0x80 [ 835.320995][T21939] ? clear_bhb_loop+0x30/0x80 [ 835.325807][T21939] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 835.331824][T21939] RIP: 0033:0x7f2ff37f4799 [ 835.336489][T21939] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 835.356207][T21939] RSP: 002b:00007f2ff1a2d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 835.364944][T21939] RAX: ffffffffffffffda RBX: 00007f2ff3a6e090 RCX: 00007f2ff37f4799 [ 835.373062][T21939] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 000000000000000d [ 835.381066][T21939] RBP: 00007f2ff1a2d090 R08: 0000000000000000 R09: 0000000000000000 [ 835.389320][T21939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 835.397397][T21939] R13: 00007f2ff3a6e128 R14: 00007f2ff3a6e090 R15: 00007fff9f02c988 [ 835.405722][T21939] [ 835.432636][T21864] device hsr_slave_0 entered promiscuous mode [ 835.458080][T21864] device hsr_slave_1 entered promiscuous mode [ 835.507233][T21864] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 835.519840][T21864] Cannot create hsr debugfs directory [ 837.097170][ T4198] Bluetooth: hci5: command 0x040f tx timeout [ 837.934612][T21963] netlink: 'syz.4.6033': attribute type 39 has an invalid length. [ 838.335489][ T5791] device gretap0 left promiscuous mode [ 838.369616][ T5791] Ÿë: port 1(gretap0) entered disabled state [ 838.581440][T21988] netlink: 'syz.5.6037': attribute type 10 has an invalid length. [ 838.864610][T21988] team0: Port device geneve1 added [ 839.042827][ T5791] bond0: (slave wlan1): Releasing backup interface [ 839.097637][T22013] FAULT_INJECTION: forcing a failure. [ 839.097637][T22013] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 839.167146][T22013] CPU: 1 PID: 22013 Comm: syz.3.6043 Not tainted syzkaller #0 [ 839.174676][T22013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 839.184765][T22013] Call Trace: [ 839.188071][T22013] [ 839.191023][T22013] dump_stack_lvl+0x188/0x250 [ 839.195734][T22013] ? show_regs_print_info+0x20/0x20 [ 839.201042][T22013] ? load_image+0x400/0x400 [ 839.205575][T22013] ? __lock_acquire+0x7d10/0x7d10 [ 839.210745][T22013] should_fail+0x38c/0x4c0 [ 839.215213][T22013] _copy_from_user+0x2e/0x170 [ 839.219921][T22013] iovec_from_user+0x142/0x370 [ 839.224727][T22013] __import_iovec+0x70/0x490 [ 839.229348][T22013] import_iovec+0x6f/0xa0 [ 839.233714][T22013] ___sys_recvmsg+0x4e9/0x5c0 [ 839.238427][T22013] ? __sys_recvmsg+0x280/0x280 [ 839.243212][T22013] ? trace_event_raw_event_lock+0x270/0x270 [ 839.249240][T22013] __x64_sys_recvmsg+0x1f9/0x2c0 [ 839.254207][T22013] ? ___sys_recvmsg+0x5c0/0x5c0 [ 839.259170][T22013] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 839.265188][T22013] ? lockdep_hardirqs_on+0x94/0x140 [ 839.270426][T22013] do_syscall_64+0x4c/0xa0 [ 839.274862][T22013] ? clear_bhb_loop+0x30/0x80 [ 839.279624][T22013] ? clear_bhb_loop+0x30/0x80 [ 839.284514][T22013] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 839.290428][T22013] RIP: 0033:0x7f2ff37f4799 [ 839.294873][T22013] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 839.314814][T22013] RSP: 002b:00007f2ff1a4e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 839.323253][T22013] RAX: ffffffffffffffda RBX: 00007f2ff3a6dfa0 RCX: 00007f2ff37f4799 [ 839.331343][T22013] RDX: 0000000000010057 RSI: 0000200000000300 RDI: 0000000000000003 [ 839.339522][T22013] RBP: 00007f2ff1a4e090 R08: 0000000000000000 R09: 0000000000000000 [ 839.347510][T22013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 839.355931][T22013] R13: 00007f2ff3a6e038 R14: 00007f2ff3a6dfa0 R15: 00007fff9f02c988 [ 839.364292][T22013] [ 839.368703][ T1111] Bluetooth: hci5: command 0x0419 tx timeout [ 839.467272][T22016] netlink: 'syz.4.6044': attribute type 39 has an invalid length. [ 839.582326][T21864] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 839.644824][T21864] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 839.694471][ T5791] device hsr_slave_0 left promiscuous mode [ 839.711557][ T5791] device hsr_slave_1 left promiscuous mode [ 839.732716][ T5791] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 839.793657][ T5791] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 839.820017][ T5791] device bridge_slave_1 left promiscuous mode [ 839.830549][ T5791] bridge0: port 2(bridge_slave_1) entered disabled state [ 839.858842][ T5791] device veth1_macvtap left promiscuous mode [ 839.870255][ T5791] device veth0_macvtap left promiscuous mode [ 840.196097][ T5791] team0 (unregistering): Port device geneve1 removed [ 840.385734][ T5791] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 840.421323][ T5791] team0 (unregistering): Port device team_slave_1 removed [ 840.439989][ T5791] team0 (unregistering): Port device team_slave_0 removed [ 840.456496][ T5791] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 840.491278][ T5791] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 840.603240][ T5791] team0 (unregistering): Port device bond0 removed [ 840.635409][ T5791] bond0 (unregistering): Released all slaves [ 840.716908][T21864] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 840.849607][T22064] netlink: 'syz.3.6059': attribute type 4 has an invalid length. [ 840.897231][T22064] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6059'. [ 840.953916][T22064] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 841.007217][T21864] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 841.485396][T22097] FAULT_INJECTION: forcing a failure. [ 841.485396][T22097] name failslab, interval 1, probability 0, space 0, times 0 [ 841.499445][T21864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 841.562062][ T5800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 841.583312][ T5800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 841.616409][T22097] CPU: 1 PID: 22097 Comm: syz.5.6067 Not tainted syzkaller #0 [ 841.624034][T22097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 841.634457][T22097] Call Trace: [ 841.637767][T22097] [ 841.641042][T22097] dump_stack_lvl+0x188/0x250 [ 841.645872][T22097] ? show_regs_print_info+0x20/0x20 [ 841.651175][T22097] ? load_image+0x400/0x400 [ 841.655724][T22097] ? __lock_acquire+0x7d10/0x7d10 [ 841.660903][T22097] should_fail+0x38c/0x4c0 [ 841.665447][T22097] should_failslab+0x5/0x20 [ 841.669970][T22097] slab_pre_alloc_hook+0x51/0xc0 [ 841.674939][T22097] __kmalloc+0x6b/0x330 [ 841.679129][T22097] ? kernfs_fop_write_iter+0x155/0x4c0 [ 841.684717][T22097] ? end_current_label_crit_section+0x14b/0x170 [ 841.690991][T22097] kernfs_fop_write_iter+0x155/0x4c0 [ 841.696402][T22097] ? iov_iter_init+0xb4/0x170 [ 841.701124][T22097] vfs_write+0x745/0xd60 [ 841.705402][T22097] ? file_end_write+0x250/0x250 [ 841.710559][T22097] ? __fget_files+0x40f/0x480 [ 841.715275][T22097] ? mutex_lock_nested+0x17/0x20 [ 841.720332][T22097] ? __fdget_pos+0x2bf/0x370 [ 841.724949][T22097] ? ksys_write+0x71/0x260 [ 841.729491][T22097] ksys_write+0x152/0x260 [ 841.733849][T22097] ? __ia32_sys_read+0x80/0x80 [ 841.738731][T22097] ? lockdep_hardirqs_on+0x94/0x140 [ 841.743963][T22097] do_syscall_64+0x4c/0xa0 [ 841.748518][T22097] ? clear_bhb_loop+0x30/0x80 [ 841.753219][T22097] ? clear_bhb_loop+0x30/0x80 [ 841.757970][T22097] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 841.763911][T22097] RIP: 0033:0x7f74c380c799 [ 841.768468][T22097] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 841.788529][T22097] RSP: 002b:00007f74c1a66028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 841.796986][T22097] RAX: ffffffffffffffda RBX: 00007f74c3a85fa0 RCX: 00007f74c380c799 [ 841.805012][T22097] RDX: 0000000000000009 RSI: 0000200000000200 RDI: 0000000000000004 [ 841.813136][T22097] RBP: 00007f74c1a66090 R08: 0000000000000000 R09: 0000000000000000 [ 841.821223][T22097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 841.829336][T22097] R13: 00007f74c3a86038 R14: 00007f74c3a85fa0 R15: 00007ffcbb658e48 [ 841.837455][T22097] [ 841.886894][T21864] 8021q: adding VLAN 0 to HW filter on device team0 [ 841.968192][ T5815] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 841.978113][ T5815] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 842.035804][ T5815] bridge0: port 1(bridge_slave_0) entered blocking state [ 842.042990][ T5815] bridge0: port 1(bridge_slave_0) entered forwarding state [ 842.110452][ T5815] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 842.129928][ T5815] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 842.174644][ T5815] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 842.217978][ T5815] bridge0: port 2(bridge_slave_1) entered blocking state [ 842.225257][ T5815] bridge0: port 2(bridge_slave_1) entered forwarding state [ 842.349448][ T5815] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 842.378881][ T5815] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 842.448435][ T5815] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 842.508272][ T5815] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 842.567934][ T5815] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 842.613351][ T5815] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 842.676072][ T5815] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 842.717277][T22141] FAULT_INJECTION: forcing a failure. [ 842.717277][T22141] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 842.764312][ T5800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 842.786069][ T5800] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 842.795192][T22141] CPU: 0 PID: 22141 Comm: syz.0.6077 Not tainted syzkaller #0 [ 842.802897][T22141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 842.813047][T22141] Call Trace: [ 842.816438][T22141] [ 842.819418][T22141] dump_stack_lvl+0x188/0x250 [ 842.824144][T22141] ? show_regs_print_info+0x20/0x20 [ 842.829417][T22141] ? load_image+0x400/0x400 [ 842.833942][T22141] ? __lock_acquire+0x7d10/0x7d10 [ 842.839017][T22141] should_fail+0x38c/0x4c0 [ 842.843460][T22141] _copy_from_user+0x2e/0x170 [ 842.848156][T22141] iovec_from_user+0x142/0x370 [ 842.852948][T22141] __import_iovec+0x70/0x490 [ 842.857921][T22141] import_iovec+0x6f/0xa0 [ 842.862301][T22141] ___sys_sendmsg+0x1fd/0x2e0 [ 842.867045][T22141] ? __sys_sendmsg+0x2a0/0x2a0 [ 842.871852][T22141] ? vfs_write+0x8b2/0xd60 [ 842.876309][T22141] __se_sys_sendmsg+0x1af/0x290 [ 842.881191][T22141] ? __x64_sys_sendmsg+0x80/0x80 [ 842.886144][T22141] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 842.892542][T22141] ? lockdep_hardirqs_on+0x94/0x140 [ 842.897773][T22141] do_syscall_64+0x4c/0xa0 [ 842.902401][T22141] ? clear_bhb_loop+0x30/0x80 [ 842.907224][T22141] ? clear_bhb_loop+0x30/0x80 [ 842.911941][T22141] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 842.917861][T22141] RIP: 0033:0x7f54290ce799 [ 842.922395][T22141] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 842.942020][T22141] RSP: 002b:00007f5427307028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 842.950819][T22141] RAX: ffffffffffffffda RBX: 00007f5429348090 RCX: 00007f54290ce799 [ 842.958823][T22141] RDX: 00000000000052cc RSI: 0000200000000040 RDI: 0000000000000009 [ 842.966990][T22141] RBP: 00007f5427307090 R08: 0000000000000000 R09: 0000000000000000 [ 842.975207][T22141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 842.983316][T22141] R13: 00007f5429348128 R14: 00007f5429348090 R15: 00007ffc6bc5b0e8 [ 842.991530][T22141] [ 843.041935][ T5800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 843.068377][ T5800] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 843.135533][T21864] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 843.993619][T22161] bond0: (slave wlan1): Error: Slave device does not support XDP [ 844.795386][ T5825] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 844.807415][ T5825] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 844.850015][T21864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 844.971257][ T5815] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 844.990713][ T5815] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 845.166734][T21864] device veth0_vlan entered promiscuous mode [ 845.169502][T22215] FAULT_INJECTION: forcing a failure. [ 845.169502][T22215] name failslab, interval 1, probability 0, space 0, times 0 [ 845.185965][T22215] CPU: 1 PID: 22215 Comm: syz.3.6094 Not tainted syzkaller #0 [ 845.193846][T22215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 845.203955][T22215] Call Trace: [ 845.207269][T22215] [ 845.210231][T22215] dump_stack_lvl+0x188/0x250 [ 845.215137][T22215] ? show_regs_print_info+0x20/0x20 [ 845.220468][T22215] ? load_image+0x400/0x400 [ 845.225121][T22215] ? __might_sleep+0xf0/0xf0 [ 845.229764][T22215] ? __lock_acquire+0x7d10/0x7d10 [ 845.235032][T22215] should_fail+0x38c/0x4c0 [ 845.239591][T22215] should_failslab+0x5/0x20 [ 845.244137][T22215] slab_pre_alloc_hook+0x51/0xc0 [ 845.249132][T22215] kmem_cache_alloc_node_trace+0x4a/0x300 [ 845.254058][ T5825] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 845.254883][T22215] ? __get_vm_area_node+0x119/0x2d0 [ 845.267786][T22215] __get_vm_area_node+0x119/0x2d0 [ 845.272891][T22215] __vmalloc_node_range+0xef/0x8b0 [ 845.278041][T22215] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 845.283816][T22215] ? end_current_label_crit_section+0x170/0x170 [ 845.290118][T22215] ? __lock_acquire+0x7d10/0x7d10 [ 845.295316][T22215] ? __lock_acquire+0x13bc/0x7d10 [ 845.300487][T22215] ? trace_event_raw_event_lock+0x270/0x270 [ 845.306450][T22215] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 845.312371][T22215] __vmalloc+0x76/0x80 [ 845.316525][T22215] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 845.322286][T22215] bpf_prog_alloc_no_stats+0x36/0x2c0 [ 845.327944][T22215] bpf_prog_alloc+0x1a/0x1e0 [ 845.332606][T22215] bpf_prog_load+0x7c6/0x1510 [ 845.337421][T22215] ? map_freeze+0x350/0x350 [ 845.342177][T22215] ? __might_fault+0xb7/0x110 [ 845.347035][T22215] ? __might_fault+0xb3/0x110 [ 845.352057][T22215] ? bpf_lsm_bpf+0x5/0x10 [ 845.355528][ T5825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 845.356435][T22215] ? security_bpf+0x7a/0xa0 [ 845.356468][T22215] __sys_bpf+0x532/0x6f0 [ 845.373092][T22215] ? bpf_link_show_fdinfo+0x380/0x380 [ 845.378751][T22215] ? rcu_nmi_exit+0x6f/0xf0 [ 845.383598][T22215] __x64_sys_bpf+0x78/0x90 [ 845.388259][T22215] do_syscall_64+0x4c/0xa0 [ 845.392743][T22215] ? clear_bhb_loop+0x30/0x80 [ 845.397875][T22215] ? clear_bhb_loop+0x30/0x80 [ 845.402620][T22215] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 845.408657][T22215] RIP: 0033:0x7f2ff37f4799 [ 845.413122][T22215] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 845.433829][T22215] RSP: 002b:00007f2ff1a4e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 845.442649][T22215] RAX: ffffffffffffffda RBX: 00007f2ff3a6dfa0 RCX: 00007f2ff37f4799 [ 845.450932][T22215] RDX: 0000000000000080 RSI: 0000200000000640 RDI: 0000000000000005 [ 845.459412][T22215] RBP: 00007f2ff1a4e090 R08: 0000000000000000 R09: 0000000000000000 [ 845.459870][T22213] netlink: 'syz.4.6093': attribute type 39 has an invalid length. [ 845.467428][T22215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 845.467449][T22215] R13: 00007f2ff3a6e038 R14: 00007f2ff3a6dfa0 R15: 00007fff9f02c988 [ 845.467484][T22215] [ 845.556849][T21864] device veth1_vlan entered promiscuous mode [ 845.564732][T22215] syz.3.6094: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 845.612594][ T5825] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 845.626438][T22215] CPU: 0 PID: 22215 Comm: syz.3.6094 Not tainted syzkaller #0 [ 845.634168][T22215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 845.644523][T22215] Call Trace: [ 845.647841][T22215] [ 845.650830][T22215] dump_stack_lvl+0x188/0x250 [ 845.655583][T22215] ? rcu_lock_release+0x5/0x20 [ 845.660419][T22215] ? show_regs_print_info+0x20/0x20 [ 845.665717][T22215] ? load_image+0x400/0x400 [ 845.670387][T22215] warn_alloc+0x243/0x320 [ 845.674788][T22215] ? zone_watermark_ok_safe+0x240/0x240 [ 845.680389][T22215] ? __get_vm_area_node+0x2b5/0x2d0 [ 845.685758][T22215] __vmalloc_node_range+0x2b1/0x8b0 [ 845.691118][T22215] ? end_current_label_crit_section+0x170/0x170 [ 845.697496][T22215] ? __lock_acquire+0x7d10/0x7d10 [ 845.702641][T22215] ? __lock_acquire+0x13bc/0x7d10 [ 845.707796][T22215] ? trace_event_raw_event_lock+0x270/0x270 [ 845.713188][ T5825] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 845.713940][T22215] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 845.726988][T22215] __vmalloc+0x76/0x80 [ 845.731219][T22215] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 845.736813][T22215] bpf_prog_alloc_no_stats+0x36/0x2c0 [ 845.742311][T22215] bpf_prog_alloc+0x1a/0x1e0 [ 845.747025][T22215] bpf_prog_load+0x7c6/0x1510 [ 845.751745][T22215] ? map_freeze+0x350/0x350 [ 845.756277][T22215] ? __might_fault+0xb7/0x110 [ 845.761001][T22215] ? __might_fault+0xb3/0x110 [ 845.765706][T22215] ? bpf_lsm_bpf+0x5/0x10 [ 845.770165][T22215] ? security_bpf+0x7a/0xa0 [ 845.774698][T22215] __sys_bpf+0x532/0x6f0 [ 845.779060][T22215] ? bpf_link_show_fdinfo+0x380/0x380 [ 845.784460][T22215] ? rcu_nmi_exit+0x6f/0xf0 [ 845.789121][T22215] __x64_sys_bpf+0x78/0x90 [ 845.793676][T22215] do_syscall_64+0x4c/0xa0 [ 845.798133][T22215] ? clear_bhb_loop+0x30/0x80 [ 845.802941][T22215] ? clear_bhb_loop+0x30/0x80 [ 845.808003][T22215] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 845.814003][T22215] RIP: 0033:0x7f2ff37f4799 [ 845.818439][T22215] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 845.838630][T22215] RSP: 002b:00007f2ff1a4e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 845.847146][T22215] RAX: ffffffffffffffda RBX: 00007f2ff3a6dfa0 RCX: 00007f2ff37f4799 [ 845.855169][T22215] RDX: 0000000000000080 RSI: 0000200000000640 RDI: 0000000000000005 [ 845.863169][T22215] RBP: 00007f2ff1a4e090 R08: 0000000000000000 R09: 0000000000000000 [ 845.871160][T22215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 845.879152][T22215] R13: 00007f2ff3a6e038 R14: 00007f2ff3a6dfa0 R15: 00007fff9f02c988 [ 845.887167][T22215] [ 845.967805][ T5825] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 845.987100][T22215] Mem-Info: [ 845.990452][T22215] active_anon:279 inactive_anon:6003 isolated_anon:0 [ 845.990452][T22215] active_file:18144 inactive_file:41010 isolated_file:0 [ 845.990452][T22215] unevictable:768 dirty:259 writeback:0 [ 845.990452][T22215] slab_reclaimable:20759 slab_unreclaimable:95726 [ 845.990452][T22215] mapped:35636 shmem:1630 pagetables:619 bounce:0 [ 845.990452][T22215] kernel_misc_reclaimable:0 [ 845.990452][T22215] free:1365370 free_pcp:12005 free_cma:0 [ 846.047480][T22215] Node 0 active_anon:1084kB inactive_anon:23304kB active_file:72376kB inactive_file:164040kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:142544kB dirty:1036kB writeback:0kB shmem:4444kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10112kB pagetables:2376kB all_unreclaimable? no [ 846.134081][T22215] Node 1 active_anon:32kB inactive_anon:508kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2076kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 846.159381][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 846.212959][T22215] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 846.230631][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 846.241537][T22215] lowmem_reserve[]: 0 2539 2540 2540 2540 [ 846.254331][T22215] Node 0 DMA32 free:1535868kB min:34784kB low:43480kB high:52176kB reserved_highatomic:0KB active_anon:1084kB inactive_anon:23404kB active_file:72376kB inactive_file:164040kB unevictable:1536kB writepending:1048kB present:3129332kB managed:2606552kB mlocked:0kB bounce:0kB free_pcp:35660kB local_pcp:16740kB free_cma:0kB [ 846.303485][T22215] lowmem_reserve[]: 0 0 0 0 0 [ 846.312348][T22215] Node 0 Normal free:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:660kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:8kB free_cma:0kB [ 846.341900][T22221] netlink: 'syz.0.6096': attribute type 10 has an invalid length. [ 846.351993][T22224] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 846.374050][T21864] device veth0_macvtap entered promiscuous mode [ 846.387582][T21864] device veth1_macvtap entered promiscuous mode [ 846.396617][T22215] lowmem_reserve[]: 0 0 0 0 0 [ 846.418742][T22215] Node 1 Normal free:3910252kB min:55108kB low:68884kB high:82660kB reserved_highatomic:0KB active_anon:32kB inactive_anon:508kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:12316kB local_pcp:4248kB free_cma:0kB [ 846.462682][T22227] netlink: 'syz.4.6098': attribute type 39 has an invalid length. [ 846.470996][T22215] lowmem_reserve[]: 0 0 0 0 0 [ 846.475769][T22215] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 846.490403][T22215] Node 0 DMA32: 2089*4kB (UM) 1015*8kB (UM) 704*16kB (UME) 671*32kB (UME) 483*64kB (UME) 1029*128kB (UME) 452*256kB (UME) 216*512kB (UME) 84*1024kB (UME) 30*2048kB (UME) 232*4096kB (UM) = 1535868kB [ 846.512954][T22215] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 846.532789][T22215] Node 1 Normal: 61*4kB (UE) 21*8kB (UME) 17*16kB (UME) 50*32kB (UME) 28*64kB (UE) 13*128kB (UME) 4*256kB (UME) 2*512kB (U) 1*1024kB (E) 1*2048kB (M) 952*4096kB (UM) = 3910252kB [ 846.552820][T22215] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 846.565160][T22215] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 846.599857][T22215] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 846.613914][T22215] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 846.633893][T21864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 846.654596][T22215] 60784 total pagecache pages [ 846.660962][T21864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 846.677020][T22215] 0 pages in swap cache [ 846.685866][T22215] Swap cache stats: add 0, delete 0, find 0/0 [ 846.695250][T21864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 846.711832][T22215] Free swap = 124996kB [ 846.718055][T22215] Total swap = 124996kB [ 846.722368][T21864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 846.733300][T22215] 2097051 pages RAM [ 846.742888][T22215] 0 pages HighMem/MovableOnly [ 846.752550][T21864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 846.764532][T22215] 411490 pages reserved [ 846.769536][T21864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 846.775314][T22215] 0 pages cma reserved [ 846.785465][T21864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 846.797320][T21864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 846.809216][T21864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 846.818788][T22225] tap0: tun_chr_ioctl cmd 21731 [ 846.824713][T22228] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.6098'. [ 846.955356][ T5800] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 846.985036][ T5800] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 847.005873][ T5800] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 847.044952][ T5800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 847.061196][T21864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 847.088387][T21864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 847.112509][T21864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 847.134737][T21864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 847.153506][T21864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 847.165401][T21864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 847.186353][T21864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 847.205812][T21864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 847.216148][T21864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 847.229349][T21864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 847.244715][T21864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 847.282316][ T5800] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 847.304569][ T5800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 847.328545][T21864] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 847.342288][T21864] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 847.353825][T21864] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 847.373415][T21864] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 847.429257][T22247] netlink: 'syz.4.6104': attribute type 39 has an invalid length. [ 847.596786][T22251] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6105'. [ 847.707723][ T5800] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 847.715765][ T5800] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 847.848280][ T5815] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 847.865561][T22257] netlink: 'syz.4.6108': attribute type 10 has an invalid length. [ 847.950559][ T5791] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 847.970439][ T5791] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 848.031823][ T5815] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 849.005659][T22293] netlink: 'syz.3.6117': attribute type 39 has an invalid length. [ 849.239619][T22295] netlink: 'syz.5.6118': attribute type 10 has an invalid length. [ 849.333873][T22301] mac80211_hwsim hwsim32 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 849.489776][T22311] netlink: 'syz.2.6123': attribute type 10 has an invalid length. [ 849.631049][T22315] FAULT_INJECTION: forcing a failure. [ 849.631049][T22315] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 849.647818][T22315] CPU: 1 PID: 22315 Comm: syz.3.6124 Not tainted syzkaller #0 [ 849.655423][T22315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 849.665515][T22315] Call Trace: [ 849.668860][T22315] [ 849.671818][T22315] dump_stack_lvl+0x188/0x250 [ 849.676549][T22315] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 849.682757][T22315] ? show_regs_print_info+0x20/0x20 [ 849.688006][T22315] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 849.694460][T22315] should_fail+0x38c/0x4c0 [ 849.698930][T22315] _copy_from_user+0x2e/0x170 [ 849.703658][T22315] iovec_from_user+0x142/0x370 [ 849.708913][T22315] __import_iovec+0x70/0x490 [ 849.713584][T22315] import_iovec+0x6f/0xa0 [ 849.718394][T22315] ___sys_sendmsg+0x1fd/0x2e0 [ 849.723344][T22315] ? __sys_sendmsg+0x2a0/0x2a0 [ 849.728180][T22315] ? ktime_get_real_ts64+0x440/0x440 [ 849.733795][T22315] __se_sys_sendmsg+0x1af/0x290 [ 849.738812][T22315] ? __x64_sys_sendmsg+0x80/0x80 [ 849.744000][T22315] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 849.750411][T22315] ? lockdep_hardirqs_on+0x94/0x140 [ 849.755714][T22315] do_syscall_64+0x4c/0xa0 [ 849.760206][T22315] ? clear_bhb_loop+0x30/0x80 [ 849.765210][T22315] ? clear_bhb_loop+0x30/0x80 [ 849.769934][T22315] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 849.775874][T22315] RIP: 0033:0x7f2ff37f4799 [ 849.780332][T22315] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 849.800102][T22315] RSP: 002b:00007f2ff1a4e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 849.808580][T22315] RAX: ffffffffffffffda RBX: 00007f2ff3a6dfa0 RCX: 00007f2ff37f4799 [ 849.816598][T22315] RDX: 00000000000052cc RSI: 0000200000000040 RDI: 0000000000000008 [ 849.824787][T22315] RBP: 00007f2ff1a4e090 R08: 0000000000000000 R09: 0000000000000000 [ 849.832979][T22315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 849.840994][T22315] R13: 00007f2ff3a6e038 R14: 00007f2ff3a6dfa0 R15: 00007fff9f02c988 [ 849.849084][T22315] [ 849.899379][T22311] team0: Port device geneve1 added [ 850.420719][T22337] netlink: 'syz.0.6132': attribute type 39 has an invalid length. [ 850.436479][T22341] netlink: 'syz.2.6133': attribute type 10 has an invalid length. [ 850.588956][T22341] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 850.970973][ T4218] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 850.982916][T22346] FAULT_INJECTION: forcing a failure. [ 850.982916][T22346] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 850.998316][T22346] CPU: 1 PID: 22346 Comm: syz.2.6135 Not tainted syzkaller #0 [ 851.005838][T22346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 851.015925][T22346] Call Trace: [ 851.019232][T22346] [ 851.022185][T22346] dump_stack_lvl+0x188/0x250 [ 851.026894][T22346] ? show_regs_print_info+0x20/0x20 [ 851.032118][T22346] ? load_image+0x400/0x400 [ 851.036653][T22346] ? __lock_acquire+0x7d10/0x7d10 [ 851.041746][T22346] should_fail+0x38c/0x4c0 [ 851.046347][T22346] _copy_from_user+0x2e/0x170 [ 851.051051][T22346] iovec_from_user+0x142/0x370 [ 851.055930][T22346] __import_iovec+0x70/0x490 [ 851.060556][T22346] import_iovec+0x6f/0xa0 [ 851.065021][T22346] ___sys_sendmsg+0x1fd/0x2e0 [ 851.069828][T22346] ? __sys_sendmsg+0x2a0/0x2a0 [ 851.074633][T22346] ? vfs_write+0x8b2/0xd60 [ 851.079083][T22346] __se_sys_sendmsg+0x1af/0x290 [ 851.083960][T22346] ? __x64_sys_sendmsg+0x80/0x80 [ 851.089029][T22346] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 851.095049][T22346] ? lockdep_hardirqs_on+0x94/0x140 [ 851.100283][T22346] do_syscall_64+0x4c/0xa0 [ 851.104727][T22346] ? clear_bhb_loop+0x30/0x80 [ 851.109425][T22346] ? clear_bhb_loop+0x30/0x80 [ 851.114131][T22346] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 851.120051][T22346] RIP: 0033:0x7fa36b45e799 [ 851.124591][T22346] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 851.144701][T22346] RSP: 002b:00007fa3696b8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 851.153164][T22346] RAX: ffffffffffffffda RBX: 00007fa36b6d7fa0 RCX: 00007fa36b45e799 [ 851.161244][T22346] RDX: 00000000000052cc RSI: 0000200000000040 RDI: 000000000000000b [ 851.169351][T22346] RBP: 00007fa3696b8090 R08: 0000000000000000 R09: 0000000000000000 [ 851.177792][T22346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 851.186162][T22346] R13: 00007fa36b6d8038 R14: 00007fa36b6d7fa0 R15: 00007ffea983a9e8 [ 851.194309][T22346] [ 851.267795][T22357] netlink: 'syz.3.6138': attribute type 39 has an invalid length. [ 851.367598][T22363] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.6138'. [ 851.420055][ T4218] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 851.520675][ T4218] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 851.728169][ T4218] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 851.845878][T22373] netlink: 'syz.3.6144': attribute type 39 has an invalid length. [ 852.012018][T22389] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 852.058758][ T5791] wlan1: Trigger new scan to find an IBSS to join [ 852.168684][T22352] chnl_net:caif_netlink_parms(): no params data found [ 852.374266][T22404] FAULT_INJECTION: forcing a failure. [ 852.374266][T22404] name failslab, interval 1, probability 0, space 0, times 0 [ 852.396575][T22404] CPU: 0 PID: 22404 Comm: syz.5.6155 Not tainted syzkaller #0 [ 852.404093][T22404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 852.414186][T22404] Call Trace: [ 852.417507][T22404] [ 852.420474][T22404] dump_stack_lvl+0x188/0x250 [ 852.425294][T22404] ? show_regs_print_info+0x20/0x20 [ 852.430757][T22404] ? load_image+0x400/0x400 [ 852.435511][T22404] should_fail+0x38c/0x4c0 [ 852.440092][T22404] should_failslab+0x5/0x20 [ 852.444637][T22404] slab_pre_alloc_hook+0x51/0xc0 [ 852.449612][T22404] ? nf_ct_ext_add+0x42e/0x660 [ 852.454432][T22404] __kmalloc_track_caller+0x69/0x330 [ 852.459769][T22404] ? nf_ct_ext_add+0x42e/0x660 [ 852.464673][T22404] krealloc+0x5a/0xf0 [ 852.468818][T22404] nf_ct_ext_add+0x42e/0x660 [ 852.473459][T22404] init_conntrack+0x768/0x14d0 [ 852.478283][T22404] ? __nf_conntrack_find_get+0x581/0x650 [ 852.483978][T22404] ? early_drop+0x810/0x810 [ 852.488542][T22404] ? nf_conntrack_find_get+0x670/0x670 [ 852.494057][T22404] ? __siphash_unaligned+0x258/0x3a0 [ 852.499409][T22404] nf_conntrack_in+0xd38/0x1730 [ 852.504340][T22404] ? nf_ct_pernet+0x240/0x240 [ 852.509102][T22404] ? ip6t_alloc_initial_table+0x640/0x640 [ 852.514873][T22404] ? flow_hash_from_keys+0x45c/0x7a0 [ 852.520307][T22404] ? ipv6_defrag+0x2d2/0x3a0 [ 852.524948][T22404] ? ipv6_conntrack_in+0x20/0x20 [ 852.530020][T22404] nf_hook_slow+0xb9/0x200 [ 852.532930][T22352] bridge0: port 1(bridge_slave_0) entered blocking state [ 852.534483][T22404] __ip6_local_out+0x738/0x850 [ 852.546340][T22404] ? ip6_dst_hoplimit+0x310/0x310 [ 852.551423][T22404] ? __ip6_local_out+0x850/0x850 [ 852.556405][T22404] ? read_lock_is_recursive+0x10/0x10 [ 852.557231][T22352] bridge0: port 1(bridge_slave_0) entered disabled state [ 852.561825][T22404] ip6_local_out+0x26/0x120 [ 852.573545][T22404] ip6_send_skb+0x1b9/0x360 [ 852.578111][T22404] udp_v6_send_skb+0xa28/0x1680 [ 852.583029][T22404] udp_v6_push_pending_frames+0x1cc/0x320 [ 852.588279][T22352] device bridge_slave_0 entered promiscuous mode [ 852.588825][T22404] ? udp_v6_send_skb+0x1680/0x1680 [ 852.588870][T22404] ? udpv6_sendmsg+0x2650/0x2650 [ 852.605562][T22404] udpv6_sendmsg+0xee3/0x2650 [ 852.610306][T22404] ? udpv6_sendmsg+0x2650/0x2650 [ 852.615301][T22404] ? udp_v6_early_demux+0xec0/0xec0 [ 852.620575][T22404] ? rcu_lock_release+0x5/0x20 [ 852.625438][T22404] ? __lock_acquire+0x7d10/0x7d10 [ 852.630687][T22404] ? aa_sk_perm+0x7dc/0x910 [ 852.635463][T22404] ? aa_af_perm+0x340/0x340 [ 852.640240][T22404] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 852.646714][T22404] ? sock_rps_record_flow+0x17/0x3b0 [ 852.652055][T22404] ? inet_send_prepare+0x58/0x260 [ 852.655986][T22352] bridge0: port 2(bridge_slave_1) entered blocking state [ 852.657148][T22404] ? inet6_sendmsg+0x5b/0xd0 [ 852.657184][T22404] sock_write_iter+0x2a6/0x3a0 [ 852.657209][T22404] ? sock_read_iter+0x380/0x380 [ 852.657239][T22404] ? memset+0x1e/0x40 [ 852.657265][T22404] ? iov_iter_init+0xb4/0x170 [ 852.665120][T22352] bridge0: port 2(bridge_slave_1) entered disabled state [ 852.669088][T22404] vfs_write+0x745/0xd60 [ 852.669120][T22404] ? file_end_write+0x250/0x250 [ 852.669156][T22404] ? __fget_files+0x40f/0x480 [ 852.669185][T22404] ? __fdget_pos+0x1e2/0x370 [ 852.669204][T22404] ? ksys_write+0x71/0x260 [ 852.679294][T22352] device bridge_slave_1 entered promiscuous mode [ 852.682854][T22404] ksys_write+0x152/0x260 [ 852.682889][T22404] ? __ia32_sys_read+0x80/0x80 [ 852.733771][T22404] ? lockdep_hardirqs_on+0x94/0x140 [ 852.739174][T22404] do_syscall_64+0x4c/0xa0 [ 852.743631][T22404] ? clear_bhb_loop+0x30/0x80 [ 852.748829][T22404] ? clear_bhb_loop+0x30/0x80 [ 852.753698][T22404] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 852.759657][T22404] RIP: 0033:0x7f74c380c799 [ 852.764164][T22404] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 852.783825][T22404] RSP: 002b:00007f74c1a66028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 852.792466][T22404] RAX: ffffffffffffffda RBX: 00007f74c3a85fa0 RCX: 00007f74c380c799 [ 852.800568][T22404] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 852.808588][T22404] RBP: 00007f74c1a66090 R08: 0000000000000000 R09: 0000000000000000 [ 852.816601][T22404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 852.824619][T22404] R13: 00007f74c3a86038 R14: 00007f74c3a85fa0 R15: 00007ffcbb658e48 [ 852.832652][T22404] [ 852.842236][T22352] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 852.939627][T22352] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 853.129591][T22352] team0: Port device team_slave_0 added [ 853.138146][T22416] netlink: 'syz.5.6158': attribute type 39 has an invalid length. [ 853.180864][T22352] team0: Port device team_slave_1 added [ 853.260231][ T21] Bluetooth: hci1: command 0x0409 tx timeout [ 853.519616][T22352] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 853.526810][T22352] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 853.634116][T22352] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 853.808638][T22352] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 853.822663][T22352] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 853.951908][T22352] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 853.969328][T22453] netlink: 198364 bytes leftover after parsing attributes in process `syz.2.6167'. [ 854.306805][T22352] device hsr_slave_0 entered promiscuous mode [ 854.355403][T22352] device hsr_slave_1 entered promiscuous mode [ 854.388192][T22352] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 854.426917][T22352] Cannot create hsr debugfs directory [ 854.512018][T22467] netlink: 'syz.5.6172': attribute type 39 has an invalid length. [ 854.632776][ T4218] device gretap0 left promiscuous mode [ 854.688068][ T4218] Ÿë: port 1(gretap0) entered disabled state [ 855.091549][T22491] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6178'. [ 855.294989][T22500] netlink: 'syz.5.6179': attribute type 10 has an invalid length. [ 855.349327][ T4235] Bluetooth: hci1: command 0x041b tx timeout [ 855.733157][T22517] netlink: 'syz.2.6182': attribute type 39 has an invalid length. [ 855.915201][ T4218] bond0: (slave wlan1): Releasing backup interface [ 856.026612][T22524] netlink: 'syz.5.6184': attribute type 10 has an invalid length. [ 856.058868][ T5781] wlan1: Trigger new scan to find an IBSS to join [ 856.163039][T22526] netlink: 'syz.3.6185': attribute type 10 has an invalid length. [ 856.259744][T22526] wlan1: mtu less than device minimum [ 856.276828][T22526] bond0: (slave wlan1): Error -22 calling dev_set_mtu [ 856.482120][T22542] netlink: 'syz.2.6198': attribute type 39 has an invalid length. [ 856.544938][ T4218] device hsr_slave_0 left promiscuous mode [ 856.626449][ T4218] device hsr_slave_1 left promiscuous mode [ 856.659891][ T4218] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 856.673073][ T4218] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 856.695031][ T4218] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 856.712486][ T4218] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 856.731822][ T4218] device bridge_slave_1 left promiscuous mode [ 856.742627][ T4218] bridge0: port 2(bridge_slave_1) entered disabled state [ 856.771750][ T4218] device veth1_macvtap left promiscuous mode [ 856.797350][ T4218] device veth0_macvtap left promiscuous mode [ 857.064711][ T4218] team0 (unregistering): Port device geneve1 removed [ 857.172191][ T4218] team0 (unregistering): Port device team_slave_1 removed [ 857.196226][ T4218] team0 (unregistering): Port device team_slave_0 removed [ 857.220811][ T4218] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 857.266748][ T4218] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 857.371330][ T4218] team0 (unregistering): Port device bond0 removed [ 857.396101][ T4218] bond0 (unregistering): Released all slaves [ 857.418697][ T1108] Bluetooth: hci1: command 0x040f tx timeout [ 857.582883][T22576] netlink: 'syz.4.6200': attribute type 39 has an invalid length. [ 857.793140][T22352] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 857.947212][T22352] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 858.002315][T22352] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 858.050028][T22352] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 858.281715][T22597] netlink: 198364 bytes leftover after parsing attributes in process `syz.4.6205'. [ 858.420562][T22352] 8021q: adding VLAN 0 to HW filter on device bond0 [ 858.513763][ T5821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 858.540774][ T5821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 858.587762][T22352] 8021q: adding VLAN 0 to HW filter on device team0 [ 858.675976][ T5821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 858.724033][ T5821] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 858.743261][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state [ 858.750586][ T5821] bridge0: port 1(bridge_slave_0) entered forwarding state [ 858.789612][ T5821] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 858.919605][T22618] netlink: 'syz.3.6211': attribute type 39 has an invalid length. [ 858.939949][ T5821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 858.959407][ T5821] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 858.984262][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state [ 858.991461][ T5821] bridge0: port 2(bridge_slave_1) entered forwarding state [ 859.032655][T22625] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6212'. [ 859.057441][T22624] netlink: 'syz.2.6213': attribute type 10 has an invalid length. [ 859.135266][ T5821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 859.194131][ T5821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 859.236218][ T5791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 859.268341][ T5791] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 859.322408][ T5791] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 859.357961][ T5791] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 859.434354][ T5791] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 859.458743][ T5791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 859.468188][ T5791] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 859.482911][T22352] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 859.497591][ T1108] Bluetooth: hci1: command 0x0419 tx timeout [ 859.566310][T22352] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 859.598880][ T5791] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 859.638007][ T5791] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 859.723669][T22650] netlink: 198364 bytes leftover after parsing attributes in process `syz.3.6219'. [ 860.303412][T22676] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6224'. [ 860.453363][ T5800] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 860.487556][ T5800] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 860.509632][T22352] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 860.841807][ T5800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 860.913255][ T5800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 861.102500][ T5800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 861.160459][ T5800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 861.247817][T22352] device veth0_vlan entered promiscuous mode [ 861.308384][ T5800] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 861.368207][ T5800] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 861.382491][T22352] device veth1_vlan entered promiscuous mode [ 861.562696][ T5800] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 861.575935][ T5800] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 861.638162][ T5800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 861.695200][ T5800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 861.761994][T22352] device veth0_macvtap entered promiscuous mode [ 861.881882][T22730] FAULT_INJECTION: forcing a failure. [ 861.881882][T22730] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 861.908346][T22722] netlink: 'syz.3.6234': attribute type 10 has an invalid length. [ 861.940799][T22352] device veth1_macvtap entered promiscuous mode [ 861.986094][T22730] CPU: 1 PID: 22730 Comm: syz.4.6236 Not tainted syzkaller #0 [ 861.993635][T22730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 862.003845][T22730] Call Trace: [ 862.007247][T22730] [ 862.010213][T22730] dump_stack_lvl+0x188/0x250 [ 862.014934][T22730] ? show_regs_print_info+0x20/0x20 [ 862.020271][T22730] ? load_image+0x400/0x400 [ 862.024832][T22730] ? __lock_acquire+0x7d10/0x7d10 [ 862.029953][T22730] should_fail+0x38c/0x4c0 [ 862.034522][T22730] _copy_to_user+0x2e/0x130 [ 862.039089][T22730] simple_read_from_buffer+0xe3/0x150 [ 862.044744][T22730] proc_fail_nth_read+0x1a6/0x220 [ 862.049821][T22730] ? proc_fault_inject_write+0x310/0x310 [ 862.055675][T22730] ? fsnotify_perm+0x254/0x560 [ 862.060569][T22730] ? proc_fault_inject_write+0x310/0x310 [ 862.066248][T22730] vfs_read+0x301/0xd60 [ 862.070565][T22730] ? kernel_read+0x1e0/0x1e0 [ 862.075476][T22730] ? __fget_files+0x40f/0x480 [ 862.080343][T22730] ? mutex_lock_nested+0x17/0x20 [ 862.085425][T22730] ? __fdget_pos+0x2bf/0x370 [ 862.090057][T22730] ? ksys_read+0x71/0x260 [ 862.094458][T22730] ksys_read+0x152/0x260 [ 862.098855][T22730] ? vfs_write+0xd60/0xd60 [ 862.103464][T22730] ? lockdep_hardirqs_on+0x94/0x140 [ 862.108737][T22730] do_syscall_64+0x4c/0xa0 [ 862.113210][T22730] ? clear_bhb_loop+0x30/0x80 [ 862.118142][T22730] ? clear_bhb_loop+0x30/0x80 [ 862.122869][T22730] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 862.128980][T22730] RIP: 0033:0x7f2053777fce [ 862.133900][T22730] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 862.137649][ T1326] Bluetooth: hci3: command 0x0406 tx timeout [ 862.153755][T22730] RSP: 002b:00007f2051a10fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 862.153786][T22730] RAX: ffffffffffffffda RBX: 00007f2051a116c0 RCX: 00007f2053777fce [ 862.153804][T22730] RDX: 000000000000000f RSI: 00007f2051a110a0 RDI: 0000000000000004 [ 862.153819][T22730] RBP: 00007f2051a11090 R08: 0000000000000000 R09: 0000000000000000 [ 862.153833][T22730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 862.153846][T22730] R13: 00007f2053a31038 R14: 00007f2053a30fa0 R15: 00007fffa75ba008 [ 862.153879][T22730] [ 862.256190][T22352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 862.327079][T22352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 862.355381][T22352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 862.393926][T22352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 862.424902][T22352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 862.441807][T22352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 862.462005][T22352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 862.493246][T22352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 862.523980][T22352] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 862.605246][T22742] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6239'. [ 862.665058][ T5825] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 862.687959][ T5825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 862.717011][T22352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 862.738688][T22352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 862.759932][T22352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 862.784216][T22352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 862.805866][T22352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 862.839255][T22352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 862.857076][T22352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 862.876992][T22352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 862.897004][T22352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 862.917015][T22352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 862.938990][T22352] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 862.987867][T22352] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 862.996636][T22352] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 863.026044][T22352] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 863.059941][T22352] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 863.081095][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 863.101626][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 863.581558][ T5815] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 863.590784][T22773] device syzkaller0 entered promiscuous mode [ 863.600174][ T5815] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 863.761254][ T5800] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 863.788246][ T5800] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 863.870429][ T5800] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 863.897293][ T5800] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 863.905189][ T5800] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 863.987987][T22791] netlink: 'syz.5.6247': attribute type 10 has an invalid length. [ 864.254303][T22797] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6250'. [ 864.508717][T22815] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.6253'. [ 865.831494][T22849] netlink: 'syz.3.6263': attribute type 39 has an invalid length. [ 865.995045][T22860] netlink: 'syz.5.6266': attribute type 10 has an invalid length. [ 867.277319][T22899] netlink: 'syz.5.6279': attribute type 39 has an invalid length. [ 867.687800][T22923] netlink: 112 bytes leftover after parsing attributes in process `syz.3.6287'. [ 867.743151][T22920] netlink: 'syz.2.6286': attribute type 10 has an invalid length. [ 868.997700][T22959] netlink: 'syz.0.6296': attribute type 39 has an invalid length. [ 869.306474][T22973] netlink: 'syz.4.6304': attribute type 33 has an invalid length. [ 869.354354][T22973] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6304'. [ 869.763030][T22983] netlink: 'syz.3.6305': attribute type 10 has an invalid length. [ 870.317830][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.324211][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.536041][T22988] netlink: 'syz.0.6306': attribute type 21 has an invalid length. [ 870.553771][T22988] netlink: 'syz.0.6306': attribute type 6 has an invalid length. [ 870.566887][T22988] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6306'. [ 870.889554][T23022] netlink: 'syz.3.6319': attribute type 10 has an invalid length. [ 871.059056][T23028] netlink: 'syz.4.6322': attribute type 10 has an invalid length. [ 871.251967][T23037] FAULT_INJECTION: forcing a failure. [ 871.251967][T23037] name failslab, interval 1, probability 0, space 0, times 0 [ 871.277877][T23037] CPU: 0 PID: 23037 Comm: syz.5.6325 Not tainted syzkaller #0 [ 871.285417][T23037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 871.295626][T23037] Call Trace: [ 871.298939][T23037] [ 871.301903][T23037] dump_stack_lvl+0x188/0x250 [ 871.306710][T23037] ? show_regs_print_info+0x20/0x20 [ 871.311967][T23037] ? load_image+0x400/0x400 [ 871.316595][T23037] ? __might_sleep+0xf0/0xf0 [ 871.321297][T23037] ? __lock_acquire+0x7d10/0x7d10 [ 871.326428][T23037] ? __mutex_lock_common+0x465/0x2400 [ 871.331933][T23037] should_fail+0x38c/0x4c0 [ 871.336393][T23037] should_failslab+0x5/0x20 [ 871.341041][T23037] slab_pre_alloc_hook+0x51/0xc0 [ 871.346061][T23037] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 871.353128][T23037] __kmalloc+0x6b/0x330 [ 871.357327][T23037] ? tracepoint_add_func+0x2f9/0x990 [ 871.363017][T23037] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 871.369692][T23037] tracepoint_add_func+0x2f9/0x990 [ 871.375110][T23037] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 871.381852][T23037] tracepoint_probe_register+0x5a/0x90 [ 871.387362][T23037] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 871.394015][T23037] perf_trace_event_init+0x518/0xa10 [ 871.399725][T23037] perf_trace_init+0x234/0x2d0 [ 871.404547][T23037] perf_tp_event_init+0x89/0x110 [ 871.409548][T23037] perf_try_init_event+0x12b/0x3d0 [ 871.414714][T23037] perf_event_alloc+0xfcf/0x2240 [ 871.419702][T23037] __se_sys_perf_event_open+0x6f5/0x1bb0 [ 871.425475][T23037] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 871.431166][T23037] ? lockdep_hardirqs_on+0x94/0x140 [ 871.436405][T23037] ? __x64_sys_perf_event_open+0x1c/0xc0 [ 871.442076][T23037] do_syscall_64+0x4c/0xa0 [ 871.446531][T23037] ? clear_bhb_loop+0x30/0x80 [ 871.451256][T23037] ? clear_bhb_loop+0x30/0x80 [ 871.455970][T23037] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 871.461898][T23037] RIP: 0033:0x7f74c380c799 [ 871.466373][T23037] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 871.486107][T23037] RSP: 002b:00007f74c1a66028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 871.494567][T23037] RAX: ffffffffffffffda RBX: 00007f74c3a85fa0 RCX: 00007f74c380c799 [ 871.502677][T23037] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000480 [ 871.510695][T23037] RBP: 00007f74c1a66090 R08: 0000000000000000 R09: 0000000000000000 [ 871.518810][T23037] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 871.526917][T23037] R13: 00007f74c3a86038 R14: 00007f74c3a85fa0 R15: 00007ffcbb658e48 [ 871.535041][T23037] [ 871.593594][T23038] netlink: 'syz.0.6326': attribute type 10 has an invalid length. [ 871.703934][T23038] team0: Port device wlan1 added [ 871.751139][T23036] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 872.151506][T23062] netlink: 'syz.2.6333': attribute type 10 has an invalid length. [ 872.305519][T23070] netlink: 'syz.5.6346': attribute type 10 has an invalid length. [ 872.638925][T23083] netlink: 14560 bytes leftover after parsing attributes in process `syz.0.6342'. [ 872.965843][T23103] FAULT_INJECTION: forcing a failure. [ 872.965843][T23103] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 873.004735][T23103] CPU: 0 PID: 23103 Comm: syz.2.6349 Not tainted syzkaller #0 [ 873.012267][T23103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 873.022739][T23103] Call Trace: [ 873.026146][T23103] [ 873.029117][T23103] dump_stack_lvl+0x188/0x250 [ 873.033967][T23103] ? show_regs_print_info+0x20/0x20 [ 873.039214][T23103] ? load_image+0x400/0x400 [ 873.043774][T23103] ? __lock_acquire+0x7d10/0x7d10 [ 873.048941][T23103] should_fail+0x38c/0x4c0 [ 873.053405][T23103] _copy_from_iter+0x22e/0x1170 [ 873.058307][T23103] ? __lock_acquire+0x7d10/0x7d10 [ 873.063386][T23103] ? copy_mc_pipe_to_iter+0x7d0/0x7d0 [ 873.068823][T23103] ? __virt_addr_valid+0x3c6/0x470 [ 873.074081][T23103] ? __phys_addr_symbol+0x2b/0x70 [ 873.079149][T23103] ? __check_object_size+0x30c/0x410 [ 873.084485][T23103] netlink_sendmsg+0x758/0xbe0 [ 873.089590][T23103] ? netlink_getsockopt+0x570/0x570 [ 873.095015][T23103] ? aa_sock_msg_perm+0x94/0x150 [ 873.100177][T23103] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 873.105871][T23103] ? security_socket_sendmsg+0x7c/0xa0 [ 873.111734][T23103] sock_write_iter+0x2a6/0x3a0 [ 873.116565][T23103] ? sock_read_iter+0x380/0x380 [ 873.121482][T23103] ? memset+0x1e/0x40 [ 873.125521][T23103] ? iov_iter_init+0xb4/0x170 [ 873.130521][T23103] vfs_write+0x745/0xd60 [ 873.134835][T23103] ? file_end_write+0x250/0x250 [ 873.139932][T23103] ? __fget_files+0x40f/0x480 [ 873.144664][T23103] ? __fdget_pos+0x1e2/0x370 [ 873.149293][T23103] ? ksys_write+0x71/0x260 [ 873.153754][T23103] ksys_write+0x152/0x260 [ 873.158387][T23103] ? __ia32_sys_read+0x80/0x80 [ 873.163221][T23103] ? lockdep_hardirqs_on+0x94/0x140 [ 873.168607][T23103] do_syscall_64+0x4c/0xa0 [ 873.173094][T23103] ? clear_bhb_loop+0x30/0x80 [ 873.177831][T23103] ? clear_bhb_loop+0x30/0x80 [ 873.182567][T23103] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 873.188519][T23103] RIP: 0033:0x7fa36b45e799 [ 873.193063][T23103] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 873.213272][T23103] RSP: 002b:00007fa3696b8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 873.221773][T23103] RAX: ffffffffffffffda RBX: 00007fa36b6d7fa0 RCX: 00007fa36b45e799 [ 873.230102][T23103] RDX: 0000000000000ec0 RSI: 0000200000000000 RDI: 0000000000000003 [ 873.238119][T23103] RBP: 00007fa3696b8090 R08: 0000000000000000 R09: 0000000000000000 [ 873.246400][T23103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 873.254414][T23103] R13: 00007fa36b6d8038 R14: 00007fa36b6d7fa0 R15: 00007ffea983a9e8 [ 873.262560][T23103] [ 874.361215][T23141] FAULT_INJECTION: forcing a failure. [ 874.361215][T23141] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 874.420275][T23141] CPU: 1 PID: 23141 Comm: syz.5.6361 Not tainted syzkaller #0 [ 874.428029][T23141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 874.438265][T23141] Call Trace: [ 874.441631][T23141] [ 874.444682][T23141] dump_stack_lvl+0x188/0x250 [ 874.449393][T23141] ? lockdep_hardirqs_on+0x94/0x140 [ 874.454815][T23141] ? show_regs_print_info+0x20/0x20 [ 874.460132][T23141] ? dump_stack+0x5/0x20 [ 874.464406][T23141] ? __sanitizer_cov_trace_pc+0x4/0x60 [ 874.469995][T23141] should_fail+0x38c/0x4c0 [ 874.474440][T23141] _copy_from_user+0x2e/0x170 [ 874.479137][T23141] __sys_bpf+0x26d/0x6f0 [ 874.483432][T23141] ? bpf_link_show_fdinfo+0x380/0x380 [ 874.489156][T23141] __x64_sys_bpf+0x78/0x90 [ 874.493628][T23141] do_syscall_64+0x4c/0xa0 [ 874.498120][T23141] ? clear_bhb_loop+0x30/0x80 [ 874.502829][T23141] ? clear_bhb_loop+0x30/0x80 [ 874.507531][T23141] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 874.513550][T23141] RIP: 0033:0x7f74c380c799 [ 874.518197][T23141] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 874.538175][T23141] RSP: 002b:00007f74c1a66028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 874.546991][T23141] RAX: ffffffffffffffda RBX: 00007f74c3a85fa0 RCX: 00007f74c380c799 [ 874.555169][T23141] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 874.563203][T23141] RBP: 00007f74c1a66090 R08: 0000000000000000 R09: 0000000000000000 [ 874.571288][T23141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 874.579287][T23141] R13: 00007f74c3a86038 R14: 00007f74c3a85fa0 R15: 00007ffcbb658e48 [ 874.587414][T23141] [ 874.794581][T23147] validate_nla: 3 callbacks suppressed [ 874.794625][T23147] netlink: 'syz.2.6364': attribute type 10 has an invalid length. [ 875.470024][T23174] FAULT_INJECTION: forcing a failure. [ 875.470024][T23174] name failslab, interval 1, probability 0, space 0, times 0 [ 875.492911][T23174] CPU: 1 PID: 23174 Comm: syz.2.6374 Not tainted syzkaller #0 [ 875.500546][T23174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 875.510645][T23174] Call Trace: [ 875.514085][T23174] [ 875.517057][T23174] dump_stack_lvl+0x188/0x250 [ 875.521812][T23174] ? show_regs_print_info+0x20/0x20 [ 875.527063][T23174] ? load_image+0x400/0x400 [ 875.531611][T23174] ? __might_sleep+0xf0/0xf0 [ 875.536333][T23174] ? __lock_acquire+0x7d10/0x7d10 [ 875.541401][T23174] ? __mutex_lock_common+0x465/0x2400 [ 875.547084][T23174] should_fail+0x38c/0x4c0 [ 875.551562][T23174] should_failslab+0x5/0x20 [ 875.556145][T23174] slab_pre_alloc_hook+0x51/0xc0 [ 875.561174][T23174] ? trace_event_raw_event_preemptirq_template+0x290/0x290 [ 875.568554][T23174] __kmalloc+0x6b/0x330 [ 875.572849][T23174] ? tracepoint_add_func+0x2f9/0x990 [ 875.578191][T23174] ? trace_event_raw_event_preemptirq_template+0x290/0x290 [ 875.585574][T23174] tracepoint_add_func+0x2f9/0x990 [ 875.590937][T23174] ? trace_event_raw_event_preemptirq_template+0x290/0x290 [ 875.598188][T23174] tracepoint_probe_register+0x5a/0x90 [ 875.603704][T23174] ? trace_event_raw_event_preemptirq_template+0x290/0x290 [ 875.610944][T23174] perf_trace_event_init+0x518/0xa10 [ 875.616307][T23174] perf_trace_init+0x234/0x2d0 [ 875.621194][T23174] perf_tp_event_init+0x89/0x110 [ 875.626165][T23174] perf_try_init_event+0x12b/0x3d0 [ 875.631335][T23174] perf_event_alloc+0xfcf/0x2240 [ 875.636320][T23174] __se_sys_perf_event_open+0x5de/0x1bb0 [ 875.642370][T23174] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 875.648037][T23174] ? syscall_enter_from_user_mode+0x2a/0x70 [ 875.654040][T23174] ? __x64_sys_perf_event_open+0x1c/0xc0 [ 875.659788][T23174] do_syscall_64+0x4c/0xa0 [ 875.664224][T23174] ? clear_bhb_loop+0x30/0x80 [ 875.668916][T23174] ? clear_bhb_loop+0x30/0x80 [ 875.673937][T23174] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 875.679882][T23174] RIP: 0033:0x7fa36b45e799 [ 875.684661][T23174] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 875.704593][T23174] RSP: 002b:00007fa3696b8028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 875.713166][T23174] RAX: ffffffffffffffda RBX: 00007fa36b6d7fa0 RCX: 00007fa36b45e799 [ 875.721181][T23174] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 00002000000003c0 [ 875.729193][T23174] RBP: 00007fa3696b8090 R08: 0000000000000000 R09: 0000000000000000 [ 875.737348][T23174] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 875.745362][T23174] R13: 00007fa36b6d8038 R14: 00007fa36b6d7fa0 R15: 00007ffea983a9e8 [ 875.753508][T23174] [ 875.774146][T23169] netlink: 'syz.5.6372': attribute type 10 has an invalid length. [ 875.889370][T23177] netlink: 188 bytes leftover after parsing attributes in process `syz.2.6376'. [ 876.583775][T23205] netlink: 'syz.5.6385': attribute type 10 has an invalid length. [ 879.773524][T23245] netlink: 'syz.4.6397': attribute type 10 has an invalid length. [ 879.917758][T23251] netlink: 'syz.5.6399': attribute type 10 has an invalid length. [ 883.128482][T23295] netlink: 'syz.2.6414': attribute type 10 has an invalid length. [ 883.339239][ T1108] Bluetooth: hci2: command 0x0409 tx timeout [ 883.506369][T23304] netlink: 'syz.3.6418': attribute type 10 has an invalid length. [ 883.886327][T23291] chnl_net:caif_netlink_parms(): no params data found [ 883.921405][T23312] netlink: 'syz.5.6420': attribute type 39 has an invalid length. [ 884.129067][T23321] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 884.219704][T23291] bridge0: port 1(bridge_slave_0) entered blocking state [ 884.227852][T23291] bridge0: port 1(bridge_slave_0) entered disabled state [ 884.236283][T23291] device bridge_slave_0 entered promiscuous mode [ 884.245513][T23291] bridge0: port 2(bridge_slave_1) entered blocking state [ 884.252904][T23291] bridge0: port 2(bridge_slave_1) entered disabled state [ 884.261528][T23291] device bridge_slave_1 entered promiscuous mode [ 884.368700][ T5800] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 884.482160][T23331] netlink: 'syz.2.6426': attribute type 10 has an invalid length. [ 884.512461][ T5800] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 884.546061][T23291] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 884.619982][T23291] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 884.649947][ T5800] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 884.765372][T23345] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.6431'. [ 884.784526][T23345] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 885.417623][ T4311] Bluetooth: hci2: command 0x041b tx timeout [ 886.938462][ T27] INFO: task syz.1.5332:19790 blocked for more than 143 seconds. [ 886.946349][ T27] Not tainted syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 886.985814][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 887.047273][ T27] task:syz.1.5332 state:D stack:25904 pid:19790 ppid: 13283 flags:0x00004004 [ 887.056687][ T27] Call Trace: [ 887.157620][ T27] [ 887.160710][ T27] __schedule+0x11ef/0x43c0 [ 887.223548][ T27] ? __mutex_trylock_common+0x155/0x260 [ 887.235829][ T27] ? __lock_acquire+0x7d10/0x7d10 [ 887.242489][ T27] ? event_function_call+0x42e/0x510 [ 887.254707][ T27] ? release_firmware_map_entry+0x190/0x190 [ 887.262303][ T27] schedule+0x11b/0x1e0 [ 887.266524][ T27] perf_pending_task_sync+0x13c/0x1c0 [ 887.278915][ T27] ? perf_mmap+0x13e0/0x13e0 [ 887.283572][ T27] _free_event+0x34/0xe60 [ 887.294093][ T27] ? perf_mmap+0x13e0/0x13e0 [ 887.301626][ T27] perf_event_release_kernel+0x83e/0x8d0 [ 887.313147][ T27] ? __might_sleep+0xf0/0xf0 [ 887.320177][ T27] ? lock_chain_count+0x20/0x20 [ 887.325344][ T27] ? calc_timer_values+0x410/0x410 [ 887.339025][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 887.344591][ T27] ? perf_mmap+0x13e0/0x13e0 [ 887.350831][ T27] perf_release+0x37/0x40 [ 887.355233][ T27] __fput+0x234/0x930 [ 887.359619][ T27] task_work_run+0x125/0x1a0 [ 887.364271][ T27] exit_to_user_mode_loop+0x10f/0x130 [ 887.370289][ T27] exit_to_user_mode_prepare+0xee/0x180 [ 887.375879][ T27] syscall_exit_to_user_mode+0x16/0x40 [ 887.381929][ T27] do_syscall_64+0x58/0xa0 [ 887.387417][ T27] ? clear_bhb_loop+0x30/0x80 [ 887.392339][ T27] ? clear_bhb_loop+0x30/0x80 [ 887.397502][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 887.403447][ T27] RIP: 0033:0x7f02fa384799 [ 887.408401][ T27] RSP: 002b:00007f02f85bd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 887.417284][ T27] RAX: 0000000000000000 RBX: 00007f02fa5fe090 RCX: 00007f02fa384799 [ 887.425306][ T27] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000c [ 887.433994][ T27] RBP: 00007f02fa41ac99 R08: 0000000000000000 R09: 0000000000000000 [ 887.442317][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 887.452336][ T27] R13: 00007f02fa5fe128 R14: 00007f02fa5fe090 R15: 00007fff8bb26b88 [ 887.460688][ T27] [ 887.463841][ T27] [ 887.463841][ T27] Showing all locks held in the system: [ 887.478820][ T27] 1 lock held by khungtaskd/27: [ 887.481897][T23291] team0: Port device team_slave_0 added [ 887.491379][ T27] #0: ffffffff8c31eaa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 887.500994][ T23] Bluetooth: hci2: command 0x040f tx timeout [ 887.517041][ T27] 3 locks held by kworker/0:2/1108: [ 887.522972][ T27] #0: ffff888016c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x761/0x1010 [ 887.540818][ T27] #1: ffffc90004a1fd00 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010 [ 887.555913][ T27] #2: ffff888060e3a400 (&nsim_dev->port_list_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x56/0xb40 [ 887.569206][ T27] 2 locks held by kworker/0:3/1326: [ 887.574543][ T27] #0: ffff888016c72138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x761/0x1010 [ 887.586226][ T27] #1: ffffc90005447d00 ((work_completion)(&rew.rew_work)){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010 [ 887.597970][ T27] 2 locks held by getty/3952: [ 887.602855][ T27] #0: ffff88802cdf1098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 887.613147][ T27] #1: ffffc900025e62e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x5df/0x1a70 [ 887.624025][ T27] 7 locks held by kworker/u4:13/5800: [ 887.629911][ T27] #0: ffff888016dcd938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x761/0x1010 [ 887.640741][ T27] #1: ffffc9000319fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010 [ 887.651225][ T27] #2: ffffffff8d430c50 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x148/0xba0 [ 887.661037][ T27] #3: ffffffff8d4621a8 (devlink_mutex){+.+.}-{3:3}, at: devlink_pernet_pre_exit+0xa4/0x310 [ 887.671655][ T27] #4: ffff888074d39658 (&nsim_bus_dev->nsim_bus_reload_lock){+.+.}-{3:3}, at: nsim_dev_reload_down+0x57/0x160 [ 887.685409][ T27] #5: ffff888060e3a400 (&nsim_dev->port_list_lock){+.+.}-{3:3}, at: nsim_dev_reload_destroy+0x115/0x240 [ 887.698789][ T27] #6: ffffffff8d43cb48 (rtnl_mutex){+.+.}-{3:3}, at: devlink_nl_port_fill+0x347/0x8c0 [ 887.709213][ T27] 2 locks held by kworker/u4:21/5825: [ 887.714646][ T27] #0: ffff8880b913a358 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140 [ 887.725181][ T27] #1: ffffc9000306fd00 ((work_completion)(&(&bat_priv->nc.work)->work)){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010 [ 887.738345][ T27] 1 lock held by syz-executor/23291: [ 887.743780][ T27] #0: ffffffff8c323528 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3a5/0x750 [ 887.755383][ T27] 2 locks held by syz.5.6427/23334: [ 887.760901][ T27] #0: ffffffff8d43cb48 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3d/0x1b0 [ 887.770355][ T27] #1: ffffffff8c323528 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x2d1/0x750 [ 887.781707][ T27] 1 lock held by syz.3.6430/23342: [ 887.788446][ T27] #0: ffffffff8d43cb48 (rtnl_mutex){+.+.}-{3:3}, at: netdev_run_todo+0x88f/0xa70 [ 887.798112][ T27] 1 lock held by syz.2.6433/23352: [ 887.803495][ T27] #0: ffffffff8d43cb48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ee/0xf30 [ 887.813516][ T27] 1 lock held by syz.0.6436/23360: [ 887.822168][ T27] #0: ffffffff8d43cb48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ee/0xf30 [ 887.836268][ T27] [ 887.843419][ T27] ============================================= [ 887.843419][ T27] [ 887.856569][ T27] NMI backtrace for cpu 1 [ 887.860962][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 887.868224][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 887.878444][ T27] Call Trace: [ 887.881877][ T27] [ 887.884841][ T27] dump_stack_lvl+0x188/0x250 [ 887.889550][ T27] ? show_regs_print_info+0x20/0x20 [ 887.894882][ T27] ? load_image+0x400/0x400 [ 887.899420][ T27] ? tick_nohz_tick_stopped+0x7b/0xb0 [ 887.905089][ T27] ? nmi_cpu_backtrace+0x1b2/0x3d0 [ 887.910460][ T27] nmi_cpu_backtrace+0x3a2/0x3d0 [ 887.915466][ T27] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 887.921662][ T27] ? _printk+0xda/0x130 [ 887.925859][ T27] ? load_image+0x400/0x400 [ 887.930779][ T27] ? load_image+0x400/0x400 [ 887.935587][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 887.941710][ T27] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 887.948098][ T27] watchdog+0xe0f/0xe50 [ 887.952447][ T27] kthread+0x436/0x520 [ 887.956562][ T27] ? hungtask_pm_notify+0x40/0x40 [ 887.961643][ T27] ? kthread_blkcg+0xd0/0xd0 [ 887.966284][ T27] ret_from_fork+0x1f/0x30 [ 887.970988][ T27] [ 887.974891][ T27] Sending NMI from CPU 1 to CPUs 0: [ 887.980248][ C0] NMI backtrace for cpu 0 [ 887.980261][ C0] CPU: 0 PID: 23291 Comm: syz-executor Not tainted syzkaller #0 [ 887.980281][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 887.980292][ C0] RIP: 0010:kasan_check_range+0x8a/0x290 [ 887.980319][ C0] Code: 1c 21 49 89 df 4d 29 df 49 83 ff 10 7f 29 4d 85 ff 0f 84 38 01 00 00 4c 89 cb 48 f7 d3 4c 01 f3 41 80 3b 00 0f 85 86 01 00 00 <49> ff c3 48 ff c3 75 ee e9 18 01 00 00 44 89 dd 83 e5 07 0f 84 b5 [ 887.980336][ C0] RSP: 0018:ffffc900032af150 EFLAGS: 00000046 [ 887.980352][ C0] RAX: 0000000000000001 RBX: ffffffffffffffff RCX: ffffffff815d17f8 [ 887.980366][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff901d40c0 [ 887.980380][ C0] RBP: ffffc900032af3d0 R08: ffffffff901d40c7 R09: 1ffffffff203a818 [ 887.980394][ C0] R10: dffffc0000000000 R11: fffffbfff203a818 R12: dffffc0000000001 [ 887.980409][ C0] R13: ffff888026290000 R14: 1ffffffff203a818 R15: 0000000000000001 [ 887.980423][ C0] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 887.980440][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 887.980454][ C0] CR2: 00007f96258ce990 CR3: 0000000064350000 CR4: 00000000003506f0 [ 887.980471][ C0] DR0: 0000200000000300 DR1: 0000200000000300 DR2: 0000200000000300 [ 887.980485][ C0] DR3: 0000200000000300 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 887.980498][ C0] Call Trace: [ 887.980504][ C0] [ 887.980512][ C0] __lock_acquire+0x12e8/0x7d10 [ 887.980545][ C0] ? mark_lock+0x94/0x320 [ 887.980561][ C0] ? verify_lock_unused+0x140/0x140 [ 887.980582][ C0] ? mark_lock+0x94/0x320 [ 887.980598][ C0] ? __lock_acquire+0x13bc/0x7d10 [ 887.980626][ C0] lock_acquire+0x19e/0x400 [ 887.980645][ C0] ? bad_range+0x77/0x2d0 [ 887.980665][ C0] ? read_lock_is_recursive+0x10/0x10 [ 887.980690][ C0] ? bad_range+0x77/0x2d0 [ 887.980705][ C0] seqcount_lockdep_reader_access+0xb8/0x190 [ 887.980723][ C0] ? bad_range+0x77/0x2d0 [ 887.980738][ C0] ? bad_range+0x2d0/0x2d0 [ 887.980759][ C0] bad_range+0x77/0x2d0 [ 887.980778][ C0] __free_one_page+0x137/0xc30 [ 887.980801][ C0] free_pcppages_bulk+0x5a6/0x7a0 [ 887.980826][ C0] ? local_lock_acquire+0x120/0x120 [ 887.980849][ C0] free_unref_page+0x151/0x2a0 [ 887.980868][ C0] ? __might_sleep+0xf0/0xf0 [ 887.980886][ C0] ? mark_free_pages+0x5c0/0x5c0 [ 887.980908][ C0] ? __free_pages+0x95/0x1a0 [ 887.980927][ C0] __vunmap+0x8b9/0xa50 [ 887.980945][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 887.980969][ C0] ? kcov_open+0x80/0x80 [ 887.980985][ C0] kcov_close+0x27/0x50 [ 887.981002][ C0] __fput+0x234/0x930 [ 887.981026][ C0] task_work_run+0x125/0x1a0 [ 887.981047][ C0] do_exit+0x626/0x20c0 [ 887.981067][ C0] ? put_task_struct+0x80/0x80 [ 887.981083][ C0] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 887.981106][ C0] ? lock_chain_count+0x20/0x20 [ 887.981126][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 887.981144][ C0] do_group_exit+0x12e/0x300 [ 887.981161][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 887.981194][ C0] get_signal+0x6ca/0x12c0 [ 887.981219][ C0] arch_do_signal_or_restart+0xe7/0x12c0 [ 887.981240][ C0] ? security_socket_sendmsg+0x7c/0xa0 [ 887.981262][ C0] ? __ia32_sys_getpeername+0x80/0x80 [ 887.981286][ C0] ? get_sigframe_size+0x10/0x10 [ 887.981314][ C0] ? exit_to_user_mode_loop+0x3b/0x130 [ 887.981332][ C0] exit_to_user_mode_loop+0x9e/0x130 [ 887.981350][ C0] exit_to_user_mode_prepare+0xee/0x180 [ 887.981368][ C0] syscall_exit_to_user_mode+0x16/0x40 [ 887.981388][ C0] do_syscall_64+0x58/0xa0 [ 887.981405][ C0] ? clear_bhb_loop+0x30/0x80 [ 887.981423][ C0] ? clear_bhb_loop+0x30/0x80 [ 887.981441][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 887.981461][ C0] RIP: 0033:0x7f3a36350fce [ 887.981475][ C0] Code: Unable to access opcode bytes at RIP 0x7f3a36350fa4. [ 887.981483][ C0] RSP: 002b:00007ffe602eec88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 887.981501][ C0] RAX: 0000000000000028 RBX: 00005555764cd500 RCX: 00007f3a36350fce [ 887.981515][ C0] RDX: 0000000000000028 RSI: 00007f3a37138670 RDI: 0000000000000003 [ 887.981527][ C0] RBP: 0000000000000001 R08: 00007ffe602eed04 R09: 000000000000000c [ 887.981540][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 887.981551][ C0] R13: 0000000000000000 R14: 00007f3a37138670 R15: 0000000000000000 [ 887.981569][ C0] [ 887.985818][T23352] netlink: 'syz.2.6433': attribute type 39 has an invalid length. [ 888.009305][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 888.432816][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 888.440042][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 888.450306][ T27] Call Trace: [ 888.453603][ T27] [ 888.456554][ T27] dump_stack_lvl+0x188/0x250 [ 888.461345][ T27] ? show_regs_print_info+0x20/0x20 [ 888.466654][ T27] ? load_image+0x400/0x400 [ 888.471276][ T27] panic+0x2e5/0x810 [ 888.475193][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 888.480864][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 888.485420][ T27] ? __irq_work_queue_local+0x12c/0x190 [ 888.491011][ T27] ? nmi_trigger_cpumask_backtrace+0x260/0x280 [ 888.497279][ T27] watchdog+0xe4e/0xe50 [ 888.501668][ T27] kthread+0x436/0x520 [ 888.505772][ T27] ? hungtask_pm_notify+0x40/0x40 [ 888.510835][ T27] ? kthread_blkcg+0xd0/0xd0 [ 888.515456][ T27] ret_from_fork+0x1f/0x30 [ 888.520426][ T27] [ 888.523891][ T27] Kernel Offset: disabled [ 888.528482][ T27] Rebooting in 86400 seconds..