last executing test programs: 53.442218207s ago: executing program 3 (id=2331): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000000400)={&(0x7f00000004c0)=@in6={0xa, 0x4e23, 0xd, @local, 0x7}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000580)="bb", 0x1}], 0x1, 0x0, 0x110}, 0x40040) 52.808539092s ago: executing program 3 (id=2334): socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000cc0)={0xa, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x840, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x10000, 0x3, 0x5, 0x6, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8ac}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="8fedc0790701757df37538"], 0xfdef) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)="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", 0x0, 0x6}, 0x38) r2 = perf_event_open(&(0x7f0000000780)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x3a, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x5, 0x5, &(0x7f00000008c0)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000900)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000940)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x6, 0xb, &(0x7f0000000e80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], &(0x7f0000000f00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000f40)={r6, 0x0, 0xe, 0x0, &(0x7f0000000fc0)="030d099b688bbf0f5a5400000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000a40)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d8150019001105142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aebfb0daa7b0cd39e4edbb57a5025ccca9e020000000000000040fad95667e006dcbd63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d9345", 0xd8}], 0x1}, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000b40)={r4, r1}, 0xc) r8 = socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f0000000b80)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000c00)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = bpf$ITER_CREATE(0xb, &(0x7f0000000c40), 0x0) setsockopt$sock_attach_bpf(r9, 0x1, 0x10, &(0x7f0000000c80)=r10, 0x4) setsockopt$sock_attach_bpf(r8, 0x1, 0x15, &(0x7f00000000c0), 0xff7b) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xed, 0x0, 0x30, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x200, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x5, 0x5, &(0x7f0000000400)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89a0, &(0x7f0000000340)='.d\x00\x00\x00\x00j\xfef;q1\x95\xf4\xe4\x13\x95k#Jz.F\xce\xfb\x9c\x0f\xf3v\x88\x91\xbct\xb0\x1bLq\x15\x00\xad\t\x13\xf5U\x02\xc9d6q\xc3\xa5\xcf\x01t\r%\xad-\x13\xb0 E\xaaC\xc388\x13\xc6H\x0f \x03\x86\xb5\xbfq\'\xab!\x9e\xa98\xa1\xc3\xe9\x06C\xd4\xb5\x18}4\xa9yA8\x1fQ\xdf\xde\x91\xfd\xf1B*j\n\xef\xff\xddR\xec~c\xcb\x93\x84\x7f\\x6\xedZ\x82\xa0\x1by\x17\x1a\xc8\x98\x99\x0f') openat$cgroup_devices(r1, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) 52.62524789s ago: executing program 3 (id=2335): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000002c0), 0x0) close(r1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000440)=r2) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="17000000060000000800002e0008000000406000", @ANYRES32=r0, @ANYBLOB="ffff00"/20, @ANYRES32=r2, @ANYRES32, @ANYBLOB="01000000050000000400"/28], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000100), &(0x7f0000000140)='%ps \x00'}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1e1e00"/12, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0xe}, 0x100c, 0x7, 0x0, 0xb, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, 0x0) socket$kcm(0x23, 0x5, 0x0) socket$kcm(0xa, 0x2, 0x73) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)) r3 = perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x2, @perf_bp={0x0}, 0x8000, 0x7, 0x43a1bd76, 0x1, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xd, 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="180004000000000000000000000087259558f7fe1ff0e8706e000061199400000000009500000000000000"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x70) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000880)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000008c0)) perf_event_open(&(0x7f0000000900)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4008, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x2, 0xb}, 0x0, 0x10000, 0x9e4, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000a40)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e1406020000f8ff0e002900", 0x24}, {&(0x7f0000000a80)="e46c0000", 0x4}, {&(0x7f0000000ac0)="22903ecc2c1c", 0x6}], 0x3}, 0x40042) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x3, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c40)={r6, 0xe0, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d80)={0x6, 0x24, &(0x7f0000000e40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @call={0x85, 0x0, 0x0, 0x54}, @map_val={0x18, 0x5, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5c85}, @generic={0x2, 0xa, 0x7, 0x6, 0xfff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10}, @ringbuf_query, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1000000}, @call={0x85, 0x0, 0x0, 0xb3}, @map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000f80)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', r7}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="0600000004000000040000000001000000000000", @ANYRES32=0x0, @ANYBLOB="1000"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000001040)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x1, 0xc, &(0x7f0000001180)=ANY=[@ANYBLOB="08000000000000000000000000000000611800000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000150802000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001200)=r8, 0x4) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="2100000000000000000000004000000000000400", @ANYRES32=r9, @ANYBLOB="0600"/20, @ANYRES32=r7, @ANYRES32=r11, @ANYBLOB="040000fc050000000400ec09a23b5feb0c00"/35], 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000012c0)={r12, &(0x7f0000001300)}, 0x20) 51.53855285s ago: executing program 3 (id=2340): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = getpid() perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x4156, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffff8, 0x1}, 0x12640, 0x0, 0xfffffffe, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffffffffff3, 0xffffffffffffffdd}, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x0, 0x0, 0x0, 0x5}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="11000000040000000400000006"], 0x48) r4 = socket$kcm(0x10, 0x2, 0x4) close(r4) r5 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000001980)={&(0x7f00000019c0)=@in6={0xa, 0x4e23, 0x0, @empty}, 0x80, 0x0, 0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="180040c2f17fc004000000000000000029000067dd38a8005ad2055ef2b24c09823182ad9a6b44e510bb8fce63a4b1c99f820d83dc88509aa23538b5d3cb752edfa0c7972f246d2ff9bc8a432f38b440aa4b75f51b8a1afa993c52d1a75333c970ffe5b4e17a7e333b99cabb5819ef28c46e16212495a398a5fe405c51747d4b0b76aedc4b73888868310fc17d598d22db7b12d6e7f3d0bc1c39b80f5c517d0c88402304000000000000"], 0x18}, 0xf7e5) close(0xffffffffffffffff) socket$kcm(0x10, 0x400000005, 0x0) sendmsg$inet(r4, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001880)=[{&(0x7f00000018c0)="6000000068007f089e", 0x9}, {&(0x7f0000001900)}], 0x2}, 0x0) bpf$BPF_GET_MAP_INFO(0x4, &(0x7f0000000440)={r3, 0x58, &(0x7f0000000480)}, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x800, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000003000)={&(0x7f0000001900)=@ethernet={0x1, @multicast}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000001a40)="15e69db2", 0x4}, {&(0x7f0000001b40)="06ff49f6d56a5863cf9e0e6f5d1a8205d980f5c226432f95a418c9c15726ec32d40e85ecdddfb757a14984d22844dbcf17c38d4e47d2", 0x36}], 0x2, &(0x7f0000001bc0)=ANY=[@ANYBLOB="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"], 0x1430}, 0x40) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffdfffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000640)={0x0, 0x80, 0xff, 0x4, 0xc, 0x7f, 0x0, 0x400000001, 0x80c14, 0xf, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6, 0x4, @perf_bp={0x0, 0xd}, 0x100600, 0xfffffffffffffffd, 0x5, 0x7, 0x2, 0x5, 0x8, 0x0, 0x82000008, 0x0, 0x3}, 0x0, 0x11, 0xffffffffffffffff, 0x2) r7 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r7, &(0x7f00000006c0)={&(0x7f0000000700)={0xa, 0x0, @multicast1}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000780)="a72d11a15c048c0a7d63aebc5cea1f815108f6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2de68b885a0fd8f8b8c6c342237b632f6414a3eb3480f5f42106c5812e9bfd4e8c8dea8d08525d9aa1da7c7c2ee7ff3d31b79b211dd01e304a8ffc83a89a59f3b1e2ef5e969b6d90bea7e161066f25622fad914bff52bacd2807093dda1838b529ee57f718b374ce2841b924a42457867547a6edcb8412d85f11796742bf640b5819a9546357df778c332af5983c4373a95d9c58b52dba445eee92e6911824f0c534e7a5934d9eac9b7f6fec22002fc53a3003a3304217f567b47cd326edc5f48eb1f46bb20d1e10e72239afc9769344590cf48902aba5405b7d4baa31a912ab398a2f2d3f037614bb56a89244ece50f3a1e058d274f1e70f944eb8a305be91e561e5eb843d057a81f4deb84a6335ec81ca964cdae5f318d4e9aaea2c477cc279c00c698bcfe4b8e04c09079d8f3f5438d9d45a00f50d2f9b245c8c68eebf247e25ba8d26f8b95b21ac9ceb50c0aa2e4bdc032024db216b92f9350a90ac79341af14d3fa8ba908096e1b503341aed667bb184c672dac85fc4f335b3871c3b4e55ea219a857d2d2e135358f6b45a20b3e7de8e09b2041eb7c5084a80258fb524a983752659298a251e178b56f96bc67ae0a78ec92f92d92c9cf0edb5dcb11e739d69410ad44c8df00caa030d7d89f2ec38bd7698115c423cf3e6048793aca08ffbcdac766f1553773fa00031c1d75246e4e1eddf8948d02a3de6d67fd7329e45070f29044587f1e0db50d04e673191a63e30f96ee0d8d52738fab36a7fe2c6ab9301d401e7ca5b1f039193a580e40abbdf40c2d7e27809dec80815d37adae9fe7fb9d3a974c9fc03944d7338d000b81170be4c6792ed6b3b827194b3ae11e2acfca48498d1126aacf80f3d574256ef7f75552ff087a819e", 0x1000}, {&(0x7f0000001780)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000017c0)=[@ip_tos_int={{0x14, 0x29, 0x3b, 0xc8ffffff}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x8044) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x4801}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socketpair(0x18, 0x0, 0x1, &(0x7f0000000280)) socketpair$unix(0x1, 0x2, 0x0, 0xfffffffffffffffc) close(r8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r6, &(0x7f0000000240)=ANY=[@ANYBLOB="1b2388a8", @ANYRES16=0x0, @ANYRES8=r2], 0xffdd) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="2e00000011008188040f80ec59acbc0413a181003f00000001010000000200000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) 47.747991403s ago: executing program 3 (id=2347): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000780)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)}, 0x0) 46.714552288s ago: executing program 3 (id=2352): bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_lsm={0xd, 0x5, &(0x7f00000002c0)=@framed={{0x26, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x48}, [@initr0]}, &(0x7f0000000300)='GPL\x00'}, 0x80) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={0x0, &(0x7f0000000380)=""/230, 0x0, 0xe6, 0x1, 0x6}, 0x28) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{}, 0x0, &(0x7f00000004c0)}, 0x20) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r0, 0x0, 0x0) r1 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000f00)="0218000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001100)={0x6, 0x6, &(0x7f0000000100)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @exit, @exit, @alu={0x7, 0x0, 0x3, 0xb, 0xb, 0xfffffffffffffff0, 0x10}, @map_idx={0x18, 0x3, 0x5, 0x0, 0xa}], &(0x7f0000000140)='syzkaller\x00', 0x8ab, 0xe8, &(0x7f0000000f80)=""/232, 0x82000, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001080)={0x3f, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000010c0)=[{0x3, 0x4, 0xc, 0x6}], 0x10, 0x8}, 0x94) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0xe, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000780)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000840)={&(0x7f0000000880)=@phonet, 0x80, &(0x7f0000000900)=[{0x0, 0xea}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000940)={&(0x7f00000011c0)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000600000055ec5e0c0fd5b415040000000000000e0400000001000000000002000072449ba258af50ee96d27c52347b0d250012fc9d1f0f4e00000500000000020000000000000802000000000000000000000a03000000003bca82d13386a8a117623d01de866c1c5857a7bf081b7afbf21aaa469148b4f119a0ca4bf87033009d7157eb61ec115b4f86516e0d941efecc176410b94fb547f28c6d1ba76a"], 0x0, 0x52}, 0x28) 39.610876466s ago: executing program 1 (id=2383): socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000cc0)={0xa, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x840, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x10000, 0x3, 0x5, 0x6, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8ac}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="8fedc0790701757df37538"], 0xfdef) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)="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", 0x0, 0x6}, 0x38) r2 = perf_event_open(&(0x7f0000000780)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x3a, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x5, 0x5, &(0x7f00000008c0)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000900)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000940)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x6, 0xb, &(0x7f0000000e80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], &(0x7f0000000f00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000f40)={r6, 0x0, 0xe, 0x0, &(0x7f0000000fc0)="030d099b688bbf0f5a5400000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000a40)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d8150019001105142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aebfb0daa7b0cd39e4edbb57a5025ccca9e020000000000000040fad95667e006dcbd63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d9345", 0xd8}], 0x1}, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000b40)={r4, r1}, 0xc) r8 = socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f0000000b80)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000c00)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = bpf$ITER_CREATE(0xb, &(0x7f0000000c40), 0x0) setsockopt$sock_attach_bpf(r9, 0x1, 0x10, &(0x7f0000000c80)=r10, 0x4) setsockopt$sock_attach_bpf(r8, 0x1, 0x15, &(0x7f00000000c0), 0xff7b) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xed, 0x0, 0x30, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x200, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x5, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="18080000000000001fa3e65f1d1bfd000000000000eeb45bccdf47c54af448969061480d27bda51465408176dd6ef788850e9da5052732fb2ae192a7fc654521b85fa9cdb6e3c730e671fff063b6f8a17f2baeafe6c42ba17e5c3c3a98ce9e4b7cf27441e81eef8a62ba7da30bdd7569532c"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89a0, &(0x7f0000000340)='.d\x00\x00\x00\x00j\xfef;q1\x95\xf4\xe4\x13\x95k#Jz.F\xce\xfb\x9c\x0f\xf3v\x88\x91\xbct\xb0\x1bLq\x15\x00\xad\t\x13\xf5U\x02\xc9d6q\xc3\xa5\xcf\x01t\r%\xad-\x13\xb0 E\xaaC\xc388\x13\xc6H\x0f \x03\x86\xb5\xbfq\'\xab!\x9e\xa98\xa1\xc3\xe9\x06C\xd4\xb5\x18}4\xa9yA8\x1fQ\xdf\xde\x91\xfd\xf1B*j\n\xef\xff\xddR\xec~c\xcb\x93\x84\x7f\\x6\xedZ\x82\xa0\x1by\x17\x1a\xc8\x98\x99\x0f') openat$cgroup_devices(r1, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) 39.094635468s ago: executing program 1 (id=2386): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB="1b000009000000b2ea3fcefae90b62de2df5b8ee449f5c6153efdb2f0b6ad1c11f", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x14, &(0x7f0000000140)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x306788b2edba9ed4}}, @printk={@lli, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xd, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="b4000000000000006114840000000000050000"], 0x0, 0x5, 0xc3, &(0x7f0000000540)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) sendmsg$kcm(r3, &(0x7f0000000640)={&(0x7f0000000680)=@generic={0xa, "8ab77fa26849ff263ef30c98b353011a5990650042e2dacdc165ececece6be1862e2adacd2737d00ad6f9fa9f3d7145e15dd9fb1a7adc211220963ad5def53b911ba5b9da13641f982757012a7496de0b3a36f5849f260c603dbc317f54b901ee80ea6132ca6e88c776553e1833052ca376304313c5637786a36a4b83857"}, 0x80, 0x0}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000700)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x1}, 0x800, 0x2, 0xfffffffd, 0x1, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000780)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x0, 0x5}, 0x14802, 0x1000000, 0x2, 0x1, 0x1, 0x1, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x200000000, 0xffffffffffffffff, 0x2) r5 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000840)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x71, 0x772}, 0x5000, 0xd, 0x0, 0x0, 0x80000000800000, 0x2000a, 0xbabe, 0x0, 0x103}, 0xffffffffffffffff, 0xfffffffffffffff9, 0xffffffffffffffff, 0x9) setsockopt$sock_attach_bpf(r5, 0x29, 0x23, &(0x7f00000008c0), 0xcf) perf_event_open(&(0x7f0000000900)={0x0, 0x80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x40068, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x6}, 0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x6, 0xc07, 0xfffd, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0x2, 0xffffffffffffffff, 0xc) perf_event_open(&(0x7f0000000980)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xd040, 0x10000}, 0x0, 0x10000, 0x0, 0x2, 0x582, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x2, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x2, &(0x7f0000000ac0)=ANY=[@ANYBLOB="91102b000000000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=@base={0x5, 0x1ff003, 0x66, 0x7f, 0x1}, 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x40, r6}, 0x38) perf_event_open(&(0x7f0000000c00)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000c80)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r7) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001000)={0x0, 0x4}, 0xc) ioctl$SIOCSIFHWADDR(r7, 0x8b34, &(0x7f0000000cc0)={'wlan1\x00', @random="000500000020"}) sendmsg$kcm(r5, &(0x7f0000000d00)={&(0x7f0000000d40)=@generic={0xa, "8ab77fa26849ff263ef30c98b353011a5990650042e2dacdc165ececece6be1862e2adacd2737d00ad6f9fa9f3d7145e15dd9fb1a7adc211220963ad5def53b911ba5b9da13641f982757012a7496de0b3a36f5849f260c603dbc317f54b901ee80ea6132ca6e88c776553e1833052ca376304313c5637786a36a4b83857"}, 0x80, 0x0}, 0x0) sendmsg$inet(r4, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000e40)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703290000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fc", 0x51}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x24040000) sendmsg$inet(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000003f40)=[{&(0x7f0000003f80)="5c00000013006bcd9e3fe3dc4d48aa31086b87003000000000000000160af365040019000d0002008be3a0e640940800000000001282bb2352d1f006baa45e0d501e2494acf1566e000a84c9", 0x4c}, {&(0x7f0000004000)="d8660235880157cb1b5e1b5a6d131dae", 0x10}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x24044054) 37.265151233s ago: executing program 1 (id=2389): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="2100000000000000000000001e00000000000400", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000004c0)=r0, 0x4) perf_event_open(&(0x7f0000000dc0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x2000000c, 0x652f9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x0, @perf_bp={0x0, 0x3}, 0x9184, 0x5, 0x43a1bd76, 0x7, 0xc73, 0x6, 0x2, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000e40)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000, 0x4, @perf_config_ext={0x7, 0x100000001}, 0x104010, 0x1, 0xffffffff, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000f40)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120c000300080001400400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 37.185989671s ago: executing program 0 (id=2390): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, 0x0, 0x4000) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000011c0)=""/4112, 0x1010}, {&(0x7f0000002200)=""/4079, 0xfef}, {&(0x7f0000003300)=""/146, 0x92}, {&(0x7f00000033c0)=""/156, 0x9c}, {&(0x7f0000003480)=""/205, 0xcd}], 0x5}, 0x40003100) recvmsg$kcm(r0, &(0x7f0000003580)={0x0, 0xffc3, 0x0}, 0x80) 37.035372096s ago: executing program 1 (id=2392): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x28, 0x1, 0xff, 0x0, 0x0, 0x5, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x101, 0x5, 0x9, 0x7, 0x9, 0x7, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async) r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x28, 0x1, 0xff, 0x0, 0x0, 0x5, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x101, 0x5, 0x9, 0x7, 0x9, 0x7, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xe, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="180800000000000000f7ff00000000001800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xe, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="180800000000000000f7ff00000000001800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) r3 = perf_event_open(&(0x7f00000006c0)={0x2, 0xffffffffffffffcc, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa5040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x410, 0x40, 0x10000, 0x0, 0x83d8, 0x0, 0x300}, 0x0, 0x3, r0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x24243, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x24243, 0x0) close(r2) (async) close(r2) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000240)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) mkdir(&(0x7f0000000740)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001c80), 0x200002, 0x0) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001c80), 0x200002, 0x0) openat$cgroup_int(r5, &(0x7f0000001cc0)='cpu.idle\x00', 0x2, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001f80)={&(0x7f0000000780), 0x6e, &(0x7f0000001f00)=[{&(0x7f0000001d00)=""/238, 0xee}, {&(0x7f0000001e00)=""/183, 0xb7}], 0x2, &(0x7f0000000040)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x40) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x20702, 0x0) ioctl$TUNSETDEBUG(r4, 0x400454c9, &(0x7f00000002c0)=0x40) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8914, &(0x7f0000000500)) write$cgroup_pid(r2, &(0x7f0000000540), 0x12) (async) write$cgroup_pid(r2, &(0x7f0000000540), 0x12) close(0x3) recvmsg$kcm(r2, &(0x7f0000001c40)={&(0x7f0000000640)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000000800)=""/252, 0xfc}, {&(0x7f0000000900)=""/165, 0xa5}, {&(0x7f00000009c0)=""/136, 0x88}, {&(0x7f0000000a80)=""/31, 0x1f}, {&(0x7f0000000ac0)=""/4096, 0x1000}], 0x5, &(0x7f0000001b40)=""/241, 0xf1}, 0x2020) (async) recvmsg$kcm(r2, &(0x7f0000001c40)={&(0x7f0000000640)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000000800)=""/252, 0xfc}, {&(0x7f0000000900)=""/165, 0xa5}, {&(0x7f00000009c0)=""/136, 0x88}, {&(0x7f0000000a80)=""/31, 0x1f}, {&(0x7f0000000ac0)=""/4096, 0x1000}], 0x5, &(0x7f0000001b40)=""/241, 0xf1}, 0x2020) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x67, 0x1, 0x0, 0x0, 0x0, 0x6, 0x420, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000300), 0x9}, 0x1d220, 0x8000000000000000, 0x2, 0x2, 0x0, 0x2200, 0x5, 0x0, 0x7fffffff, 0x0, 0x1c}, 0x0, 0xc, 0xffffffffffffffff, 0x11) close(0x4) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x400) (async) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x400) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3efd7ab4c41335d9, @perf_config_ext={0x6c1df4c6, 0x9f}, 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3efd7ab4c41335d9, @perf_config_ext={0x6c1df4c6, 0x9f}, 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair(0x11, 0xa, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r7) socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_attach_bpf(r7, 0x10e, 0x3, &(0x7f0000000080), 0x4) 36.163903864s ago: executing program 0 (id=2393): socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000cc0)={0xa, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x840, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x10000, 0x3, 0x5, 0x6, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8ac}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="8fedc0790701757df37538"], 0xfdef) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)="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", 0x0, 0x6}, 0x38) r2 = perf_event_open(&(0x7f0000000780)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x3a, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x5, 0x5, &(0x7f00000008c0)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000900)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000940)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x6, 0xb, &(0x7f0000000e80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], &(0x7f0000000f00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000f40)={r6, 0x0, 0xe, 0x0, &(0x7f0000000fc0)="030d099b688bbf0f5a5400000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000a40)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d8150019001105142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aebfb0daa7b0cd39e4edbb57a5025ccca9e020000000000000040fad95667e006dcbd63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d9345", 0xd8}], 0x1}, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000b40)={r4, r1}, 0xc) r8 = socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f0000000b80)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000c00)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = bpf$ITER_CREATE(0xb, &(0x7f0000000c40), 0x0) setsockopt$sock_attach_bpf(r9, 0x1, 0x10, &(0x7f0000000c80)=r10, 0x4) setsockopt$sock_attach_bpf(r8, 0x1, 0x15, &(0x7f00000000c0), 0xff7b) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xed, 0x0, 0x30, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x200, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x5, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="18080000000000001fa3e65f1d1bfd000000000000eeb45bccdf47c54af448969061480d27bda51465408176dd6ef788850e9da5052732fb2ae192a7fc654521b85fa9cdb6e3c730e671fff063b6f8a17f2baeafe6c42ba17e5c3c3a98ce9e4b7cf27441e81eef8a62ba7da30bdd7569532c"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89a0, &(0x7f0000000340)='.d\x00\x00\x00\x00j\xfef;q1\x95\xf4\xe4\x13\x95k#Jz.F\xce\xfb\x9c\x0f\xf3v\x88\x91\xbct\xb0\x1bLq\x15\x00\xad\t\x13\xf5U\x02\xc9d6q\xc3\xa5\xcf\x01t\r%\xad-\x13\xb0 E\xaaC\xc388\x13\xc6H\x0f \x03\x86\xb5\xbfq\'\xab!\x9e\xa98\xa1\xc3\xe9\x06C\xd4\xb5\x18}4\xa9yA8\x1fQ\xdf\xde\x91\xfd\xf1B*j\n\xef\xff\xddR\xec~c\xcb\x93\x84\x7f\\x6\xedZ\x82\xa0\x1by\x17\x1a\xc8\x98\x99\x0f') openat$cgroup_devices(r1, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) 34.579712794s ago: executing program 2 (id=2394): perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x4a, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x5, 0x9}, 0x8000, 0xcde, 0x43a1bd76, 0x7, 0x9, 0x400006, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{}, 0x0, &(0x7f0000000740)}, 0x20) sendmsg$inet(0xffffffffffffffff, 0x0, 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0200000004000000080000000100000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000300000000000000000500"/28], 0x48) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a00)={{r0}, &(0x7f0000000a40), 0x0}, 0x20) r1 = socket$kcm(0x2, 0x5, 0x84) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000080)={'wlan1\x00', @random='\x00\x00\x00\x00\x00 '}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0), 0x4) setsockopt$sock_attach_bpf(r1, 0x84, 0x2, &(0x7f0000000000), 0x8) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001300)=ANY=[], 0x48) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x5, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="d800000018008111e00212ba0d8105040a020000030f000b067c55a1bc000900b8000699030000000500160002008178a8001500050001400200000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e970300000000000000000000000000000000000000008dc5fb510162", 0xd8}], 0x1}, 0x80d0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000014c0)={{r2}, &(0x7f0000001500), &(0x7f0000001540)}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000140)) 34.505777572s ago: executing program 0 (id=2396): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000780)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000680)}], 0x1}, 0x0) 34.505265002s ago: executing program 1 (id=2397): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB="1b000009000000b2ea3fcefae90b62de2df5b8ee449f5c6153efdb2f0b6ad1c11f", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x14, &(0x7f0000000140)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x306788b2edba9ed4}}, @printk={@lli, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xd, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="b4000000000000006114840000000000050000"], 0x0, 0x5, 0xc3, &(0x7f0000000540)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) sendmsg$kcm(r3, &(0x7f0000000640)={&(0x7f0000000680)=@generic={0xa, "8ab77fa26849ff263ef30c98b353011a5990650042e2dacdc165ececece6be1862e2adacd2737d00ad6f9fa9f3d7145e15dd9fb1a7adc211220963ad5def53b911ba5b9da13641f982757012a7496de0b3a36f5849f260c603dbc317f54b901ee80ea6132ca6e88c776553e1833052ca376304313c5637786a36a4b83857"}, 0x80, 0x0}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000700)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x1}, 0x800, 0x2, 0xfffffffd, 0x1, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000780)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x0, 0x5}, 0x14802, 0x1000000, 0x2, 0x1, 0x1, 0x1, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x200000000, 0xffffffffffffffff, 0x2) r5 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000840)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x71, 0x772}, 0x5000, 0xd, 0x0, 0x0, 0x80000000800000, 0x2000a, 0xbabe, 0x0, 0x103}, 0xffffffffffffffff, 0xfffffffffffffff9, 0xffffffffffffffff, 0x9) setsockopt$sock_attach_bpf(r5, 0x29, 0x23, &(0x7f00000008c0), 0xcf) perf_event_open(&(0x7f0000000900)={0x0, 0x80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x40068, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x6}, 0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x6, 0xc07, 0xfffd, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0x2, 0xffffffffffffffff, 0xc) perf_event_open(&(0x7f0000000980)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xd040, 0x10000}, 0x0, 0x10000, 0x0, 0x2, 0x582, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x2, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x2, &(0x7f0000000ac0)=ANY=[@ANYBLOB="91102b000000000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=@base={0x5, 0x1ff003, 0x66, 0x7f, 0x1}, 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x40, r6}, 0x38) perf_event_open(&(0x7f0000000c00)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000c80)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r7) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001000)={0x0, 0x4}, 0xc) ioctl$SIOCSIFHWADDR(r7, 0x8b34, &(0x7f0000000cc0)={'wlan1\x00', @random="000500000020"}) sendmsg$kcm(r5, &(0x7f0000000d00)={&(0x7f0000000d40)=@generic={0xa, "8ab77fa26849ff263ef30c98b353011a5990650042e2dacdc165ececece6be1862e2adacd2737d00ad6f9fa9f3d7145e15dd9fb1a7adc211220963ad5def53b911ba5b9da13641f982757012a7496de0b3a36f5849f260c603dbc317f54b901ee80ea6132ca6e88c776553e1833052ca376304313c5637786a36a4b83857"}, 0x80, 0x0}, 0x0) sendmsg$inet(r4, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000e40)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703290000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fc", 0x51}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x24040000) sendmsg$inet(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000003f40)=[{&(0x7f0000003f80)="5c00000013006bcd9e3fe3dc4d48aa31086b87003000000000000000160af365040019000d0002008be3a0e640940800000000001282bb2352d1f006baa45e0d501e2494acf1566e000a84c9", 0x4c}, {&(0x7f0000004000)="d8660235880157cb1b5e1b5a6d131dae", 0x10}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x24044054) 34.199614973s ago: executing program 0 (id=2398): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1c, 0x20000000000002aa, 0x0, &(0x7f0000000300)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x2) bpf$ITER_CREATE(0xb, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xc, 0xe, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f00000012c0)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001300)={r1, 0x18000000000002a0, 0x28, 0x0, &(0x7f0000001380)="b9fa030711a5f32e019e14f088a847e0ffff00124000632177fbac141416e000030a94029f030301", 0x0, 0xfffffffc, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 33.251835139s ago: executing program 0 (id=2399): r0 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_lsm={0xd, 0x5, &(0x7f00000002c0)=@framed={{0x26, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x48}, [@initr0]}, &(0x7f0000000300)='GPL\x00'}, 0x80) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={0x0, &(0x7f0000000380)=""/230, 0x0, 0xe6, 0x1, 0x6}, 0x28) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, &(0x7f00000004c0)}, 0x20) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r2, 0x0, 0x0) r3 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000f00)="0218000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001100)={0x6, 0x6, &(0x7f0000000100)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @exit, @exit, @alu={0x7, 0x0, 0x3, 0xb, 0xb, 0xfffffffffffffff0, 0x10}, @map_idx={0x18, 0x3, 0x5, 0x0, 0xa}], &(0x7f0000000140)='syzkaller\x00', 0x8ab, 0xe8, &(0x7f0000000f80)=""/232, 0x82000, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001080)={0x3f, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000010c0)=[{0x3, 0x4, 0xc, 0x6}], 0x10, 0x8}, 0x94) ioctl$SIOCSIFHWADDR(r2, 0x8924, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0xe, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000780)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000840)={&(0x7f0000000880)=@phonet, 0x80, &(0x7f0000000900)=[{0x0, 0xea}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000940)={&(0x7f00000011c0)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000600000055ec5e0c0fd5b415040000000000000e0400000001000000000002000072449ba258af50ee96d27c52347b0d250012fc9d1f0f4e00000500000000020000000000000802000000000000000000000a03000000003bca82d13386a8a117623d01de866c1c5857a7bf081b7afbf21aaa469148b4f119a0ca4bf87033009d7157eb61ec115b4f86516e0d941efecc176410b94fb547f28c6d1ba76a"], 0x0, 0x52}, 0x28) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="190000000400000008000000"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000a40)={0xffffffffffffffff, 0x0, &(0x7f0000000a80), &(0x7f0000000ac0), 0x800}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x18, 0x1c, &(0x7f0000000bc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, {}, {}, [@map_idx={0x18, 0xb, 0x5, 0x0, 0xd}, @ringbuf_query, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1000}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x6}, @call={0x85, 0x0, 0x0, 0xb5}, @map_fd={0x18, 0xa, 0x1, 0x0, r7}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x200, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000cc0)=[r0, 0x1, r1, r1, r1, r1], &(0x7f0000000d00)=[{0x0, 0x5, 0x6, 0xc}, {0x0, 0x2, 0x4, 0x6}, {0x3, 0x4, 0xd, 0x6}, {0x2, 0x2, 0x3, 0x4}, {0x4, 0x1, 0x3, 0x6}, {0x1, 0x3, 0x1, 0xb}], 0x10, 0xffffffff}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000d80)={{r7}, &(0x7f0000000dc0), &(0x7f0000000e00)}, 0x20) bpf$PROG_LOAD(0x2, &(0x7f0000000e40)={0x3, 0x3, &(0x7f0000000f00)=ANY=[], &(0x7f0000000f40)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = socket$kcm(0x29, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89e0, &(0x7f0000000080)={r9}) socket$kcm(0x10, 0x2, 0x0) 33.125575452s ago: executing program 2 (id=2400): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="2100000000000000000000001e00000000000400", @ANYRES32, @ANYBLOB="090000000000000000010880d4d3c5d5d7000000b9ae9b6692fbce5a203e646f033792036841d576ccf3dd6fb045273b1d49e48c08401ee058c6bb40fc878fc8d022c9751876b1bf", @ANYRES32=0x0, @ANYRES32], 0x50) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000004c0)=r0, 0x4) perf_event_open(&(0x7f0000000dc0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x2000000c, 0x652f9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x0, @perf_bp={0x0, 0x3}, 0x9184, 0x5, 0x43a1bd76, 0x7, 0xc73, 0x6, 0x2, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000e40)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000, 0x4, @perf_config_ext={0x7, 0x100000001}, 0x104010, 0x1, 0xffffffff, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000f40)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120c000300080001400400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 32.94482927s ago: executing program 1 (id=2401): r0 = socket$kcm(0x2, 0x922000000001, 0x106) mkdir(&(0x7f0000000180)='./file0\x00', 0x20) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000000), 0xff7b) r1 = socket$kcm(0x2b, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x16, 0x3, &(0x7f0000000280)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4d}}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r2 = socket$kcm(0x29, 0x8, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x4e1e, @remote}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000001c) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x4001, 0x0) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)='rd', 0x2}], 0x1}, 0x0) close(r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be20000d072f5b89c3043c47c896ce0bc8731fa595b6b4d45ef26dcca5582054d54d53cd2b685b431c70ea948259c4c869b4fc8db714e4b94bdae214fa68a051d4dca7d2647bec1fc89398d2b9000f224891060017c4700de60beac671e8e8f00cb03588aa6007e71f871ab5c2ff88afc6002084e5b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c59005cff414ed55b0d18a9d446935fb332bb593ee341ab59016f81860324b800c00000000000092d9c5fe34ccb80a61ffcb3363073fd8962823ee45f5d7394e9510f4ac6c702cfabe8a9c55c8dafcdb110036e14c1035cafdfef6a358cbfadb3579a285580a3c080d4e0a48d7bdc38a0437c8c1b3aa408a0000000000002248950b000000"], &(0x7f0000000800)='GPL\x00', 0x4, 0xfd90, &(0x7f0000000840)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000940), 0x366, 0x10, &(0x7f0000000980), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000a00)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a40)={r4, 0x58, &(0x7f0000000a80)}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000fc0)={@cgroup, 0x34, 0x1, 0x467b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b40)='cpuacct.stat\x00', 0x0, 0x0) r6 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x108b84, 0x4, 0x10, 0x1, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x5, 0x5, &(0x7f0000000e80)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000ec0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000f00)={0x0, 0xd18c9b25, &(0x7f0000000f40)=[{&(0x7f0000000f80)="e03f03003b000b03d25a806c8c6394f90324fc60100000000a000200053582c137153e37000c0a80fc0b1000f835", 0x33fe0}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x1d, &(0x7f0000000c40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x10000}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x30}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8000}, @alu={0x4, 0x1, 0x6, 0x6, 0x8, 0x80, 0xffffffffffffffff}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffff8}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000d40)={'ip6gre0\x00', 0x20e}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000d80)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x89f1, &(0x7f0000000dc0)) sendmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x700, 0x0}, 0x240400c0) 32.691459185s ago: executing program 2 (id=2402): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x2e, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, {}, {}, [@generic={0x1, 0x6, 0x6, 0x100, 0x5f}, @call={0x85, 0x0, 0x0, 0x9}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5f}}, @generic={0x2, 0x8, 0xc, 0x2000, 0x7}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='GPL\x00', 0xfffffffc, 0xc6, &(0x7f00000001c0)=""/198, 0x41100, 0x22, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x3, 0x3, 0x1, 0x40}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000300)=[0x1, 0xffffffffffffffff], &(0x7f0000000340)=[{0x4, 0x4, 0xf, 0x5}, {0x0, 0x4, 0x3, 0xc}, {0x5, 0x1, 0xf, 0x6}], 0x10, 0x6}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000480)='%ps \x00'}, 0x20) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000500)={r0, r1}, 0xc) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000540)={0xffffffffffffffff}, 0x4) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000580)={r2, r1}, 0xc) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x10180, 0x0) ioctl$TUNSETVNETLE(r3, 0x400454dc, &(0x7f0000000600)=0x1) r4 = socket$kcm(0x29, 0xa, 0x0) r5 = perf_event_open$cgroup(&(0x7f0000000680)={0x4, 0x80, 0x5, 0xe, 0x7f, 0x3, 0x0, 0xdd, 0x80060, 0xf, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xf4dd, 0x1, @perf_bp={&(0x7f0000000640), 0x1}, 0x10, 0x2, 0x9, 0x5, 0x100000001, 0x0, 0x9, 0x0, 0x40000000, 0x0, 0x1}, 0xffffffffffffffff, 0xa, r4, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r2) ioctl$TUNSETVNETBE(r3, 0x400454de, &(0x7f0000000700)) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000780)=@generic={&(0x7f0000000740)='./file0\x00', r2}, 0x18) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000ac0)={r2, 0xe0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x6, &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x74, &(0x7f00000008c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000900), &(0x7f0000000940), 0x8, 0x42, 0x8, 0x8, &(0x7f0000000980)}}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='freezer.parent_freezing\x00', 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=@base={0x1a, 0x3, 0x6e2, 0x8, 0x22000, 0x1, 0x7, '\x00', r7, r8, 0x4, 0x2, 0x4}, 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000bc0)={r0, r9}, 0xc) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f0000000c00)={r4}) r10 = getpid() syz_open_procfs$namespace(r10, &(0x7f0000000c40)='ns/time_for_children\x00') bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000c80)={r6}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000ec0)={r8, 0x0, 0x77, 0x3e, &(0x7f0000000cc0)="b7dbc5667f7574b3c44977637fcb54745b99410f4ec3065ffdd6dd0edddbe94572b6461c166674ce2972a5dd27a726bc1145f63bb2916b52764d11ffb769ba00a1d94d02d40866c7ab3bb43c6d5e2581d410e5b992b6dc2566c70097a730233775d798d73cc21f6d1880c54d62cd7b17bc2941b3f92540", &(0x7f0000000d40)=""/62, 0xffffff20, 0x0, 0xc6, 0x19, &(0x7f0000000d80)="5bf488639827fdeb1857b44564919edd1e786081f7228151d57b26beedc135eb56b7c7cdfd808e45a02193ed5e0293712343d66c491d36c0a34bd5d797a72fb411b4083b28b285d67bf73460cd296e1f7a3fee6db6d3237283cd6dbe51402ff84e550493b19a942c90bb13d1b4bd34495a3c43b205f9b22645d43d798fb67a4290d2e7c32365f7cf802c18eabc30672964b3927d601586bed6052759555f1610523784c499a53003402ef044dce2a909c060c54d883c03acbec4aebb4dffaf8b8538e711494c", &(0x7f0000000e80)="8f57ad33ed033063624609ecd55f153a4c1860861a55ab0a1d", 0x6, 0x0, 0x2}, 0x50) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000f40)={0x1b, 0x0, 0x0, 0x81, 0x0, r1, 0x80, '\x00', r7, r8, 0x2, 0x0, 0x4}, 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000011c0)={0x8, 0x0}, 0x8) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000001200)=@bloom_filter={0x1e, 0x4, 0x8, 0xd, 0x74c44, r8, 0x1, '\x00', 0x0, r8, 0x2, 0x4, 0x4, 0xa, @void, @value, @value=r8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x14, 0x12, &(0x7f0000000fc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xc108}, {{0x18, 0x1, 0x1, 0x0, r11}}, {}, [@alu={0x4, 0x1, 0x7, 0x0, 0xa, 0x4, 0x10}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0xffffff8d}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001080)='syzkaller\x00', 0x7, 0x87, &(0x7f00000010c0)=""/135, 0x41000, 0x1a, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x8, &(0x7f0000001180)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, r12, r8, 0x3, &(0x7f0000001280)=[r0, r9, r13, r9, r0, r1, r1, r9, r9], &(0x7f00000012c0)=[{0x0, 0x2, 0xe, 0x4}, {0x4, 0x1, 0xd, 0xf}, {0x1, 0x1, 0x10}], 0x10, 0x7}, 0x94) r14 = perf_event_open(&(0x7f00000013c0)={0x2, 0x80, 0x8, 0xff, 0x7, 0x8, 0x0, 0x7, 0x10300, 0x4, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x4, @perf_config_ext={0x3, 0x9}, 0x41, 0x5, 0x2, 0x3, 0x0, 0x80000001, 0xd3c8, 0x0, 0x6, 0x0, 0x9}, r10, 0x0, r5, 0x9) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x0, 0x1, 0x75, 0x8, 0x0, 0x81, 0x20000, 0xb, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000001440), 0x4}, 0x10000, 0x4, 0xf, 0x0, 0x9, 0x40, 0xe4d, 0x0, 0x10, 0x0, 0x8}, 0x0, 0x5, 0xffffffffffffffff, 0x3) r15 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001800)=@bpf_ext={0x1c, 0x21, &(0x7f0000001540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r14}}, @call={0x85, 0x0, 0x0, 0x27}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @alu={0x4, 0x0, 0xa, 0x0, 0x6, 0xffffffffffffffc0, 0x1}, @map_fd={0x18, 0x9, 0x1, 0x0, r1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000001680)='syzkaller\x00', 0xfffffff9, 0x8, &(0x7f00000016c0)=""/8, 0x41100, 0x24, '\x00', r7, 0x0, r8, 0x8, &(0x7f0000001700)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001740)={0x4, 0x6, 0x80, 0xe}, 0x10, 0x1ac96, r0, 0x2, &(0x7f0000001780)=[r11, r8, r9, r11, r1], &(0x7f00000017c0)=[{0x0, 0x5, 0x7, 0x9}, {0x3, 0x2, 0x2, 0xc}], 0x10, 0xb7be}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001900)={{r8}, &(0x7f0000001500), &(0x7f00000018c0)=r15}, 0x20) 32.605608004s ago: executing program 0 (id=2403): socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000cc0)={0xa, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x840, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x10000, 0x3, 0x5, 0x6, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8ac}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="8fedc0790701757df37538"], 0xfdef) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)="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", 0x0, 0x6}, 0x38) r2 = perf_event_open(&(0x7f0000000780)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x3a, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x5, 0x5, &(0x7f00000008c0)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000900)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000940)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x6, 0xb, &(0x7f0000000e80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], &(0x7f0000000f00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000f40)={r6, 0x0, 0xe, 0x0, &(0x7f0000000fc0)="030d099b688bbf0f5a5400000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000a40)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d8150019001105142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aebfb0daa7b0cd39e4edbb57a5025ccca9e020000000000000040fad95667e006dcbd63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d9345", 0xd8}], 0x1}, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000b40)={r4, r1}, 0xc) r8 = socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f0000000b80)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000c00)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = bpf$ITER_CREATE(0xb, &(0x7f0000000c40), 0x0) setsockopt$sock_attach_bpf(r9, 0x1, 0x10, &(0x7f0000000c80)=r10, 0x4) setsockopt$sock_attach_bpf(r8, 0x1, 0x15, &(0x7f00000000c0), 0xff7b) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xed, 0x0, 0x30, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x200, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x5, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="18080000000000001fa3e65f1d1bfd000000000000eeb45bccdf47c54af448969061480d27bda51465408176dd6ef788850e9da5052732fb2ae192a7fc654521b85fa9cdb6e3c730e671fff063b6f8a17f2baeafe6c42ba17e5c3c3a98ce9e4b7cf27441e81eef8a62ba7da30bdd7569532cbd37348053c09c84f82bd255838a3ef9e35a28f34521febd1d3a1ab71b76e8e6ae8483ba615a343247f0fa1028672b64f4630cffe000f12c6f"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89a0, &(0x7f0000000340)='.d\x00\x00\x00\x00j\xfef;q1\x95\xf4\xe4\x13\x95k#Jz.F\xce\xfb\x9c\x0f\xf3v\x88\x91\xbct\xb0\x1bLq\x15\x00\xad\t\x13\xf5U\x02\xc9d6q\xc3\xa5\xcf\x01t\r%\xad-\x13\xb0 E\xaaC\xc388\x13\xc6H\x0f \x03\x86\xb5\xbfq\'\xab!\x9e\xa98\xa1\xc3\xe9\x06C\xd4\xb5\x18}4\xa9yA8\x1fQ\xdf\xde\x91\xfd\xf1B*j\n\xef\xff\xddR\xec~c\xcb\x93\x84\x7f\\x6\xedZ\x82\xa0\x1by\x17\x1a\xc8\x98\x99\x0f') openat$cgroup_devices(r1, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) 17.531784398s ago: executing program 32 (id=2403): socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000cc0)={0xa, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x840, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x10000, 0x3, 0x5, 0x6, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8ac}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="8fedc0790701757df37538"], 0xfdef) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)="4c9782a2438f36e562755d63b634fdc40aa534a6381e846f6524c1f67a3ceff29648a1bd3766913911e2d71708b777e6068732d9a25d0c54787d036fd27f56bba5aa28a26c0372dc46949534d209bf7292225a369041401868dad1b3381db446bbff7c6760b1abcdf42352d43eb7f7c46d306255096af5594a08eefc3093c3706e0501ed618fe363acc8e8dcae596edd7fe9d5736641411045bfab08c4f94f11bfed8bedb9ec8d9a244bcac6f48bd83a8a7c2e955508b13b426f54e45d0e4603128faa35c1f09588856a40527bfcb69930ff205a5d9f364ba845ededc733f88abe99c4a48a0918f8e9cc9a6961d8670e16bb8d6cb382ac54331e20d89d8c4ca49c94db2d6387875ea46e8f6c06da9fdf5e8bca154e26955dc33b575e7b1f179104f35fa230e380ee9fc1d01110afaa1816e5a02285121bbfd0fedd44de704916d037a1d1a209252fae833eefc71a420df176059f75998754f64187c6d9f9df7ab5cabd255c309d248c78db46796b980f3dfba1001754b126770f02fa9e9024d98cf4459c34183adc4a5c0ee505cf5ecd4fcc3813d30dcb333cb2db8396ccab3539ad814d0ca59897da4c1490f4de9e7df7748b40948c304de0acd76b55e1c81656db1d16481945123bfe0093921a720d9a3ae7bfd44245487b52a445d0e7de8448741b1b31228d94d84daa19f027550bc617625ab7b19d41c20333d7c12e50ccd06a1d55c26dc7f3350ac676156dda28533961a8ebd48ba38a7cd6cea9defc09654b254b71dd2cfa3dc0c078a1027a6a624467e082b41771f9d1d646588b8984ba7cd2b9b0e9e81be1981c58521b9b7353f3271f2c1601160fad4b5cdce2b38fa57419482fac7ee9ca54a43dfbd6beea20e970f643e19f03", 0x0, 0x6}, 0x38) r2 = perf_event_open(&(0x7f0000000780)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x3a, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x5, 0x5, &(0x7f00000008c0)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000900)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000940)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x6, 0xb, &(0x7f0000000e80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], &(0x7f0000000f00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000f40)={r6, 0x0, 0xe, 0x0, &(0x7f0000000fc0)="030d099b688bbf0f5a5400000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000a40)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d8150019001105142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aebfb0daa7b0cd39e4edbb57a5025ccca9e020000000000000040fad95667e006dcbd63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d9345", 0xd8}], 0x1}, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000b40)={r4, r1}, 0xc) r8 = socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f0000000b80)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000c00)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = bpf$ITER_CREATE(0xb, &(0x7f0000000c40), 0x0) setsockopt$sock_attach_bpf(r9, 0x1, 0x10, &(0x7f0000000c80)=r10, 0x4) setsockopt$sock_attach_bpf(r8, 0x1, 0x15, &(0x7f00000000c0), 0xff7b) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xed, 0x0, 0x30, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x200, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x5, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="18080000000000001fa3e65f1d1bfd000000000000eeb45bccdf47c54af448969061480d27bda51465408176dd6ef788850e9da5052732fb2ae192a7fc654521b85fa9cdb6e3c730e671fff063b6f8a17f2baeafe6c42ba17e5c3c3a98ce9e4b7cf27441e81eef8a62ba7da30bdd7569532cbd37348053c09c84f82bd255838a3ef9e35a28f34521febd1d3a1ab71b76e8e6ae8483ba615a343247f0fa1028672b64f4630cffe000f12c6f"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89a0, &(0x7f0000000340)='.d\x00\x00\x00\x00j\xfef;q1\x95\xf4\xe4\x13\x95k#Jz.F\xce\xfb\x9c\x0f\xf3v\x88\x91\xbct\xb0\x1bLq\x15\x00\xad\t\x13\xf5U\x02\xc9d6q\xc3\xa5\xcf\x01t\r%\xad-\x13\xb0 E\xaaC\xc388\x13\xc6H\x0f \x03\x86\xb5\xbfq\'\xab!\x9e\xa98\xa1\xc3\xe9\x06C\xd4\xb5\x18}4\xa9yA8\x1fQ\xdf\xde\x91\xfd\xf1B*j\n\xef\xff\xddR\xec~c\xcb\x93\x84\x7f\\x6\xedZ\x82\xa0\x1by\x17\x1a\xc8\x98\x99\x0f') openat$cgroup_devices(r1, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) 17.449041956s ago: executing program 33 (id=2401): r0 = socket$kcm(0x2, 0x922000000001, 0x106) mkdir(&(0x7f0000000180)='./file0\x00', 0x20) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000000), 0xff7b) r1 = socket$kcm(0x2b, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x16, 0x3, &(0x7f0000000280)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4d}}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r2 = socket$kcm(0x29, 0x8, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x4e1e, @remote}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000001c) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x4001, 0x0) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)='rd', 0x2}], 0x1}, 0x0) close(r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000800)='GPL\x00', 0x4, 0xfd90, &(0x7f0000000840)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000940), 0x366, 0x10, &(0x7f0000000980), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000a00)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a40)={r4, 0x58, &(0x7f0000000a80)}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000fc0)={@cgroup, 0x34, 0x1, 0x467b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b40)='cpuacct.stat\x00', 0x0, 0x0) r6 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x108b84, 0x4, 0x10, 0x1, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x5, 0x5, &(0x7f0000000e80)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000ec0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000f00)={0x0, 0xd18c9b25, &(0x7f0000000f40)=[{&(0x7f0000000f80)="e03f03003b000b03d25a806c8c6394f90324fc60100000000a000200053582c137153e37000c0a80fc0b1000f835", 0x33fe0}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x1d, &(0x7f0000000c40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x10000}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x30}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8000}, @alu={0x4, 0x1, 0x6, 0x6, 0x8, 0x80, 0xffffffffffffffff}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffff8}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000d40)={'ip6gre0\x00', 0x20e}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000d80)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x89f1, &(0x7f0000000dc0)) sendmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x700, 0x0}, 0x240400c0) 17.440426067s ago: executing program 2 (id=2406): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1c, 0x20000000000002aa, 0x0, &(0x7f0000000300)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x2) bpf$ITER_CREATE(0xb, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xc, 0xe, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f00000012c0)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001300)={r1, 0x18000000000002a0, 0x28, 0x0, &(0x7f0000001380)="b9fa030711a5f32e019e14f088a847e0ffff00124000632177fbac141416e000030a94029f030301", 0x0, 0xfffffffc, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 16.415941121s ago: executing program 2 (id=2407): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x18000, 0x1, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000500)={0x0, 0xffffff2d, &(0x7f0000000540)=[{&(0x7f0000000580)="c00e020023000b02d25a806f8c6394f91424fc60040f030047000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) (fail_nth: 1) perf_event_open$cgroup(&(0x7f00000005c0)={0x2, 0x80, 0x13, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x5, 0x3, 0x0, 0x0, 0x7fff}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x11, 0x16, 0x2, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, @perf_bp={0x0, 0x6}, 0x101809, 0xca, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(r1, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x2040) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x9a) 15.976208585s ago: executing program 2 (id=2408): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB="1b000009000000b2ea3fcefae90b62de2df5b8ee449f5c6153efdb2f0b6ad1c11f", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x14, &(0x7f0000000140)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x306788b2edba9ed4}}, @printk={@lli, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xd, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="b4000000000000006114840000000000050000"], 0x0, 0x5, 0xc3, &(0x7f0000000540)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) sendmsg$kcm(r3, &(0x7f0000000640)={&(0x7f0000000680)=@generic={0xa, "8ab77fa26849ff263ef30c98b353011a5990650042e2dacdc165ececece6be1862e2adacd2737d00ad6f9fa9f3d7145e15dd9fb1a7adc211220963ad5def53b911ba5b9da13641f982757012a7496de0b3a36f5849f260c603dbc317f54b901ee80ea6132ca6e88c776553e1833052ca376304313c5637786a36a4b83857"}, 0x80, 0x0}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000700)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x1}, 0x800, 0x2, 0xfffffffd, 0x1, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000780)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x0, 0x5}, 0x14802, 0x1000000, 0x2, 0x1, 0x1, 0x1, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x200000000, 0xffffffffffffffff, 0x2) r5 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000840)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x71, 0x772}, 0x5000, 0xd, 0x0, 0x0, 0x80000000800000, 0x2000a, 0xbabe, 0x0, 0x103}, 0xffffffffffffffff, 0xfffffffffffffff9, 0xffffffffffffffff, 0x9) setsockopt$sock_attach_bpf(r5, 0x29, 0x23, &(0x7f00000008c0), 0xcf) perf_event_open(&(0x7f0000000900)={0x0, 0x80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x40068, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x6}, 0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x6, 0xc07, 0xfffd, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0x2, 0xffffffffffffffff, 0xc) perf_event_open(&(0x7f0000000980)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xd040, 0x10000}, 0x0, 0x10000, 0x0, 0x2, 0x582, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x2, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x2, &(0x7f0000000ac0)=ANY=[@ANYBLOB="91102b000000000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=@base={0x5, 0x1ff003, 0x66, 0x7f, 0x1}, 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x40, r6}, 0x38) perf_event_open(&(0x7f0000000c00)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000c80)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r7) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001000)={0x0, 0x4}, 0xc) ioctl$SIOCSIFHWADDR(r7, 0x8b34, &(0x7f0000000cc0)={'wlan1\x00', @random="000500000020"}) sendmsg$kcm(r5, &(0x7f0000000d00)={&(0x7f0000000d40)=@generic={0xa, "8ab77fa26849ff263ef30c98b353011a5990650042e2dacdc165ececece6be1862e2adacd2737d00ad6f9fa9f3d7145e15dd9fb1a7adc211220963ad5def53b911ba5b9da13641f982757012a7496de0b3a36f5849f260c603dbc317f54b901ee80ea6132ca6e88c776553e1833052ca376304313c5637786a36a4b83857"}, 0x80, 0x0}, 0x0) sendmsg$inet(r4, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000e40)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703290000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fc", 0x51}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x24040000) sendmsg$inet(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000003f40)=[{&(0x7f0000003f80)="5c00000013006bcd9e3fe3dc4d48aa31086b87003000000000000000160af365040019000d0002008be3a0e640940800000000001282bb2352d1f006baa45e0d501e2494acf1566e000a84c9", 0x4c}, {&(0x7f0000004000)="d8660235880157cb1b5e1b5a6d131dae", 0x10}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x24044054) 0s ago: executing program 34 (id=2408): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB="1b000009000000b2ea3fcefae90b62de2df5b8ee449f5c6153efdb2f0b6ad1c11f", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x14, &(0x7f0000000140)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x306788b2edba9ed4}}, @printk={@lli, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xd, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="b4000000000000006114840000000000050000"], 0x0, 0x5, 0xc3, &(0x7f0000000540)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) sendmsg$kcm(r3, &(0x7f0000000640)={&(0x7f0000000680)=@generic={0xa, "8ab77fa26849ff263ef30c98b353011a5990650042e2dacdc165ececece6be1862e2adacd2737d00ad6f9fa9f3d7145e15dd9fb1a7adc211220963ad5def53b911ba5b9da13641f982757012a7496de0b3a36f5849f260c603dbc317f54b901ee80ea6132ca6e88c776553e1833052ca376304313c5637786a36a4b83857"}, 0x80, 0x0}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000700)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x1}, 0x800, 0x2, 0xfffffffd, 0x1, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000780)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x0, 0x5}, 0x14802, 0x1000000, 0x2, 0x1, 0x1, 0x1, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x200000000, 0xffffffffffffffff, 0x2) r5 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000840)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x71, 0x772}, 0x5000, 0xd, 0x0, 0x0, 0x80000000800000, 0x2000a, 0xbabe, 0x0, 0x103}, 0xffffffffffffffff, 0xfffffffffffffff9, 0xffffffffffffffff, 0x9) setsockopt$sock_attach_bpf(r5, 0x29, 0x23, &(0x7f00000008c0), 0xcf) perf_event_open(&(0x7f0000000900)={0x0, 0x80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x40068, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x6}, 0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x6, 0xc07, 0xfffd, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0x2, 0xffffffffffffffff, 0xc) perf_event_open(&(0x7f0000000980)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xd040, 0x10000}, 0x0, 0x10000, 0x0, 0x2, 0x582, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x2, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x2, &(0x7f0000000ac0)=ANY=[@ANYBLOB="91102b000000000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=@base={0x5, 0x1ff003, 0x66, 0x7f, 0x1}, 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x40, r6}, 0x38) perf_event_open(&(0x7f0000000c00)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000c80)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r7) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001000)={0x0, 0x4}, 0xc) ioctl$SIOCSIFHWADDR(r7, 0x8b34, &(0x7f0000000cc0)={'wlan1\x00', @random="000500000020"}) sendmsg$kcm(r5, &(0x7f0000000d00)={&(0x7f0000000d40)=@generic={0xa, "8ab77fa26849ff263ef30c98b353011a5990650042e2dacdc165ececece6be1862e2adacd2737d00ad6f9fa9f3d7145e15dd9fb1a7adc211220963ad5def53b911ba5b9da13641f982757012a7496de0b3a36f5849f260c603dbc317f54b901ee80ea6132ca6e88c776553e1833052ca376304313c5637786a36a4b83857"}, 0x80, 0x0}, 0x0) sendmsg$inet(r4, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000e40)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703290000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fc", 0x51}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x24040000) sendmsg$inet(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000003f40)=[{&(0x7f0000003f80)="5c00000013006bcd9e3fe3dc4d48aa31086b87003000000000000000160af365040019000d0002008be3a0e640940800000000001282bb2352d1f006baa45e0d501e2494acf1566e000a84c9", 0x4c}, {&(0x7f0000004000)="d8660235880157cb1b5e1b5a6d131dae", 0x10}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x24044054) kernel console output (not intermixed with test programs): cd/0x5f0 [ 510.425978][T11444] ? inet_diag_rcv_msg_compat+0x440/0x440 [ 510.431759][T11444] ? inet_diag_dump_start_compat+0x20/0x20 [ 510.437883][T11444] ? inet_diag_dump+0x50/0x50 [ 510.442637][T11444] ? __inet_diag_dump+0x380/0x380 [ 510.447786][T11444] sock_diag_rcv_msg+0x3d3/0x5f0 [ 510.453231][T11444] netlink_rcv_skb+0x235/0x4c0 [ 510.458046][T11444] ? sock_diag_bind+0xb0/0xb0 [ 510.462860][T11444] ? netlink_ack+0x1160/0x1160 [ 510.467689][T11444] ? __lock_acquire+0x7eb0/0x7eb0 [ 510.472754][T11444] ? netlink_deliver_tap+0x2e/0x1b0 [ 510.478005][T11444] sock_diag_rcv+0x2a/0x40 [ 510.482484][T11444] netlink_unicast+0x856/0x9e0 [ 510.487324][T11444] netlink_sendmsg+0x8d0/0xbf0 [ 510.492144][T11444] ? netlink_getsockopt+0x590/0x590 [ 510.497386][T11444] ? apparmor_socket_sendmsg+0x170/0x330 [ 510.503088][T11444] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 510.508429][T11444] ? security_socket_sendmsg+0x80/0xa0 [ 510.514036][T11444] ? netlink_getsockopt+0x590/0x590 [ 510.519286][T11444] ____sys_sendmsg+0x61b/0x980 [ 510.524091][T11444] ? __asan_memset+0x22/0x40 [ 510.528732][T11444] ? __sys_sendmsg_sock+0x30/0x30 [ 510.533784][T11444] ? __import_iovec+0x5f2/0x850 [ 510.538679][T11444] ? import_iovec+0x73/0xa0 [ 510.543219][T11444] ___sys_sendmsg+0x2a6/0x360 [ 510.547938][T11444] ? get_pid_task+0x20/0x1e0 [ 510.552577][T11444] ? __sys_sendmsg+0x2b0/0x2b0 [ 510.557401][T11444] ? __lock_acquire+0x7eb0/0x7eb0 [ 510.562487][T11444] __se_sys_sendmsg+0x1d0/0x2c0 [ 510.567472][T11444] ? __x64_sys_sendmsg+0x80/0x80 [ 510.572459][T11444] ? lockdep_hardirqs_on+0x98/0x150 [ 510.577694][T11444] do_syscall_64+0x55/0xb0 [ 510.582151][T11444] ? clear_bhb_loop+0x40/0x90 [ 510.586868][T11444] ? clear_bhb_loop+0x40/0x90 [ 510.591585][T11444] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 510.597520][T11444] RIP: 0033:0x7f906039fb19 [ 510.601967][T11444] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 510.621647][T11444] RSP: 002b:00007f906125a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 510.630120][T11444] RAX: ffffffffffffffda RBX: 00007f9060625fa0 RCX: 00007f906039fb19 [ 510.638152][T11444] RDX: ff0f000020000080 RSI: 0000200000000440 RDI: 0000000000000003 [ 510.646152][T11444] RBP: 00007f906125a090 R08: 0000000000000000 R09: 0000000000000000 [ 510.654147][T11444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 510.662348][T11444] R13: 00007f9060626038 R14: 00007f9060625fa0 R15: 00007ffdba0911a8 [ 510.670506][T11444] [ 510.843836][T11451] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 510.850419][T11451] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 510.933928][T11446] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1839'. [ 510.997656][T11450] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1836'. [ 511.030715][T11441] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1836'. [ 511.065322][T11449] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1839'. [ 511.173238][T11453] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1840'. [ 511.325342][T11459] bridge0: port 2(bond0) entered disabled state [ 511.332190][T11459] bridge0: port 3(batadv_slave_0) entered disabled state [ 511.382663][T11459] bridge0: port 2(bond0) entered blocking state [ 511.389281][T11459] bridge0: port 2(bond0) entered forwarding state [ 511.396437][T11459] bridge0: port 3(batadv_slave_0) entered blocking state [ 511.403899][T11459] bridge0: port 3(batadv_slave_0) entered forwarding state [ 511.442909][T11459] bridge0: port 2(bond0) entered disabled state [ 511.449623][T11459] bridge0: port 3(batadv_slave_0) entered disabled state [ 511.496015][T11463] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1842'. [ 511.517438][T11462] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1844'. [ 511.688524][T11467] validate_nla: 8 callbacks suppressed [ 511.688542][T11467] netlink: 'syz.0.1845': attribute type 10 has an invalid length. [ 512.469117][T11472] netlink: 'syz.2.1847': attribute type 10 has an invalid length. [ 512.602656][T11471] rxe_eth0 speed is unknown, defaulting to 1000 [ 513.117773][T11485] netlink: 'syz.3.1849': attribute type 10 has an invalid length. [ 513.148579][T11485] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1849'. [ 513.396482][T11493] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 513.403128][T11493] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 513.970672][T11497] netlink: 'syz.2.1853': attribute type 10 has an invalid length. [ 514.090238][T11505] netlink: 'syz.3.1855': attribute type 10 has an invalid length. [ 514.522242][T11512] netlink: 'syz.3.1858': attribute type 10 has an invalid length. [ 514.563247][T11512] bridge0: port 2(bond0) entered blocking state [ 514.569974][T11512] bridge0: port 2(bond0) entered forwarding state [ 514.577493][T11512] bridge0: port 3(batadv_slave_0) entered blocking state [ 514.584993][T11512] bridge0: port 3(batadv_slave_0) entered forwarding state [ 514.592795][T11512] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.600508][T11512] bridge0: port 1(bridge_slave_0) entered forwarding state [ 514.665606][T11512] bridge0: port 2(bond0) entered disabled state [ 514.672491][T11512] bridge0: port 3(batadv_slave_0) entered disabled state [ 514.680002][T11512] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.748681][T11516] netlink: 'syz.1.1857': attribute type 10 has an invalid length. [ 514.756616][T11516] __nla_validate_parse: 4 callbacks suppressed [ 514.756633][T11516] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1857'. [ 515.173796][T11527] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 515.180662][T11527] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 515.342195][T11531] netlink: 'syz.0.1865': attribute type 10 has an invalid length. [ 515.386260][T11531] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1865'. [ 515.845990][T11545] netlink: 'syz.1.1869': attribute type 10 has an invalid length. [ 515.855775][T11545] bridge0: port 2(bond0) entered blocking state [ 515.862319][T11545] bridge0: port 2(bond0) entered forwarding state [ 515.870738][T11545] bridge0: port 3(batadv_slave_0) entered blocking state [ 515.878266][T11545] bridge0: port 3(batadv_slave_0) entered forwarding state [ 515.918968][T11545] bridge0: port 2(bond0) entered disabled state [ 515.925588][T11545] bridge0: port 3(batadv_slave_0) entered disabled state [ 517.053139][T11560] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 517.060300][T11560] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 519.151102][T11565] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 519.157930][T11565] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 519.335971][T11575] netlink: 'syz.1.1880': attribute type 10 has an invalid length. [ 519.372667][T11575] bridge0: port 2(bond0) entered blocking state [ 519.379278][T11575] bridge0: port 2(bond0) entered forwarding state [ 519.386328][T11575] bridge0: port 3(batadv_slave_0) entered blocking state [ 519.393742][T11575] bridge0: port 3(batadv_slave_0) entered forwarding state [ 519.421931][T11575] bridge0: port 2(bond0) entered disabled state [ 519.428726][T11575] bridge0: port 3(batadv_slave_0) entered disabled state [ 519.471976][T11573] netlink: 'syz.3.1879': attribute type 10 has an invalid length. [ 519.481572][T11573] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1879'. [ 520.027495][T11584] netlink: 'syz.3.1885': attribute type 10 has an invalid length. [ 520.052129][T11584] team0: Device hsr_slave_0 failed to register rx_handler [ 520.127473][T11588] FAULT_INJECTION: forcing a failure. [ 520.127473][T11588] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 520.142271][T11588] CPU: 1 PID: 11588 Comm: syz.1.1886 Not tainted syzkaller #0 [ 520.143752][T11577] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 520.149787][T11588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 520.149806][T11588] Call Trace: [ 520.149815][T11588] [ 520.149824][T11588] dump_stack_lvl+0x18c/0x250 [ 520.149863][T11588] ? show_regs_print_info+0x20/0x20 [ 520.149892][T11588] ? load_image+0x420/0x420 [ 520.149920][T11588] ? __might_fault+0xaa/0x120 [ 520.149947][T11588] ? __lock_acquire+0x7eb0/0x7eb0 [ 520.149980][T11588] should_fail_ex+0x394/0x4c0 [ 520.150012][T11588] _copy_from_user+0x2f/0xe0 [ 520.150036][T11588] ___sys_sendmsg+0x1c7/0x360 [ 520.150061][T11588] ? get_pid_task+0x20/0x1e0 [ 520.150096][T11588] ? __sys_sendmsg+0x2b0/0x2b0 [ 520.150143][T11588] ? __lock_acquire+0x7eb0/0x7eb0 [ 520.150202][T11588] __se_sys_sendmsg+0x1d0/0x2c0 [ 520.150229][T11588] ? __x64_sys_sendmsg+0x80/0x80 [ 520.150270][T11588] ? lockdep_hardirqs_on+0x98/0x150 [ 520.150296][T11588] do_syscall_64+0x55/0xb0 [ 520.150324][T11588] ? clear_bhb_loop+0x40/0x90 [ 520.150355][T11588] ? clear_bhb_loop+0x40/0x90 [ 520.150387][T11588] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 520.150417][T11588] RIP: 0033:0x7f26ff79fb19 [ 520.150440][T11588] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 520.150459][T11588] RSP: 002b:00007f2700713028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 520.150484][T11588] RAX: ffffffffffffffda RBX: 00007f26ffa25fa0 RCX: 00007f26ff79fb19 [ 520.150502][T11588] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 520.150516][T11588] RBP: 00007f2700713090 R08: 0000000000000000 R09: 0000000000000000 [ 520.150538][T11588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 520.150551][T11588] R13: 00007f26ffa26038 R14: 00007f26ffa25fa0 R15: 00007fffc5f310e8 [ 520.150585][T11588] [ 520.574705][T11593] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1888'. [ 520.626651][T11593] netlink: 'syz.3.1888': attribute type 10 has an invalid length. [ 520.636902][T11593] team0: Device hsr_slave_0 failed to register rx_handler [ 521.008928][T11604] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 521.015486][T11604] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 521.326346][T11605] netlink: 'syz.3.1890': attribute type 10 has an invalid length. [ 521.382303][T11605] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1890'. [ 521.439244][T11603] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1890'. [ 521.591074][T11608] netlink: 'syz.0.1891': attribute type 10 has an invalid length. [ 521.608505][T11608] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1891'. [ 521.625251][T11609] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1891'. [ 522.572939][T11614] netlink: 'syz.0.1894': attribute type 10 has an invalid length. [ 522.608131][T11614] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1894'. [ 522.639749][T11615] netlink: 'syz.1.1893': attribute type 10 has an invalid length. [ 522.698887][T11615] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1893'. [ 522.797251][T11624] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1898'. [ 522.846582][T11624] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1898'. [ 523.077344][T11631] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1901'. [ 523.298101][T11629] netlink: 'syz.1.1899': attribute type 10 has an invalid length. [ 523.367247][T11641] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 523.374275][T11641] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 525.241381][T11645] netlink: 'syz.2.1904': attribute type 10 has an invalid length. [ 526.061158][T11659] netlink: 'syz.1.1907': attribute type 10 has an invalid length. [ 526.088863][T11659] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1907'. [ 526.507206][T11660] FAULT_INJECTION: forcing a failure. [ 526.507206][T11660] name failslab, interval 1, probability 0, space 0, times 0 [ 526.523738][T11660] CPU: 0 PID: 11660 Comm: syz.3.1908 Not tainted syzkaller #0 [ 526.531584][T11660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 526.541889][T11660] Call Trace: [ 526.545237][T11660] [ 526.548238][T11660] dump_stack_lvl+0x18c/0x250 [ 526.553601][T11660] ? show_regs_print_info+0x20/0x20 [ 526.558933][T11660] ? load_image+0x420/0x420 [ 526.563526][T11660] ? __might_sleep+0xe0/0xe0 [ 526.568559][T11660] ? __lock_acquire+0x7eb0/0x7eb0 [ 526.573692][T11660] should_fail_ex+0x394/0x4c0 [ 526.578469][T11660] should_failslab+0x9/0x20 [ 526.583049][T11660] slab_pre_alloc_hook+0x59/0x300 [ 526.588585][T11660] ? __lock_acquire+0x7eb0/0x7eb0 [ 526.593876][T11660] kmem_cache_alloc_node+0x5e/0x320 [ 526.599159][T11660] ? __alloc_skb+0x103/0x2c0 [ 526.603963][T11660] __alloc_skb+0x103/0x2c0 [ 526.608661][T11660] netlink_sendmsg+0x66a/0xbf0 [ 526.614396][T11660] ? netlink_getsockopt+0x590/0x590 [ 526.620012][T11660] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 526.625537][T11660] ? security_socket_sendmsg+0x80/0xa0 [ 526.631142][T11660] ? netlink_getsockopt+0x590/0x590 [ 526.636507][T11660] ____sys_sendmsg+0x61b/0x980 [ 526.641344][T11660] ? __asan_memset+0x22/0x40 [ 526.646113][T11660] ? __sys_sendmsg_sock+0x30/0x30 [ 526.651283][T11660] ? __import_iovec+0x5f2/0x850 [ 526.656198][T11660] ? import_iovec+0x73/0xa0 [ 526.660744][T11660] ___sys_sendmsg+0x2a6/0x360 [ 526.665561][T11660] ? get_pid_task+0x20/0x1e0 [ 526.670201][T11660] ? __sys_sendmsg+0x2b0/0x2b0 [ 526.675053][T11660] ? __lock_acquire+0x7eb0/0x7eb0 [ 526.680988][T11660] __se_sys_sendmsg+0x1d0/0x2c0 [ 526.685951][T11660] ? perf_trace_preemptirq_template+0x269/0x330 [ 526.692263][T11660] ? __x64_sys_sendmsg+0x80/0x80 [ 526.697259][T11660] ? lockdep_hardirqs_on+0x98/0x150 [ 526.702674][T11660] do_syscall_64+0x55/0xb0 [ 526.707394][T11660] ? clear_bhb_loop+0x40/0x90 [ 526.712141][T11660] ? clear_bhb_loop+0x40/0x90 [ 526.716891][T11660] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 526.722834][T11660] RIP: 0033:0x7ff31059fb19 [ 526.727305][T11660] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 526.747060][T11660] RSP: 002b:00007ff3114c4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 526.755534][T11660] RAX: ffffffffffffffda RBX: 00007ff310825fa0 RCX: 00007ff31059fb19 [ 526.763540][T11660] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003 [ 526.771634][T11660] RBP: 00007ff3114c4090 R08: 0000000000000000 R09: 0000000000000000 [ 526.779656][T11660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 526.787750][T11660] R13: 00007ff310826038 R14: 00007ff310825fa0 R15: 00007ffe4492e888 [ 526.795778][T11660] [ 527.353122][T11674] netlink: 'syz.0.1912': attribute type 10 has an invalid length. [ 527.362716][T11674] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1912'. [ 527.386990][T11674] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1912'. [ 527.458602][T11684] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 527.465212][T11684] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 527.552874][T11686] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1916'. [ 528.599824][T11691] netlink: 'syz.0.1918': attribute type 10 has an invalid length. [ 528.618466][T11691] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1918'. [ 528.685353][T11692] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1918'. [ 528.815739][T11696] netlink: 'syz.2.1919': attribute type 10 has an invalid length. [ 529.060858][T11696] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1919'. [ 529.733953][T11717] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1925'. [ 529.756482][T11717] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1925'. [ 529.790012][T11717] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1925'. [ 530.005965][T11715] netlink: 'syz.3.1926': attribute type 10 has an invalid length. [ 530.009981][T11721] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 530.020431][T11721] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 530.264151][T11729] netlink: 'syz.0.1929': attribute type 10 has an invalid length. [ 531.025481][T11731] team0: Port device team_slave_0 removed [ 531.175678][T11738] netlink: 'syz.3.1931': attribute type 10 has an invalid length. [ 531.204883][T11738] __nla_validate_parse: 6 callbacks suppressed [ 531.204916][T11738] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1931'. [ 531.607073][T11747] netlink: 'syz.0.1934': attribute type 10 has an invalid length. [ 531.731801][T11747] team0: Port device wlan1 added [ 532.301061][T11768] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 532.307673][T11768] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 532.484709][T11762] netlink: 'syz.1.1940': attribute type 10 has an invalid length. [ 532.523754][T11762] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1940'. [ 532.557730][T11758] netlink: 'syz.0.1939': attribute type 10 has an invalid length. [ 532.579953][T11758] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1939'. [ 532.601409][T11765] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1940'. [ 532.625645][T11763] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1939'. [ 532.770053][T11773] netlink: 'syz.1.1943': attribute type 10 has an invalid length. [ 532.798530][T11773] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1943'. [ 532.900792][T11777] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1944'. [ 532.952592][T11777] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1944'. [ 533.009982][T11779] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1944'. [ 533.108535][T11782] netlink: 'syz.3.1946': attribute type 10 has an invalid length. [ 533.129431][T11782] bridge0: port 2(bond0) entered blocking state [ 533.136306][T11782] bridge0: port 2(bond0) entered forwarding state [ 533.143581][T11782] bridge0: port 3(batadv_slave_0) entered blocking state [ 533.150996][T11782] bridge0: port 3(batadv_slave_0) entered forwarding state [ 533.159242][T11782] bridge0: port 1(bridge_slave_0) entered blocking state [ 533.167079][T11782] bridge0: port 1(bridge_slave_0) entered forwarding state [ 533.225200][T11782] bridge0: port 2(bond0) entered disabled state [ 533.232170][T11782] bridge0: port 3(batadv_slave_0) entered disabled state [ 533.239646][T11782] bridge0: port 1(bridge_slave_0) entered disabled state [ 533.263843][T11779] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1944'. [ 534.177042][T11800] FAULT_INJECTION: forcing a failure. [ 534.177042][T11800] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 534.211760][T11800] CPU: 1 PID: 11800 Comm: syz.0.1953 Not tainted syzkaller #0 [ 534.219952][T11800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 534.230173][T11800] Call Trace: [ 534.233513][T11800] [ 534.236491][T11800] dump_stack_lvl+0x18c/0x250 [ 534.241329][T11800] ? show_regs_print_info+0x20/0x20 [ 534.246603][T11800] ? load_image+0x420/0x420 [ 534.251167][T11800] ? __might_fault+0xaa/0x120 [ 534.255920][T11800] ? __lock_acquire+0x7eb0/0x7eb0 [ 534.261010][T11800] should_fail_ex+0x394/0x4c0 [ 534.265793][T11800] _copy_from_user+0x2f/0xe0 [ 534.270534][T11800] kstrtouint_from_user+0xde/0x170 [ 534.275796][T11800] ? kstrtol_from_user+0x190/0x190 [ 534.280970][T11800] proc_fail_nth_write+0x8f/0x250 [ 534.286044][T11800] ? proc_fail_nth_read+0x260/0x260 [ 534.291301][T11800] ? proc_fail_nth_read+0x260/0x260 [ 534.296548][T11800] vfs_write+0x299/0x9a0 [ 534.300857][T11800] ? file_end_write+0x250/0x250 [ 534.305758][T11800] ? __fget_files+0x28/0x460 [ 534.310398][T11800] ? __fget_files+0x3fc/0x460 [ 534.315197][T11800] ? __fdget_pos+0x2a3/0x330 [ 534.319835][T11800] ? ksys_write+0x74/0x260 [ 534.324306][T11800] ksys_write+0x151/0x260 [ 534.328683][T11800] ? __ia32_sys_read+0x90/0x90 [ 534.333490][T11800] ? lockdep_hardirqs_on+0x98/0x150 [ 534.338748][T11800] do_syscall_64+0x55/0xb0 [ 534.343471][T11800] ? clear_bhb_loop+0x40/0x90 [ 534.348195][T11800] ? clear_bhb_loop+0x40/0x90 [ 534.353014][T11800] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 534.359074][T11800] RIP: 0033:0x7f906036034e [ 534.363582][T11800] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 534.383465][T11800] RSP: 002b:00007f9061259fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 534.392137][T11800] RAX: ffffffffffffffda RBX: 00007f906125a6c0 RCX: 00007f906036034e [ 534.400159][T11800] RDX: 0000000000000001 RSI: 00007f906125a0a0 RDI: 0000000000000005 [ 534.408186][T11800] RBP: 00007f906125a090 R08: 0000000000000000 R09: 0000000000000000 [ 534.416376][T11800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 534.424560][T11800] R13: 00007f9060626038 R14: 00007f9060625fa0 R15: 00007ffdba0911a8 [ 534.432591][T11800] [ 534.479894][T11796] netlink: 'syz.2.1951': attribute type 10 has an invalid length. [ 534.676140][T11807] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 534.682776][T11807] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 534.983496][T11804] netlink: 'syz.3.1954': attribute type 10 has an invalid length. [ 535.008995][T11810] netlink: 'syz.0.1956': attribute type 10 has an invalid length. [ 535.296167][T11818] netlink: 'syz.3.1959': attribute type 10 has an invalid length. [ 535.306156][T11818] bridge0: port 2(bond0) entered blocking state [ 535.312789][T11818] bridge0: port 2(bond0) entered forwarding state [ 535.319950][T11818] bridge0: port 3(batadv_slave_0) entered blocking state [ 535.327333][T11818] bridge0: port 3(batadv_slave_0) entered forwarding state [ 535.335126][T11818] bridge0: port 1(bridge_slave_0) entered blocking state [ 535.342611][T11818] bridge0: port 1(bridge_slave_0) entered forwarding state [ 535.369769][T11812] FAULT_INJECTION: forcing a failure. [ 535.369769][T11812] name failslab, interval 1, probability 0, space 0, times 0 [ 535.400062][T11818] bridge0: port 2(bond0) entered disabled state [ 535.406800][T11818] bridge0: port 3(batadv_slave_0) entered disabled state [ 535.414334][T11818] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.417816][T11812] CPU: 1 PID: 11812 Comm: syz.2.1957 Not tainted syzkaller #0 [ 535.429136][T11812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 535.439504][T11812] Call Trace: [ 535.442852][T11812] [ 535.445850][T11812] dump_stack_lvl+0x18c/0x250 [ 535.451004][T11812] ? kasan_set_track+0x4e/0x70 [ 535.456062][T11812] ? ____kasan_slab_free+0x126/0x1f0 [ 535.461803][T11812] ? show_regs_print_info+0x20/0x20 [ 535.467217][T11812] ? load_image+0x420/0x420 [ 535.471825][T11812] should_fail_ex+0x394/0x4c0 [ 535.476597][T11812] should_failslab+0x9/0x20 [ 535.481276][T11812] slab_pre_alloc_hook+0x59/0x300 [ 535.486405][T11812] kmem_cache_alloc_node+0x5e/0x320 [ 535.491730][T11812] ? __alloc_skb+0x103/0x2c0 [ 535.496398][T11812] __alloc_skb+0x103/0x2c0 [ 535.500996][T11812] tipc_msg_create+0x4a/0x4c0 [ 535.505857][T11812] ? slab_free_freelist_hook+0x154/0x240 [ 535.511563][T11812] tipc_sk_send_ack+0x101/0x580 [ 535.516601][T11812] ? kmem_cache_free+0xf8/0x290 [ 535.521526][T11812] tipc_recvstream+0x833/0xe90 [ 535.526386][T11812] ? tipc_sendstream+0x70/0x70 [ 535.531230][T11812] ____sys_recvmsg+0x2bd/0x5d0 [ 535.536076][T11812] ? __sys_recvmsg_sock+0x50/0x50 [ 535.541167][T11812] ? import_iovec+0x73/0xa0 [ 535.545781][T11812] ___sys_recvmsg+0x214/0x590 [ 535.550622][T11812] ? __sys_recvmsg+0x2a0/0x2a0 [ 535.555452][T11812] ? ksys_write+0x1d2/0x260 [ 535.560113][T11812] ? __fget_files+0x3fc/0x460 [ 535.564907][T11812] __x64_sys_recvmsg+0x21e/0x2f0 [ 535.569920][T11812] ? ___sys_recvmsg+0x590/0x590 [ 535.574855][T11812] ? lockdep_hardirqs_on+0x98/0x150 [ 535.580141][T11812] do_syscall_64+0x55/0xb0 [ 535.584714][T11812] ? clear_bhb_loop+0x40/0x90 [ 535.589484][T11812] ? clear_bhb_loop+0x40/0x90 [ 535.594258][T11812] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 535.600254][T11812] RIP: 0033:0x7fe39ff9fb19 [ 535.604729][T11812] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 535.624875][T11812] RSP: 002b:00007fe3a0f1e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 535.633799][T11812] RAX: ffffffffffffffda RBX: 00007fe3a0225fa0 RCX: 00007fe39ff9fb19 [ 535.641840][T11812] RDX: 0000000000001f00 RSI: 00002000000004c0 RDI: 0000000000000003 [ 535.649976][T11812] RBP: 00007fe3a0f1e090 R08: 0000000000000000 R09: 0000000000000000 [ 535.658018][T11812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 535.666068][T11812] R13: 00007fe3a0226038 R14: 00007fe3a0225fa0 R15: 00007fffc739d178 [ 535.674122][T11812] [ 536.319739][T11836] netlink: 'syz.2.1966': attribute type 10 has an invalid length. [ 536.347848][T11836] __nla_validate_parse: 5 callbacks suppressed [ 536.347874][T11836] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1966'. [ 536.463497][T11838] netlink: 'syz.1.1965': attribute type 10 has an invalid length. [ 536.492404][T11838] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1965'. [ 536.582741][T11834] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1965'. [ 537.301540][T11852] netlink: 'syz.0.1970': attribute type 10 has an invalid length. [ 537.366206][T11853] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 537.372800][T11853] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 537.409188][T11852] bridge0: port 2(bond0) entered disabled state [ 537.416037][T11852] bridge0: port 3(batadv_slave_0) entered disabled state [ 537.442130][T11852] bridge0: port 2(bond0) entered blocking state [ 537.448735][T11852] bridge0: port 2(bond0) entered forwarding state [ 537.455746][T11852] bridge0: port 3(batadv_slave_0) entered blocking state [ 537.463219][T11852] bridge0: port 3(batadv_slave_0) entered forwarding state [ 537.484239][T11852] bridge0: port 2(bond0) entered disabled state [ 537.491086][T11852] bridge0: port 3(batadv_slave_0) entered disabled state [ 537.510888][T11846] netlink: 'syz.2.1968': attribute type 10 has an invalid length. [ 537.520933][T11846] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1968'. [ 537.560181][T11847] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1968'. [ 537.845521][T11862] netlink: 'syz.2.1981': attribute type 10 has an invalid length. [ 537.869726][T11862] bridge0: port 2(bond0) entered disabled state [ 537.877815][T11862] bridge0: port 3(batadv_slave_0) entered disabled state [ 537.885481][T11862] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.924522][T11862] bridge0: port 2(bond0) entered blocking state [ 537.931214][T11862] bridge0: port 2(bond0) entered forwarding state [ 537.938253][T11862] bridge0: port 3(batadv_slave_0) entered blocking state [ 537.945578][T11862] bridge0: port 3(batadv_slave_0) entered forwarding state [ 537.953347][T11862] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.960768][T11862] bridge0: port 1(bridge_slave_0) entered forwarding state [ 538.027571][T11862] bridge0: port 2(bond0) entered disabled state [ 538.034287][T11862] bridge0: port 3(batadv_slave_0) entered disabled state [ 538.041791][T11862] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.724305][T11876] netlink: 'syz.1.1977': attribute type 10 has an invalid length. [ 538.755477][T11876] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1977'. [ 538.837463][T11879] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1979'. [ 538.865046][T11873] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1977'. [ 539.533055][T11887] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 539.539771][T11887] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 539.610825][T11883] netlink: 'syz.1.1982': attribute type 10 has an invalid length. [ 539.622293][T11883] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1982'. [ 539.646569][T11883] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1982'. [ 539.844483][T11892] netlink: 'syz.3.1986': attribute type 10 has an invalid length. [ 539.858900][T11892] bridge0: port 2(bond0) entered blocking state [ 539.865544][T11892] bridge0: port 2(bond0) entered forwarding state [ 539.872680][T11892] bridge0: port 3(batadv_slave_0) entered blocking state [ 539.880026][T11892] bridge0: port 3(batadv_slave_0) entered forwarding state [ 539.887670][T11892] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.895084][T11892] bridge0: port 1(bridge_slave_0) entered forwarding state [ 539.923907][T11892] bridge0: port 2(bond0) entered disabled state [ 539.930662][T11892] bridge0: port 3(batadv_slave_0) entered disabled state [ 539.938102][T11892] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.960441][T11893] netlink: 'syz.0.1985': attribute type 15 has an invalid length. [ 540.402614][T11903] validate_nla: 1 callbacks suppressed [ 540.402636][T11903] netlink: 'syz.0.1996': attribute type 10 has an invalid length. [ 540.940116][T11914] FAULT_INJECTION: forcing a failure. [ 540.940116][T11914] name failslab, interval 1, probability 0, space 0, times 0 [ 540.958590][T11912] netlink: 'syz.2.1991': attribute type 10 has an invalid length. [ 540.961034][T11914] CPU: 0 PID: 11914 Comm: syz.1.1993 Not tainted syzkaller #0 [ 540.974248][T11914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 540.984459][T11914] Call Trace: [ 540.987793][T11914] [ 540.990759][T11914] dump_stack_lvl+0x18c/0x250 [ 540.995479][T11914] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 541.001817][T11914] ? show_regs_print_info+0x20/0x20 [ 541.007076][T11914] ? load_image+0x420/0x420 [ 541.011650][T11914] should_fail_ex+0x394/0x4c0 [ 541.016388][T11914] should_failslab+0x9/0x20 [ 541.020937][T11914] slab_pre_alloc_hook+0x59/0x300 [ 541.026017][T11914] ? bpf_test_init+0x9f/0x140 [ 541.030821][T11914] ? bpf_test_init+0x9f/0x140 [ 541.035558][T11914] __kmem_cache_alloc_node+0x53/0x260 [ 541.040969][T11914] ? bpf_test_init+0x9f/0x140 [ 541.045679][T11914] __kmalloc+0xa7/0x240 [ 541.049890][T11914] bpf_test_init+0x9f/0x140 [ 541.054558][T11914] bpf_prog_test_run_xdp+0x4cd/0x1140 [ 541.060003][T11914] ? __lock_acquire+0x7eb0/0x7eb0 [ 541.065102][T11914] ? dev_put+0x80/0x80 [ 541.069337][T11914] ? dev_put+0x80/0x80 [ 541.073490][T11914] bpf_prog_test_run+0x31f/0x390 [ 541.078491][T11914] __sys_bpf+0x49d/0x890 [ 541.082824][T11914] ? bpf_link_show_fdinfo+0x560/0x560 [ 541.088277][T11914] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 541.094500][T11914] __x64_sys_bpf+0x7c/0x90 [ 541.098972][T11914] do_syscall_64+0x55/0xb0 [ 541.103529][T11914] ? clear_bhb_loop+0x40/0x90 [ 541.108277][T11914] ? clear_bhb_loop+0x40/0x90 [ 541.113016][T11914] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 541.119043][T11914] RIP: 0033:0x7f26ff79fb19 [ 541.123520][T11914] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 541.143441][T11914] RSP: 002b:00007f2700713028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 541.152216][T11914] RAX: ffffffffffffffda RBX: 00007f26ffa25fa0 RCX: 00007f26ff79fb19 [ 541.160321][T11914] RDX: 0000000000000050 RSI: 0000200000000f00 RDI: 000000000000000a [ 541.168417][T11914] RBP: 00007f2700713090 R08: 0000000000000000 R09: 0000000000000000 [ 541.176442][T11914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 541.184456][T11914] R13: 00007f26ffa26038 R14: 00007f26ffa25fa0 R15: 00007fffc5f310e8 [ 541.192569][T11914] [ 541.651654][T11926] netlink: 'syz.0.1998': attribute type 10 has an invalid length. [ 541.693084][T11926] bridge0: port 2(bond0) entered blocking state [ 541.699710][T11926] bridge0: port 2(bond0) entered forwarding state [ 541.707028][T11926] bridge0: port 3(batadv_slave_0) entered blocking state [ 541.714506][T11926] bridge0: port 3(batadv_slave_0) entered forwarding state [ 542.580067][T11934] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 542.586697][T11934] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 542.805013][T11926] bridge0: port 2(bond0) entered disabled state [ 542.811659][T11926] bridge0: port 3(batadv_slave_0) entered disabled state [ 543.526533][T11948] netlink: 'syz.3.2005': attribute type 10 has an invalid length. [ 543.538146][T11948] __nla_validate_parse: 3 callbacks suppressed [ 543.538167][T11948] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2005'. [ 543.573648][T11943] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2005'. [ 544.767016][T11959] netlink: 'syz.2.2011': attribute type 10 has an invalid length. [ 544.826201][T11959] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2011'. [ 544.864139][T11958] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2011'. [ 544.999097][T11971] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 545.005663][T11971] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 546.356950][T11996] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2021'. [ 546.378332][T11996] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2021'. [ 546.402137][T11996] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2021'. [ 546.640486][T12002] netlink: 'syz.0.2022': attribute type 10 has an invalid length. [ 546.668963][T12002] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2022'. [ 546.878561][T12003] netlink: 'syz.2.2020': attribute type 10 has an invalid length. [ 546.886512][T12003] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2020'. [ 546.910834][T12003] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2020'. [ 547.111630][T12009] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 547.118225][T12009] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 547.285117][T12005] netlink: 'syz.1.2024': attribute type 10 has an invalid length. [ 547.440110][T12014] netlink: 'syz.2.2027': attribute type 10 has an invalid length. [ 547.470174][T12014] bridge0: port 2(bond0) entered blocking state [ 547.476776][T12014] bridge0: port 2(bond0) entered forwarding state [ 547.483875][T12014] bridge0: port 3(batadv_slave_0) entered blocking state [ 547.491234][T12014] bridge0: port 3(batadv_slave_0) entered forwarding state [ 547.499032][T12014] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.506367][T12014] bridge0: port 1(bridge_slave_0) entered forwarding state [ 547.526058][T12014] bridge0: port 2(bond0) entered disabled state [ 547.532845][T12014] bridge0: port 3(batadv_slave_0) entered disabled state [ 547.540469][T12014] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.763071][T12018] netlink: 'syz.1.2029': attribute type 10 has an invalid length. [ 548.747649][T12042] netlink: 'syz.3.2037': attribute type 10 has an invalid length. [ 548.759287][T12042] __nla_validate_parse: 3 callbacks suppressed [ 548.759326][T12042] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2037'. [ 548.823505][T12042] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2037'. [ 549.231738][T12060] netlink: 'syz.0.2043': attribute type 10 has an invalid length. [ 549.249570][T12060] bridge0: port 2(bond0) entered blocking state [ 549.256175][T12060] bridge0: port 2(bond0) entered forwarding state [ 549.263129][T12060] bridge0: port 3(batadv_slave_0) entered blocking state [ 549.270435][T12060] bridge0: port 3(batadv_slave_0) entered forwarding state [ 549.287297][T12060] bridge0: port 2(bond0) entered disabled state [ 549.293951][T12060] bridge0: port 3(batadv_slave_0) entered disabled state [ 549.373861][T12061] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 549.380499][T12061] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 549.585756][T12063] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2044'. [ 549.600627][T12063] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2044'. [ 549.729129][T12065] netlink: 'syz.0.2045': attribute type 10 has an invalid length. [ 549.750416][T12065] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2045'. [ 549.939589][T12068] netlink: 'syz.3.2046': attribute type 10 has an invalid length. [ 549.948718][T12068] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2046'. [ 550.432580][T12076] netlink: 'syz.2.2049': attribute type 10 has an invalid length. [ 550.441688][T12076] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2049'. [ 550.804582][T12077] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2050'. [ 550.903419][T12083] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2050'. [ 551.176269][T12088] bridge0: port 2(bond0) entered blocking state [ 551.182937][T12088] bridge0: port 2(bond0) entered forwarding state [ 551.189908][T12088] bridge0: port 3(batadv_slave_0) entered blocking state [ 551.197156][T12088] bridge0: port 3(batadv_slave_0) entered forwarding state [ 551.204861][T12088] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.212239][T12088] bridge0: port 1(bridge_slave_0) entered forwarding state [ 551.274641][T12088] bridge0: port 2(bond0) entered disabled state [ 551.281311][T12088] bridge0: port 3(batadv_slave_0) entered disabled state [ 551.288788][T12088] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.678603][T12103] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 551.685120][T12103] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 551.764066][T12101] validate_nla: 2 callbacks suppressed [ 551.764092][T12101] netlink: 'syz.0.2058': attribute type 10 has an invalid length. [ 551.781245][T12101] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2058'. [ 551.953558][T12102] netlink: 'syz.3.2054': attribute type 10 has an invalid length. [ 552.698647][T12114] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 552.705226][T12114] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 553.255778][T12134] netlink: 'syz.2.2063': attribute type 10 has an invalid length. [ 553.287682][T12134] hsr0: entered promiscuous mode [ 553.348467][T12134] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 553.427200][T12134] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 553.499831][T12134] bond0: (slave hsr0): Error -95 calling set_mac_address [ 553.569142][T12139] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 553.575707][T12139] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 553.578543][T12138] netlink: 'syz.0.2067': attribute type 10 has an invalid length. [ 553.684862][T12141] netlink: 'syz.1.2069': attribute type 10 has an invalid length. [ 554.142121][T12151] netlink: 'syz.0.2071': attribute type 10 has an invalid length. [ 554.159586][T12151] __nla_validate_parse: 5 callbacks suppressed [ 554.159604][T12151] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2071'. [ 554.196436][T12151] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2071'. [ 554.371754][T12154] FAULT_INJECTION: forcing a failure. [ 554.371754][T12154] name failslab, interval 1, probability 0, space 0, times 0 [ 554.401269][T12154] CPU: 0 PID: 12154 Comm: syz.3.2074 Not tainted syzkaller #0 [ 554.408830][T12154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 554.418953][T12154] Call Trace: [ 554.422281][T12154] [ 554.425361][T12154] dump_stack_lvl+0x18c/0x250 [ 554.430146][T12154] ? verify_lock_unused+0x140/0x140 [ 554.435585][T12154] ? show_regs_print_info+0x20/0x20 [ 554.440841][T12154] ? load_image+0x420/0x420 [ 554.445411][T12154] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 554.451459][T12154] ? lock_chain_count+0x20/0x20 [ 554.456376][T12154] should_fail_ex+0x394/0x4c0 [ 554.461119][T12154] should_failslab+0x9/0x20 [ 554.465675][T12154] slab_pre_alloc_hook+0x59/0x300 [ 554.470845][T12154] ? urandom_read_iter+0x140/0x140 [ 554.476183][T12154] ? sctp_add_bind_addr+0x8c/0x360 [ 554.481704][T12154] __kmem_cache_alloc_node+0x53/0x260 [ 554.487140][T12154] ? sctp_add_bind_addr+0x8c/0x360 [ 554.492516][T12154] kmalloc_trace+0x2a/0xe0 [ 554.497003][T12154] sctp_add_bind_addr+0x8c/0x360 [ 554.502009][T12154] sctp_copy_local_addr_list+0x31b/0x4e0 [ 554.507712][T12154] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 554.513494][T12154] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 554.519724][T12154] ? sctp_v4_is_any+0x35/0x60 [ 554.524471][T12154] ? sctp_copy_one_addr+0x8c/0x350 [ 554.529737][T12154] sctp_bind_addr_copy+0xb3/0x3c0 [ 554.534909][T12154] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 554.541363][T12154] sctp_connect_new_asoc+0x2f9/0x6a0 [ 554.546808][T12154] ? __sctp_connect+0xd80/0xd80 [ 554.551839][T12154] ? __local_bh_enable_ip+0x13a/0x1c0 [ 554.557307][T12154] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 554.563066][T12154] ? security_sctp_bind_connect+0x89/0xb0 [ 554.568878][T12154] sctp_sendmsg+0x1519/0x27b0 [ 554.573666][T12154] ? sctp_getsockopt+0xb60/0xb60 [ 554.578768][T12154] ? aa_sk_perm+0x7bb/0x8e0 [ 554.583378][T12154] ? aa_af_perm+0x330/0x330 [ 554.587949][T12154] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 554.594451][T12154] ? sock_rps_record_flow+0x19/0x3f0 [ 554.602340][T12154] ? inet_sendmsg+0xce/0x2a0 [ 554.607115][T12154] ? inet_send_prepare+0x250/0x250 [ 554.612558][T12154] ____sys_sendmsg+0x61b/0x980 [ 554.617485][T12154] ? __asan_memset+0x22/0x40 [ 554.622143][T12154] ? __sys_sendmsg_sock+0x30/0x30 [ 554.627227][T12154] ? __import_iovec+0x3fa/0x850 [ 554.632152][T12154] ? import_iovec+0x73/0xa0 [ 554.636726][T12154] ___sys_sendmsg+0x2a6/0x360 [ 554.641796][T12154] ? get_pid_task+0x20/0x1e0 [ 554.646458][T12154] ? __sys_sendmsg+0x2b0/0x2b0 [ 554.651303][T12154] ? __lock_acquire+0x7eb0/0x7eb0 [ 554.656415][T12154] __se_sys_sendmsg+0x1d0/0x2c0 [ 554.661319][T12154] ? perf_trace_preemptirq_template+0x269/0x330 [ 554.667643][T12154] ? __x64_sys_sendmsg+0x80/0x80 [ 554.672750][T12154] ? lockdep_hardirqs_on+0x98/0x150 [ 554.678021][T12154] do_syscall_64+0x55/0xb0 [ 554.682532][T12154] ? clear_bhb_loop+0x40/0x90 [ 554.687275][T12154] ? clear_bhb_loop+0x40/0x90 [ 554.692053][T12154] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 554.698002][T12154] RIP: 0033:0x7ff31059fb19 [ 554.702560][T12154] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 554.722476][T12154] RSP: 002b:00007ff3114c4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 554.730975][T12154] RAX: ffffffffffffffda RBX: 00007ff310825fa0 RCX: 00007ff31059fb19 [ 554.740402][T12154] RDX: 0000000000000080 RSI: 0000200000000380 RDI: 0000000000000004 [ 554.751218][T12154] RBP: 00007ff3114c4090 R08: 0000000000000000 R09: 0000000000000000 [ 554.759687][T12154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 554.768505][T12154] R13: 00007ff310826038 R14: 00007ff310825fa0 R15: 00007ffe4492e888 [ 554.776645][T12154] [ 554.854538][T12159] netlink: 'syz.0.2077': attribute type 10 has an invalid length. [ 554.880167][T12159] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2077'. [ 554.919642][T12159] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2077'. [ 555.472777][T12178] netlink: 'syz.1.2081': attribute type 10 has an invalid length. [ 555.541581][T12178] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2081'. [ 555.623840][T12180] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2081'. [ 555.923977][T12176] netlink: 'syz.0.2090': attribute type 10 has an invalid length. [ 555.968179][T12176] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2090'. [ 556.015352][T12179] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2090'. [ 556.223433][T12186] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2084'. [ 556.832022][T12192] netlink: 'syz.2.2088': attribute type 10 has an invalid length. [ 556.847783][T12192] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2088'. [ 557.059305][T12202] FAULT_INJECTION: forcing a failure. [ 557.059305][T12202] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 557.114138][T12204] bridge_slave_1: default FDB implementation only supports local addresses [ 557.125851][T12202] CPU: 0 PID: 12202 Comm: syz.3.2093 Not tainted syzkaller #0 [ 557.133683][T12202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 557.143858][T12202] Call Trace: [ 557.147546][T12202] [ 557.150628][T12202] dump_stack_lvl+0x18c/0x250 [ 557.155403][T12202] ? show_regs_print_info+0x20/0x20 [ 557.160686][T12202] ? load_image+0x420/0x420 [ 557.165299][T12202] ? __lock_acquire+0x7eb0/0x7eb0 [ 557.170421][T12202] should_fail_ex+0x394/0x4c0 [ 557.175179][T12202] _copy_from_user+0x2f/0xe0 [ 557.179882][T12202] __copy_msghdr+0x388/0x560 [ 557.184595][T12202] ___sys_sendmsg+0x214/0x360 [ 557.189379][T12202] ? __sys_sendmsg+0x2b0/0x2b0 [ 557.194374][T12202] ? __lock_acquire+0x7eb0/0x7eb0 [ 557.199537][T12202] __se_sys_sendmsg+0x1d0/0x2c0 [ 557.204469][T12202] ? __x64_sys_sendmsg+0x80/0x80 [ 557.209527][T12202] ? lockdep_hardirqs_on+0x98/0x150 [ 557.214819][T12202] do_syscall_64+0x55/0xb0 [ 557.219316][T12202] ? clear_bhb_loop+0x40/0x90 [ 557.224097][T12202] ? clear_bhb_loop+0x40/0x90 [ 557.229034][T12202] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 557.235198][T12202] RIP: 0033:0x7ff31059fb19 [ 557.239686][T12202] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 557.259548][T12202] RSP: 002b:00007ff3114c4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 557.268042][T12202] RAX: ffffffffffffffda RBX: 00007ff310825fa0 RCX: 00007ff31059fb19 [ 557.276087][T12202] RDX: 0000000000000084 RSI: 00002000000003c0 RDI: 0000000000000004 [ 557.284143][T12202] RBP: 00007ff3114c4090 R08: 0000000000000000 R09: 0000000000000000 [ 557.292180][T12202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 557.300214][T12202] R13: 00007ff310826038 R14: 00007ff310825fa0 R15: 00007ffe4492e888 [ 557.308463][T12202] [ 557.666063][T12219] netlink: 'syz.1.2096': attribute type 10 has an invalid length. [ 557.747873][T12209] netlink: 'syz.2.2094': attribute type 10 has an invalid length. [ 557.870323][T12218] netlink: 'syz.3.2098': attribute type 10 has an invalid length. [ 558.567768][T12226] netlink: 'syz.0.2100': attribute type 4 has an invalid length. [ 558.727510][T12233] FAULT_INJECTION: forcing a failure. [ 558.727510][T12233] name failslab, interval 1, probability 0, space 0, times 0 [ 558.740294][T12233] CPU: 1 PID: 12233 Comm: syz.0.2104 Not tainted syzkaller #0 [ 558.747835][T12233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 558.757996][T12233] Call Trace: [ 558.761334][T12233] [ 558.764309][T12233] dump_stack_lvl+0x18c/0x250 [ 558.769091][T12233] ? show_regs_print_info+0x20/0x20 [ 558.774430][T12233] ? load_image+0x420/0x420 [ 558.779000][T12233] should_fail_ex+0x394/0x4c0 [ 558.783733][T12233] should_failslab+0x9/0x20 [ 558.788310][T12233] slab_pre_alloc_hook+0x59/0x300 [ 558.793395][T12233] kmem_cache_alloc+0x5a/0x2d0 [ 558.798326][T12233] ? skb_clone+0x1eb/0x370 [ 558.803105][T12233] skb_clone+0x1eb/0x370 [ 558.807433][T12233] bpf_clone_redirect+0x16d/0x4a0 [ 558.812528][T12233] bpf_prog_208b094576c80b22+0x5e/0x63 [ 558.818119][T12233] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 558.824173][T12233] ? perf_trace_preemptirq_template+0xac/0x330 [ 558.830379][T12233] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 558.836487][T12233] ? lockdep_softirqs_on+0x5b0/0x5b0 [ 558.841809][T12233] ? lock_chain_count+0x20/0x20 [ 558.846785][T12233] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 558.853351][T12233] ? __local_bh_disable_ip+0x108/0x1a0 [ 558.859031][T12233] ? __cant_sleep+0x220/0x220 [ 558.863873][T12233] ? __local_bh_enable_ip+0x13a/0x1c0 [ 558.869375][T12233] ? _local_bh_enable+0xa0/0xa0 [ 558.874269][T12233] ? bpf_test_timer_continue+0x137/0x3f0 [ 558.879945][T12233] ? bpf_test_run+0x174/0x870 [ 558.884663][T12233] bpf_test_run+0x2df/0x870 [ 558.889231][T12233] ? bpf_test_run+0x174/0x870 [ 558.894120][T12233] ? dst_hold+0x70/0x70 [ 558.898401][T12233] ? eth_get_headlen+0x210/0x210 [ 558.903553][T12233] bpf_prog_test_run_skb+0xdbb/0x18f0 [ 558.909013][T12233] ? cpu_online+0x60/0x60 [ 558.913419][T12233] bpf_prog_test_run+0x31f/0x390 [ 558.918420][T12233] __sys_bpf+0x49d/0x890 [ 558.922723][T12233] ? bpf_link_show_fdinfo+0x560/0x560 [ 558.928238][T12233] ? lock_chain_count+0x20/0x20 [ 558.933169][T12233] __x64_sys_bpf+0x7c/0x90 [ 558.937630][T12233] do_syscall_64+0x55/0xb0 [ 558.942085][T12233] ? clear_bhb_loop+0x40/0x90 [ 558.947022][T12233] ? clear_bhb_loop+0x40/0x90 [ 558.951746][T12233] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 558.957681][T12233] RIP: 0033:0x7f906039fb19 [ 558.962127][T12233] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 558.982672][T12233] RSP: 002b:00007f906125a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 558.998152][T12233] RAX: ffffffffffffffda RBX: 00007f9060625fa0 RCX: 00007f906039fb19 [ 559.006559][T12233] RDX: 000000000000003d RSI: 0000200000000080 RDI: 000000000000000a [ 559.015150][T12233] RBP: 00007f906125a090 R08: 0000000000000000 R09: 0000000000000000 [ 559.023189][T12233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 559.031572][T12233] R13: 00007f9060626038 R14: 00007f9060625fa0 R15: 00007ffdba0911a8 [ 559.040167][T12233] [ 559.418185][T12211] Bluetooth: hci1: command 0x0406 tx timeout [ 559.434809][ T52] Bluetooth: hci1: Opcode 0x206a failed: -110 [ 559.576779][T12241] __nla_validate_parse: 7 callbacks suppressed [ 559.576827][T12241] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2107'. [ 559.614610][T12241] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2107'. [ 559.637060][T12241] netlink: 13 bytes leftover after parsing attributes in process `syz.1.2107'. [ 559.976064][T12250] netlink: 'syz.1.2111': attribute type 10 has an invalid length. [ 560.011870][T12250] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2111'. [ 561.110780][T12267] netlink: 'syz.0.2117': attribute type 1 has an invalid length. [ 561.138240][T12267] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.2117'. [ 561.190866][T12264] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2115'. [ 561.305578][T12266] syzkaller0: entered promiscuous mode [ 561.312482][T12266] syzkaller0: entered allmulticast mode [ 561.950627][T12288] FAULT_INJECTION: forcing a failure. [ 561.950627][T12288] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 561.974759][T12288] CPU: 1 PID: 12288 Comm: syz.1.2123 Not tainted syzkaller #0 [ 561.982390][T12288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 561.993134][T12288] Call Trace: [ 561.996567][T12288] [ 561.999549][T12288] dump_stack_lvl+0x18c/0x250 [ 562.004620][T12288] ? show_regs_print_info+0x20/0x20 [ 562.009890][T12288] ? load_image+0x420/0x420 [ 562.014472][T12288] ? __might_fault+0xaa/0x120 [ 562.019664][T12288] ? __lock_acquire+0x7eb0/0x7eb0 [ 562.024729][T12288] should_fail_ex+0x394/0x4c0 [ 562.029473][T12288] _copy_from_user+0x2f/0xe0 [ 562.034130][T12288] ___sys_sendmsg+0x1c7/0x360 [ 562.038960][T12288] ? __sys_sendmsg+0x2b0/0x2b0 [ 562.043788][T12288] ? __lock_acquire+0x7eb0/0x7eb0 [ 562.048898][T12288] __se_sys_sendmsg+0x1d0/0x2c0 [ 562.053802][T12288] ? __x64_sys_sendmsg+0x80/0x80 [ 562.058805][T12288] ? lockdep_hardirqs_on+0x98/0x150 [ 562.064045][T12288] do_syscall_64+0x55/0xb0 [ 562.068524][T12288] ? clear_bhb_loop+0x40/0x90 [ 562.073381][T12288] ? clear_bhb_loop+0x40/0x90 [ 562.078492][T12288] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 562.087555][T12288] RIP: 0033:0x7f26ff79fb19 [ 562.092640][T12288] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 562.112683][T12288] RSP: 002b:00007f27006d1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 562.121158][T12288] RAX: ffffffffffffffda RBX: 00007f26ffa26180 RCX: 00007f26ff79fb19 [ 562.129183][T12288] RDX: 0000000000000000 RSI: 00002000000009c0 RDI: 000000000000000b [ 562.137321][T12288] RBP: 00007f27006d1090 R08: 0000000000000000 R09: 0000000000000000 [ 562.145440][T12288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 562.153554][T12288] R13: 00007f26ffa26218 R14: 00007f26ffa26180 R15: 00007fffc5f310e8 [ 562.161620][T12288] [ 563.186271][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.198111][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.039835][T12272] netlink: 279 bytes leftover after parsing attributes in process `syz.2.2119'. [ 564.052218][T12276] netlink: 'syz.2.2119': attribute type 10 has an invalid length. [ 564.061494][T12285] netlink: 'syz.3.2124': attribute type 39 has an invalid length. [ 564.146984][T12285] hsr_slave_1 (unregistering): left promiscuous mode [ 564.192686][T12286] netlink: 279 bytes leftover after parsing attributes in process `syz.1.2123'. [ 564.565629][T12302] netlink: 'syz.2.2127': attribute type 10 has an invalid length. [ 564.591478][T12302] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2127'. [ 565.534676][T12317] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2133'. [ 565.602147][T12318] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2129'. [ 565.625622][T12319] netlink: 'syz.3.2132': attribute type 10 has an invalid length. [ 565.717216][T12319] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2132'. [ 565.790878][T12312] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2132'. [ 565.866212][T12320] netlink: 'syz.2.2134': attribute type 10 has an invalid length. [ 565.884505][T12322] FAULT_INJECTION: forcing a failure. [ 565.884505][T12322] name failslab, interval 1, probability 0, space 0, times 0 [ 565.897435][T12322] CPU: 1 PID: 12322 Comm: syz.1.2136 Not tainted syzkaller #0 [ 565.904969][T12322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 565.915187][T12322] Call Trace: [ 565.916264][T12320] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2134'. [ 565.918501][T12322] [ 565.918514][T12322] dump_stack_lvl+0x18c/0x250 [ 565.918556][T12322] ? show_regs_print_info+0x20/0x20 [ 565.918586][T12322] ? load_image+0x420/0x420 [ 565.918615][T12322] ? __might_sleep+0xe0/0xe0 [ 565.949838][T12322] ? __lock_acquire+0x7eb0/0x7eb0 [ 565.954948][T12322] ? lock_chain_count+0x20/0x20 [ 565.959889][T12322] should_fail_ex+0x394/0x4c0 [ 565.964643][T12322] should_failslab+0x9/0x20 [ 565.969186][T12322] slab_pre_alloc_hook+0x59/0x300 [ 565.974688][T12322] ? _raw_spin_unlock+0x40/0x40 [ 565.979919][T12322] ? string+0x257/0x290 [ 565.984109][T12322] ? __request_module+0x2d1/0x600 [ 565.989178][T12322] __kmem_cache_alloc_node+0x53/0x260 [ 565.994598][T12322] ? __request_module+0x2d1/0x600 [ 565.999827][T12322] kmalloc_trace+0x2a/0xe0 [ 566.004298][T12322] __request_module+0x2d1/0x600 [ 566.009201][T12322] ? module_enforce_rwx_sections+0x150/0x150 [ 566.015213][T12322] ? module_enforce_rwx_sections+0x150/0x150 [ 566.021234][T12322] ? apparmor_capable+0x137/0x1a0 [ 566.026308][T12322] ? dev_load+0x21/0x1f0 [ 566.030595][T12322] dev_ioctl+0x384/0x1140 [ 566.035147][T12322] sock_do_ioctl+0x239/0x310 [ 566.039776][T12322] ? sock_show_fdinfo+0xb0/0xb0 [ 566.044675][T12322] sock_ioctl+0x5be/0x7e0 [ 566.049070][T12322] ? sock_poll+0x460/0x460 [ 566.053577][T12322] ? bpf_lsm_file_ioctl+0x9/0x10 [ 566.058551][T12322] ? security_file_ioctl+0x80/0xa0 [ 566.063956][T12322] ? sock_poll+0x460/0x460 [ 566.068409][T12322] __se_sys_ioctl+0xfd/0x170 [ 566.073044][T12322] do_syscall_64+0x55/0xb0 [ 566.077607][T12322] ? clear_bhb_loop+0x40/0x90 [ 566.082323][T12322] ? clear_bhb_loop+0x40/0x90 [ 566.087165][T12322] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 566.093218][T12322] RIP: 0033:0x7f26ff79fb19 [ 566.097667][T12322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 566.117587][T12322] RSP: 002b:00007f2700713028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 566.126047][T12322] RAX: ffffffffffffffda RBX: 00007f26ffa25fa0 RCX: 00007f26ff79fb19 [ 566.134177][T12322] RDX: 0000200000001840 RSI: 0000000000008946 RDI: 0000000000000003 [ 566.142177][T12322] RBP: 00007f2700713090 R08: 0000000000000000 R09: 0000000000000000 [ 566.150285][T12322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 566.158386][T12322] R13: 00007f26ffa26038 R14: 00007f26ffa25fa0 R15: 00007fffc5f310e8 [ 566.166668][T12322] [ 566.192353][T12324] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2134'. [ 566.347219][T12327] FAULT_INJECTION: forcing a failure. [ 566.347219][T12327] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 566.370711][T12327] CPU: 0 PID: 12327 Comm: syz.0.2137 Not tainted syzkaller #0 [ 566.378266][T12327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 566.388380][T12327] Call Trace: [ 566.391730][T12327] [ 566.394722][T12327] dump_stack_lvl+0x18c/0x250 [ 566.399492][T12327] ? show_regs_print_info+0x20/0x20 [ 566.404806][T12327] ? load_image+0x420/0x420 [ 566.409383][T12327] ? __might_fault+0xaa/0x120 [ 566.414137][T12327] ? __lock_acquire+0x7eb0/0x7eb0 [ 566.419261][T12327] should_fail_ex+0x394/0x4c0 [ 566.424232][T12327] _copy_from_user+0x2f/0xe0 [ 566.429379][T12327] ___sys_sendmsg+0x1c7/0x360 [ 566.434119][T12327] ? get_pid_task+0x20/0x1e0 [ 566.438785][T12327] ? __sys_sendmsg+0x2b0/0x2b0 [ 566.443906][T12327] ? __lock_acquire+0x7eb0/0x7eb0 [ 566.449499][T12327] __se_sys_sendmsg+0x1d0/0x2c0 [ 566.454428][T12327] ? __x64_sys_sendmsg+0x80/0x80 [ 566.459492][T12327] ? lockdep_hardirqs_on+0x98/0x150 [ 566.464769][T12327] do_syscall_64+0x55/0xb0 [ 566.469372][T12327] ? clear_bhb_loop+0x40/0x90 [ 566.474171][T12327] ? clear_bhb_loop+0x40/0x90 [ 566.478938][T12327] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 566.484920][T12327] RIP: 0033:0x7f906039fb19 [ 566.489493][T12327] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 566.509365][T12327] RSP: 002b:00007f9061239028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 566.518120][T12327] RAX: ffffffffffffffda RBX: 00007f9060626090 RCX: 00007f906039fb19 [ 566.526201][T12327] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000005 [ 566.534239][T12327] RBP: 00007f9061239090 R08: 0000000000000000 R09: 0000000000000000 [ 566.542393][T12327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 566.550525][T12327] R13: 00007f9060626128 R14: 00007f9060626090 R15: 00007ffdba0911a8 [ 566.558682][T12327] [ 566.911799][T12339] netlink: 'syz.2.2140': attribute type 39 has an invalid length. [ 567.116386][T12339] hsr_slave_1 (unregistering): left promiscuous mode [ 567.225951][T12344] netlink: 'syz.0.2144': attribute type 4 has an invalid length. [ 567.532917][T12353] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2145'. [ 567.591551][T12356] netlink: 'syz.3.2148': attribute type 10 has an invalid length. [ 567.601445][T12356] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2148'. [ 568.685372][T12368] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2153'. [ 569.083459][T12364] netlink: 'syz.1.2150': attribute type 10 has an invalid length. [ 569.168607][T12378] netlink: 'syz.3.2156': attribute type 4 has an invalid length. [ 569.734119][T12386] can: request_module (can-proto-0) failed. [ 569.805335][T12383] __nla_validate_parse: 5 callbacks suppressed [ 569.805451][T12383] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2158'. [ 569.829871][T12391] FAULT_INJECTION: forcing a failure. [ 569.829871][T12391] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 569.848781][T12391] CPU: 0 PID: 12391 Comm: syz.3.2161 Not tainted syzkaller #0 [ 569.856446][T12391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 569.866693][T12391] Call Trace: [ 569.870050][T12391] [ 569.873035][T12391] dump_stack_lvl+0x18c/0x250 [ 569.877795][T12391] ? show_regs_print_info+0x20/0x20 [ 569.883521][T12391] ? load_image+0x420/0x420 [ 569.888274][T12391] ? __lock_acquire+0x7eb0/0x7eb0 [ 569.893370][T12391] ? snprintf+0xe9/0x140 [ 569.897662][T12391] should_fail_ex+0x394/0x4c0 [ 569.902400][T12391] _copy_to_user+0x2f/0xa0 [ 569.907006][T12391] simple_read_from_buffer+0xe7/0x150 [ 569.912559][T12391] proc_fail_nth_read+0x1e8/0x260 [ 569.917771][T12391] ? proc_fault_inject_write+0x360/0x360 [ 569.923871][T12391] ? fsnotify_perm+0x271/0x5e0 [ 569.928712][T12391] ? proc_fault_inject_write+0x360/0x360 [ 569.934405][T12391] vfs_read+0x298/0x990 [ 569.938623][T12391] ? kernel_read+0x1e0/0x1e0 [ 569.943273][T12391] ? __fget_files+0x28/0x460 [ 569.947926][T12391] ? __fget_files+0x3fc/0x460 [ 569.952948][T12391] ? __fdget_pos+0x2a3/0x330 [ 569.957580][T12391] ? ksys_read+0x74/0x260 [ 569.961971][T12391] ksys_read+0x151/0x260 [ 569.966271][T12391] ? vfs_write+0x9a0/0x9a0 [ 569.970873][T12391] ? lockdep_hardirqs_on+0x98/0x150 [ 569.976131][T12391] do_syscall_64+0x55/0xb0 [ 569.980601][T12391] ? clear_bhb_loop+0x40/0x90 [ 569.985344][T12391] ? clear_bhb_loop+0x40/0x90 [ 569.990094][T12391] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 569.996383][T12391] RIP: 0033:0x7ff31056034e [ 570.000855][T12391] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 570.020608][T12391] RSP: 002b:00007ff3114a2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 570.029091][T12391] RAX: ffffffffffffffda RBX: 00007ff3114a36c0 RCX: 00007ff31056034e [ 570.037189][T12391] RDX: 000000000000000f RSI: 00007ff3114a30a0 RDI: 0000000000000015 [ 570.045202][T12391] RBP: 00007ff3114a3090 R08: 0000000000000000 R09: 0000000000000000 [ 570.053226][T12391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 570.061360][T12391] R13: 00007ff310826128 R14: 00007ff310826090 R15: 00007ffe4492e888 [ 570.069591][T12391] [ 570.167445][T12395] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2163'. [ 570.183371][T12395] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2163'. [ 570.203860][T12395] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2163'. [ 570.214569][T12395] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2163'. [ 570.338538][T12397] netlink: 'syz.1.2165': attribute type 25 has an invalid length. [ 570.346494][T12397] netlink: 'syz.1.2165': attribute type 3 has an invalid length. [ 570.367460][T12397] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2165'. [ 570.385583][T12399] netlink: 'syz.2.2166': attribute type 4 has an invalid length. [ 570.650437][T12405] netlink: 168356 bytes leftover after parsing attributes in process `syz.2.2168'. [ 571.204208][T12417] netlink: 'syz.3.2172': attribute type 9 has an invalid length. [ 571.214148][T12403] netlink: 'syz.0.2167': attribute type 10 has an invalid length. [ 571.235602][T12417] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2172'. [ 571.258541][T12403] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2167'. [ 571.273403][T12421] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2174'. [ 571.387842][T12419] FAULT_INJECTION: forcing a failure. [ 571.387842][T12419] name failslab, interval 1, probability 0, space 0, times 0 [ 571.450893][T12419] CPU: 0 PID: 12419 Comm: syz.1.2173 Not tainted syzkaller #0 [ 571.458429][T12419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 571.468544][T12419] Call Trace: [ 571.471870][T12419] [ 571.474825][T12419] dump_stack_lvl+0x18c/0x250 [ 571.479634][T12419] ? show_regs_print_info+0x20/0x20 [ 571.484962][T12419] ? load_image+0x420/0x420 [ 571.489506][T12419] ? __might_sleep+0xe0/0xe0 [ 571.494500][T12419] ? __lock_acquire+0x7eb0/0x7eb0 [ 571.499585][T12419] should_fail_ex+0x394/0x4c0 [ 571.504413][T12419] should_failslab+0x9/0x20 [ 571.508968][T12419] slab_pre_alloc_hook+0x59/0x300 [ 571.514072][T12419] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 571.520372][T12419] ? __get_vm_area_node+0x125/0x370 [ 571.525698][T12419] __kmem_cache_alloc_node+0x53/0x260 [ 571.531153][T12419] ? __get_vm_area_node+0x125/0x370 [ 571.536394][T12419] kmalloc_node_trace+0x26/0xe0 [ 571.541380][T12419] __get_vm_area_node+0x125/0x370 [ 571.546592][T12419] __vmalloc_node_range+0x36f/0x1320 [ 571.552022][T12419] ? netlink_sendmsg+0x602/0xbf0 [ 571.557002][T12419] ? netlink_insert+0x10d0/0x13e0 [ 571.562111][T12419] ? free_vm_area+0x50/0x50 [ 571.566846][T12419] ? netlink_sendmsg+0x602/0xbf0 [ 571.571918][T12419] vmalloc+0x79/0x90 [ 571.575864][T12419] ? netlink_sendmsg+0x602/0xbf0 [ 571.581029][T12419] netlink_sendmsg+0x602/0xbf0 [ 571.585832][T12419] ? netlink_getsockopt+0x590/0x590 [ 571.591077][T12419] ? netlink_getsockopt+0x590/0x590 [ 571.596328][T12419] ____sys_sendmsg+0x61b/0x980 [ 571.601175][T12419] ? __asan_memset+0x22/0x40 [ 571.605852][T12419] ? __sys_sendmsg_sock+0x30/0x30 [ 571.610904][T12419] ? __import_iovec+0x5f2/0x850 [ 571.615882][T12419] ? import_iovec+0x73/0xa0 [ 571.620433][T12419] ___sys_sendmsg+0x2a6/0x360 [ 571.625150][T12419] ? __sys_sendmsg+0x2b0/0x2b0 [ 571.630068][T12419] __se_sys_sendmsg+0x1d0/0x2c0 [ 571.634956][T12419] ? __x64_sys_sendmsg+0x80/0x80 [ 571.639941][T12419] ? syscall_enter_from_user_mode+0x2e/0x80 [ 571.645870][T12419] do_syscall_64+0x55/0xb0 [ 571.650316][T12419] ? clear_bhb_loop+0x40/0x90 [ 571.655055][T12419] ? clear_bhb_loop+0x40/0x90 [ 571.659889][T12419] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 571.665933][T12419] RIP: 0033:0x7f26ff79fb19 [ 571.670402][T12419] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 571.690228][T12419] RSP: 002b:00007f2700713028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 571.698684][T12419] RAX: ffffffffffffffda RBX: 00007f26ffa25fa0 RCX: 00007f26ff79fb19 [ 571.706949][T12419] RDX: 0000000000000000 RSI: 00002000000014c0 RDI: 0000000000000008 [ 571.714953][T12419] RBP: 00007f2700713090 R08: 0000000000000000 R09: 0000000000000000 [ 571.722956][T12419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 571.731048][T12419] R13: 00007f26ffa26038 R14: 00007f26ffa25fa0 R15: 00007fffc5f310e8 [ 571.739062][T12419] [ 571.754675][T12419] syz.1.2173: vmalloc error: size 213312, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 571.772616][T12419] CPU: 1 PID: 12419 Comm: syz.1.2173 Not tainted syzkaller #0 [ 571.780177][T12419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 571.790280][T12419] Call Trace: [ 571.793626][T12419] [ 571.796595][T12419] dump_stack_lvl+0x18c/0x250 [ 571.801593][T12419] ? show_regs_print_info+0x20/0x20 [ 571.806947][T12419] ? load_image+0x420/0x420 [ 571.811642][T12419] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 571.818125][T12419] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 571.824702][T12419] warn_alloc+0x246/0x340 [ 571.829116][T12419] ? zone_watermark_ok_safe+0x230/0x230 [ 571.834728][T12419] ? __get_vm_area_node+0x356/0x370 [ 571.840175][T12419] __vmalloc_node_range+0x394/0x1320 [ 571.845531][T12419] ? netlink_insert+0x10d0/0x13e0 [ 571.850653][T12419] ? free_vm_area+0x50/0x50 [ 571.855222][T12419] ? netlink_sendmsg+0x602/0xbf0 [ 571.860300][T12419] vmalloc+0x79/0x90 [ 571.864257][T12419] ? netlink_sendmsg+0x602/0xbf0 [ 571.869247][T12419] netlink_sendmsg+0x602/0xbf0 [ 571.874073][T12419] ? netlink_getsockopt+0x590/0x590 [ 571.879338][T12419] ? netlink_getsockopt+0x590/0x590 [ 571.884612][T12419] ____sys_sendmsg+0x61b/0x980 [ 571.889504][T12419] ? __asan_memset+0x22/0x40 [ 571.894138][T12419] ? __sys_sendmsg_sock+0x30/0x30 [ 571.899192][T12419] ? __import_iovec+0x5f2/0x850 [ 571.904085][T12419] ? import_iovec+0x73/0xa0 [ 571.908639][T12419] ___sys_sendmsg+0x2a6/0x360 [ 571.913367][T12419] ? __sys_sendmsg+0x2b0/0x2b0 [ 571.918213][T12419] __se_sys_sendmsg+0x1d0/0x2c0 [ 571.923100][T12419] ? __x64_sys_sendmsg+0x80/0x80 [ 571.928101][T12419] ? syscall_enter_from_user_mode+0x2e/0x80 [ 571.934050][T12419] do_syscall_64+0x55/0xb0 [ 571.938511][T12419] ? clear_bhb_loop+0x40/0x90 [ 571.943225][T12419] ? clear_bhb_loop+0x40/0x90 [ 571.948054][T12419] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 571.954025][T12419] RIP: 0033:0x7f26ff79fb19 [ 571.958669][T12419] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 571.978408][T12419] RSP: 002b:00007f2700713028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 571.986861][T12419] RAX: ffffffffffffffda RBX: 00007f26ffa25fa0 RCX: 00007f26ff79fb19 [ 571.994952][T12419] RDX: 0000000000000000 RSI: 00002000000014c0 RDI: 0000000000000008 [ 572.002956][T12419] RBP: 00007f2700713090 R08: 0000000000000000 R09: 0000000000000000 [ 572.010970][T12419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 572.018969][T12419] R13: 00007f26ffa26038 R14: 00007f26ffa25fa0 R15: 00007fffc5f310e8 [ 572.027262][T12419] [ 572.038330][T12419] Mem-Info: [ 572.042110][T12419] active_anon:4996 inactive_anon:0 isolated_anon:0 [ 572.042110][T12419] active_file:20078 inactive_file:40147 isolated_file:0 [ 572.042110][T12419] unevictable:768 dirty:535 writeback:0 [ 572.042110][T12419] slab_reclaimable:10391 slab_unreclaimable:94430 [ 572.042110][T12419] mapped:25178 shmem:1364 pagetables:526 [ 572.042110][T12419] sec_pagetables:0 bounce:0 [ 572.042110][T12419] kernel_misc_reclaimable:0 [ 572.042110][T12419] free:1345012 free_pcp:5295 free_cma:0 [ 572.095233][T12419] Node 0 active_anon:19984kB inactive_anon:0kB active_file:80312kB inactive_file:160392kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:100712kB dirty:2136kB writeback:0kB shmem:3920kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10300kB pagetables:2004kB sec_pagetables:0kB all_unreclaimable? no [ 572.153022][T12419] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 572.209162][T12419] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 572.296350][T12419] lowmem_reserve[]: 0 2503 2504 2504 2504 [ 572.321070][T12419] Node 0 DMA32 free:1454036kB boost:0kB min:34492kB low:43112kB high:51732kB reserved_highatomic:0KB active_anon:19824kB inactive_anon:0kB active_file:80312kB inactive_file:159564kB unevictable:1536kB writepending:2264kB present:3129332kB managed:2567744kB mlocked:0kB bounce:0kB free_pcp:6752kB local_pcp:2116kB free_cma:0kB [ 572.360688][T12419] lowmem_reserve[]: 0 0 0 0 0 [ 572.365525][T12419] Node 0 Normal free:4kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 572.393856][T12431] netlink: 'syz.3.2177': attribute type 4 has an invalid length. [ 572.403210][T12419] lowmem_reserve[]: 0 0 0 0 0 [ 572.408780][T12419] Node 1 Normal free:3905148kB boost:0kB min:55396kB low:69244kB high:83092kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:14016kB local_pcp:6464kB free_cma:0kB [ 572.440361][T12419] lowmem_reserve[]: 0 0 0 0 0 [ 572.445191][T12419] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 572.458806][T12419] Node 0 DMA32: 1481*4kB (UME) 1342*8kB (UME) 1094*16kB (UM) 953*32kB (UME) 1287*64kB (UME) 653*128kB (UME) 257*256kB (UM) 107*512kB (UM) 45*1024kB (UM) 10*2048kB (UME) 253*4096kB (UM) = 1454036kB [ 572.478895][T12419] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 572.491373][T12419] Node 1 Normal: 179*4kB (UME) 50*8kB (UME) 30*16kB (UME) 202*32kB (UME) 54*64kB (UME) 11*128kB (UME) 2*256kB (UM) 1*512kB (U) 2*1024kB (UE) 1*2048kB (E) 949*4096kB (M) = 3905148kB [ 572.518881][T12419] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 572.529039][T12419] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 572.545781][T12419] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 572.578186][T12419] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 572.608142][T12419] 61589 total pagecache pages [ 572.613765][T12419] 0 pages in swap cache [ 572.636295][T12419] Free swap = 124996kB [ 572.646854][T12419] Total swap = 124996kB [ 572.651855][T12419] 2097051 pages RAM [ 572.655736][T12419] 0 pages HighMem/MovableOnly [ 572.661251][T12419] 421729 pages reserved [ 572.665462][T12419] 0 pages cma reserved [ 572.801726][T12440] netlink: 'syz.0.2180': attribute type 25 has an invalid length. [ 572.818722][T12440] netlink: 'syz.0.2180': attribute type 3 has an invalid length. [ 572.986707][T12446] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 572.993336][T12446] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 573.569644][T12464] Dead loop on virtual device ip6_vti0, fix it urgently! [ 574.225179][T12481] validate_nla: 2 callbacks suppressed [ 574.225591][T12481] netlink: 'syz.1.2194': attribute type 25 has an invalid length. [ 574.259057][T12481] netlink: 'syz.1.2194': attribute type 3 has an invalid length. [ 574.454173][T12485] FAULT_INJECTION: forcing a failure. [ 574.454173][T12485] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 574.477128][T12483] tipc: Started in network mode [ 574.488063][T12485] CPU: 0 PID: 12485 Comm: syz.0.2196 Not tainted syzkaller #0 [ 574.495753][T12485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 574.505963][T12485] Call Trace: [ 574.509310][T12485] [ 574.512327][T12485] dump_stack_lvl+0x18c/0x250 [ 574.517113][T12485] ? show_regs_print_info+0x20/0x20 [ 574.522406][T12485] ? load_image+0x420/0x420 [ 574.527082][T12485] ? __might_fault+0xaa/0x120 [ 574.531841][T12485] ? __lock_acquire+0x7eb0/0x7eb0 [ 574.536955][T12485] should_fail_ex+0x394/0x4c0 [ 574.541740][T12485] _copy_from_user+0x2f/0xe0 [ 574.546596][T12485] ___sys_sendmsg+0x1c7/0x360 [ 574.551461][T12485] ? __sys_sendmsg+0x2b0/0x2b0 [ 574.556443][T12485] ? __lock_acquire+0x7eb0/0x7eb0 [ 574.561641][T12485] __se_sys_sendmsg+0x1d0/0x2c0 [ 574.566768][T12485] ? __x64_sys_sendmsg+0x80/0x80 [ 574.571839][T12485] ? lockdep_hardirqs_on+0x98/0x150 [ 574.577123][T12485] do_syscall_64+0x55/0xb0 [ 574.581612][T12485] ? clear_bhb_loop+0x40/0x90 [ 574.586382][T12485] ? clear_bhb_loop+0x40/0x90 [ 574.591148][T12485] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 574.597137][T12485] RIP: 0033:0x7f906039fb19 [ 574.601628][T12485] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 574.621317][T12485] RSP: 002b:00007f906125a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 574.629811][T12485] RAX: ffffffffffffffda RBX: 00007f9060625fa0 RCX: 00007f906039fb19 [ 574.638042][T12485] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 574.646085][T12485] RBP: 00007f906125a090 R08: 0000000000000000 R09: 0000000000000000 [ 574.654138][T12485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 574.662290][T12485] R13: 00007f9060626038 R14: 00007f9060625fa0 R15: 00007ffdba0911a8 [ 574.670383][T12485] [ 574.698974][T12483] tipc: Node identity b, cluster identity 73 [ 574.705359][T12483] tipc: Node number set to 11 [ 574.921782][T12492] netlink: 'syz.1.2199': attribute type 10 has an invalid length. [ 574.939327][T12492] __nla_validate_parse: 16 callbacks suppressed [ 574.939449][T12492] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2199'. [ 575.353564][T12513] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2203'. [ 575.549310][T12524] netlink: 'syz.0.2207': attribute type 25 has an invalid length. [ 575.557713][T12524] netlink: 'syz.0.2207': attribute type 3 has an invalid length. [ 575.566229][T12524] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2207'. [ 575.644675][T12528] Dead loop on virtual device ip6_vti0, fix it urgently! [ 575.735784][T12530] FAULT_INJECTION: forcing a failure. [ 575.735784][T12530] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 575.754684][T12530] CPU: 1 PID: 12530 Comm: syz.0.2208 Not tainted syzkaller #0 [ 575.762335][T12530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 575.772479][T12530] Call Trace: [ 575.775819][T12530] [ 575.778827][T12530] dump_stack_lvl+0x18c/0x250 [ 575.783618][T12530] ? show_regs_print_info+0x20/0x20 [ 575.788902][T12530] ? load_image+0x420/0x420 [ 575.793492][T12530] ? __might_fault+0xaa/0x120 [ 575.798253][T12530] ? __lock_acquire+0x7eb0/0x7eb0 [ 575.803390][T12530] should_fail_ex+0x394/0x4c0 [ 575.808163][T12530] _copy_from_user+0x2f/0xe0 [ 575.812845][T12530] ___sys_sendmsg+0x1c7/0x360 [ 575.817868][T12530] ? get_pid_task+0x20/0x1e0 [ 575.822992][T12530] ? __sys_sendmsg+0x2b0/0x2b0 [ 575.824704][T12532] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2209'. [ 575.827870][T12530] ? __lock_acquire+0x7eb0/0x7eb0 [ 575.837789][T12532] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2209'. [ 575.842048][T12530] __se_sys_sendmsg+0x1d0/0x2c0 [ 575.842097][T12530] ? __x64_sys_sendmsg+0x80/0x80 [ 575.860457][T12532] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2209'. [ 575.861144][T12530] ? lockdep_hardirqs_on+0x98/0x150 [ 575.875451][T12530] do_syscall_64+0x55/0xb0 [ 575.879971][T12530] ? clear_bhb_loop+0x40/0x90 [ 575.884735][T12530] ? clear_bhb_loop+0x40/0x90 [ 575.889527][T12530] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 575.895503][T12530] RIP: 0033:0x7f906039fb19 [ 575.900075][T12530] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 575.920135][T12530] RSP: 002b:00007f906125a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 575.928596][T12530] RAX: ffffffffffffffda RBX: 00007f9060625fa0 RCX: 00007f906039fb19 [ 575.936605][T12530] RDX: 0000000000040040 RSI: 0000200000000600 RDI: 0000000000000008 [ 575.944791][T12530] RBP: 00007f906125a090 R08: 0000000000000000 R09: 0000000000000000 [ 575.952808][T12530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 575.960910][T12530] R13: 00007f9060626038 R14: 00007f9060625fa0 R15: 00007ffdba0911a8 [ 575.969135][T12530] [ 576.049929][T12535] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2210'. [ 576.059514][T12535] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 576.243775][T12540] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2212'. [ 576.253672][T12540] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2212'. [ 576.280426][T12540] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2212'. [ 576.836720][T12552] netlink: 'syz.0.2217': attribute type 25 has an invalid length. [ 576.858291][T12552] netlink: 'syz.0.2217': attribute type 3 has an invalid length. [ 576.881933][T12550] rxe_eth0 speed is unknown, defaulting to 1000 [ 577.287890][T12562] FAULT_INJECTION: forcing a failure. [ 577.287890][T12562] name failslab, interval 1, probability 0, space 0, times 0 [ 577.333317][T12562] CPU: 1 PID: 12562 Comm: syz.3.2219 Not tainted syzkaller #0 [ 577.340921][T12562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 577.351052][T12562] Call Trace: [ 577.354402][T12562] [ 577.357404][T12562] dump_stack_lvl+0x18c/0x250 [ 577.362178][T12562] ? show_regs_print_info+0x20/0x20 [ 577.367432][T12562] ? load_image+0x420/0x420 [ 577.372086][T12562] ? __might_sleep+0xe0/0xe0 [ 577.376719][T12562] ? __lock_acquire+0x7eb0/0x7eb0 [ 577.381806][T12562] should_fail_ex+0x394/0x4c0 [ 577.386531][T12562] should_failslab+0x9/0x20 [ 577.391333][T12562] slab_pre_alloc_hook+0x59/0x300 [ 577.396399][T12562] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 577.403249][T12562] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 577.410259][T12562] __kmem_cache_alloc_node+0x53/0x260 [ 577.415718][T12562] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 577.421587][T12562] __kmalloc+0xa7/0x240 [ 577.425904][T12562] tomoyo_realpath_from_path+0xe6/0x5c0 [ 577.431585][T12562] ? tomoyo_domain+0xd6/0x120 [ 577.436314][T12562] tomoyo_path_number_perm+0x248/0x5e0 [ 577.442243][T12562] ? tomoyo_path_number_perm+0x217/0x5e0 [ 577.447910][T12562] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 577.453417][T12562] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 577.459674][T12562] ? rcu_is_watching+0x3a/0xb0 [ 577.464518][T12562] ? __fget_files+0x28/0x460 [ 577.469189][T12562] security_file_ioctl+0x70/0xa0 [ 577.474256][T12562] __se_sys_ioctl+0x48/0x170 [ 577.479001][T12562] do_syscall_64+0x55/0xb0 [ 577.483477][T12562] ? clear_bhb_loop+0x40/0x90 [ 577.488196][T12562] ? clear_bhb_loop+0x40/0x90 [ 577.492920][T12562] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 577.499397][T12562] RIP: 0033:0x7ff31059fb19 [ 577.503895][T12562] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 577.523750][T12562] RSP: 002b:00007ff3114c4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 577.532227][T12562] RAX: ffffffffffffffda RBX: 00007ff310825fa0 RCX: 00007ff31059fb19 [ 577.540240][T12562] RDX: 0000200000000080 RSI: 0000000000008922 RDI: 000000000000000b [ 577.548252][T12562] RBP: 00007ff3114c4090 R08: 0000000000000000 R09: 0000000000000000 [ 577.556285][T12562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 577.564291][T12562] R13: 00007ff310826038 R14: 00007ff310825fa0 R15: 00007ffe4492e888 [ 577.572753][T12562] [ 577.623625][T12562] ERROR: Out of memory at tomoyo_realpath_from_path. [ 578.661107][T12568] FAULT_INJECTION: forcing a failure. [ 578.661107][T12568] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 578.718156][T12568] CPU: 1 PID: 12568 Comm: syz.0.2222 Not tainted syzkaller #0 [ 578.725778][T12568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 578.735903][T12568] Call Trace: [ 578.739239][T12568] [ 578.742217][T12568] dump_stack_lvl+0x18c/0x250 [ 578.746985][T12568] ? show_regs_print_info+0x20/0x20 [ 578.752276][T12568] ? load_image+0x420/0x420 [ 578.756864][T12568] ? __might_fault+0xaa/0x120 [ 578.761614][T12568] ? __lock_acquire+0x7eb0/0x7eb0 [ 578.766732][T12568] should_fail_ex+0x394/0x4c0 [ 578.771487][T12568] _copy_from_user+0x2f/0xe0 [ 578.776229][T12568] sk_setsockopt+0x2b9/0x2b20 [ 578.780975][T12568] ? sockopt_capable+0x60/0x60 [ 578.785808][T12568] ? aa_sk_perm+0x7bb/0x8e0 [ 578.790451][T12568] ? aa_af_perm+0x330/0x330 [ 578.794999][T12568] ? __fget_files+0x28/0x460 [ 578.799641][T12568] ? aa_sock_opt_perm+0x74/0x100 [ 578.804736][T12568] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 578.810709][T12568] ? security_socket_setsockopt+0x7e/0xa0 [ 578.816497][T12568] do_sock_setsockopt+0x11b/0x1a0 [ 578.821613][T12568] __x64_sys_setsockopt+0x182/0x200 [ 578.826944][T12568] do_syscall_64+0x55/0xb0 [ 578.831440][T12568] ? clear_bhb_loop+0x40/0x90 [ 578.836179][T12568] ? clear_bhb_loop+0x40/0x90 [ 578.840919][T12568] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 578.846974][T12568] RIP: 0033:0x7f906039fb19 [ 578.851498][T12568] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 578.871781][T12568] RSP: 002b:00007f906125a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 578.880256][T12568] RAX: ffffffffffffffda RBX: 00007f9060625fa0 RCX: 00007f906039fb19 [ 578.888276][T12568] RDX: 0000000000000010 RSI: 0000000000000001 RDI: 0000000000000004 [ 578.896286][T12568] RBP: 00007f906125a090 R08: 0000000000000004 R09: 0000000000000000 [ 578.904324][T12568] R10: 0000200000000c80 R11: 0000000000000246 R12: 0000000000000001 [ 578.912472][T12568] R13: 00007f9060626038 R14: 00007f9060625fa0 R15: 00007ffdba0911a8 [ 578.920512][T12568] [ 579.249693][T12579] FAULT_INJECTION: forcing a failure. [ 579.249693][T12579] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 579.305671][T12579] CPU: 0 PID: 12579 Comm: syz.1.2227 Not tainted syzkaller #0 [ 579.313242][T12579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 579.323389][T12579] Call Trace: [ 579.326806][T12579] [ 579.329886][T12579] dump_stack_lvl+0x18c/0x250 [ 579.335208][T12579] ? show_regs_print_info+0x20/0x20 [ 579.340499][T12579] ? load_image+0x420/0x420 [ 579.345169][T12579] ? __might_fault+0xaa/0x120 [ 579.349897][T12579] ? __lock_acquire+0x7eb0/0x7eb0 [ 579.354985][T12579] should_fail_ex+0x394/0x4c0 [ 579.359808][T12579] _copy_from_user+0x2f/0xe0 [ 579.364538][T12579] ___sys_sendmsg+0x1c7/0x360 [ 579.369257][T12579] ? get_pid_task+0x20/0x1e0 [ 579.373897][T12579] ? __sys_sendmsg+0x2b0/0x2b0 [ 579.378716][T12579] ? __lock_acquire+0x7eb0/0x7eb0 [ 579.383796][T12579] __se_sys_sendmsg+0x1d0/0x2c0 [ 579.388678][T12579] ? perf_trace_preemptirq_template+0x269/0x330 [ 579.395013][T12579] ? __x64_sys_sendmsg+0x80/0x80 [ 579.400023][T12579] ? lockdep_hardirqs_on+0x98/0x150 [ 579.405286][T12579] do_syscall_64+0x55/0xb0 [ 579.409760][T12579] ? clear_bhb_loop+0x40/0x90 [ 579.414516][T12579] ? clear_bhb_loop+0x40/0x90 [ 579.419236][T12579] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 579.425171][T12579] RIP: 0033:0x7f26ff79fb19 [ 579.429623][T12579] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 579.449274][T12579] RSP: 002b:00007f2700713028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 579.457846][T12579] RAX: ffffffffffffffda RBX: 00007f26ffa25fa0 RCX: 00007f26ff79fb19 [ 579.466082][T12579] RDX: 0000000000000000 RSI: 0000200000001740 RDI: 0000000000000004 [ 579.474107][T12579] RBP: 00007f2700713090 R08: 0000000000000000 R09: 0000000000000000 [ 579.482208][T12579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 579.490319][T12579] R13: 00007f26ffa26038 R14: 00007f26ffa25fa0 R15: 00007fffc5f310e8 [ 579.498349][T12579] [ 579.750857][T12585] Dead loop on virtual device ip6_vti0, fix it urgently! [ 579.870960][T12587] netlink: 'syz.2.2229': attribute type 25 has an invalid length. [ 579.942623][T12587] netlink: 'syz.2.2229': attribute type 3 has an invalid length. [ 580.022545][T12587] __nla_validate_parse: 5 callbacks suppressed [ 580.022568][T12587] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2229'. [ 580.374221][T12590] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2230'. [ 580.835021][T12604] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2232'. [ 581.248632][T12600] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2233'. [ 581.421678][T12601] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2235'. [ 582.353582][T12621] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2242'. [ 582.397169][T12628] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2245'. [ 582.895438][T12641] netlink: 'syz.3.2250': attribute type 39 has an invalid length. [ 582.973887][T12641] macvlan0: entered promiscuous mode [ 583.031587][T12641] macvlan0: entered allmulticast mode [ 583.360927][T12654] netlink: 'syz.2.2253': attribute type 10 has an invalid length. [ 583.399318][T12654] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2253'. [ 583.461250][T12653] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2251'. [ 584.174095][T12660] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2258'. [ 584.932986][T12674] netlink: 'syz.2.2263': attribute type 10 has an invalid length. [ 584.959357][T12674] batman_adv: batadv0: Adding interface: vlan1 [ 584.965806][T12674] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 584.992527][T12674] batman_adv: batadv0: Interface activated: vlan1 [ 585.137683][T12677] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 585.144251][T12677] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 585.178614][T12679] netlink: 'syz.3.2265': attribute type 4 has an invalid length. [ 585.272038][T12684] netlink: 'syz.0.2267': attribute type 10 has an invalid length. [ 585.293922][T12684] __nla_validate_parse: 2 callbacks suppressed [ 585.293962][T12684] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2267'. [ 585.486260][T12689] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2268'. [ 585.505706][T12689] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2268'. [ 585.525139][T12686] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2266'. [ 585.537303][T12689] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2268'. [ 585.566443][T12689] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2268'. [ 585.663087][T12693] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2269'. [ 585.678669][T12693] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2269'. [ 585.699446][T12693] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2269'. [ 585.715503][T12693] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2269'. [ 585.797805][T12695] FAULT_INJECTION: forcing a failure. [ 585.797805][T12695] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 585.811800][T12695] CPU: 0 PID: 12695 Comm: syz.2.2271 Not tainted syzkaller #0 [ 585.819360][T12695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 585.829609][T12695] Call Trace: [ 585.832949][T12695] [ 585.836029][T12695] dump_stack_lvl+0x18c/0x250 [ 585.840911][T12695] ? show_regs_print_info+0x20/0x20 [ 585.846179][T12695] ? load_image+0x420/0x420 [ 585.850735][T12695] ? __lock_acquire+0x7eb0/0x7eb0 [ 585.855820][T12695] ? snprintf+0xe9/0x140 [ 585.860136][T12695] should_fail_ex+0x394/0x4c0 [ 585.864876][T12695] _copy_to_user+0x2f/0xa0 [ 585.869337][T12695] simple_read_from_buffer+0xe7/0x150 [ 585.874785][T12695] proc_fail_nth_read+0x1e8/0x260 [ 585.879893][T12695] ? proc_fault_inject_write+0x360/0x360 [ 585.885622][T12695] ? fsnotify_perm+0x271/0x5e0 [ 585.890435][T12695] ? proc_fault_inject_write+0x360/0x360 [ 585.896140][T12695] vfs_read+0x298/0x990 [ 585.900371][T12695] ? kernel_read+0x1e0/0x1e0 [ 585.905006][T12695] ? __fget_files+0x28/0x460 [ 585.909643][T12695] ? __fget_files+0x3fc/0x460 [ 585.914389][T12695] ? __fdget_pos+0x2a3/0x330 [ 585.919018][T12695] ? ksys_read+0x74/0x260 [ 585.923386][T12695] ksys_read+0x151/0x260 [ 585.927871][T12695] ? vfs_write+0x9a0/0x9a0 [ 585.932339][T12695] ? lockdep_hardirqs_on+0x98/0x150 [ 585.937607][T12695] do_syscall_64+0x55/0xb0 [ 585.942072][T12695] ? clear_bhb_loop+0x40/0x90 [ 585.946901][T12695] ? clear_bhb_loop+0x40/0x90 [ 585.951626][T12695] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 585.957583][T12695] RIP: 0033:0x7fe39ff6034e [ 585.962062][T12695] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 585.981726][T12695] RSP: 002b:00007fe3a0f1dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 585.990461][T12695] RAX: ffffffffffffffda RBX: 00007fe3a0f1e6c0 RCX: 00007fe39ff6034e [ 585.998590][T12695] RDX: 000000000000000f RSI: 00007fe3a0f1e0a0 RDI: 0000000000000005 [ 586.006600][T12695] RBP: 00007fe3a0f1e090 R08: 0000000000000000 R09: 0000000000000000 [ 586.014611][T12695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 586.022620][T12695] R13: 00007fe3a0226038 R14: 00007fe3a0225fa0 R15: 00007fffc739d178 [ 586.030816][T12695] [ 586.343338][T12709] netlink: 'syz.0.2277': attribute type 10 has an invalid length. [ 586.519987][T12713] openvswitch: netlink: Flow actions attr not present in new flow. [ 586.644763][T12720] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 586.651442][T12720] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 586.734199][T12726] FAULT_INJECTION: forcing a failure. [ 586.734199][T12726] name failslab, interval 1, probability 0, space 0, times 0 [ 586.747775][T12726] CPU: 0 PID: 12726 Comm: syz.1.2284 Not tainted syzkaller #0 [ 586.755407][T12726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 586.765531][T12726] Call Trace: [ 586.768885][T12726] [ 586.771969][T12726] dump_stack_lvl+0x18c/0x250 [ 586.776749][T12726] ? fib6_add+0x1ba1/0x49d0 [ 586.781406][T12726] ? ipv6_route_ioctl+0x3af/0x500 [ 586.786500][T12726] ? show_regs_print_info+0x20/0x20 [ 586.791861][T12726] ? load_image+0x420/0x420 [ 586.796439][T12726] should_fail_ex+0x394/0x4c0 [ 586.801228][T12726] should_failslab+0x9/0x20 [ 586.805795][T12726] slab_pre_alloc_hook+0x59/0x300 [ 586.810892][T12726] ? nsim_fib_event_nb+0x293/0x1040 [ 586.816210][T12726] ? nsim_fib_event_nb+0x293/0x1040 [ 586.821599][T12726] __kmem_cache_alloc_node+0x53/0x260 [ 586.827469][T12726] ? nsim_fib_event_nb+0x293/0x1040 [ 586.832853][T12726] __kmalloc+0xa7/0x240 [ 586.837123][T12726] nsim_fib_event_nb+0x293/0x1040 [ 586.842255][T12726] notifier_call_chain+0x18f/0x380 [ 586.847673][T12726] ? atomic_notifier_call_chain+0x26/0x180 [ 586.853618][T12726] atomic_notifier_call_chain+0xda/0x180 [ 586.859360][T12726] call_fib_notifiers+0x31/0x60 [ 586.864417][T12726] fib6_add+0x1ba1/0x49d0 [ 586.868849][T12726] ? fib6_update_sernum_stub+0x1e0/0x1e0 [ 586.874933][T12726] ? __rwlock_init+0x150/0x150 [ 586.879765][T12726] ? ip6_route_add+0x75/0x160 [ 586.884599][T12726] ip6_route_add+0x8a/0x160 [ 586.889258][T12726] ipv6_route_ioctl+0x3af/0x500 [ 586.894166][T12726] ? rt6_purge_dflt_routers+0xb20/0xb20 [ 586.899794][T12726] ? __might_fault+0xaa/0x120 [ 586.904604][T12726] ? __might_fault+0xc6/0x120 [ 586.909331][T12726] ? __might_fault+0xaa/0x120 [ 586.914081][T12726] inet6_ioctl+0x247/0x2d0 [ 586.918682][T12726] ? inet6_getname+0x670/0x670 [ 586.923525][T12726] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 586.929097][T12726] sock_do_ioctl+0xfc/0x310 [ 586.933655][T12726] ? sock_show_fdinfo+0xb0/0xb0 [ 586.938604][T12726] sock_ioctl+0x5be/0x7e0 [ 586.943052][T12726] ? sock_poll+0x460/0x460 [ 586.947538][T12726] ? bpf_lsm_file_ioctl+0x9/0x10 [ 586.952532][T12726] ? security_file_ioctl+0x80/0xa0 [ 586.957815][T12726] ? sock_poll+0x460/0x460 [ 586.962475][T12726] __se_sys_ioctl+0xfd/0x170 [ 586.967146][T12726] do_syscall_64+0x55/0xb0 [ 586.971637][T12726] ? clear_bhb_loop+0x40/0x90 [ 586.976395][T12726] ? clear_bhb_loop+0x40/0x90 [ 586.981142][T12726] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 586.987392][T12726] RIP: 0033:0x7f26ff79fb19 [ 586.991850][T12726] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 587.011588][T12726] RSP: 002b:00007f2700713028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 587.020058][T12726] RAX: ffffffffffffffda RBX: 00007f26ffa25fa0 RCX: 00007f26ff79fb19 [ 587.028098][T12726] RDX: 0000200000000000 RSI: 000000000000890b RDI: 0000000000000003 [ 587.036126][T12726] RBP: 00007f2700713090 R08: 0000000000000000 R09: 0000000000000000 [ 587.044231][T12726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 587.052269][T12726] R13: 00007f26ffa26038 R14: 00007f26ffa25fa0 R15: 00007fffc5f310e8 [ 587.060395][T12726] [ 587.284186][T12732] netlink: 'syz.1.2286': attribute type 10 has an invalid length. [ 587.530531][T12741] netlink: 'syz.2.2290': attribute type 10 has an invalid length. [ 588.444283][T12771] netlink: 'syz.3.2303': attribute type 10 has an invalid length. [ 588.601774][T12777] FAULT_INJECTION: forcing a failure. [ 588.601774][T12777] name failslab, interval 1, probability 0, space 0, times 0 [ 588.617362][T12777] CPU: 1 PID: 12777 Comm: syz.0.2305 Not tainted syzkaller #0 [ 588.624899][T12777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 588.635010][T12777] Call Trace: [ 588.638341][T12777] [ 588.641380][T12777] dump_stack_lvl+0x18c/0x250 [ 588.646210][T12777] ? show_regs_print_info+0x20/0x20 [ 588.651653][T12777] ? load_image+0x420/0x420 [ 588.656217][T12777] ? __might_sleep+0xe0/0xe0 [ 588.661071][T12777] ? __lock_acquire+0x7eb0/0x7eb0 [ 588.666175][T12777] should_fail_ex+0x394/0x4c0 [ 588.670940][T12777] should_failslab+0x9/0x20 [ 588.675501][T12777] slab_pre_alloc_hook+0x59/0x300 [ 588.680602][T12777] ? rtnl_newlink+0x10d/0x2170 [ 588.685455][T12777] __kmem_cache_alloc_node+0x53/0x260 [ 588.690896][T12777] ? rtnl_newlink+0x10d/0x2170 [ 588.695724][T12777] kmalloc_trace+0x2a/0xe0 [ 588.700216][T12777] rtnl_newlink+0x10d/0x2170 [ 588.704858][T12777] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 588.711010][T12777] ? verify_lock_unused+0x140/0x140 [ 588.716316][T12777] ? __mutex_trylock_common+0x160/0x270 [ 588.722001][T12777] ? rtnl_setlink+0x4e0/0x4e0 [ 588.726737][T12777] ? trace_raw_output_contention_end+0xd0/0xd0 [ 588.732980][T12777] ? rcu_is_watching+0x15/0xb0 [ 588.737825][T12777] ? trace_contention_end+0x39/0xe0 [ 588.743095][T12777] ? __mutex_lock+0x30d/0xce0 [ 588.747843][T12777] ? rtnetlink_rcv_msg+0x7ed/0xf90 [ 588.753020][T12777] ? mutex_lock_nested+0x20/0x20 [ 588.758033][T12777] ? rtnl_setlink+0x4e0/0x4e0 [ 588.762780][T12777] rtnetlink_rcv_msg+0x843/0xf90 [ 588.767784][T12777] ? rtnetlink_rcv_msg+0x220/0xf90 [ 588.772967][T12777] ? rtnetlink_bind+0x80/0x80 [ 588.777768][T12777] ? kasan_quarantine_put+0xd8/0x220 [ 588.783098][T12777] ? lockdep_hardirqs_on+0x98/0x150 [ 588.788336][T12777] ? slab_free_freelist_hook+0x154/0x240 [ 588.794113][T12777] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 588.800158][T12777] ? lock_chain_count+0x20/0x20 [ 588.805125][T12777] ? __local_bh_enable_ip+0x13a/0x1c0 [ 588.810551][T12777] ? lockdep_hardirqs_on+0x98/0x150 [ 588.815965][T12777] ? __local_bh_enable_ip+0x13a/0x1c0 [ 588.821407][T12777] ? _local_bh_enable+0xa0/0xa0 [ 588.826312][T12777] ? __dev_queue_xmit+0x1481/0x3a30 [ 588.831582][T12777] ? __dev_queue_xmit+0x6d1/0x3a30 [ 588.836741][T12777] ? ref_tracker_free+0x686/0x830 [ 588.841897][T12777] netlink_rcv_skb+0x235/0x4c0 [ 588.846693][T12777] ? rtnetlink_bind+0x80/0x80 [ 588.851597][T12777] ? netlink_ack+0x1160/0x1160 [ 588.856396][T12777] ? __lock_acquire+0x7eb0/0x7eb0 [ 588.861472][T12777] ? netlink_deliver_tap+0x2e/0x1b0 [ 588.866735][T12777] netlink_unicast+0x856/0x9e0 [ 588.871643][T12777] netlink_sendmsg+0x8d0/0xbf0 [ 588.876552][T12777] ? netlink_getsockopt+0x590/0x590 [ 588.881783][T12777] ? apparmor_socket_sendmsg+0x8e/0x330 [ 588.887378][T12777] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 588.892716][T12777] ? security_socket_sendmsg+0x80/0xa0 [ 588.898234][T12777] ? netlink_getsockopt+0x590/0x590 [ 588.903485][T12777] ____sys_sendmsg+0x61b/0x980 [ 588.908293][T12777] ? __asan_memset+0x22/0x40 [ 588.913035][T12777] ? __sys_sendmsg_sock+0x30/0x30 [ 588.918094][T12777] ? __import_iovec+0x3fa/0x850 [ 588.923004][T12777] ? import_iovec+0x73/0xa0 [ 588.927553][T12777] ___sys_sendmsg+0x2a6/0x360 [ 588.932378][T12777] ? get_pid_task+0x20/0x1e0 [ 588.937010][T12777] ? __sys_sendmsg+0x2b0/0x2b0 [ 588.942085][T12777] ? __lock_acquire+0x7eb0/0x7eb0 [ 588.947163][T12777] __se_sys_sendmsg+0x1d0/0x2c0 [ 588.952053][T12777] ? __x64_sys_sendmsg+0x80/0x80 [ 588.957043][T12777] ? lockdep_hardirqs_on+0x98/0x150 [ 588.962272][T12777] do_syscall_64+0x55/0xb0 [ 588.966743][T12777] ? clear_bhb_loop+0x40/0x90 [ 588.971462][T12777] ? clear_bhb_loop+0x40/0x90 [ 588.976176][T12777] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 588.982126][T12777] RIP: 0033:0x7f906039fb19 [ 588.986591][T12777] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 589.006320][T12777] RSP: 002b:00007f906125a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 589.014769][T12777] RAX: ffffffffffffffda RBX: 00007f9060625fa0 RCX: 00007f906039fb19 [ 589.023173][T12777] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 589.031473][T12777] RBP: 00007f906125a090 R08: 0000000000000000 R09: 0000000000000000 [ 589.039482][T12777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 589.047605][T12777] R13: 00007f9060626038 R14: 00007f9060625fa0 R15: 00007ffdba0911a8 [ 589.057072][T12777] [ 589.096573][T12779] syzkaller1: tun_chr_ioctl cmd 35108 [ 589.108649][T12779] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 589.125179][T12779] syzkaller1: linktype set to 825 [ 589.363355][T12791] sit0: entered allmulticast mode [ 589.864935][T12803] netlink: 'syz.0.2314': attribute type 10 has an invalid length. [ 590.202571][T12809] netlink: 'syz.0.2316': attribute type 10 has an invalid length. [ 590.585509][T12816] __nla_validate_parse: 19 callbacks suppressed [ 590.585535][T12816] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2318'. [ 591.302089][T12820] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2320'. [ 591.472903][T12829] netlink: 'syz.3.2325': attribute type 10 has an invalid length. [ 591.506066][T12829] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2325'. [ 591.856988][T12832] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2324'. [ 592.097018][T12838] netlink: 'syz.2.2327': attribute type 10 has an invalid length. [ 592.122453][T12838] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2327'. [ 592.236933][T12845] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 592.243808][T12845] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 592.962083][T12855] netlink: 'syz.3.2334': attribute type 25 has an invalid length. [ 592.970664][T12855] netlink: 'syz.3.2334': attribute type 3 has an invalid length. [ 592.979428][T12855] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2334'. [ 593.025770][T12857] syzkaller1: tun_chr_ioctl cmd 35108 [ 593.033782][T12857] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 593.040590][T12857] syzkaller1: linktype set to 825 [ 593.221217][T12860] netlink: 'syz.3.2335': attribute type 41 has an invalid length. [ 594.409455][T12872] netlink: 'syz.3.2340': attribute type 10 has an invalid length. [ 594.526823][T12872] veth0_macvtap: left promiscuous mode [ 594.664064][T12878] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2338'. [ 595.175473][T12887] netlink: 'syz.0.2343': attribute type 25 has an invalid length. [ 595.189230][T12887] netlink: 'syz.0.2343': attribute type 3 has an invalid length. [ 595.202542][T12887] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2343'. [ 598.032940][T12898] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2348'. [ 598.043307][T12898] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2348'. [ 598.053942][T12898] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2348'. [ 598.064367][T12898] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2348'. [ 599.298628][T12915] netlink: 'syz.0.2354': attribute type 25 has an invalid length. [ 599.306790][T12915] netlink: 'syz.0.2354': attribute type 3 has an invalid length. [ 599.316127][T12915] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2354'. [ 599.339118][T12912] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2350'. [ 600.280565][T12924] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2357'. [ 600.491051][T12211] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 600.503498][T12211] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 600.521075][T12211] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 600.533403][T12211] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 600.541956][T12211] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 600.550510][T12211] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 600.619059][T12932] rxe_eth0 speed is unknown, defaulting to 1000 [ 601.275446][T12932] chnl_net:caif_netlink_parms(): no params data found [ 601.669890][T12954] netlink: 'syz.0.2364': attribute type 25 has an invalid length. [ 601.709999][T12954] netlink: 'syz.0.2364': attribute type 3 has an invalid length. [ 601.727352][T12954] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2364'. [ 601.882533][T12505] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.884023][T12952] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2365'. [ 601.903490][T12952] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 601.935342][T12932] bridge0: port 1(bridge_slave_0) entered blocking state [ 601.943015][T12932] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.951207][T12932] bridge_slave_0: entered allmulticast mode [ 601.959907][T12932] bridge_slave_0: entered promiscuous mode [ 601.971141][T12932] bridge0: port 2(bridge_slave_1) entered blocking state [ 601.978825][T12932] bridge0: port 2(bridge_slave_1) entered disabled state [ 601.986661][T12932] bridge_slave_1: entered allmulticast mode [ 601.995122][T12932] bridge_slave_1: entered promiscuous mode [ 602.004833][T12947] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2363'. [ 602.104011][T12505] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.172508][T12932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 602.205315][T12932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 602.247042][T12505] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.352530][T12932] team0: Port device team_slave_0 added [ 602.619560][T12211] Bluetooth: hci4: command tx timeout [ 603.219758][T12505] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.261102][T12932] team0: Port device team_slave_1 added [ 603.347851][T12967] netlink: 'syz.1.2366': attribute type 10 has an invalid length. [ 603.557600][T12970] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2369'. [ 603.600418][T12932] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 603.635327][T12932] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 603.702460][T12932] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 603.715752][T12932] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 603.728986][T12932] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 603.763314][T12976] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2372'. [ 603.772674][T12932] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 603.784743][T12976] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2372'. [ 603.849336][T12976] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2372'. [ 603.873254][T12932] hsr_slave_0: entered promiscuous mode [ 603.891432][T12978] FAULT_INJECTION: forcing a failure. [ 603.891432][T12978] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 603.905616][T12932] hsr_slave_1: entered promiscuous mode [ 603.912303][T12978] CPU: 1 PID: 12978 Comm: syz.1.2373 Not tainted syzkaller #0 [ 603.919852][T12978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 603.930052][T12978] Call Trace: [ 603.933377][T12978] [ 603.936358][T12978] dump_stack_lvl+0x18c/0x250 [ 603.941797][T12978] ? show_regs_print_info+0x20/0x20 [ 603.947060][T12978] ? load_image+0x420/0x420 [ 603.951632][T12978] ? __might_fault+0xaa/0x120 [ 603.956374][T12978] ? __lock_acquire+0x7eb0/0x7eb0 [ 603.961461][T12978] should_fail_ex+0x394/0x4c0 [ 603.966197][T12978] _copy_from_user+0x2f/0xe0 [ 603.971019][T12978] __sys_bpf+0x23e/0x890 [ 603.975321][T12978] ? bpf_link_show_fdinfo+0x560/0x560 [ 603.981788][T12978] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 603.990682][T12978] __x64_sys_bpf+0x7c/0x90 [ 603.995554][T12978] do_syscall_64+0x55/0xb0 [ 604.000030][T12978] ? clear_bhb_loop+0x40/0x90 [ 604.004768][T12978] ? clear_bhb_loop+0x40/0x90 [ 604.009725][T12978] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 604.015787][T12978] RIP: 0033:0x7f26ff79fb19 [ 604.020802][T12978] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 604.040582][T12978] RSP: 002b:00007f2700713028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 604.049130][T12978] RAX: ffffffffffffffda RBX: 00007f26ffa25fa0 RCX: 00007f26ff79fb19 [ 604.057135][T12978] RDX: 0000000000000040 RSI: 00002000000007c0 RDI: 000000000000001c [ 604.065312][T12978] RBP: 00007f2700713090 R08: 0000000000000000 R09: 0000000000000000 [ 604.073489][T12978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 604.081492][T12978] R13: 00007f26ffa26038 R14: 00007f26ffa25fa0 R15: 00007fffc5f310e8 [ 604.089593][T12978] [ 604.096908][T12932] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 604.105017][T12932] Cannot create hsr debugfs directory [ 604.127251][T12979] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2372'. [ 604.142964][T12978] netlink: 279 bytes leftover after parsing attributes in process `syz.1.2373'. [ 604.163401][T12981] netlink: 'syz.0.2374': attribute type 25 has an invalid length. [ 604.180348][T12981] netlink: 'syz.0.2374': attribute type 3 has an invalid length. [ 604.189622][T12981] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2374'. [ 604.307847][T12978] netlink: 'syz.1.2373': attribute type 10 has an invalid length. [ 604.708496][T12211] Bluetooth: hci4: command tx timeout [ 604.765286][T12990] netlink: 'syz.0.2376': attribute type 10 has an invalid length. [ 604.785745][T12990] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2376'. [ 605.000816][T12987] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2375'. [ 605.922277][T13009] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2380'. [ 606.265906][T13021] netlink: 'syz.1.2383': attribute type 25 has an invalid length. [ 606.289828][T13021] netlink: 'syz.1.2383': attribute type 3 has an invalid length. [ 606.788978][T12211] Bluetooth: hci4: command tx timeout [ 607.573402][T12932] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 607.595415][T12932] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 607.787630][T13043] netlink: 'syz.2.2388': attribute type 10 has an invalid length. [ 608.504399][T12932] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 608.538976][T12932] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 608.859000][T12211] Bluetooth: hci4: command tx timeout [ 609.003996][T13056] syzkaller0: entered promiscuous mode [ 609.015663][T13056] syzkaller0: entered allmulticast mode [ 609.043139][T13063] __nla_validate_parse: 12 callbacks suppressed [ 609.043163][T13063] netlink: 279 bytes leftover after parsing attributes in process `syz.2.2391'. [ 609.714065][T13075] netlink: 'syz.0.2393': attribute type 25 has an invalid length. [ 609.722429][T13075] netlink: 'syz.0.2393': attribute type 3 has an invalid length. [ 609.730901][T13075] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2393'. [ 611.255119][T12932] 8021q: adding VLAN 0 to HW filter on device bond0 [ 611.390059][T12932] 8021q: adding VLAN 0 to HW filter on device team0 [ 611.517267][ T2979] bridge0: port 1(bridge_slave_0) entered blocking state [ 611.525563][ T2979] bridge0: port 1(bridge_slave_0) entered forwarding state [ 611.604517][ T2979] bridge0: port 2(bridge_slave_1) entered blocking state [ 611.611803][ T2979] bridge0: port 2(bridge_slave_1) entered forwarding state [ 611.753844][T13078] IPv6: NLM_F_CREATE should be specified when creating new route [ 611.776960][T13078] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2394'. [ 611.839836][T13080] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2397'. [ 612.473149][T12505] hsr_slave_0: left promiscuous mode [ 612.537782][T12505] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 612.546799][T12505] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 612.580309][T12505] bond0: left allmulticast mode [ 612.585277][T12505] bond_slave_1: left allmulticast mode [ 612.596734][T12505] bridge_slave_1: left allmulticast mode [ 612.625640][T12505] bridge0: port 2(bond0) entered disabled state [ 612.652782][T12505] bridge0: port 3(batadv_slave_0) entered disabled state [ 612.698308][T12505] bridge_slave_0: left allmulticast mode [ 612.708030][T12505] bridge_slave_0: left promiscuous mode [ 612.714914][T12505] bridge0: port 1(bridge_slave_0) entered disabled state [ 612.904187][T12505] veth1_macvtap: left promiscuous mode [ 612.911407][T12505] veth1_vlan: left allmulticast mode [ 612.916832][T12505] veth1_vlan: left promiscuous mode [ 612.928632][T12505] veth0_vlan: left promiscuous mode [ 612.943143][T13093] netlink: 'syz.1.2401': attribute type 10 has an invalid length. [ 612.980345][T13093] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2401'. [ 613.349129][T13100] netlink: 'syz.0.2403': attribute type 25 has an invalid length. [ 613.367364][T13100] netlink: 'syz.0.2403': attribute type 3 has an invalid length. [ 613.388245][T13100] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2403'. [ 624.622092][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.636119][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.307257][ T5791] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 629.320573][ T5791] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 629.337471][ T5791] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 629.346105][ T5791] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 629.354919][ T5791] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 629.355320][T13112] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 629.371726][T13112] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 629.380048][T13112] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 629.389341][T13112] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 629.422255][T12211] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 629.435595][T12211] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 629.453766][T12211] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 629.486334][T13115] FAULT_INJECTION: forcing a failure. [ 629.486334][T13115] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 629.499862][T13115] CPU: 1 PID: 13115 Comm: syz.2.2407 Not tainted syzkaller #0 [ 629.507403][T13115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 629.517620][T13115] Call Trace: [ 629.521000][T13115] [ 629.523990][T13115] dump_stack_lvl+0x18c/0x250 [ 629.528842][T13115] ? show_regs_print_info+0x20/0x20 [ 629.534245][T13115] ? load_image+0x420/0x420 [ 629.538824][T13115] ? __might_fault+0xaa/0x120 [ 629.543752][T13115] ? __lock_acquire+0x7eb0/0x7eb0 [ 629.548905][T13115] should_fail_ex+0x394/0x4c0 [ 629.553865][T13115] _copy_from_user+0x2f/0xe0 [ 629.558718][T13115] ___sys_sendmsg+0x1c7/0x360 [ 629.563512][T13115] ? __sys_sendmsg+0x2b0/0x2b0 [ 629.568740][T13115] __se_sys_sendmsg+0x1d0/0x2c0 [ 629.573680][T13115] ? __x64_sys_sendmsg+0x80/0x80 [ 629.578715][T13115] ? lockdep_hardirqs_on+0x98/0x150 [ 629.584134][T13115] do_syscall_64+0x55/0xb0 [ 629.588643][T13115] ? clear_bhb_loop+0x40/0x90 [ 629.593482][T13115] ? clear_bhb_loop+0x40/0x90 [ 629.598271][T13115] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 629.604286][T13115] RIP: 0033:0x7fe39ff9fb19 [ 629.608813][T13115] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 629.628593][T13115] RSP: 002b:00007fe3a0f1e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 629.637172][T13115] RAX: ffffffffffffffda RBX: 00007fe3a0225fa0 RCX: 00007fe39ff9fb19 [ 629.645708][T13115] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000004 [ 629.653716][T13115] RBP: 00007fe3a0f1e090 R08: 0000000000000000 R09: 0000000000000000 [ 629.661725][T13115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 629.669815][T13115] R13: 00007fe3a0226038 R14: 00007fe3a0225fa0 R15: 00007fffc739d178 [ 629.677828][T13115] [ 631.428279][T12211] Bluetooth: hci2: command tx timeout [ 631.498204][T12211] Bluetooth: hci5: command tx timeout [ 633.508233][T12211] Bluetooth: hci2: command tx timeout [ 633.578985][T12211] Bluetooth: hci5: command tx timeout [ 635.592720][T12211] Bluetooth: hci2: command tx timeout [ 635.658183][T12211] Bluetooth: hci5: command tx timeout [ 637.658302][T12211] Bluetooth: hci2: command tx timeout [ 637.752727][T12211] Bluetooth: hci5: command tx timeout [ 646.047075][ T52] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 646.063577][ T52] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 646.072437][ T52] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 646.083600][ T52] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 646.092829][ T52] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 646.100721][ T52] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 648.138301][ T52] Bluetooth: hci6: command tx timeout [ 650.228734][ T52] Bluetooth: hci6: command tx timeout [ 652.298112][ T52] Bluetooth: hci6: command tx timeout [ 654.388221][ T52] Bluetooth: hci6: command tx timeout [ 660.595594][T12211] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 660.605360][T12211] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 660.613947][T12211] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 660.632124][T12211] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 660.644295][T12211] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 660.652279][T12211] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 662.698336][ T52] Bluetooth: hci7: command tx timeout [ 664.779468][ T52] Bluetooth: hci7: command tx timeout [ 666.858772][ T52] Bluetooth: hci7: command tx timeout [ 668.948136][ T52] Bluetooth: hci7: command tx timeout [ 686.061864][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.071045][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 689.227662][T12211] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 689.249191][T12211] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 689.259378][T12211] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 689.269439][T12211] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 689.278610][T12211] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 689.286796][T12211] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 689.350617][T12211] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 689.360831][T12211] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 689.373097][T12211] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 689.384001][T12211] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 689.393078][T12211] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 689.401008][T12211] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 691.339350][T12211] Bluetooth: hci8: command tx timeout [ 691.498080][T12211] Bluetooth: hci9: command tx timeout [ 693.418286][T12211] Bluetooth: hci8: command tx timeout [ 693.578080][T12211] Bluetooth: hci9: command tx timeout [ 695.498146][T12211] Bluetooth: hci8: command tx timeout [ 695.658080][T12211] Bluetooth: hci9: command tx timeout [ 697.578219][T12211] Bluetooth: hci8: command tx timeout [ 697.738038][T12211] Bluetooth: hci9: command tx timeout [ 706.658386][ T52] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 706.668651][ T52] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 706.676942][ T52] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 706.686167][ T52] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 706.694679][ T52] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 706.703766][ T52] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 708.778431][T12211] Bluetooth: hci10: command tx timeout [ 710.858314][T12211] Bluetooth: hci10: command tx timeout [ 712.938228][T12211] Bluetooth: hci10: command tx timeout [ 715.018130][T12211] Bluetooth: hci10: command tx timeout [ 721.198801][ T52] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 721.208545][ T52] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 721.217354][ T52] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 721.230572][ T52] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 721.239057][ T52] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 721.246773][ T52] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 723.349612][ T52] Bluetooth: hci11: command tx timeout [ 723.978266][ T52] Bluetooth: hci4: command 0x0406 tx timeout [ 725.418137][T12211] Bluetooth: hci11: command tx timeout [ 727.498208][T12211] Bluetooth: hci11: command tx timeout [ 729.578251][T12211] Bluetooth: hci11: command tx timeout [ 747.501626][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.508397][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.908343][ T52] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 749.919049][ T52] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 749.927691][ T5791] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 749.938578][ T5791] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 749.946797][ T52] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 749.946820][ T5791] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 749.970647][ T52] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 749.985537][ T5791] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 749.986343][ T52] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 750.000528][ T5791] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 750.017096][ T5791] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 750.048310][ T5791] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 752.058099][T12211] Bluetooth: hci13: command tx timeout [ 752.138203][T12211] Bluetooth: hci12: command tx timeout [ 754.148019][ T52] Bluetooth: hci13: command tx timeout [ 754.219771][ T52] Bluetooth: hci12: command tx timeout [ 754.703156][ T52] Bluetooth: hci5: command 0x0406 tx timeout [ 754.703178][T13112] Bluetooth: hci2: command 0x0406 tx timeout [ 756.222766][T12211] Bluetooth: hci13: command tx timeout [ 756.308082][T12211] Bluetooth: hci12: command tx timeout [ 758.303138][T12211] Bluetooth: hci13: command tx timeout [ 758.378100][T12211] Bluetooth: hci12: command tx timeout [ 758.378420][ T29] INFO: task kworker/u4:7:1100 blocked for more than 143 seconds. [ 758.397994][ T29] Not tainted syzkaller #0 [ 758.403054][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 758.412367][ T29] task:kworker/u4:7 state:D stack:22128 pid:1100 ppid:2 flags:0x00004000 [ 758.421787][ T29] Workqueue: events_unbound linkwatch_event SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 758.427765][ T29] Call Trace: [ 758.431391][ T29] [ 758.434395][ T29] __schedule+0x156f/0x4720 [ 758.450015][ T29] ? asan.module_dtor+0x20/0x20 [ 758.458758][ T29] ? __mutex_lock+0x684/0xce0 [ 758.463543][ T29] ? __mutex_trylock_common+0x8a/0x270 [ 758.469794][ T29] ? kthread_data+0x4f/0xc0 [ 758.474436][ T29] ? wq_worker_sleeping+0x63/0x240 [ 758.480406][ T29] schedule+0xbd/0x170 [ 758.484793][ T29] schedule_preempt_disabled+0x13/0x20 [ 758.490979][ T29] __mutex_lock+0x689/0xce0 [ 758.528438][ T29] ? __mutex_lock+0x4d2/0xce0 [ 758.533311][ T29] ? linkwatch_event+0xe/0x60 [ 758.541344][ T29] ? mutex_lock_nested+0x20/0x20 [ 758.584307][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 758.589761][ T29] ? process_scheduled_works+0x975/0x1600 [ 758.595568][ T29] ? process_scheduled_works+0x975/0x1600 [ 758.610435][ T29] linkwatch_event+0xe/0x60 [ 758.615069][ T29] process_scheduled_works+0xa60/0x1600 [ 758.621354][ T29] ? worker_attach_to_pool+0x370/0x370 [ 758.626905][ T29] ? assign_work+0x3cc/0x5d0 [ 758.632015][ T29] worker_thread+0xa5e/0xfe0 [ 758.636742][ T29] kthread+0x2fa/0x390 [ 758.641618][ T29] ? pr_cont_work+0x550/0x550 [ 758.646417][ T29] ? kthread_blkcg+0xd0/0xd0 [ 758.651630][ T29] ret_from_fork+0x48/0x80 [ 758.656124][ T29] ? kthread_blkcg+0xd0/0xd0 [ 758.661241][ T29] ret_from_fork_asm+0x11/0x20 [ 758.666207][ T29] [ 758.669918][ T29] INFO: task kworker/1:4:5864 blocked for more than 143 seconds. [ 758.677684][ T29] Not tainted syzkaller #0 [ 758.683089][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 758.692191][ T29] task:kworker/1:4 state:D stack:24280 pid:5864 ppid:2 flags:0x00004000 [ 758.703204][ T29] Workqueue: events switchdev_deferred_process_work [ 758.710340][ T29] Call Trace: [ 758.713671][ T29] [ 758.716646][ T29] __schedule+0x156f/0x4720 [ 758.721776][ T29] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 758.727740][ T29] ? mark_lock+0x94/0x320 [ 758.732623][ T29] ? asan.module_dtor+0x20/0x20 [ 758.737556][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 758.743112][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 758.748859][ T29] schedule+0xbd/0x170 [ 758.753007][ T29] schedule_preempt_disabled+0x13/0x20 [ 758.759850][ T29] __mutex_lock+0x689/0xce0 [ 758.764449][ T29] ? __mutex_lock+0x4d2/0xce0 [ 758.769966][ T29] ? switchdev_deferred_process_work+0xe/0x20 [ 758.776262][ T29] ? mutex_lock_nested+0x20/0x20 [ 758.781645][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 758.786913][ T29] ? process_scheduled_works+0x975/0x1600 [ 758.793166][ T29] ? process_scheduled_works+0x975/0x1600 [ 758.799474][ T29] switchdev_deferred_process_work+0xe/0x20 [ 758.805544][ T29] process_scheduled_works+0xa60/0x1600 [ 758.811361][ T29] ? worker_attach_to_pool+0x370/0x370 [ 758.816973][ T29] ? assign_work+0x3cc/0x5d0 [ 758.822093][ T29] worker_thread+0xa5e/0xfe0 [ 758.826763][ T29] ? _raw_spin_unlock+0x40/0x40 [ 758.832200][ T29] ? __kthread_parkme+0x71/0x1c0 [ 758.837216][ T29] kthread+0x2fa/0x390 [ 758.841811][ T29] ? pr_cont_work+0x550/0x550 [ 758.846568][ T29] ? kthread_blkcg+0xd0/0xd0 [ 758.851725][ T29] ret_from_fork+0x48/0x80 [ 758.856234][ T29] ? kthread_blkcg+0xd0/0xd0 [ 758.861471][ T29] ret_from_fork_asm+0x11/0x20 [ 758.866328][ T29] [ 758.869994][ T29] INFO: task kworker/u4:14:12510 blocked for more than 143 seconds. [ 758.878341][ T29] Not tainted syzkaller #0 [ 758.883379][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 758.892666][ T29] task:kworker/u4:14 state:D stack:22376 pid:12510 ppid:2 flags:0x00004000 [ 758.902079][ T29] Workqueue: ipv6_addrconf addrconf_dad_work [ 758.908195][ T29] Call Trace: [ 758.911564][ T29] [ 758.914556][ T29] __schedule+0x156f/0x4720 [ 758.919507][ T29] ? register_lock_class+0xc4/0x8a0 [ 758.924818][ T29] ? asan.module_dtor+0x20/0x20 [ 758.930326][ T29] ? __mutex_lock+0x684/0xce0 [ 758.935066][ T29] ? __mutex_trylock_common+0x8a/0x270 [ 758.941084][ T29] ? kthread_data+0x4f/0xc0 [ 758.945665][ T29] ? wq_worker_sleeping+0x63/0x240 [ 758.951336][ T29] schedule+0xbd/0x170 [ 758.955480][ T29] schedule_preempt_disabled+0x13/0x20 [ 758.962360][ T29] __mutex_lock+0x689/0xce0 [ 758.966937][ T29] ? __mutex_lock+0x4d2/0xce0 [ 758.972195][ T29] ? addrconf_dad_work+0xce/0x1550 [ 758.977365][ T29] ? mutex_lock_nested+0x20/0x20 [ 758.982468][ T29] addrconf_dad_work+0xce/0x1550 [ 758.987669][ T29] ? ipv6_get_saddr_eval+0xee0/0xee0 [ 758.993115][ T29] ? read_lock_is_recursive+0x20/0x20 [ 758.999027][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 759.004288][ T29] ? process_scheduled_works+0x975/0x1600 [ 759.010563][ T29] ? process_scheduled_works+0x975/0x1600 [ 759.016360][ T29] process_scheduled_works+0xa60/0x1600 [ 759.029287][ T29] ? worker_attach_to_pool+0x370/0x370 [ 759.034840][ T29] ? assign_work+0x3cc/0x5d0 [ 759.039934][ T29] worker_thread+0xa5e/0xfe0 [ 759.044609][ T29] ? _raw_spin_unlock+0x40/0x40 [ 759.050140][ T29] ? __kthread_parkme+0x71/0x1c0 [ 759.055178][ T29] kthread+0x2fa/0x390 [ 759.059765][ T29] ? pr_cont_work+0x550/0x550 [ 759.064519][ T29] ? kthread_blkcg+0xd0/0xd0 [ 759.069714][ T29] ret_from_fork+0x48/0x80 [ 759.074219][ T29] ? kthread_blkcg+0xd0/0xd0 [ 759.079483][ T29] ret_from_fork_asm+0x11/0x20 [ 759.084369][ T29] [ 759.087476][ T29] INFO: task syz-executor:12932 blocked for more than 144 seconds. [ 759.095505][ T29] Not tainted syzkaller #0 [ 759.101092][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 759.110165][ T29] task:syz-executor state:D stack:21000 pid:12932 ppid:1 flags:0x00004004 [ 759.119722][ T29] Call Trace: [ 759.123058][ T29] [ 759.126030][ T29] __schedule+0x156f/0x4720 [ 759.131215][ T29] ? asan.module_dtor+0x20/0x20 [ 759.136142][ T29] ? __mutex_lock+0x684/0xce0 [ 759.141292][ T29] ? __mutex_trylock_common+0x8a/0x270 [ 759.146815][ T29] ? trace_raw_output_contention_end+0xd0/0xd0 [ 759.153633][ T29] schedule+0xbd/0x170 [ 759.157785][ T29] schedule_preempt_disabled+0x13/0x20 [ 759.163689][ T29] __mutex_lock+0x689/0xce0 [ 759.168365][ T29] ? __mutex_lock+0x4d2/0xce0 [ 759.173426][ T29] ? rtnetlink_rcv_msg+0x7ed/0xf90 [ 759.178802][ T29] ? mutex_lock_nested+0x20/0x20 [ 759.183850][ T29] rtnetlink_rcv_msg+0x7ed/0xf90 [ 759.189381][ T29] ? rtnetlink_rcv_msg+0x220/0xf90 [ 759.194568][ T29] ? rtnetlink_bind+0x80/0x80 [ 759.200409][ T29] ? mark_lock+0x94/0x320 [ 759.204816][ T29] ? __lock_acquire+0x135d/0x7eb0 [ 759.210533][ T29] ? is_bpf_text_address+0x28f/0x2a0 [ 759.215893][ T29] ? mark_lock+0x94/0x320 [ 759.220666][ T29] ? mark_lock+0x94/0x320 [ 759.225078][ T29] ? __lock_acquire+0x135d/0x7eb0 [ 759.230587][ T29] ? __stack_depot_save+0x1f/0x660 [ 759.235794][ T29] ? verify_lock_unused+0x140/0x140 [ 759.241546][ T29] ? verify_lock_unused+0x140/0x140 [ 759.246993][ T29] ? perf_trace_lock+0xfc/0x3b0 [ 759.252203][ T29] ? perf_trace_lock+0xfc/0x3b0 [ 759.257169][ T29] netlink_rcv_skb+0x235/0x4c0 [ 759.262385][ T29] ? rtnetlink_bind+0x80/0x80 [ 759.267147][ T29] ? netlink_ack+0x1160/0x1160 [ 759.273118][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 759.278378][ T29] ? net_generic+0x1e/0x240 [ 759.283098][ T29] ? netlink_deliver_tap+0x2e/0x1b0 [ 759.288997][ T29] netlink_unicast+0x856/0x9e0 [ 759.293872][ T29] netlink_sendmsg+0x8d0/0xbf0 [ 759.299318][ T29] ? netlink_getsockopt+0x590/0x590 [ 759.304742][ T29] ? apparmor_socket_sendmsg+0x8e/0x330 [ 759.310970][ T29] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 759.316447][ T29] ? security_socket_sendmsg+0x80/0xa0 [ 759.322445][ T29] __sys_sendto+0x4a9/0x6b0 [ 759.327025][ T29] ? __ia32_sys_getpeername+0x90/0x90 [ 759.332973][ T29] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 759.339299][ T29] ? __fput+0x67e/0x940 [ 759.343525][ T29] ? lock_chain_count+0x20/0x20 [ 759.348904][ T29] __x64_sys_sendto+0xde/0xf0 [ 759.353643][ T29] do_syscall_64+0x55/0xb0 [ 759.358559][ T29] ? clear_bhb_loop+0x40/0x90 [ 759.363307][ T29] ? clear_bhb_loop+0x40/0x90 [ 759.368517][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 759.374489][ T29] RIP: 0033:0x7f6c2a96034e [ 759.379384][ T29] RSP: 002b:00007ffe1d70db78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 759.388187][ T29] RAX: ffffffffffffffda RBX: 000055557d1c3500 RCX: 00007f6c2a96034e [ 759.396223][ T29] RDX: 0000000000000028 RSI: 00007f6c2b754670 RDI: 0000000000000003 [ 759.405015][ T29] RBP: 0000000000000001 R08: 00007ffe1d70dbf4 R09: 000000000000000c [ 759.414679][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 759.423086][ T29] R13: 0000000000000000 R14: 00007f6c2b754670 R15: 0000000000000000 [ 759.431576][ T29] [ 759.434676][ T29] INFO: task syz.1.2401:13092 blocked for more than 144 seconds. [ 759.442883][ T29] Not tainted syzkaller #0 [ 759.447958][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 759.456812][ T29] task:syz.1.2401 state:D stack:24488 pid:13092 ppid:5788 flags:0x00004004 [ 759.466157][ T29] Call Trace: [ 759.469694][ T29] [ 759.472678][ T29] __schedule+0x156f/0x4720 [ 759.477281][ T29] ? asan.module_dtor+0x20/0x20 [ 759.482257][ T29] ? __mutex_lock+0x684/0xce0 [ 759.486984][ T29] ? __mutex_trylock_common+0x8a/0x270 [ 759.493243][ T29] ? trace_raw_output_contention_end+0xd0/0xd0 [ 759.500682][ T29] schedule+0xbd/0x170 [ 759.504831][ T29] schedule_preempt_disabled+0x13/0x20 [ 759.510833][ T29] __mutex_lock+0x689/0xce0 [ 759.515398][ T29] ? __mutex_lock+0x4d2/0xce0 [ 759.520794][ T29] ? tun_chr_close+0x41/0x1c0 [ 759.525552][ T29] ? mutex_lock_nested+0x20/0x20 [ 759.531028][ T29] ? tun_chr_open+0x510/0x510 [ 759.535783][ T29] tun_chr_close+0x41/0x1c0 [ 759.540964][ T29] ? tun_chr_open+0x510/0x510 [ 759.545717][ T29] __fput+0x221/0x940 [ 759.550286][ T29] task_work_run+0x1d4/0x260 [ 759.554953][ T29] ? task_work_cancel+0x220/0x220 [ 759.560602][ T29] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 759.566643][ T29] ? exit_to_user_mode_loop+0x3b/0x110 [ 759.572631][ T29] exit_to_user_mode_loop+0xe6/0x110 [ 759.581837][ T29] exit_to_user_mode_prepare+0xee/0x180 [ 759.587462][ T29] syscall_exit_to_user_mode+0x1a/0x50 [ 759.593953][ T29] do_syscall_64+0x61/0xb0 [ 759.598588][ T29] ? clear_bhb_loop+0x40/0x90 [ 759.603324][ T29] ? clear_bhb_loop+0x40/0x90 [ 759.612795][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 759.619821][ T29] RIP: 0033:0x7f26ff79fb19 [ 759.624283][ T29] RSP: 002b:00007f2700713028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 759.637598][ T29] RAX: ffffffffffffffea RBX: 00007f26ffa25fa0 RCX: 00007f26ff79fb19 [ 759.646646][ T29] RDX: 0000000000004001 RSI: 0000200000000300 RDI: ffffffffffffff9c [ 759.659680][ T29] RBP: 00007f26ff837b70 R08: 0000000000000000 R09: 0000000000000000 [ 759.667812][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 759.676070][ T29] R13: 00007f26ffa26038 R14: 00007f26ffa25fa0 R15: 00007fffc5f310e8 [ 759.684280][ T29] [ 759.687481][ T29] INFO: task syz.1.2401:13094 blocked for more than 144 seconds. [ 759.695437][ T29] Not tainted syzkaller #0 [ 759.700465][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 759.709258][ T29] task:syz.1.2401 state:D stack:27208 pid:13094 ppid:5788 flags:0x00004004 [ 759.718610][ T29] Call Trace: [ 759.721945][ T29] [ 759.724938][ T29] __schedule+0x156f/0x4720 [ 759.729698][ T29] ? lock_chain_count+0x20/0x20 [ 759.734631][ T29] ? asan.module_dtor+0x20/0x20 [ 759.740491][ T29] ? __mutex_lock+0x684/0xce0 [ 759.745251][ T29] ? __mutex_trylock_common+0x8a/0x270 [ 759.752358][ T29] ? trace_raw_output_contention_end+0xd0/0xd0 [ 759.759685][ T29] schedule+0xbd/0x170 [ 759.763811][ T29] schedule_preempt_disabled+0x13/0x20 [ 759.772437][ T29] __mutex_lock+0x689/0xce0 [ 759.776997][ T29] ? __mutex_lock+0x4d2/0xce0 [ 759.783665][ T29] ? dev_ioctl+0x83c/0x1140 [ 759.791107][ T29] ? mutex_lock_nested+0x20/0x20 [ 759.796090][ T29] ? dev_load+0x21/0x1f0 [ 759.800546][ T29] dev_ioctl+0x83c/0x1140 [ 759.804956][ T29] sock_ioctl+0x74c/0x7e0 [ 759.814271][ T29] ? sock_poll+0x460/0x460 [ 759.818848][ T29] ? bpf_lsm_file_ioctl+0x9/0x10 [ 759.823849][ T29] ? security_file_ioctl+0x80/0xa0 [ 759.833863][ T29] ? sock_poll+0x460/0x460 [ 759.838436][ T29] __se_sys_ioctl+0xfd/0x170 [ 759.843130][ T29] do_syscall_64+0x55/0xb0 [ 759.847662][ T29] ? clear_bhb_loop+0x40/0x90 [ 759.853895][ T29] ? clear_bhb_loop+0x40/0x90 [ 759.858722][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 759.864770][ T29] RIP: 0033:0x7f26ff79fb19 [ 759.870487][ T29] RSP: 002b:00007f27006d1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 759.880898][ T29] RAX: ffffffffffffffda RBX: 00007f26ffa26180 RCX: 00007f26ff79fb19 [ 759.891036][ T29] RDX: 0000200000000dc0 RSI: 00000000000089f1 RDI: 000000000000000c [ 759.899198][ T29] RBP: 00007f26ff837b70 R08: 0000000000000000 R09: 0000000000000000 [ 759.907336][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 759.924290][ T29] R13: 00007f26ffa26218 R14: 00007f26ffa26180 R15: 00007fffc5f310e8 [ 759.933722][ T29] [ 759.936831][ T29] INFO: task syz.0.2403:13100 blocked for more than 144 seconds. [ 759.944981][ T29] Not tainted syzkaller #0 [ 759.950074][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 759.960259][ T29] task:syz.0.2403 state:D stack:23560 pid:13100 ppid:5792 flags:0x00004004 [ 759.969671][ T29] Call Trace: [ 759.973025][ T29] [ 759.976007][ T29] __schedule+0x156f/0x4720 [ 759.981692][ T29] ? __lock_acquire+0x1431/0x7eb0 [ 759.986857][ T29] ? trace_call_bpf+0xc3/0x6c0 [ 759.997259][ T29] ? asan.module_dtor+0x20/0x20 [ 760.003302][ T29] ? __mutex_lock+0x684/0xce0 [ 760.012014][ T29] ? __mutex_trylock_common+0x8a/0x270 [ 760.017746][ T29] ? trace_raw_output_contention_end+0xd0/0xd0 [ 760.025181][ T29] schedule+0xbd/0x170 [ 760.030169][ T29] schedule_preempt_disabled+0x13/0x20 [ 760.035708][ T29] __mutex_lock+0x689/0xce0 [ 760.040530][ T29] ? __mutex_lock+0x4d2/0xce0 [ 760.045281][ T29] ? br_ioctl_stub+0x1a9/0xd50 [ 760.050934][ T29] ? mutex_lock_nested+0x20/0x20 [ 760.055931][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 760.069516][ T29] br_ioctl_stub+0x1a9/0xd50 [ 760.074239][ T29] ? rcu_is_watching+0x15/0xb0 [ 760.079526][ T29] ? rcu_read_unlock+0xa0/0xa0 [ 760.084359][ T29] ? trace_contention_end+0x39/0xe0 [ 760.090834][ T29] ? __mutex_lock+0x30d/0xce0 [ 760.095617][ T29] ? mutex_lock_nested+0x20/0x20 [ 760.101292][ T29] ? rcu_read_unlock+0xa0/0xa0 [ 760.106120][ T29] sock_ioctl+0x4d7/0x7e0 [ 760.110954][ T29] ? sock_poll+0x460/0x460 [ 760.115474][ T29] ? bpf_lsm_file_ioctl+0x9/0x10 [ 760.120955][ T29] ? security_file_ioctl+0x80/0xa0 [ 760.126143][ T29] ? sock_poll+0x460/0x460 [ 760.131168][ T29] __se_sys_ioctl+0xfd/0x170 [ 760.135858][ T29] do_syscall_64+0x55/0xb0 [ 760.140895][ T29] ? clear_bhb_loop+0x40/0x90 [ 760.145645][ T29] ? clear_bhb_loop+0x40/0x90 [ 760.151092][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 760.157088][ T29] RIP: 0033:0x7f906039fb19 [ 760.162028][ T29] RSP: 002b:00007f906125a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 760.170580][ T29] RAX: ffffffffffffffda RBX: 00007f9060625fa0 RCX: 00007f906039fb19 [ 760.179212][ T29] RDX: 0000200000000340 RSI: 00000000000089a0 RDI: 0000000000000004 [ 760.187250][ T29] RBP: 00007f9060437b70 R08: 0000000000000000 R09: 0000000000000000 [ 760.195625][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 760.204105][ T29] R13: 00007f9060626038 R14: 00007f9060625fa0 R15: 00007ffdba0911a8 [ 760.212797][ T29] [ 760.215939][ T29] [ 760.215939][ T29] Showing all locks held in the system: [ 760.224306][ T29] 1 lock held by khungtaskd/29: [ 760.229654][ T29] #0: ffffffff8e1322e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 760.240033][ T29] 3 locks held by kworker/u4:7/1100: [ 760.245432][ T29] #0: ffff888018c71938 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 760.257782][ T29] #1: ffffc90004627d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 760.269451][ T29] #2: ffffffff8f3e83c8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 760.279010][ T29] 2 locks held by getty/5546: [ 760.283760][ T29] #0: ffff88802f84c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 760.294686][ T29] #1: ffffc9000327e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x43a/0x1400 [ 760.306537][ T29] 3 locks held by kworker/1:4/5864: [ 760.312327][ T29] #0: ffff888018c70d38 ((wq_completion)events#2){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 760.330721][ T29] #1: ffffc900048f7d00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 760.342397][ T29] #2: ffffffff8f3e83c8 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 760.354004][ T29] 4 locks held by kworker/u4:9/12505: [ 760.359686][ T29] #0: ffff888140049138 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 760.371165][ T29] #1: ffffc9000ca4fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 760.382283][ T29] #2: ffffffff8f3db1d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x140/0xb00 [ 760.392303][ T29] #3: ffffffff8f3e83c8 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0xdf/0x670 [ 760.403065][ T29] 3 locks held by kworker/u4:14/12510: [ 760.408966][ T29] #0: ffff88802dfd7d38 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 760.421128][ T29] #1: ffffc9000c65fd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 760.434499][ T29] #2: ffffffff8f3e83c8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xce/0x1550 [ 760.444410][ T29] 1 lock held by syz-executor/12932: [ 760.450172][ T29] #0: ffffffff8f3e83c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ed/0xf90 [ 760.460039][ T29] 1 lock held by syz.1.2401/13092: [ 760.465238][ T29] #0: ffffffff8f3e83c8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x41/0x1c0 [ 760.474448][ T29] 1 lock held by syz.1.2401/13094: [ 760.479671][ T29] #0: ffffffff8f3e83c8 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x83c/0x1140 [ 760.488687][ T29] 2 locks held by syz.0.2403/13100: [ 760.493943][ T29] #0: ffffffff8f3ccf28 (br_ioctl_mutex){+.+.}-{3:3}, at: sock_ioctl+0x4b4/0x7e0 [ 760.503917][ T29] #1: ffffffff8f3e83c8 (rtnl_mutex){+.+.}-{3:3}, at: br_ioctl_stub+0x1a9/0xd50 [ 760.513785][ T29] 1 lock held by syz-executor/13106: [ 760.519569][ T29] #0: ffffffff8f3e83c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ed/0xf90 [ 760.529584][ T29] 1 lock held by syz-executor/13107: [ 760.534965][ T29] #0: ffffffff8f3e83c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ed/0xf90 [ 760.546055][ T29] 1 lock held by syz.2.2408/13118: [ 760.551634][ T29] #0: ffffffff8f3e83c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ed/0xf90 [ 760.561580][ T29] 1 lock held by syz-executor/13126: [ 760.566931][ T29] #0: ffffffff8f3e83c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ed/0xf90 [ 760.576552][ T29] 1 lock held by syz-executor/13130: [ 760.582138][ T29] #0: ffffffff8f3e83c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ed/0xf90 [ 760.591771][ T29] 1 lock held by syz-executor/13136: [ 760.597632][ T29] #0: ffffffff8f3e83c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ed/0xf90 [ 760.607277][ T29] 1 lock held by syz-executor/13140: [ 760.613180][ T29] #0: ffffffff8f3e83c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ed/0xf90 [ 760.623254][ T29] 1 lock held by syz-executor/13149: [ 760.629055][ T29] #0: ffffffff8f3e83c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ed/0xf90 [ 760.638903][ T29] 1 lock held by syz-executor/13155: [ 760.644241][ T29] #0: ffffffff8f3e83c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ed/0xf90 [ 760.654313][ T29] 1 lock held by syz-executor/13162: [ 760.659989][ T29] #0: ffffffff8f3e83c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ed/0xf90 [ 760.669856][ T29] 1 lock held by syz-executor/13163: [ 760.675193][ T29] #0: ffffffff8f3e83c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ed/0xf90 [ 760.685250][ T29] [ 760.687638][ T29] ============================================= [ 760.687638][ T29] [ 760.696210][ T29] NMI backtrace for cpu 0 [ 760.700580][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 760.707835][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 760.717948][ T29] Call Trace: [ 760.721280][ T29] [ 760.724247][ T29] dump_stack_lvl+0x18c/0x250 [ 760.728999][ T29] ? __wake_up_klogd+0xd9/0x100 [ 760.733894][ T29] ? show_regs_print_info+0x20/0x20 [ 760.739127][ T29] ? load_image+0x420/0x420 [ 760.743726][ T29] nmi_cpu_backtrace+0x3a6/0x3e0 [ 760.748757][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 760.755062][ T29] ? load_image+0x420/0x420 [ 760.759616][ T29] ? wq_watchdog_touch+0xef/0x170 [ 760.764700][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 760.770839][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 760.776913][ T29] watchdog+0xf59/0xfa0 [ 760.781139][ T29] ? watchdog+0x1e1/0xfa0 [ 760.785717][ T29] kthread+0x2fa/0x390 [ 760.789830][ T29] ? hungtask_pm_notify+0x50/0x50 [ 760.794997][ T29] ? kthread_blkcg+0xd0/0xd0 [ 760.799672][ T29] ret_from_fork+0x48/0x80 [ 760.804147][ T29] ? kthread_blkcg+0xd0/0xd0 [ 760.808803][ T29] ret_from_fork_asm+0x11/0x20 [ 760.813620][ T29] [ 760.817003][ T29] Sending NMI from CPU 0 to CPUs 1: [ 760.822328][ C1] NMI backtrace for cpu 1 [ 760.822341][ C1] CPU: 1 PID: 12 Comm: kworker/u4:1 Not tainted syzkaller #0 [ 760.822358][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 760.822369][ C1] Workqueue: bat_events batadv_nc_worker [ 760.822507][ C1] RIP: 0010:__lock_acquire+0x10d0/0x7eb0 [ 760.822533][ C1] Code: ee 20 89 f0 c1 c0 04 41 29 f4 44 31 e0 44 01 fe 41 29 c7 89 c1 c1 c1 06 44 31 f9 01 f0 89 ca c1 c2 08 29 ce 31 f2 01 c1 29 d0 <41> 89 d6 41 c1 c6 10 41 31 c6 01 ca 44 89 f3 c1 c3 13 44 29 f1 31 [ 760.822548][ C1] RSP: 0018:ffffc900001177c0 EFLAGS: 00000006 [ 760.822562][ C1] RAX: 0000000012e869b1 RBX: 0000000000060730 RCX: 0000000047d03557 [ 760.822574][ C1] RDX: 00000000435dd9bc RSI: 00000000caac334d RDI: ffffffff92223500 [ 760.822586][ C1] RBP: ffffc90000117a08 R08: dffffc0000000000 R09: 1ffffffff24446a0 [ 760.822599][ C1] R10: dffffc0000000000 R11: fffffbfff24446a1 R12: 000000005368b56c [ 760.822612][ C1] R13: ffff88801d645a00 R14: ffff88801d6464d8 R15: 00000000758e7c4c [ 760.822625][ C1] FS: 0000000000000000(0000) GS:ffff8880b8d00000(0000) knlGS:0000000000000000 [ 760.822639][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 760.822651][ C1] CR2: 000055f016dbcf70 CR3: 000000000df32000 CR4: 00000000003506e0 [ 760.822666][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 760.822676][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 760.822687][ C1] Call Trace: [ 760.822694][ C1] [ 760.822713][ C1] ? __mod_timer+0x9b0/0xd60 [ 760.822731][ C1] ? verify_lock_unused+0x140/0x140 [ 760.822754][ C1] ? verify_lock_unused+0x140/0x140 [ 760.822782][ C1] lock_acquire+0x19e/0x420 [ 760.822801][ C1] ? batadv_nc_worker+0xd2/0x600 [ 760.822826][ C1] ? batadv_nc_worker+0xd2/0x600 [ 760.822849][ C1] ? read_lock_is_recursive+0x20/0x20 [ 760.822870][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 760.822891][ C1] ? __lock_acquire+0x7eb0/0x7eb0 [ 760.822913][ C1] ? batadv_nc_worker+0xd2/0x600 [ 760.822936][ C1] batadv_nc_worker+0xef/0x600 [ 760.822958][ C1] ? batadv_nc_worker+0xd2/0x600 [ 760.822981][ C1] ? process_scheduled_works+0x975/0x1600 [ 760.823006][ C1] process_scheduled_works+0xa60/0x1600 [ 760.823042][ C1] ? worker_attach_to_pool+0x370/0x370 [ 760.823067][ C1] ? assign_work+0x3cc/0x5d0 [ 760.823091][ C1] worker_thread+0xa5e/0xfe0 [ 760.823125][ C1] kthread+0x2fa/0x390 [ 760.823141][ C1] ? pr_cont_work+0x550/0x550 [ 760.823163][ C1] ? kthread_blkcg+0xd0/0xd0 [ 760.823180][ C1] ret_from_fork+0x48/0x80 [ 760.823202][ C1] ? kthread_blkcg+0xd0/0xd0 [ 760.823219][ C1] ret_from_fork_asm+0x11/0x20 [ 760.823249][ C1] [ 760.829974][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 760.830009][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 760.830063][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 760.830096][ T29] Call Trace: [ 760.830111][ T29] [ 760.830141][ T29] dump_stack_lvl+0x18c/0x250 [ 760.830231][ T29] ? show_regs_print_info+0x20/0x20 [ 760.830314][ T29] ? load_image+0x420/0x420 [ 760.830404][ T29] panic+0x2ca/0x720 [ 760.830471][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 760.830526][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 760.830600][ T29] ? preempt_schedule_thunk+0x1a/0x30 [ 760.830686][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 760.830811][ T29] watchdog+0xf98/0xfa0 [ 760.830918][ T29] ? watchdog+0x1e1/0xfa0 [ 760.831011][ T29] kthread+0x2fa/0x390 [ 760.831065][ T29] ? hungtask_pm_notify+0x50/0x50 [ 760.831140][ T29] ? kthread_blkcg+0xd0/0xd0 [ 760.831202][ T29] ret_from_fork+0x48/0x80 [ 760.831268][ T29] ? kthread_blkcg+0xd0/0xd0 [ 760.831331][ T29] ret_from_fork_asm+0x11/0x20 [ 760.831434][ T29] [ 760.832833][ T29] Kernel Offset: disabled [ 761.204647][ T29] Rebooting in 86400 seconds..