last executing test programs: 20.545256367s ago: executing program 2 (id=374): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, 0x0, 0x0, &(0x7f0000007880)=ANY=[@ANYBLOB="1100000000000000004003000100000000000000000000001c00000000000000000f00fd08000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c0000000000000000078f02080000", @ANYBLOB="a00500000000000000000000240000000000"], 0x98}, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000012002f8c35093f974b21b9", 0xf}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="1310000016"], 0xfe33) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f00000001c0), 0x0}, 0x20) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x746f2f51, &(0x7f0000000080)=[{&(0x7f0000000040)="3f0400001c00810ce00f80ecdb4cb9f207c804a01f000000030006fb0a0002000a0ada1b40d80300000000000000", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 20.027970773s ago: executing program 0 (id=376): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6f94f90224fc600e0005000a000200053582c137153e3704000b80fc0b09000300", 0x33fe0}], 0x1}, 0x0) 19.768438482s ago: executing program 0 (id=378): close(0xffffffffffffffff) (async, rerun: 64) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x1a5c0bf06ff69310, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa31086b8703130000001f03000000000000040014000d0013000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x20800, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000880)={&(0x7f00000001c0), 0x6e, &(0x7f0000000740)=[{&(0x7f00000002c0)=""/149, 0x95}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000580)=""/175, 0xaf}, {&(0x7f0000000640)=""/73, 0x49}], 0x4, &(0x7f0000000780)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe0}, 0x2000) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x110, 0x5, 0x0, 0x0) (async) sendmsg$sock(0xffffffffffffffff, 0x0, 0x40000) (async) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) 18.837867191s ago: executing program 1 (id=380): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x28, 0x1, 0x30, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x4) sendmsg$inet(r3, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}, 0x3e8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x45, '\x00', 0x0, @fallback=0x31}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000980)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000002d030100000000009500000c000000006926000000000000bf67000000000000150600000fff070056060000200000006a0200000ee60000bf050000000000003d350000000000006507000002000000070700004a0000000f75000000000000bf54000000000000070400000400f9ff6d53010000000000840400000000000073720000000000009500000000000000db13d5d8b741f2cdaabc8383caf56b8c2b84a8d09535a157f9005bd38addaa65b925cd3ded85d3cdd66d9c79f0529d045625b8b9e2a095d2c51ef45c5588ec78c7f32946b17cecfe54c53ab530c58b67851b7e0e82452a083b98a6aa766401047d150203b0417edef332233b081df18961d6822d133bf72a4de1c2ea17f04537fc211576846ac629d1d93265ba474580047a9dc88de358ce795731891a2031de4e09740c64e5306f991ed4785a9773a433e0db9c1a7d4ab9d658ce9cfdb4db3bed62bcb2bc91ddcdfac2e6d4421c49fb6641cbf56914e76702f673b586c700e3806f825f1d0da2a304e06543b56d35235d7897a7fe912971aab876022e96f5143b6234f5a6b701690b07fb664b44e22b72e843e7cf55f394cf75d1cd57c9150bfb98cc45b3fde43e42e150d4a2fddd9a9767748ca3522443097c55dc97c09d38485b18ad2cff787338bab324336f50c97b751f2ed2c4281858b428d1b2c1194b06f9bb7ffcc95c1bcfc5540f9574f20e7f513a2a7c5dad90e7d479724d69fa0c0bf97af1231a49ea166f743279d240e2e6f01d8704f313d68b16198be5f6a50e9e0fd20893b2922df566d2622edee5000000000000000000d91c6da09fa7cdbbf16d4780d8c2401c55aff772aced3ff966ff76d796c171f5f7a31e1b14b0c0c712c0fdd2710f37a3d15710d68e7326a7db043c57784bd9bdb047db75"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) socket$kcm(0x10, 0x2, 0x0) socketpair(0x23, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0x19, 0x4, 0x4, 0x2}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r6, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b"], 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8946, &(0x7f0000000080)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000002"], 0x48) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r8, @ANYBLOB="0000000002000000b705000008000000850000007000000095"], &(0x7f0000000300)='GPL\x00', 0x8, 0xfe6a, &(0x7f00000014c0)=""/4098, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe65}, 0x23) 18.451150933s ago: executing program 2 (id=381): socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000001040)="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", 0x310}, {&(0x7f0000001b80)="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", 0x2fe}], 0x2}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@map=0x1, r1, 0x2e, 0x0, 0xffffffffffffffff, @void, @value=r1}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[], 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d0002117ea6e070d6064e22000300000000250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 18.376379546s ago: executing program 3 (id=382): perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x8, 0x8000000000ca, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0xffffff7e, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48283, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xb0142, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3, 0xffffffff}, @const={0x0, 0x0, 0x0, 0x2}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x44}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNGETVNETLE(r3, 0x800454dd, &(0x7f00000002c0)) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r4], 0x12) 18.287592798s ago: executing program 0 (id=384): r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x3f00, &(0x7f0000000000)=[{&(0x7f0000000040)="0209000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x21, &(0x7f0000000100), 0x120) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) r2 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x28, 0xa, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x4, @perf_bp={0x0, 0x3}, 0x8012, 0x5, 0x43a1bd76, 0x7, 0x9, 0x3, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair(0x18, 0x0, 0x1, &(0x7f0000001780)) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r5 = getpid() socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x2, 0x5, 0x84) close(r6) socket$kcm(0xa, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000001"], 0x50) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000300000000000000c29c18120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r7}, &(0x7f0000000280), &(0x7f0000000500)=r4}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xe, 0x0, &(0x7f0000000000)="43227504001100b32415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x25, 0xc, 0x0, 0x0, 0x0, 0x9, 0x66a99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x0, @perf_bp={0x0, 0x3}, 0x8000, 0x0, 0x43a1bd76, 0x9, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, r5, 0xffffffffffffffff, r2, 0x0) r10 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd7a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffd, 0x0, 0x4}, r5, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x2400, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000ac0)}, 0x0) 18.059733946s ago: executing program 1 (id=385): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x1e, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x8, 0x0, 0x0) recvmsg$kcm(r1, &(0x7f00000007c0)={&(0x7f00000003c0)=@nl=@proc, 0x80, &(0x7f0000000700)=[{&(0x7f00000005c0)=""/67, 0x43}], 0x1, &(0x7f0000000740)=""/68, 0x44}, 0x100) 17.991596138s ago: executing program 1 (id=386): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x4}}]}}, 0x0, 0x5a}, 0x20) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4, 0x3}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000780)="f4000900062b3c25fe80000000000000dc8b850f238466cc00007a000000adac911b", 0x22}, {&(0x7f0000000080)="53b12d3fa0ba", 0x6}], 0x2}, 0x0) 17.903631161s ago: executing program 2 (id=387): perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x10, &(0x7f0000000000), 0x4) close(r2) sendmsg$inet(r3, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x8004) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000ffffffffffff05000000", @ANYRES32=0x1], 0x48) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB='V?\x00\x00-\x00Y'], 0xfe33) close(r3) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r7) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x4, 0xc8}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)) bpf$ENABLE_STATS(0x20, &(0x7f0000000000), 0x4) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) write$cgroup_devices(r8, &(0x7f00000005c0)=ANY=[], 0xfffffeff) r9 = bpf$ITER_CREATE(0xb, &(0x7f0000000200), 0xffffffffffffff87) r10 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r10, 0x6, 0xa, &(0x7f0000000500)=r9, 0x4) 17.467778484s ago: executing program 3 (id=388): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="3f0400001c00810ce00f80ecdb4cb9f207c804a01f0000", 0x17}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 17.29283514s ago: executing program 1 (id=389): sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0x7}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0xff14, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) 17.160710514s ago: executing program 0 (id=390): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, 0x0, 0x0, &(0x7f0000007880)=ANY=[@ANYBLOB="1100000000000000004003000100000000000000000000001c00000000000000000f00fd08000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c0000000000000000078f02080000", @ANYBLOB="a00500000000000000000000240000000000"], 0x98}, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000012002f8c35093f974b21b9", 0xf}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="1310000016"], 0xfe33) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f00000001c0), 0x0}, 0x20) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x746f2f51, &(0x7f0000000080)=[{&(0x7f0000000040)="3f0400001c00810ce00f80ecdb4cb9f207c804a01f000000030006fb0a0002000a0ada1b40d80300000000000000", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 17.024532249s ago: executing program 3 (id=391): perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x10, &(0x7f0000000000), 0x4) close(r2) sendmsg$inet(r3, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x8004) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000ffffffffffff05000000", @ANYRES32=0x1], 0x48) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB='V?\x00\x00-\x00Y'], 0xfe33) close(r3) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r7) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x4, 0xc8}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) bpf$ENABLE_STATS(0x20, &(0x7f0000000000), 0x4) r8 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r8, 0x6, 0xa, &(0x7f0000000500), 0x4) 16.853200234s ago: executing program 1 (id=392): r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1100, 0x2c, 0x0, 0x28) 16.790443396s ago: executing program 2 (id=393): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000900)={'bridge0\x00', @broadcast}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="02000000040000000800000001"], 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000110000007b8af8ff00000000b70800000d0000007b8af0ff00000000bfa10000000000000701000000feffffbfa40000000000000704000011feffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000085000000c50000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x63) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000880)={@fallback=r4, 0x32, 0x0, 0x5, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000280)=[0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0], 0x0}, 0x40) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.events\x00', 0x26e1, 0x0) r7 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x2e, &(0x7f0000000640)=r6, 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000008c0)={@fallback=r1, 0xffffffffffffffff, 0x14, 0x2003, r1, @value=r6, @void, @void, @void, r5}, 0x20) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = openat$cgroup_procs(r4, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f00000005c0)=r3, 0x12) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r9, 0x400454cd, 0x300) ioctl$TUNSETIFF(r9, 0x400454ca, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={r10, 0x58, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x2, &(0x7f00000005c0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x240}], &(0x7f0000000640)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x28, '\x00', r11, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x84}, 0x94) r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xc, [@fwd={0x7ec}, @const={0x8}]}, {0x0, [0x0, 0x0, 0x2e, 0x3e, 0x30, 0x0, 0x61, 0x30, 0x5f, 0x0]}}, &(0x7f0000000540), 0x3c, 0x0, 0x0, 0x5, 0x10000}, 0x28) r13 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000680)={0x0, 0x1, 0x8}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x11, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_fd={0x18, 0x1, 0x1, 0x0, r2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000400)='GPL\x00', 0xce5, 0xa9, &(0x7f0000000440)=""/169, 0x41000, 0x41, '\x00', r11, 0x0, r12, 0x8, &(0x7f0000000640)={0xa, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000006c0)=[r13], &(0x7f0000000700)=[{0x0, 0x1, 0x7, 0x7}, {0x0, 0x1, 0x5, 0x1}, {0x5, 0x3, 0xc, 0x2}]}, 0x94) r14 = openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) write$cgroup_freezer_state(r14, &(0x7f00000000c0)='THAWED\x00', 0x7) 16.646642131s ago: executing program 0 (id=394): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x1e, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) recvmsg$kcm(r1, &(0x7f00000007c0)={&(0x7f00000003c0)=@nl=@proc, 0x80, &(0x7f0000000700)=[{&(0x7f00000005c0)=""/67, 0x43}], 0x1, &(0x7f0000000740)=""/68, 0x44}, 0x100) 16.585440663s ago: executing program 3 (id=395): socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000001040)="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", 0x310}, {&(0x7f0000001b80)="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", 0x2fe}], 0x2}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@map=0x1, r1, 0x2e, 0x0, 0xffffffffffffffff, @void, @value=r1}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[], 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d0002117ea6e070d6064e22000300000000250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 16.512612215s ago: executing program 1 (id=396): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0xffffffff, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10305, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x8}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r3, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0xe07e872424dfef8b) recvmsg$kcm(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000100)=""/199, 0xc7}], 0x1}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000040000000400000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r4, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001280)={r4, &(0x7f00000001c0)="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", &(0x7f00000011c0)=""/167}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000012c0)={'veth0_to_bridge\x00', 0x7347981a6b7c8371}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a1d080201000000040000a118000200ffe5ffffff0000000000000000000001a80016ea1f00084003bc5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f722f054f55153c6f94007134cf6ee08000a09108a8d8ef075c0100000000000000cb490000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d1600360d8bcc00400040fad95667e0060000000000000580bb9ad809d5e1cace81b341139fe3cd4032e8edb100273f90a9b9b98c154bb444c6d291", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x20004c04) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r6, 0x6, 0x17, &(0x7f00000000c0), 0x4) 16.435236307s ago: executing program 0 (id=397): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x5, 0x574, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x2001, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x40}, 0x0, 0x3}, 0x80, &(0x7f0000000d80)=[{0x0, 0x28}], 0x1}, 0x20040000) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x0, 0x29, 0x0, 0x1, 0xfffffffa}, 0x28) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x5, 0x90, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000480)={0x6, 0xfffffffffffffed9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffffffffff8, 0x3}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0x9}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES8=r3, @ANYRES32=r4, @ANYRESOCT=r1, @ANYRES32=0x0, @ANYRES16, @ANYBLOB="0100000004000000000000000c00"/28], 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x100002, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r6, &(0x7f0000000180), 0x40010) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r7, &(0x7f0000000180), 0x40010) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r8, &(0x7f0000000180), 0x40010) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r9, &(0x7f0000000180), 0x40010) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r10, &(0x7f0000000180), 0x40010) write$cgroup_type(r5, &(0x7f0000000180), 0x40001) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x3, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000faffffff00000000faffffff6d0920000800000018260000", @ANYRES32, @ANYBLOB="000000004a00aafe"], &(0x7f0000000580)='GPL\x00', 0xd, 0x4f, &(0x7f00000005c0)=""/79, 0x41000, 0x20, '\x00', 0x0, @sched_cls=0x37, r1, 0x8, &(0x7f0000000640)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000680)={0x5, 0x9, 0x3, 0x1f}, 0x10, 0x0, 0xffffffffffffffff, 0x3, &(0x7f00000006c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000700)=[{0x2, 0x1, 0xb, 0xc}, {0x0, 0x4, 0xb, 0x1}, {0x2, 0x5, 0xe, 0xa}], 0x10, 0x58586df}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r10, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r11) socket$kcm(0xa, 0x2, 0x3a) 16.294603772s ago: executing program 2 (id=398): sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0x7}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) (fail_nth: 9) 16.186374935s ago: executing program 3 (id=399): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="3f0400001c00810ce00f80ecdb4cb9f207c804a01f0000", 0x17}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 16.119215997s ago: executing program 3 (id=400): sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0xca, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) r5 = openat$cgroup_subtree(r4, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000400)=ANY=[], 0x5) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r3], 0x12) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0x7}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x4fe76937}, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r9, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r10, &(0x7f00000006c0)=ANY=[], 0xcfa4) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x4, 0x8, 0x3d, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000180), 0x1003, r11}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r11, &(0x7f0000000080), 0x0}, 0x20) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095", @ANYRES64=r7, @ANYRESOCT, @ANYRESHEX=r6], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r13 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r13, 0x29, 0x46, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000580)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000080)) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x1ff) 15.907482404s ago: executing program 2 (id=401): perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x10, &(0x7f0000000000), 0x4) close(r2) sendmsg$inet(r3, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x8004) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000ffffffffffff05000000", @ANYRES32=0x1], 0x48) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB='V?\x00\x00-\x00Y'], 0xfe33) close(r3) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r7) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x4, 0xc8}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)) bpf$ENABLE_STATS(0x20, &(0x7f0000000000), 0x4) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) write$cgroup_devices(r8, &(0x7f00000005c0)=ANY=[], 0xfffffeff) r9 = bpf$ITER_CREATE(0xb, &(0x7f0000000200), 0xffffffffffffff87) r10 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r10, 0x6, 0xa, &(0x7f0000000500)=r9, 0x4) 1.360000957s ago: executing program 32 (id=397): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x5, 0x574, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x2001, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x40}, 0x0, 0x3}, 0x80, &(0x7f0000000d80)=[{0x0, 0x28}], 0x1}, 0x20040000) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x0, 0x29, 0x0, 0x1, 0xfffffffa}, 0x28) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x5, 0x90, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000480)={0x6, 0xfffffffffffffed9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffffffffff8, 0x3}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0x9}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES8=r3, @ANYRES32=r4, @ANYRESOCT=r1, @ANYRES32=0x0, @ANYRES16, @ANYBLOB="0100000004000000000000000c00"/28], 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x100002, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r6, &(0x7f0000000180), 0x40010) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r7, &(0x7f0000000180), 0x40010) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r8, &(0x7f0000000180), 0x40010) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r9, &(0x7f0000000180), 0x40010) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r10, &(0x7f0000000180), 0x40010) write$cgroup_type(r5, &(0x7f0000000180), 0x40001) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x3, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000faffffff00000000faffffff6d0920000800000018260000", @ANYRES32, @ANYBLOB="000000004a00aafe"], &(0x7f0000000580)='GPL\x00', 0xd, 0x4f, &(0x7f00000005c0)=""/79, 0x41000, 0x20, '\x00', 0x0, @sched_cls=0x37, r1, 0x8, &(0x7f0000000640)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000680)={0x5, 0x9, 0x3, 0x1f}, 0x10, 0x0, 0xffffffffffffffff, 0x3, &(0x7f00000006c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000700)=[{0x2, 0x1, 0xb, 0xc}, {0x0, 0x4, 0xb, 0x1}, {0x2, 0x5, 0xe, 0xa}], 0x10, 0x58586df}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r10, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r11) socket$kcm(0xa, 0x2, 0x3a) 1.26065516s ago: executing program 33 (id=396): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0xffffffff, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10305, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x8}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r3, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0xe07e872424dfef8b) recvmsg$kcm(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000100)=""/199, 0xc7}], 0x1}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000040000000400000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r4, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001280)={r4, &(0x7f00000001c0)="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", &(0x7f00000011c0)=""/167}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000012c0)={'veth0_to_bridge\x00', 0x7347981a6b7c8371}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a1d080201000000040000a118000200ffe5ffffff0000000000000000000001a80016ea1f00084003bc5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f722f054f55153c6f94007134cf6ee08000a09108a8d8ef075c0100000000000000cb490000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d1600360d8bcc00400040fad95667e0060000000000000580bb9ad809d5e1cace81b341139fe3cd4032e8edb100273f90a9b9b98c154bb444c6d291", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x20004c04) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r6, 0x6, 0x17, &(0x7f00000000c0), 0x4) 119.917066ms ago: executing program 34 (id=401): perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x10, &(0x7f0000000000), 0x4) close(r2) sendmsg$inet(r3, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x8004) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000ffffffffffff05000000", @ANYRES32=0x1], 0x48) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB='V?\x00\x00-\x00Y'], 0xfe33) close(r3) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r7) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x4, 0xc8}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)) bpf$ENABLE_STATS(0x20, &(0x7f0000000000), 0x4) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) write$cgroup_devices(r8, &(0x7f00000005c0)=ANY=[], 0xfffffeff) r9 = bpf$ITER_CREATE(0xb, &(0x7f0000000200), 0xffffffffffffff87) r10 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r10, 0x6, 0xa, &(0x7f0000000500)=r9, 0x4) 0s ago: executing program 35 (id=400): sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0xca, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) r5 = openat$cgroup_subtree(r4, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000400)=ANY=[], 0x5) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r3], 0x12) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0x7}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x4fe76937}, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r9, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r10, &(0x7f00000006c0)=ANY=[], 0xcfa4) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x4, 0x8, 0x3d, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000180), 0x1003, r11}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r11, &(0x7f0000000080), 0x0}, 0x20) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095", @ANYRES64=r7, @ANYRESOCT, @ANYRESHEX=r6], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r13 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r13, 0x29, 0x46, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000580)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000080)) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x1ff) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.20' (ED25519) to the list of known hosts. [ 73.806391][ T5762] cgroup: Unknown subsys name 'net' [ 73.940006][ T5762] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.599967][ T5762] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 77.614325][ T5776] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.624790][ T5781] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.632955][ T5781] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.640517][ T5781] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.648621][ T5781] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.657307][ T5782] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.665357][ T5782] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.674343][ T5782] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.682970][ T5782] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.691449][ T5782] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.698155][ T5781] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.705944][ T5781] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.714937][ T5782] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 77.715155][ T5781] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.730267][ T5782] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.731177][ T5781] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 77.745729][ T5788] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.752870][ T5781] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.756832][ T5787] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.762951][ T5781] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 77.778658][ T5787] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.790815][ T5086] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.804962][ T5086] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 77.822299][ T5783] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.242475][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 78.308491][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 78.390958][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 78.408936][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 78.507451][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.515291][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.522523][ T5773] bridge_slave_0: entered allmulticast mode [ 78.530500][ T5773] bridge_slave_0: entered promiscuous mode [ 78.538756][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.546045][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.553915][ T5777] bridge_slave_0: entered allmulticast mode [ 78.560748][ T5777] bridge_slave_0: entered promiscuous mode [ 78.593650][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.600817][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.608272][ T5773] bridge_slave_1: entered allmulticast mode [ 78.615438][ T5773] bridge_slave_1: entered promiscuous mode [ 78.622572][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.629880][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.639604][ T5777] bridge_slave_1: entered allmulticast mode [ 78.646841][ T5777] bridge_slave_1: entered promiscuous mode [ 78.695973][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.705623][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.713136][ T5779] bridge_slave_0: entered allmulticast mode [ 78.720087][ T5779] bridge_slave_0: entered promiscuous mode [ 78.750812][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.772095][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.779387][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.787472][ T5779] bridge_slave_1: entered allmulticast mode [ 78.797437][ T5779] bridge_slave_1: entered promiscuous mode [ 78.817055][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.826352][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.833611][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.840802][ T5778] bridge_slave_0: entered allmulticast mode [ 78.848241][ T5778] bridge_slave_0: entered promiscuous mode [ 78.878500][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.891097][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.920439][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.928150][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.935917][ T5778] bridge_slave_1: entered allmulticast mode [ 78.943179][ T5778] bridge_slave_1: entered promiscuous mode [ 78.952244][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.990553][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.003596][ T5777] team0: Port device team_slave_0 added [ 79.013650][ T5773] team0: Port device team_slave_0 added [ 79.039930][ T5777] team0: Port device team_slave_1 added [ 79.047477][ T5773] team0: Port device team_slave_1 added [ 79.055741][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.108667][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.130498][ T5779] team0: Port device team_slave_0 added [ 79.139907][ T5779] team0: Port device team_slave_1 added [ 79.147321][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.154452][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.180978][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.195771][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.203013][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.229324][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.271112][ T5778] team0: Port device team_slave_0 added [ 79.292154][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.302128][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.331433][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.345026][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.352282][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.378378][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.413575][ T5778] team0: Port device team_slave_1 added [ 79.429237][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.438855][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.465188][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.527105][ T5773] hsr_slave_0: entered promiscuous mode [ 79.535234][ T5773] hsr_slave_1: entered promiscuous mode [ 79.543590][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.550568][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.576668][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.603285][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.610278][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.636810][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.650071][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.660137][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.688694][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.704369][ T5777] hsr_slave_0: entered promiscuous mode [ 79.710684][ T5777] hsr_slave_1: entered promiscuous mode [ 79.717116][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.724935][ T5777] Cannot create hsr debugfs directory [ 79.782356][ T5779] hsr_slave_0: entered promiscuous mode [ 79.788994][ T5779] hsr_slave_1: entered promiscuous mode [ 79.797672][ T5779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.805302][ T5779] Cannot create hsr debugfs directory [ 79.813385][ T51] Bluetooth: hci0: command tx timeout [ 79.885347][ T51] Bluetooth: hci2: command tx timeout [ 79.885402][ T5086] Bluetooth: hci1: command tx timeout [ 79.891227][ T5783] Bluetooth: hci3: command tx timeout [ 79.929738][ T5778] hsr_slave_0: entered promiscuous mode [ 79.937230][ T5778] hsr_slave_1: entered promiscuous mode [ 79.944365][ T5778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.951927][ T5778] Cannot create hsr debugfs directory [ 80.293331][ T5773] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.319704][ T5773] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.330866][ T5773] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.342352][ T5773] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.400477][ T5778] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.440401][ T5778] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.452052][ T5778] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.480200][ T5778] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.539371][ T5779] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.551078][ T5779] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.587799][ T5779] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.597960][ T5779] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.651072][ T5777] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.675531][ T5777] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.695088][ T5777] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.719333][ T5777] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.756927][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.841349][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.859225][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.866626][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.883727][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.901384][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.908531][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.955607][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.995958][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.010042][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.017470][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.033731][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.050332][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.057577][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.074857][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.082012][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.120932][ T142] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.128158][ T142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.194567][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.218753][ T5773] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.282248][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.348685][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.356021][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.377415][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.384640][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.751987][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.832128][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.884365][ T5783] Bluetooth: hci0: command tx timeout [ 81.935491][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.963217][ T5783] Bluetooth: hci1: command tx timeout [ 81.968693][ T5783] Bluetooth: hci3: command tx timeout [ 81.974373][ T51] Bluetooth: hci2: command tx timeout [ 82.010654][ T5778] veth0_vlan: entered promiscuous mode [ 82.024010][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.031135][ T5773] veth0_vlan: entered promiscuous mode [ 82.059481][ T5778] veth1_vlan: entered promiscuous mode [ 82.088656][ T5773] veth1_vlan: entered promiscuous mode [ 82.177843][ T5773] veth0_macvtap: entered promiscuous mode [ 82.184891][ T5779] veth0_vlan: entered promiscuous mode [ 82.191622][ T5777] veth0_vlan: entered promiscuous mode [ 82.209145][ T5777] veth1_vlan: entered promiscuous mode [ 82.221376][ T5773] veth1_macvtap: entered promiscuous mode [ 82.232236][ T5778] veth0_macvtap: entered promiscuous mode [ 82.259042][ T5778] veth1_macvtap: entered promiscuous mode [ 82.267753][ T5779] veth1_vlan: entered promiscuous mode [ 82.300329][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.314068][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.341432][ T5773] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.350648][ T5773] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.360225][ T5773] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.369328][ T5773] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.386047][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.397271][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.409019][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.422398][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.433362][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.451832][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.485397][ T5777] veth0_macvtap: entered promiscuous mode [ 82.516039][ T5779] veth0_macvtap: entered promiscuous mode [ 82.535364][ T5778] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.544424][ T5778] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.556231][ T5778] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.565273][ T5778] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.581276][ T5777] veth1_macvtap: entered promiscuous mode [ 82.603529][ T5779] veth1_macvtap: entered promiscuous mode [ 82.627193][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.638505][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.648770][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.659587][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.671208][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.740784][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.756331][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.767577][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.778220][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.790224][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.802258][ T5777] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.811880][ T5777] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.822984][ T5777] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.831714][ T5777] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.872148][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.885118][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.895339][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.907372][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.919086][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.930613][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.942977][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.971996][ T142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.980923][ T142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.996534][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.008447][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.018413][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.028909][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.039260][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.050052][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.062795][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.072851][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.080805][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.143987][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.147103][ T5779] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.165148][ T5779] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.168828][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.174804][ T5779] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.191198][ T5779] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.299431][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.307891][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.329828][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.339022][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.412461][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.431208][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.523842][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.531742][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.775810][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.813908][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.967293][ T5783] Bluetooth: hci0: command tx timeout [ 84.042626][ C1] hrtimer: interrupt took 61593 ns [ 84.052669][ T5783] Bluetooth: hci3: command tx timeout [ 84.054726][ T51] Bluetooth: hci2: command tx timeout [ 84.058204][ T5783] Bluetooth: hci1: command tx timeout [ 84.503863][ T5852] netlink: 'syz.2.3': attribute type 10 has an invalid length. [ 84.589549][ T5852] veth1_macvtap: left promiscuous mode [ 84.722579][ T5855] netlink: 'syz.1.6': attribute type 29 has an invalid length. [ 85.066482][ T5860] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.5'. [ 86.056729][ T5783] Bluetooth: hci0: command tx timeout [ 86.079560][ T5855] netlink: 'syz.1.6': attribute type 29 has an invalid length. [ 86.107734][ T5864] warning: `syz.1.6' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 86.123328][ T5783] Bluetooth: hci1: command tx timeout [ 86.132863][ T5783] Bluetooth: hci2: command tx timeout [ 86.133449][ T51] Bluetooth: hci3: command tx timeout [ 86.218084][ T5852] syz.2.3 (5852) used greatest stack depth: 19304 bytes left [ 86.231552][ T5867] netlink: 'syz.3.7': attribute type 10 has an invalid length. [ 86.263379][ T5867] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7'. [ 86.351358][ T5867] batman_adv: batadv0: Adding interface: virt_wifi0 [ 86.360633][ T5867] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.399141][ T5867] batman_adv: batadv0: Interface activated: virt_wifi0 [ 86.457461][ T5869] sit0: entered allmulticast mode [ 86.493467][ T5873] sit0: entered promiscuous mode [ 86.662506][ T5861] netlink: 'syz.1.6': attribute type 29 has an invalid length. [ 86.847415][ T5878] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.8'. [ 86.948631][ T5878] netlink: 22828 bytes leftover after parsing attributes in process `syz.2.8'. [ 87.264816][ T5886] mac80211_hwsim hwsim4 .3ãc¤±: renamed from wlan1 (while UP) [ 87.382340][ T5887] netlink: 'syz.1.10': attribute type 3 has an invalid length. [ 87.415758][ T5887] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.10'. [ 87.578724][ T5889] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.11'. [ 87.610108][ T5889] bridge_slave_1: default FDB implementation only supports local addresses [ 87.639076][ T5885] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9'. [ 94.902341][ T973] cfg80211: failed to load regulatory.db [ 95.331526][ T5920] netlink: 'syz.0.17': attribute type 10 has an invalid length. [ 95.781542][ T5927] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 96.078577][ T5930] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.20'. [ 98.517232][ T5923] hsr_slave_0: left promiscuous mode [ 98.528647][ T5923] hsr_slave_1: left promiscuous mode [ 99.110140][ T5938] netlink: 'syz.1.23': attribute type 39 has an invalid length. [ 99.859123][ T5936] netlink: 'syz.3.21': attribute type 21 has an invalid length. [ 99.928090][ T5936] netlink: 156 bytes leftover after parsing attributes in process `syz.3.21'. [ 100.135366][ T5944] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.22'. [ 100.186661][ T5944] bridge_slave_1: default FDB implementation only supports local addresses [ 101.208499][ T5958] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.27'. [ 101.246480][ T5958] bridge_slave_1: default FDB implementation only supports local addresses [ 102.561003][ T5976] netlink: 'syz.1.32': attribute type 9 has an invalid length. [ 102.583897][ T5976] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.32'. [ 103.121709][ T5982] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 103.388865][ T5985] netlink: 'syz.2.36': attribute type 10 has an invalid length. [ 103.400012][ T5985] netlink: 156 bytes leftover after parsing attributes in process `syz.2.36'. [ 103.483263][ T5988] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.38'. [ 103.515783][ T5988] bridge_slave_1: default FDB implementation only supports local addresses [ 103.534266][ T5990] netlink: 'syz.3.37': attribute type 2 has an invalid length. [ 103.907776][ T5996] netlink: 'syz.0.47': attribute type 2 has an invalid length. [ 104.006544][ T5985] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.36'. [ 104.044248][ T5985] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.36'. [ 104.115364][ T5991] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.36'. [ 106.314805][ T6022] netlink: 'syz.2.49': attribute type 9 has an invalid length. [ 106.324571][ T6022] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.49'. [ 106.535866][ T6026] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.51'. [ 106.576352][ T6026] bridge_slave_1: default FDB implementation only supports local addresses [ 106.984904][ T6034] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.53'. [ 107.019448][ T6031] netlink: 'syz.3.53': attribute type 10 has an invalid length. [ 107.062444][ T6031] netlink: 156 bytes leftover after parsing attributes in process `syz.3.53'. [ 107.111891][ T6029] netlink: 'syz.1.52': attribute type 21 has an invalid length. [ 107.121251][ T6029] netlink: 156 bytes leftover after parsing attributes in process `syz.1.52'. [ 107.143023][ T6034] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.53'. [ 107.233101][ T6035] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.53'. [ 107.688842][ T6042] netlink: 'syz.0.63': attribute type 9 has an invalid length. [ 107.698914][ T6042] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.63'. [ 110.114762][ T6069] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.72'. [ 110.181520][ T6071] netlink: 'syz.0.64': attribute type 10 has an invalid length. [ 110.221096][ T6071] netlink: 156 bytes leftover after parsing attributes in process `syz.0.64'. [ 110.340295][ T6066] bridge_slave_1: default FDB implementation only supports local addresses [ 113.183039][ T6092] __nla_validate_parse: 4 callbacks suppressed [ 113.183058][ T6092] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.69'. [ 113.384020][ T6092] bridge_slave_1: default FDB implementation only supports local addresses [ 115.830554][ T6117] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.75'. [ 115.897180][ T6117] bridge_slave_1: default FDB implementation only supports local addresses [ 116.056603][ T6119] netlink: 'syz.3.76': attribute type 3 has an invalid length. [ 116.098732][ T6119] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.76'. [ 116.438443][ T6128] netlink: 'syz.1.77': attribute type 10 has an invalid length. [ 116.459656][ T6128] netlink: 156 bytes leftover after parsing attributes in process `syz.1.77'. [ 116.687629][ T6128] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.77'. [ 118.103464][ T6128] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.77'. [ 118.114451][ T6134] netlink: 'syz.3.79': attribute type 10 has an invalid length. [ 118.200139][ T6129] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.77'. [ 118.426498][ T6149] mac80211_hwsim hwsim9 .3ãc¤±: renamed from wlan1 (while UP) [ 118.455858][ T6156] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.82'. [ 118.771812][ T6162] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.86'. [ 118.795830][ T6162] bridge_slave_1: default FDB implementation only supports local addresses [ 118.975345][ T6166] netlink: 'syz.3.87': attribute type 10 has an invalid length. [ 119.059162][ T6171] FAULT_INJECTION: forcing a failure. [ 119.059162][ T6171] name failslab, interval 1, probability 0, space 0, times 1 [ 119.079603][ T6166] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 119.095504][ T6171] CPU: 1 PID: 6171 Comm: syz.0.88 Not tainted syzkaller #0 [ 119.102782][ T6171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 119.112896][ T6171] Call Trace: [ 119.116222][ T6171] [ 119.119196][ T6171] dump_stack_lvl+0x18c/0x250 [ 119.123974][ T6171] ? show_regs_print_info+0x20/0x20 [ 119.129343][ T6171] ? load_image+0x420/0x420 [ 119.133914][ T6171] ? __might_sleep+0xe0/0xe0 [ 119.138568][ T6171] ? __lock_acquire+0x7d40/0x7d40 [ 119.143758][ T6171] should_fail_ex+0x39d/0x4d0 [ 119.148510][ T6171] should_failslab+0x9/0x20 [ 119.153068][ T6171] slab_pre_alloc_hook+0x59/0x310 [ 119.158255][ T6171] ? call_usermodehelper_setup+0x8e/0x260 [ 119.164008][ T6171] __kmem_cache_alloc_node+0x53/0x250 [ 119.169456][ T6171] ? call_usermodehelper_setup+0x8e/0x260 [ 119.175236][ T6171] kmalloc_trace+0x2a/0xe0 [ 119.179850][ T6171] call_usermodehelper_setup+0x8e/0x260 [ 119.185538][ T6171] ? __request_module+0x600/0x600 [ 119.190630][ T6171] __request_module+0x3bb/0x600 [ 119.195532][ T6171] ? ____sys_sendmsg+0x5ba/0x960 [ 119.200515][ T6171] ? ___sys_sendmsg+0x2a6/0x360 [ 119.205418][ T6171] ? __se_sys_sendmsg+0x1c2/0x2b0 [ 119.210503][ T6171] ? module_enforce_rwx_sections+0x150/0x150 [ 119.216604][ T6171] __inet_diag_dump+0x173/0x380 [ 119.221535][ T6171] inet_diag_dump_compat+0x182/0x230 [ 119.226873][ T6171] ? rcu_is_watching+0x15/0xb0 [ 119.231702][ T6171] ? inet_diag_dump_start_compat+0x20/0x20 [ 119.237590][ T6171] ? __alloc_skb+0x1b2/0x2c0 [ 119.242243][ T6171] netlink_dump+0x747/0xe50 [ 119.246833][ T6171] ? netlink_lookup+0x200/0x200 [ 119.251770][ T6171] ? __kasan_kmalloc+0x8f/0xa0 [ 119.256590][ T6171] ? __inet_diag_dump_start+0x886/0x9f0 [ 119.262271][ T6171] ? netlink_lookup+0x30/0x200 [ 119.267210][ T6171] __netlink_dump_start+0x5f1/0x810 [ 119.272493][ T6171] inet_diag_rcv_msg_compat+0x215/0x440 [ 119.278211][ T6171] ? __inet_diag_dump+0x380/0x380 [ 119.283312][ T6171] ? sock_diag_rcv_msg+0xd1/0x600 [ 119.288417][ T6171] ? inet_diag_rcv_msg_compat+0x440/0x440 [ 119.294207][ T6171] ? inet_diag_dump_start_compat+0x20/0x20 [ 119.300054][ T6171] ? inet_diag_dump+0x50/0x50 [ 119.304782][ T6171] ? __inet_diag_dump+0x380/0x380 [ 119.309884][ T6171] sock_diag_rcv_msg+0x3d8/0x600 [ 119.314915][ T6171] netlink_rcv_skb+0x241/0x4d0 [ 119.319741][ T6171] ? sock_diag_bind+0xb0/0xb0 [ 119.324494][ T6171] ? netlink_ack+0x1180/0x1180 [ 119.329413][ T6171] ? __lock_acquire+0x7d40/0x7d40 [ 119.334516][ T6171] ? netlink_deliver_tap+0x2e/0x1b0 [ 119.339777][ T6171] sock_diag_rcv+0x2a/0x40 [ 119.344258][ T6171] netlink_unicast+0x751/0x8d0 [ 119.349137][ T6171] netlink_sendmsg+0x8d0/0xbf0 [ 119.354343][ T6171] ? netlink_getsockopt+0x590/0x590 [ 119.359711][ T6171] ? aa_sock_msg_perm+0x94/0x150 [ 119.364724][ T6171] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 119.370085][ T6171] ? security_socket_sendmsg+0x80/0xa0 [ 119.375640][ T6171] ? netlink_getsockopt+0x590/0x590 [ 119.380903][ T6171] ____sys_sendmsg+0x5ba/0x960 [ 119.385744][ T6171] ? __asan_memset+0x22/0x40 [ 119.390493][ T6171] ? __sys_sendmsg_sock+0x30/0x30 [ 119.395574][ T6171] ? __import_iovec+0x5f2/0x850 [ 119.400516][ T6171] ? import_iovec+0x73/0xa0 [ 119.405088][ T6171] ___sys_sendmsg+0x2a6/0x360 [ 119.409916][ T6171] ? get_pid_task+0x20/0x1e0 [ 119.414585][ T6171] ? __sys_sendmsg+0x2a0/0x2a0 [ 119.419550][ T6171] ? __lock_acquire+0x7d40/0x7d40 [ 119.424691][ T6171] __se_sys_sendmsg+0x1c2/0x2b0 [ 119.429608][ T6171] ? __x64_sys_sendmsg+0x80/0x80 [ 119.434657][ T6171] ? lockdep_hardirqs_on+0x98/0x150 [ 119.439932][ T6171] do_syscall_64+0x55/0xb0 [ 119.444401][ T6171] ? clear_bhb_loop+0x40/0x90 [ 119.449133][ T6171] ? clear_bhb_loop+0x40/0x90 [ 119.453880][ T6171] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 119.459842][ T6171] RIP: 0033:0x7fec0e19ce59 [ 119.464303][ T6171] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.483958][ T6171] RSP: 002b:00007fec0eff2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 119.492387][ T6171] RAX: ffffffffffffffda RBX: 00007fec0e415fa0 RCX: 00007fec0e19ce59 [ 119.500388][ T6171] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 119.508396][ T6171] RBP: 00007fec0eff2090 R08: 0000000000000000 R09: 0000000000000000 [ 119.516420][ T6171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 119.524443][ T6171] R13: 00007fec0e416038 R14: 00007fec0e415fa0 R15: 00007ffef5220938 [ 119.532447][ T6171] [ 119.602679][ T6174] netlink: 'syz.2.91': attribute type 10 has an invalid length. [ 119.978583][ T6184] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.95'. [ 120.424433][ T6197] netlink: 'syz.1.99': attribute type 3 has an invalid length. [ 120.455705][ T6197] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.99'. [ 120.464021][ T6203] batman_adv: batadv0: adding TT local entry 00:00:00:e1:ff:ff to non-existent VLAN 815 [ 120.533156][ T6203] batman_adv: batadv0: adding TT local entry 00:00:00:e1:ff:ff to non-existent VLAN 815 [ 120.566576][ T6203] batman_adv: batadv0: adding TT local entry 00:00:00:e1:ff:ff to non-existent VLAN 815 [ 120.601120][ T6203] batman_adv: batadv0: adding TT local entry 00:00:00:e1:ff:ff to non-existent VLAN 815 [ 120.625724][ T6203] batman_adv: batadv0: adding TT local entry 00:00:00:e1:ff:ff to non-existent VLAN 815 [ 120.662832][ T6203] batman_adv: batadv0: adding TT local entry 00:00:00:e1:ff:ff to non-existent VLAN 815 [ 120.713077][ T6203] batman_adv: batadv0: adding TT local entry 00:00:00:e1:ff:ff to non-existent VLAN 815 [ 121.070673][ T6218] batman_adv: batadv0: adding TT local entry 00:00:00:e1:ff:ff to non-existent VLAN 815 [ 121.113096][ T6218] batman_adv: batadv0: adding TT local entry 00:00:00:e1:ff:ff to non-existent VLAN 815 [ 121.135703][ T6220] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.108'. [ 121.146038][ T6218] batman_adv: batadv0: adding TT local entry 00:00:00:e1:ff:ff to non-existent VLAN 815 [ 121.359337][ T6229] netlink: 'syz.1.109': attribute type 10 has an invalid length. [ 121.589589][ T6237] netlink: 'syz.3.113': attribute type 2 has an invalid length. [ 121.603311][ T6237] netlink: 'syz.3.113': attribute type 8 has an invalid length. [ 121.620909][ T6237] netlink: 132 bytes leftover after parsing attributes in process `syz.3.113'. [ 121.744874][ T6244] netlink: 'syz.2.112': attribute type 3 has an invalid length. [ 121.783386][ T6244] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.112'. [ 122.077023][ T6251] mac80211_hwsim hwsim5 .3ãc¤±: renamed from wlan1 (while UP) [ 122.097775][ T6254] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.119'. [ 122.369293][ T6260] netlink: 'syz.0.116': attribute type 3 has an invalid length. [ 122.378060][ T6260] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.116'. [ 123.263772][ T6269] netlink: 'syz.3.125': attribute type 6 has an invalid length. [ 123.296490][ T6269] netlink: 164 bytes leftover after parsing attributes in process `syz.3.125'. [ 123.634637][ T6278] FAULT_INJECTION: forcing a failure. [ 123.634637][ T6278] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 123.686940][ T6278] CPU: 1 PID: 6278 Comm: syz.1.128 Not tainted syzkaller #0 [ 123.694395][ T6278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 123.704486][ T6278] Call Trace: [ 123.707798][ T6278] [ 123.710761][ T6278] dump_stack_lvl+0x18c/0x250 [ 123.715482][ T6278] ? show_regs_print_info+0x20/0x20 [ 123.720731][ T6278] ? load_image+0x420/0x420 [ 123.725275][ T6278] ? __might_fault+0xaa/0x120 [ 123.730082][ T6278] ? __lock_acquire+0x7d40/0x7d40 [ 123.735137][ T6278] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 123.741290][ T6278] should_fail_ex+0x39d/0x4d0 [ 123.746048][ T6278] _copy_from_iter+0x1d9/0x12e0 [ 123.750920][ T6278] ? __virt_addr_valid+0x18c/0x540 [ 123.756065][ T6278] ? __lock_acquire+0x7d40/0x7d40 [ 123.761196][ T6278] ? __alloc_skb+0x138/0x2c0 [ 123.765797][ T6278] ? rcu_is_watching+0x15/0xb0 [ 123.770576][ T6278] ? __alloc_skb+0x138/0x2c0 [ 123.775181][ T6278] ? copyout_mc+0x70/0x70 [ 123.779528][ T6278] ? __virt_addr_valid+0x18c/0x540 [ 123.784649][ T6278] ? __virt_addr_valid+0x18c/0x540 [ 123.789770][ T6278] ? __virt_addr_valid+0x469/0x540 [ 123.794903][ T6278] ? __check_object_size+0x506/0xa20 [ 123.800197][ T6278] pfkey_sendmsg+0x203/0x10e0 [ 123.804890][ T6278] ? __might_sleep+0xe0/0xe0 [ 123.809491][ T6278] ? mark_lock+0x94/0x320 [ 123.813836][ T6278] ? __lock_acquire+0x1273/0x7d40 [ 123.818872][ T6278] ? pfkey_release+0x320/0x320 [ 123.823650][ T6278] ? aa_sk_perm+0x83c/0x970 [ 123.828254][ T6278] ? aa_af_perm+0x330/0x330 [ 123.832761][ T6278] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 123.839192][ T6278] ? aa_sock_msg_perm+0x94/0x150 [ 123.844145][ T6278] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 123.849443][ T6278] ? security_socket_sendmsg+0x80/0xa0 [ 123.854915][ T6278] ? pfkey_release+0x320/0x320 [ 123.859778][ T6278] ____sys_sendmsg+0x5ba/0x960 [ 123.864558][ T6278] ? __asan_memset+0x22/0x40 [ 123.869160][ T6278] ? __sys_sendmsg_sock+0x30/0x30 [ 123.874214][ T6278] ? __import_iovec+0x5f2/0x850 [ 123.879082][ T6278] ? import_iovec+0x73/0xa0 [ 123.883682][ T6278] ___sys_sendmsg+0x2a6/0x360 [ 123.888369][ T6278] ? get_pid_task+0x20/0x1e0 [ 123.892977][ T6278] ? __sys_sendmsg+0x2a0/0x2a0 [ 123.897768][ T6278] ? __lock_acquire+0x7d40/0x7d40 [ 123.902822][ T6278] __se_sys_sendmsg+0x1c2/0x2b0 [ 123.907684][ T6278] ? __x64_sys_sendmsg+0x80/0x80 [ 123.912733][ T6278] ? lockdep_hardirqs_on+0x98/0x150 [ 123.917952][ T6278] do_syscall_64+0x55/0xb0 [ 123.922389][ T6278] ? clear_bhb_loop+0x40/0x90 [ 123.927073][ T6278] ? clear_bhb_loop+0x40/0x90 [ 123.931844][ T6278] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 123.937840][ T6278] RIP: 0033:0x7f59b579ce59 [ 123.942267][ T6278] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.961887][ T6278] RSP: 002b:00007f59b663f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 123.970320][ T6278] RAX: ffffffffffffffda RBX: 00007f59b5a15fa0 RCX: 00007f59b579ce59 [ 123.978303][ T6278] RDX: 0000000000000600 RSI: 0000200000003780 RDI: 0000000000000004 [ 123.986286][ T6278] RBP: 00007f59b663f090 R08: 0000000000000000 R09: 0000000000000000 [ 123.994267][ T6278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.002242][ T6278] R13: 00007f59b5a16038 R14: 00007f59b5a15fa0 R15: 00007fff2b16e848 [ 124.010235][ T6278] [ 124.029969][ T6281] netlink: 3752 bytes leftover after parsing attributes in process `syz.3.129'. [ 124.471134][ T6295] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.134'. [ 125.621815][ T6301] mac80211_hwsim hwsim7 .3ãc¤±: renamed from wlan1 (while UP) [ 125.908620][ T6301] netlink: 'syz.3.136': attribute type 3 has an invalid length. [ 125.932747][ T6301] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.136'. [ 126.173133][ T6312] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.140'. [ 126.216508][ T6312] bridge_slave_1: default FDB implementation only supports local addresses [ 126.558170][ T6323] netlink: 52 bytes leftover after parsing attributes in process `syz.3.146'. [ 126.695000][ T6328] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.147'. [ 127.788827][ T6338] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.149'. [ 128.896475][ T6348] netlink: 'syz.2.151': attribute type 9 has an invalid length. [ 129.115597][ T6352] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.151'. [ 129.165253][ T6349] netlink: 'syz.1.152': attribute type 16 has an invalid length. [ 129.292734][ T6349] netlink: 'syz.1.152': attribute type 3 has an invalid length. [ 129.300450][ T6349] netlink: 132 bytes leftover after parsing attributes in process `syz.1.152'. [ 129.418583][ T6348] netlink: 7 bytes leftover after parsing attributes in process `syz.2.151'. [ 129.706638][ T6350] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.153'. [ 129.729489][ T6350] bridge_slave_1: default FDB implementation only supports local addresses [ 130.275297][ T6369] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.159'. [ 131.327223][ T6382] net_ratelimit: 13 callbacks suppressed [ 131.327245][ T6382] batman_adv: batadv0: adding TT local entry 00:00:00:e1:ff:ff to non-existent VLAN 815 [ 131.383198][ T6382] batman_adv: batadv0: adding TT local entry 00:00:00:e1:ff:ff to non-existent VLAN 815 [ 131.404639][ T6382] batman_adv: batadv0: adding TT local entry 00:00:00:e1:ff:ff to non-existent VLAN 815 [ 131.423390][ T6382] batman_adv: batadv0: adding TT local entry 00:00:00:e1:ff:ff to non-existent VLAN 815 [ 131.443502][ T6382] batman_adv: batadv0: adding TT local entry 00:00:00:e1:ff:ff to non-existent VLAN 815 [ 131.473417][ T6382] batman_adv: batadv0: adding TT local entry 00:00:00:e1:ff:ff to non-existent VLAN 815 [ 131.514381][ T6382] batman_adv: batadv0: adding TT local entry 00:00:00:e1:ff:ff to non-existent VLAN 815 [ 131.736359][ T6384] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.162'. [ 131.866411][ T6388] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.164'. [ 131.900139][ T6388] bridge_slave_1: default FDB implementation only supports local addresses [ 132.713420][ T6401] FAULT_INJECTION: forcing a failure. [ 132.713420][ T6401] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 132.819245][ T6401] CPU: 0 PID: 6401 Comm: syz.1.168 Not tainted syzkaller #0 [ 132.826825][ T6401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 132.837005][ T6401] Call Trace: [ 132.840318][ T6401] [ 132.843286][ T6401] dump_stack_lvl+0x18c/0x250 [ 132.848021][ T6401] ? show_regs_print_info+0x20/0x20 [ 132.853272][ T6401] ? load_image+0x420/0x420 [ 132.857821][ T6401] ? __might_fault+0xaa/0x120 [ 132.862547][ T6401] should_fail_ex+0x39d/0x4d0 [ 132.867278][ T6401] copyin+0x1a/0x90 [ 132.871142][ T6401] _copy_from_iter+0x54f/0x12e0 [ 132.876044][ T6401] ? __virt_addr_valid+0x18c/0x540 [ 132.881213][ T6401] ? copyout_mc+0x70/0x70 [ 132.885584][ T6401] ? __virt_addr_valid+0x18c/0x540 [ 132.890738][ T6401] ? __virt_addr_valid+0x18c/0x540 [ 132.895888][ T6401] ? __virt_addr_valid+0x469/0x540 [ 132.901050][ T6401] ? __check_object_size+0x506/0xa20 [ 132.906480][ T6401] skb_copy_datagram_from_iter+0xf4/0x6e0 [ 132.912323][ T6401] ? dev_get_by_index+0x22/0x2d0 [ 132.917313][ T6401] ? skb_put+0x11b/0x210 [ 132.921600][ T6401] packet_sendmsg+0x33ff/0x4c30 [ 132.926510][ T6401] ? __might_sleep+0xe0/0xe0 [ 132.931122][ T6401] ? mark_lock+0x94/0x320 [ 132.935466][ T6401] ? __lock_acquire+0x1273/0x7d40 [ 132.940504][ T6401] ? verify_lock_unused+0x140/0x140 [ 132.945718][ T6401] ? aa_sk_perm+0x83c/0x970 [ 132.950231][ T6401] ? packet_getsockopt+0xad0/0xad0 [ 132.955360][ T6401] ? tomoyo_path_permission+0x1e5/0x380 [ 132.960924][ T6401] ? aa_sock_msg_perm+0x94/0x150 [ 132.965881][ T6401] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 132.971177][ T6401] ? security_socket_sendmsg+0x80/0xa0 [ 132.976655][ T6401] ? packet_getsockopt+0xad0/0xad0 [ 132.981808][ T6401] ____sys_sendmsg+0x5ba/0x960 [ 132.986582][ T6401] ? __lock_acquire+0x7d40/0x7d40 [ 132.991619][ T6401] ? __asan_memset+0x22/0x40 [ 132.996313][ T6401] ? __sys_sendmsg_sock+0x30/0x30 [ 133.001343][ T6401] ? __import_iovec+0x3fa/0x850 [ 133.006212][ T6401] ? import_iovec+0x73/0xa0 [ 133.010728][ T6401] ___sys_sendmsg+0x2a6/0x360 [ 133.015422][ T6401] ? get_pid_task+0x20/0x1e0 [ 133.020030][ T6401] ? __sys_sendmsg+0x2a0/0x2a0 [ 133.024821][ T6401] ? __lock_acquire+0x7d40/0x7d40 [ 133.029882][ T6401] __se_sys_sendmsg+0x1c2/0x2b0 [ 133.034749][ T6401] ? __x64_sys_sendmsg+0x80/0x80 [ 133.039717][ T6401] ? lockdep_hardirqs_on+0x98/0x150 [ 133.044934][ T6401] do_syscall_64+0x55/0xb0 [ 133.049359][ T6401] ? clear_bhb_loop+0x40/0x90 [ 133.054039][ T6401] ? clear_bhb_loop+0x40/0x90 [ 133.058732][ T6401] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 133.064640][ T6401] RIP: 0033:0x7f59b579ce59 [ 133.069091][ T6401] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.088708][ T6401] RSP: 002b:00007f59b663f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 133.097138][ T6401] RAX: ffffffffffffffda RBX: 00007f59b5a15fa0 RCX: 00007f59b579ce59 [ 133.105120][ T6401] RDX: 0000000000000000 RSI: 0000200000000b00 RDI: 0000000000000003 [ 133.113099][ T6401] RBP: 00007f59b663f090 R08: 0000000000000000 R09: 0000000000000000 [ 133.121076][ T6401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 133.129376][ T6401] R13: 00007f59b5a16038 R14: 00007f59b5a15fa0 R15: 00007fff2b16e848 [ 133.137376][ T6401] [ 133.221923][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.228802][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.296851][ T6405] netlink: 60 bytes leftover after parsing attributes in process `syz.0.170'. [ 133.336256][ T6404] netlink: 'syz.3.169': attribute type 29 has an invalid length. [ 133.367848][ T6404] netlink: 'syz.3.169': attribute type 29 has an invalid length. [ 133.647011][ T6410] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.172'. [ 133.929316][ T51] Bluetooth: hci3: ISO packet for unknown connection handle 19 [ 134.550147][ T6425] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.175'. [ 134.600221][ T6425] bridge_slave_1: default FDB implementation only supports local addresses [ 135.035964][ T6429] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.178'. [ 135.098632][ T6433] netlink: 160 bytes leftover after parsing attributes in process `syz.1.179'. [ 136.097884][ T6441] Driver unsupported XDP return value 0 on prog (id 145) dev N/A, expect packet loss! [ 136.300788][ T6445] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.183'. [ 136.325204][ T6445] bridge_slave_1: default FDB implementation only supports local addresses [ 137.977730][ T6456] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.186'. [ 141.098494][ T6466] netlink: zone id is out of range [ 141.132712][ T6466] netlink: set zone limit has 8 unknown bytes [ 142.539509][ T6450] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.184'. [ 142.548783][ T6450] bridge_slave_1: default FDB implementation only supports local addresses [ 142.558468][ T6462] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.189'. [ 142.594359][ T6462] bridge_slave_1: default FDB implementation only supports local addresses [ 142.800162][ T6471] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.190'. [ 143.091798][ T6477] Zero length message leads to an empty skb [ 143.955081][ T6486] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.196'. [ 144.188164][ T51] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 144.403594][ T6491] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.198'. [ 145.444573][ T6497] netlink: 'syz.2.200': attribute type 10 has an invalid length. [ 145.579325][ T6497] team0: Port device virt_wifi0 added [ 145.782722][ T6497] syz.2.200 (6497) used greatest stack depth: 18600 bytes left [ 146.033829][ T6498] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.199'. [ 146.153962][ T6498] bridge_slave_1: default FDB implementation only supports local addresses [ 147.413633][ T6512] FAULT_INJECTION: forcing a failure. [ 147.413633][ T6512] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 147.438519][ T6516] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.206'. [ 147.462856][ T6512] CPU: 1 PID: 6512 Comm: syz.0.205 Not tainted syzkaller #0 [ 147.470242][ T6512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 147.480362][ T6512] Call Trace: [ 147.483703][ T6512] [ 147.486697][ T6512] dump_stack_lvl+0x18c/0x250 [ 147.491471][ T6512] ? show_regs_print_info+0x20/0x20 [ 147.496752][ T6512] ? load_image+0x420/0x420 [ 147.501386][ T6512] ? __lock_acquire+0x7d40/0x7d40 [ 147.506480][ T6512] ? snprintf+0xe9/0x140 [ 147.510774][ T6512] should_fail_ex+0x39d/0x4d0 [ 147.515510][ T6512] _copy_to_user+0x2f/0xa0 [ 147.519975][ T6512] simple_read_from_buffer+0xe7/0x150 [ 147.525416][ T6512] proc_fail_nth_read+0x1e8/0x260 [ 147.530495][ T6512] ? proc_fault_inject_write+0x360/0x360 [ 147.536183][ T6512] ? fsnotify_perm+0x271/0x5e0 [ 147.540977][ T6512] ? proc_fault_inject_write+0x360/0x360 [ 147.546648][ T6512] vfs_read+0x28b/0x970 [ 147.550857][ T6512] ? kernel_read+0x1e0/0x1e0 [ 147.555487][ T6512] ? __fget_files+0x28/0x4b0 [ 147.560108][ T6512] ? __fget_files+0x28/0x4b0 [ 147.564738][ T6512] ? __fget_files+0x43d/0x4b0 [ 147.569473][ T6512] ? __fdget_pos+0x2a3/0x330 [ 147.574101][ T6512] ? ksys_read+0x75/0x260 [ 147.578473][ T6512] ksys_read+0x150/0x260 [ 147.582759][ T6512] ? vfs_write+0x990/0x990 [ 147.587225][ T6512] ? lockdep_hardirqs_on+0x98/0x150 [ 147.592467][ T6512] do_syscall_64+0x55/0xb0 [ 147.596910][ T6512] ? clear_bhb_loop+0x40/0x90 [ 147.601612][ T6512] ? clear_bhb_loop+0x40/0x90 [ 147.606326][ T6512] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 147.612268][ T6512] RIP: 0033:0x7fec0e15d68e [ 147.616729][ T6512] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 147.636374][ T6512] RSP: 002b:00007fec0eff1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 147.644826][ T6512] RAX: ffffffffffffffda RBX: 00007fec0eff26c0 RCX: 00007fec0e15d68e [ 147.652829][ T6512] RDX: 000000000000000f RSI: 00007fec0eff20a0 RDI: 0000000000000005 [ 147.660823][ T6512] RBP: 00007fec0eff2090 R08: 0000000000000000 R09: 0000000000000000 [ 147.668822][ T6512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.676834][ T6512] R13: 00007fec0e416038 R14: 00007fec0e415fa0 R15: 00007ffef5220938 [ 147.684973][ T6512] [ 147.883187][ T6513] delete_channel: no stack [ 148.139299][ T6523] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.209'. [ 148.679560][ T6529] C: renamed from team_slave_0 (while UP) [ 148.982826][ T6529] netlink: 'syz.2.211': attribute type 3 has an invalid length. [ 148.994058][ T6529] netlink: 152 bytes leftover after parsing attributes in process `syz.2.211'. [ 149.444300][ T6537] netlink: 'syz.3.213': attribute type 39 has an invalid length. [ 149.474051][ T6537] FAULT_INJECTION: forcing a failure. [ 149.474051][ T6537] name failslab, interval 1, probability 0, space 0, times 0 [ 149.523987][ T6537] CPU: 1 PID: 6537 Comm: syz.3.213 Not tainted syzkaller #0 [ 149.531351][ T6537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 149.541447][ T6537] Call Trace: [ 149.544776][ T6537] [ 149.547741][ T6537] dump_stack_lvl+0x18c/0x250 [ 149.552475][ T6537] ? show_regs_print_info+0x20/0x20 [ 149.557803][ T6537] ? load_image+0x420/0x420 [ 149.562359][ T6537] should_fail_ex+0x39d/0x4d0 [ 149.567096][ T6537] should_failslab+0x9/0x20 [ 149.571640][ T6537] slab_pre_alloc_hook+0x59/0x310 [ 149.576720][ T6537] kmem_cache_alloc_node+0x60/0x320 [ 149.582073][ T6537] ? __alloc_skb+0x103/0x2c0 [ 149.586715][ T6537] __alloc_skb+0x103/0x2c0 [ 149.591180][ T6537] rtmsg_ifinfo_build_skb+0x8c/0x260 [ 149.596523][ T6537] rtmsg_ifinfo+0x8c/0x1a0 [ 149.600997][ T6537] __dev_notify_flags+0xf3/0x310 [ 149.606077][ T6537] ? __dev_change_flags+0x6a0/0x6a0 [ 149.611320][ T6537] ? __dev_change_flags+0x4d4/0x6a0 [ 149.616565][ T6537] ? vprintk_emit+0x53d/0x610 [ 149.621284][ T6537] ? dev_get_flags+0x1c0/0x1c0 [ 149.626102][ T6537] ? printk_sprint+0x460/0x460 [ 149.630912][ T6537] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 149.636859][ T6537] ? _raw_spin_unlock+0x40/0x40 [ 149.641758][ T6537] dev_change_flags+0xe8/0x1a0 [ 149.646566][ T6537] do_setlink+0xc58/0x4130 [ 149.651019][ T6537] ? arch_stack_walk+0x160/0x190 [ 149.656006][ T6537] ? load_image+0x420/0x420 [ 149.660551][ T6537] ? nlmsg_parse_deprecated_strict+0x110/0x110 [ 149.666737][ T6537] ? stack_trace_save+0xaa/0x100 [ 149.671706][ T6537] ? __nla_validate_parse+0x2522/0x2ea0 [ 149.677291][ T6537] ? __nla_validate+0x50/0x50 [ 149.681999][ T6537] ? validate_linkmsg+0x719/0x910 [ 149.687041][ T6537] rtnl_newlink+0x17da/0x20a0 [ 149.691843][ T6537] ? rtnl_newlink+0x511/0x20a0 [ 149.696695][ T6537] ? rtnl_setlink+0x4e0/0x4e0 [ 149.701369][ T6537] ? trace_raw_output_contention_end+0xd0/0xd0 [ 149.707560][ T6537] ? rcu_is_watching+0x15/0xb0 [ 149.712382][ T6537] ? trace_contention_end+0x39/0xe0 [ 149.717632][ T6537] ? __mutex_lock+0x315/0xcc0 [ 149.722378][ T6537] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 149.727630][ T6537] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 149.732771][ T6537] ? rtnl_setlink+0x4e0/0x4e0 [ 149.737581][ T6537] rtnetlink_rcv_msg+0x869/0xfa0 [ 149.742664][ T6537] ? lockdep_hardirqs_on+0x98/0x150 [ 149.747957][ T6537] ? rtnetlink_bind+0x80/0x80 [ 149.752660][ T6537] ? perf_trace_preemptirq_template+0xac/0x330 [ 149.758866][ T6537] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 149.764877][ T6537] ? lock_chain_count+0x20/0x20 [ 149.769758][ T6537] ? __local_bh_enable_ip+0x13a/0x1c0 [ 149.775142][ T6537] ? lockdep_hardirqs_on+0x98/0x150 [ 149.780363][ T6537] ? __local_bh_enable_ip+0x13a/0x1c0 [ 149.785844][ T6537] ? _local_bh_enable+0xa0/0xa0 [ 149.790712][ T6537] ? __dev_queue_xmit+0x265/0x3660 [ 149.795860][ T6537] ? __dev_queue_xmit+0x265/0x3660 [ 149.801019][ T6537] ? __dev_queue_xmit+0x1b2c/0x3660 [ 149.806341][ T6537] ? __dev_queue_xmit+0x265/0x3660 [ 149.811478][ T6537] ? ref_tracker_free+0x690/0x840 [ 149.816530][ T6537] netlink_rcv_skb+0x241/0x4d0 [ 149.821311][ T6537] ? rtnetlink_bind+0x80/0x80 [ 149.826006][ T6537] ? netlink_ack+0x1180/0x1180 [ 149.830878][ T6537] ? __lock_acquire+0x7d40/0x7d40 [ 149.835935][ T6537] ? netlink_deliver_tap+0x2e/0x1b0 [ 149.841146][ T6537] netlink_unicast+0x751/0x8d0 [ 149.845938][ T6537] netlink_sendmsg+0x8d0/0xbf0 [ 149.850720][ T6537] ? netlink_getsockopt+0x590/0x590 [ 149.855934][ T6537] ? aa_sock_msg_perm+0x94/0x150 [ 149.860889][ T6537] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 149.866220][ T6537] ? security_socket_sendmsg+0x80/0xa0 [ 149.871740][ T6537] ? netlink_getsockopt+0x590/0x590 [ 149.876991][ T6537] ____sys_sendmsg+0x5ba/0x960 [ 149.881800][ T6537] ? __asan_memset+0x22/0x40 [ 149.886437][ T6537] ? __sys_sendmsg_sock+0x30/0x30 [ 149.891487][ T6537] ? __import_iovec+0x5f2/0x850 [ 149.896446][ T6537] ? import_iovec+0x73/0xa0 [ 149.900970][ T6537] ___sys_sendmsg+0x2a6/0x360 [ 149.905661][ T6537] ? get_pid_task+0x20/0x1e0 [ 149.910273][ T6537] ? __sys_sendmsg+0x2a0/0x2a0 [ 149.915067][ T6537] ? __lock_acquire+0x7d40/0x7d40 [ 149.920127][ T6537] __se_sys_sendmsg+0x1c2/0x2b0 [ 149.924992][ T6537] ? __x64_sys_sendmsg+0x80/0x80 [ 149.929959][ T6537] ? lockdep_hardirqs_on+0x98/0x150 [ 149.935176][ T6537] do_syscall_64+0x55/0xb0 [ 149.939602][ T6537] ? clear_bhb_loop+0x40/0x90 [ 149.944282][ T6537] ? clear_bhb_loop+0x40/0x90 [ 149.948968][ T6537] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 149.954887][ T6537] RIP: 0033:0x7f3a5419ce59 [ 149.959332][ T6537] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.978951][ T6537] RSP: 002b:00007f3a55063028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 149.987379][ T6537] RAX: ffffffffffffffda RBX: 00007f3a54415fa0 RCX: 00007f3a5419ce59 [ 149.995360][ T6537] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003 [ 150.003344][ T6537] RBP: 00007f3a55063090 R08: 0000000000000000 R09: 0000000000000000 [ 150.011324][ T6537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.019388][ T6537] R13: 00007f3a54416038 R14: 00007f3a54415fa0 R15: 00007ffd3bde5cd8 [ 150.027396][ T6537] [ 150.424481][ T6552] netlink: 'syz.1.218': attribute type 7 has an invalid length. [ 150.535447][ T6559] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.220'. [ 151.068566][ T6564] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.221'. [ 153.878110][ T6594] FAULT_INJECTION: forcing a failure. [ 153.878110][ T6594] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 153.929203][ T6594] CPU: 1 PID: 6594 Comm: syz.2.230 Not tainted syzkaller #0 [ 153.936566][ T6594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 153.946747][ T6594] Call Trace: [ 153.950069][ T6594] [ 153.953053][ T6594] dump_stack_lvl+0x18c/0x250 [ 153.957781][ T6594] ? show_regs_print_info+0x20/0x20 [ 153.963026][ T6594] ? load_image+0x420/0x420 [ 153.967578][ T6594] ? __might_fault+0xaa/0x120 [ 153.972392][ T6594] ? __lock_acquire+0x7d40/0x7d40 [ 153.977476][ T6594] should_fail_ex+0x39d/0x4d0 [ 153.982202][ T6594] _copy_from_user+0x2f/0xe0 [ 153.986834][ T6594] ___sys_sendmsg+0x1c7/0x360 [ 153.991554][ T6594] ? __sys_sendmsg+0x2a0/0x2a0 [ 153.996408][ T6594] __se_sys_sendmsg+0x1c2/0x2b0 [ 154.001307][ T6594] ? __x64_sys_sendmsg+0x80/0x80 [ 154.006385][ T6594] ? syscall_enter_from_user_mode+0x2e/0x80 [ 154.012416][ T6594] do_syscall_64+0x55/0xb0 [ 154.016867][ T6594] ? clear_bhb_loop+0x40/0x90 [ 154.021554][ T6594] ? clear_bhb_loop+0x40/0x90 [ 154.026499][ T6594] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 154.032444][ T6594] RIP: 0033:0x7f9765d9ce59 [ 154.036980][ T6594] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.056620][ T6594] RSP: 002b:00007f9766c70028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 154.065054][ T6594] RAX: ffffffffffffffda RBX: 00007f9766015fa0 RCX: 00007f9765d9ce59 [ 154.073038][ T6594] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 154.081015][ T6594] RBP: 00007f9766c70090 R08: 0000000000000000 R09: 0000000000000000 [ 154.088994][ T6594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.096971][ T6594] R13: 00007f9766016038 R14: 00007f9766015fa0 R15: 00007ffcb3786fc8 [ 154.104976][ T6594] [ 154.748259][ T6604] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.233'. [ 157.155089][ T6610] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.234'. [ 158.686595][ T6628] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.242'. [ 158.756904][ T6630] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.243'. [ 158.797485][ T6629] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.242'. [ 159.076073][ T6623] netlink: 'syz.1.241': attribute type 10 has an invalid length. [ 159.264941][ T6623] team0: Port device virt_wifi0 added [ 159.998585][ T6643] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.247'. [ 160.081038][ T6646] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.248'. [ 160.103204][ T6646] bridge_slave_1: default FDB implementation only supports local addresses [ 160.570717][ T6657] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.252'. [ 162.843658][ T6676] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.258'. [ 163.239043][ T6681] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.259'. [ 163.262475][ T6681] bridge_slave_1: default FDB implementation only supports local addresses [ 163.299697][ T6684] netlink: 'syz.1.260': attribute type 39 has an invalid length. [ 163.635150][ T6690] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.264'. [ 164.762664][ T6698] netlink: 'syz.2.273': attribute type 3 has an invalid length. [ 164.783591][ T6698] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.273'. [ 165.707100][ T6707] FAULT_INJECTION: forcing a failure. [ 165.707100][ T6707] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 165.822723][ T6707] CPU: 0 PID: 6707 Comm: syz.2.268 Not tainted syzkaller #0 [ 165.830086][ T6707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 165.839056][ T6710] netlink: 'syz.3.269': attribute type 19 has an invalid length. [ 165.840156][ T6707] Call Trace: [ 165.840168][ T6707] [ 165.854162][ T6707] dump_stack_lvl+0x18c/0x250 [ 165.858978][ T6707] ? show_regs_print_info+0x20/0x20 [ 165.864209][ T6707] ? load_image+0x420/0x420 [ 165.868762][ T6707] ? __might_fault+0xaa/0x120 [ 165.873475][ T6707] ? __lock_acquire+0x7d40/0x7d40 [ 165.878534][ T6707] should_fail_ex+0x39d/0x4d0 [ 165.883254][ T6707] _copy_from_iter+0x1d9/0x12e0 [ 165.888145][ T6707] ? slab_post_alloc_hook+0x8a/0x4b0 [ 165.893558][ T6707] ? __virt_addr_valid+0x18c/0x540 [ 165.898709][ T6707] ? __lock_acquire+0x7d40/0x7d40 [ 165.903748][ T6707] ? rcu_is_watching+0x15/0xb0 [ 165.908526][ T6707] ? copyout_mc+0x70/0x70 [ 165.912868][ T6707] ? __virt_addr_valid+0x18c/0x540 [ 165.917995][ T6707] ? __virt_addr_valid+0x18c/0x540 [ 165.923116][ T6707] ? __virt_addr_valid+0x469/0x540 [ 165.928239][ T6707] ? __check_object_size+0x506/0xa20 [ 165.933553][ T6707] netlink_sendmsg+0x76b/0xbf0 [ 165.938347][ T6707] ? netlink_getsockopt+0x590/0x590 [ 165.943558][ T6707] ? aa_sock_msg_perm+0x94/0x150 [ 165.948624][ T6707] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 165.953952][ T6707] ? security_socket_sendmsg+0x80/0xa0 [ 165.959533][ T6707] ? netlink_getsockopt+0x590/0x590 [ 165.964757][ T6707] ____sys_sendmsg+0x5ba/0x960 [ 165.969554][ T6707] ? __asan_memset+0x22/0x40 [ 165.974161][ T6707] ? __sys_sendmsg_sock+0x30/0x30 [ 165.979196][ T6707] ? __import_iovec+0x5f2/0x850 [ 165.984066][ T6707] ? import_iovec+0x73/0xa0 [ 165.988589][ T6707] ___sys_sendmsg+0x2a6/0x360 [ 165.993279][ T6707] ? get_pid_task+0x20/0x1e0 [ 165.997886][ T6707] ? __sys_sendmsg+0x2a0/0x2a0 [ 166.002685][ T6707] ? __lock_acquire+0x7d40/0x7d40 [ 166.007740][ T6707] __se_sys_sendmsg+0x1c2/0x2b0 [ 166.012615][ T6707] ? __x64_sys_sendmsg+0x80/0x80 [ 166.017597][ T6707] ? lockdep_hardirqs_on+0x98/0x150 [ 166.022814][ T6707] do_syscall_64+0x55/0xb0 [ 166.027245][ T6707] ? clear_bhb_loop+0x40/0x90 [ 166.031950][ T6707] ? clear_bhb_loop+0x40/0x90 [ 166.036651][ T6707] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 166.042574][ T6707] RIP: 0033:0x7f9765d9ce59 [ 166.047013][ T6707] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.066651][ T6707] RSP: 002b:00007f9766c70028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 166.075187][ T6707] RAX: ffffffffffffffda RBX: 00007f9766015fa0 RCX: 00007f9765d9ce59 [ 166.083184][ T6707] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 166.091252][ T6707] RBP: 00007f9766c70090 R08: 0000000000000000 R09: 0000000000000000 [ 166.099403][ T6707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.107471][ T6707] R13: 00007f9766016038 R14: 00007f9766015fa0 R15: 00007ffcb3786fc8 [ 166.115467][ T6707] [ 166.390845][ T6713] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.270'. [ 167.670690][ T6720] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.272'. [ 167.690452][ T6720] bridge_slave_1: default FDB implementation only supports local addresses [ 167.845494][ T6725] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.275'. [ 168.626897][ T6733] netlink: 'syz.0.276': attribute type 10 has an invalid length. [ 168.825920][ T6733] team0: Port device virt_wifi0 added [ 169.361398][ T6743] netlink: 4 bytes leftover after parsing attributes in process `syz.2.281'. [ 169.381201][ T6742] netlink: 'syz.1.280': attribute type 29 has an invalid length. [ 169.405266][ T6742] netlink: 'syz.1.280': attribute type 29 has an invalid length. [ 169.434421][ T6742] netlink: 'syz.1.280': attribute type 29 has an invalid length. [ 169.460382][ T6742] netlink: 'syz.1.280': attribute type 29 has an invalid length. [ 169.510333][ T6742] netlink: 'syz.1.280': attribute type 29 has an invalid length. [ 169.520637][ T6746] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.282'. [ 169.892977][ T6745] netlink: 'syz.1.280': attribute type 29 has an invalid length. [ 170.498261][ T6764] netlink: 'syz.1.286': attribute type 10 has an invalid length. [ 170.522164][ T6764] netlink: 55 bytes leftover after parsing attributes in process `syz.1.286'. [ 170.612094][ T6768] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.290'. [ 171.701859][ T6780] netlink: 4 bytes leftover after parsing attributes in process `syz.1.294'. [ 171.726061][ T6778] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.292'. [ 171.917068][ T6783] netlink: 'syz.0.293': attribute type 3 has an invalid length. [ 171.982708][ T6783] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.293'. [ 172.873477][ T6808] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.303'. [ 173.813887][ T6812] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.304'. [ 174.516149][ T6821] netlink: 4 bytes leftover after parsing attributes in process `syz.3.308'. [ 175.227041][ T6837] netlink: 'syz.3.313': attribute type 1 has an invalid length. [ 175.277087][ T6837] netlink: 176 bytes leftover after parsing attributes in process `syz.3.313'. [ 175.476608][ T6843] netlink: 'syz.2.314': attribute type 10 has an invalid length. [ 175.518798][ T6845] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.316'. [ 175.535073][ T6843] netlink: 55 bytes leftover after parsing attributes in process `syz.2.314'. [ 176.756019][ T6858] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.320'. [ 177.299313][ T6865] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.318'. [ 177.310398][ T6865] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.318'. [ 177.321404][ T6854] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.318'. [ 177.372883][ T6865] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.318'. [ 178.247625][ T6877] netlink: 'syz.0.326': attribute type 9 has an invalid length. [ 178.288979][ T6877] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.326'. [ 178.544103][ T6882] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.327'. [ 180.505268][ T6887] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.328'. [ 180.561433][ T6891] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.331'. [ 181.384786][ T6900] netlink: 'syz.3.333': attribute type 10 has an invalid length. [ 181.432822][ T6900] netlink: 55 bytes leftover after parsing attributes in process `syz.3.333'. [ 181.718649][ T6912] bridge_slave_1: default FDB implementation only supports local addresses [ 182.166155][ T6921] netlink: 'syz.1.338': attribute type 3 has an invalid length. [ 182.230468][ T6921] netlink: 'syz.1.338': attribute type 1 has an invalid length. [ 182.322972][ T6921] __nla_validate_parse: 1 callbacks suppressed [ 182.322992][ T6921] netlink: 198800 bytes leftover after parsing attributes in process `syz.1.338'. [ 182.657564][ T6933] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.344'. [ 182.770810][ T5783] Bluetooth: hci2: unexpected event 0x14 length: 15 > 6 [ 183.984983][ T6944] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.348'. [ 184.018645][ T6944] bridge_slave_1: default FDB implementation only supports local addresses [ 184.031054][ T6947] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.347'. [ 184.049437][ T6947] bridge_slave_1: default FDB implementation only supports local addresses [ 184.378966][ T6959] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.354'. [ 184.525165][ T6961] netlink: 2220 bytes leftover after parsing attributes in process `syz.0.353'. [ 185.123628][ T6953] delete_channel: no stack [ 185.244700][ T6975] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.357'. [ 186.266071][ T6988] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.362'. [ 186.279529][ T6988] bridge_slave_1: default FDB implementation only supports local addresses [ 186.306782][ T6989] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.361'. [ 186.330784][ T6989] bridge_slave_1: default FDB implementation only supports local addresses [ 186.647968][ T7001] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.367'. [ 186.977159][ T7011] netlink: 'syz.1.371': attribute type 10 has an invalid length. [ 187.000837][ T7011] macvlan0: entered promiscuous mode [ 187.006802][ T7011] macvlan0: entered allmulticast mode [ 187.023616][ T7011] veth1_vlan: entered allmulticast mode [ 187.049950][ T7011] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 188.440800][ T7029] __nla_validate_parse: 1 callbacks suppressed [ 188.440821][ T7029] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.376'. [ 188.468429][ T7023] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.374'. [ 188.472915][ T7031] FAULT_INJECTION: forcing a failure. [ 188.472915][ T7031] name failslab, interval 1, probability 0, space 0, times 0 [ 188.490538][ T7029] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 188.496709][ T7023] bridge_slave_1: default FDB implementation only supports local addresses [ 188.510505][ T7027] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.375'. [ 188.525454][ T7031] CPU: 1 PID: 7031 Comm: syz.3.377 Not tainted syzkaller #0 [ 188.532853][ T7031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 188.543024][ T7031] Call Trace: [ 188.546326][ T7031] [ 188.549273][ T7031] dump_stack_lvl+0x18c/0x250 [ 188.553985][ T7031] ? show_regs_print_info+0x20/0x20 [ 188.559238][ T7031] ? load_image+0x420/0x420 [ 188.563792][ T7031] ? __might_sleep+0xe0/0xe0 [ 188.568430][ T7031] ? __lock_acquire+0x7d40/0x7d40 [ 188.573535][ T7031] should_fail_ex+0x39d/0x4d0 [ 188.578273][ T7031] should_failslab+0x9/0x20 [ 188.582918][ T7031] slab_pre_alloc_hook+0x59/0x310 [ 188.587997][ T7031] ? __get_vm_area_node+0x125/0x370 [ 188.593421][ T7031] __kmem_cache_alloc_node+0x53/0x250 [ 188.598852][ T7031] ? __get_vm_area_node+0x125/0x370 [ 188.604105][ T7031] kmalloc_node_trace+0x26/0xe0 [ 188.609016][ T7031] __get_vm_area_node+0x125/0x370 [ 188.614085][ T7031] __vmalloc_node_range+0x36e/0x1330 [ 188.619387][ T7031] ? netlink_sendmsg+0x602/0xbf0 [ 188.624334][ T7031] ? netlink_insert+0x109f/0x13a0 [ 188.629382][ T7031] ? netlink_data_ready+0x10/0x10 [ 188.634507][ T7031] ? free_vm_area+0x50/0x50 [ 188.639032][ T7031] ? netlink_sendmsg+0x602/0xbf0 [ 188.643982][ T7031] vmalloc+0x79/0x90 [ 188.647892][ T7031] ? netlink_sendmsg+0x602/0xbf0 [ 188.652843][ T7031] netlink_sendmsg+0x602/0xbf0 [ 188.657625][ T7031] ? netlink_getsockopt+0x590/0x590 [ 188.662834][ T7031] ? aa_sock_msg_perm+0x94/0x150 [ 188.667788][ T7031] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 188.673089][ T7031] ? security_socket_sendmsg+0x80/0xa0 [ 188.678732][ T7031] ? netlink_getsockopt+0x590/0x590 [ 188.683945][ T7031] ____sys_sendmsg+0x5ba/0x960 [ 188.688736][ T7031] ? __asan_memset+0x22/0x40 [ 188.693356][ T7031] ? __sys_sendmsg_sock+0x30/0x30 [ 188.698388][ T7031] ? __import_iovec+0x5f2/0x850 [ 188.703255][ T7031] ? import_iovec+0x73/0xa0 [ 188.707788][ T7031] ___sys_sendmsg+0x2a6/0x360 [ 188.712487][ T7031] ? get_pid_task+0x20/0x1e0 [ 188.717110][ T7031] ? __sys_sendmsg+0x2a0/0x2a0 [ 188.721915][ T7031] ? __lock_acquire+0x7d40/0x7d40 [ 188.726980][ T7031] __se_sys_sendmsg+0x1c2/0x2b0 [ 188.731852][ T7031] ? __x64_sys_sendmsg+0x80/0x80 [ 188.736823][ T7031] ? lockdep_hardirqs_on+0x98/0x150 [ 188.742039][ T7031] do_syscall_64+0x55/0xb0 [ 188.746470][ T7031] ? clear_bhb_loop+0x40/0x90 [ 188.751153][ T7031] ? clear_bhb_loop+0x40/0x90 [ 188.755841][ T7031] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 188.761748][ T7031] RIP: 0033:0x7f3a5419ce59 [ 188.766174][ T7031] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.785814][ T7031] RSP: 002b:00007f3a55063028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 188.794256][ T7031] RAX: ffffffffffffffda RBX: 00007f3a54415fa0 RCX: 00007f3a5419ce59 [ 188.802237][ T7031] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 188.810221][ T7031] RBP: 00007f3a55063090 R08: 0000000000000000 R09: 0000000000000000 [ 188.818203][ T7031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 188.826183][ T7031] R13: 00007f3a54416038 R14: 00007f3a54415fa0 R15: 00007ffd3bde5cd8 [ 188.834353][ T7031] [ 188.855419][ T7031] syz.3.377: vmalloc error: size 213312, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 188.856464][ T7027] bridge_slave_1: default FDB implementation only supports local addresses [ 188.886962][ T7031] CPU: 0 PID: 7031 Comm: syz.3.377 Not tainted syzkaller #0 [ 188.886988][ T7031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 188.886998][ T7031] Call Trace: [ 188.887006][ T7031] [ 188.887015][ T7031] dump_stack_lvl+0x18c/0x250 [ 188.887055][ T7031] ? show_regs_print_info+0x20/0x20 [ 188.887077][ T7031] ? load_image+0x420/0x420 [ 188.887100][ T7031] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 188.887124][ T7031] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 188.887148][ T7031] warn_alloc+0x246/0x340 [ 188.887175][ T7031] ? __get_vm_area_node+0x125/0x370 [ 188.887203][ T7031] ? zone_watermark_ok_safe+0x230/0x230 [ 188.887231][ T7031] ? rcu_is_watching+0x15/0xb0 [ 188.887260][ T7031] ? __get_vm_area_node+0x356/0x370 [ 188.887292][ T7031] __vmalloc_node_range+0x393/0x1330 [ 188.887316][ T7031] ? netlink_insert+0x109f/0x13a0 [ 188.887356][ T7031] ? netlink_data_ready+0x10/0x10 [ 188.887379][ T7031] ? free_vm_area+0x50/0x50 [ 188.887412][ T7031] ? netlink_sendmsg+0x602/0xbf0 [ 188.887432][ T7031] vmalloc+0x79/0x90 [ 188.887456][ T7031] ? netlink_sendmsg+0x602/0xbf0 [ 188.887477][ T7031] netlink_sendmsg+0x602/0xbf0 [ 188.887506][ T7031] ? netlink_getsockopt+0x590/0x590 [ 188.887529][ T7031] ? aa_sock_msg_perm+0x94/0x150 [ 188.887555][ T7031] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 188.887577][ T7031] ? security_socket_sendmsg+0x80/0xa0 [ 188.887598][ T7031] ? netlink_getsockopt+0x590/0x590 [ 188.887620][ T7031] ____sys_sendmsg+0x5ba/0x960 [ 188.887649][ T7031] ? __asan_memset+0x22/0x40 [ 188.887674][ T7031] ? __sys_sendmsg_sock+0x30/0x30 [ 188.887694][ T7031] ? __import_iovec+0x5f2/0x850 [ 188.887722][ T7031] ? import_iovec+0x73/0xa0 [ 188.887744][ T7031] ___sys_sendmsg+0x2a6/0x360 [ 188.887765][ T7031] ? get_pid_task+0x20/0x1e0 [ 188.887795][ T7031] ? __sys_sendmsg+0x2a0/0x2a0 [ 188.887838][ T7031] ? __lock_acquire+0x7d40/0x7d40 [ 188.887885][ T7031] __se_sys_sendmsg+0x1c2/0x2b0 [ 188.887911][ T7031] ? __x64_sys_sendmsg+0x80/0x80 [ 188.887953][ T7031] ? lockdep_hardirqs_on+0x98/0x150 [ 188.887982][ T7031] do_syscall_64+0x55/0xb0 [ 188.888002][ T7031] ? clear_bhb_loop+0x40/0x90 [ 188.888019][ T7031] ? clear_bhb_loop+0x40/0x90 [ 188.888045][ T7031] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 188.888071][ T7031] RIP: 0033:0x7f3a5419ce59 [ 188.888089][ T7031] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.888104][ T7031] RSP: 002b:00007f3a55063028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 188.888127][ T7031] RAX: ffffffffffffffda RBX: 00007f3a54415fa0 RCX: 00007f3a5419ce59 [ 188.888141][ T7031] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 188.888153][ T7031] RBP: 00007f3a55063090 R08: 0000000000000000 R09: 0000000000000000 [ 188.888165][ T7031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 188.888177][ T7031] R13: 00007f3a54416038 R14: 00007f3a54415fa0 R15: 00007ffd3bde5cd8 [ 188.888206][ T7031] [ 188.888695][ T7031] Mem-Info: [ 188.888705][ T7031] active_anon:5643 inactive_anon:0 isolated_anon:0 [ 188.888705][ T7031] active_file:15925 inactive_file:39990 isolated_file:0 [ 188.888705][ T7031] unevictable:768 dirty:170 writeback:0 [ 188.888705][ T7031] slab_reclaimable:9978 slab_unreclaimable:92342 [ 188.888705][ T7031] mapped:24318 shmem:1361 pagetables:537 [ 188.888705][ T7031] sec_pagetables:0 bounce:0 [ 188.888705][ T7031] kernel_misc_reclaimable:0 [ 188.888705][ T7031] free:1346895 free_pcp:14295 free_cma:0 [ 188.888755][ T7031] Node 0 active_anon:22572kB inactive_anon:0kB active_file:63700kB inactive_file:159760kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:97272kB dirty:680kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10480kB pagetables:2148kB sec_pagetables:0kB all_unreclaimable? no [ 188.888805][ T7031] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 188.888852][ T7031] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 188.888905][ T7031] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 188.888950][ T7031] Node 0 DMA32 free:1487016kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:22532kB inactive_anon:0kB active_file:63700kB inactive_file:158940kB unevictable:1536kB writepending:680kB present:3129332kB managed:2586928kB mlocked:0kB bounce:0kB free_pcp:34000kB local_pcp:12652kB free_cma:0kB [ 188.889004][ T7031] lowmem_reserve[]: 0 0 0 0 0 [ 188.889052][ T7031] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:820kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 188.889103][ T7031] lowmem_reserve[]: 0 0 0 0 0 [ 188.889144][ T7031] Node 1 Normal free:3885204kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:23168kB local_pcp:9856kB free_cma:0kB [ 188.889197][ T7031] lowmem_reserve[]: 0 0 0 0 0 [ 188.889239][ T7031] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 188.889372][ T7031] Node 0 DMA32: 438*4kB (ME) 606*8kB (UM) 592*16kB (ME) 639*32kB (UME) 232*64kB (UME) 48*128kB (UME) 34*256kB (UME) 21*512kB (UME) 21*1024kB (UM) 10*2048kB (ME) 334*4096kB (M) = 1487016kB [ 188.889555][ T7031] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 188.889663][ T7031] Node 1 Normal: 241*4kB (UM) 60*8kB (UME) 35*16kB (UME) 72*32kB (UME) 25*64kB (UME) 7*128kB (UME) 2*256kB (UM) 0*512kB 1*1024kB (E) 1*2048kB (E) 946*4096kB (M) = 3885204kB [ 188.891961][ T7031] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 188.891978][ T7031] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 188.891993][ T7031] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 188.892009][ T7031] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 188.892024][ T7031] 57276 total pagecache pages [ 188.892040][ T7031] 0 pages in swap cache [ 188.892048][ T7031] Free swap = 124996kB [ 188.892055][ T7031] Total swap = 124996kB [ 188.892062][ T7031] 2097051 pages RAM [ 188.892070][ T7031] 0 pages HighMem/MovableOnly [ 188.892077][ T7031] 416933 pages reserved [ 188.892083][ T7031] 0 pages cma reserved [ 189.110436][ T7037] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.379'. [ 189.724410][ T7041] netlink: 'syz.1.380': attribute type 9 has an invalid length. [ 189.758568][ T7033] netlink: 'syz.0.378': attribute type 19 has an invalid length. [ 189.760042][ T7041] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.380'. [ 189.791175][ T7033] netlink: 40 bytes leftover after parsing attributes in process `syz.0.378'. [ 190.379821][ T5783] Bluetooth: hci1: unexpected event 0x14 length: 15 > 6 [ 190.531066][ T7057] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.387'. [ 191.555833][ T7066] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.391'. [ 191.574466][ T7067] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.390'. [ 191.604953][ T7067] bridge_slave_1: default FDB implementation only supports local addresses [ 191.994394][ T7078] netlink: 132 bytes leftover after parsing attributes in process `syz.1.396'. [ 192.378831][ T7088] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 192.559425][ T5783] Bluetooth: hci1: unexpected event 0x04 length: 15 > 10 [ 192.559462][ T5783] Bluetooth: unknown link type 101 [ 192.580410][ T5783] Bluetooth: hci1: connection err: -111 [ 194.533317][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.539957][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.722706][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 204.210181][ T5776] Bluetooth: hci2: command 0x0406 tx timeout [ 204.216548][ T5776] Bluetooth: hci3: command 0x0406 tx timeout [ 204.225346][ T5781] Bluetooth: hci0: command 0x0406 tx timeout [ 207.907996][ T5781] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 207.918024][ T5781] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 207.926141][ T5781] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 207.934869][ T5781] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 207.949785][ T5781] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 207.957397][ T5781] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 208.093763][ T5788] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 208.102761][ T5788] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 208.110968][ T5788] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 208.119340][ T5788] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 208.128447][ T5788] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 208.135912][ T5788] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 209.091213][ T7103] chnl_net:caif_netlink_parms(): no params data found [ 209.388060][ T7106] chnl_net:caif_netlink_parms(): no params data found [ 209.700920][ T7103] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.762011][ T7103] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.784788][ T5786] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 209.794021][ T5786] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 209.801875][ T5786] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 209.810565][ T5786] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 209.818440][ T5786] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 209.826372][ T5786] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 209.844404][ T7103] bridge_slave_0: entered allmulticast mode [ 209.851774][ T7103] bridge_slave_0: entered promiscuous mode [ 209.942879][ T7103] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.950060][ T7103] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.050488][ T5782] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 210.059469][ T5782] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 210.068599][ T5782] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 210.077643][ T5782] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 210.086626][ T5782] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 210.094161][ T5782] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 210.119534][ T7103] bridge_slave_1: entered allmulticast mode [ 210.141871][ T7103] bridge_slave_1: entered promiscuous mode [ 210.328395][ T7106] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.342750][ T7106] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.349991][ T7106] bridge_slave_0: entered allmulticast mode [ 210.370795][ T7106] bridge_slave_0: entered promiscuous mode [ 210.389067][ T7106] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.396471][ T7106] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.411288][ T7106] bridge_slave_1: entered allmulticast mode [ 210.419060][ T7106] bridge_slave_1: entered promiscuous mode [ 210.454376][ T7103] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.508736][ T7103] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.621678][ T7106] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.692445][ T7103] team0: Port device team_slave_0 added [ 210.705202][ T7106] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.790379][ T7103] team0: Port device team_slave_1 added [ 210.836708][ T7106] team0: Port device team_slave_0 added [ 210.933949][ T7106] team0: Port device team_slave_1 added [ 210.971405][ T7103] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.980066][ T7103] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.008872][ T7103] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.034961][ T7103] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.042137][ T7103] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.076962][ T7103] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 255.968188][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.985829][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 268.650474][ T7140] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 268.659472][ T7140] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 268.668065][ T7140] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 268.676337][ T7140] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 268.684686][ T7140] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 268.692035][ T7140] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 268.871618][ T7145] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 268.885114][ T7145] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 268.893323][ T7145] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 268.913333][ T7145] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 268.921107][ T7145] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 268.928545][ T7145] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 269.979068][ T7150] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 269.993975][ T7150] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 270.002380][ T7150] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 270.011389][ T7150] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 270.019750][ T7150] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 270.027269][ T7150] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 270.173355][ T7153] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 270.184517][ T7153] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 270.192354][ T7153] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 270.201477][ T7153] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 270.212321][ T7153] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 270.220232][ T7153] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 317.409431][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.422730][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 329.824189][ T7159] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 329.834323][ T7159] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 329.842872][ T7159] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 329.853901][ T7159] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 329.862463][ T7159] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 329.870182][ T7159] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 330.071117][ T7164] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 330.080156][ T7164] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 330.105296][ T7164] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 330.114673][ T7164] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 330.123627][ T7164] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 330.131303][ T7164] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 331.235227][ T7168] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 331.245025][ T7168] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 331.253682][ T7168] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 331.263153][ T7168] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 331.271062][ T7168] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 331.279695][ T7168] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 331.392064][ T7171] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 331.402245][ T7171] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 331.410701][ T7171] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 331.419922][ T7171] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 331.428562][ T7171] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 331.436315][ T7171] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 339.823817][ T28] INFO: task syz.0.397:7080 blocked for more than 143 seconds. [ 339.831444][ T28] Not tainted syzkaller #0 [ 339.856166][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 339.882790][ T28] task:syz.0.397 state:D stack:24232 pid:7080 ppid:5778 flags:0x00004004 [ 339.912234][ T28] Call Trace: [ 339.915782][ T28] [ 339.918754][ T28] __schedule+0x1553/0x45a0 [ 339.941995][ T28] ? lockdep_hardirqs_on+0x98/0x150 [ 339.970569][ T28] ? asan.module_dtor+0x20/0x20 [ 340.042709][ T28] ? __mutex_lock+0x6a4/0xcc0 [ 340.047485][ T28] ? __mutex_trylock_common+0x8a/0x260 [ 340.112102][ T28] ? trace_raw_output_contention_end+0xd0/0xd0 [ 340.142623][ T28] schedule+0xbd/0x170 [ 340.146777][ T28] schedule_preempt_disabled+0x13/0x20 [ 340.152364][ T28] __mutex_lock+0x6a9/0xcc0 [ 340.186851][ T28] ? __mutex_lock+0x4f9/0xcc0 [ 340.191695][ T28] ? perf_event_ctx_lock_nested+0x3b9/0x490 [ 340.202577][ T28] ? mutex_lock_nested+0x20/0x20 [ 340.207579][ T28] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 340.223739][ T28] perf_event_ctx_lock_nested+0x3b9/0x490 [ 340.229536][ T28] ? perf_event_ctx_lock_nested+0xb4/0x490 [ 340.242573][ T28] ? perf_event_update_sibling_time+0x4c0/0x4c0 [ 340.248871][ T28] ? perf_remove_from_owner+0x444/0x4f0 [ 340.262795][ T28] ? perf_remove_from_owner+0x22/0x4f0 [ 340.268309][ T28] ? perf_mmap+0x15c0/0x15c0 [ 340.288512][ T28] perf_event_release_kernel+0x1a0/0x8d0 [ 340.294732][ T28] ? __might_sleep+0xe0/0xe0 [ 340.299369][ T28] ? calc_timer_values+0x400/0x400 [ 340.314019][ T28] ? __fput+0x61c/0x970 [ 340.318228][ T28] ? perf_mmap+0x15c0/0x15c0 [ 340.332765][ T28] perf_release+0x3b/0x40 [ 340.337249][ T28] __fput+0x234/0x970 [ 340.341366][ T28] task_work_run+0x1d4/0x260 [ 340.352635][ T28] ? task_work_cancel+0x220/0x220 [ 340.357720][ T28] ? exit_to_user_mode_loop+0x3b/0x110 [ 340.372227][ T28] exit_to_user_mode_loop+0xe6/0x110 [ 340.377991][ T28] exit_to_user_mode_prepare+0xee/0x180 [ 340.384110][ T28] syscall_exit_to_user_mode+0x1a/0x50 [ 340.389615][ T28] do_syscall_64+0x61/0xb0 [ 340.406240][ T28] ? clear_bhb_loop+0x40/0x90 [ 340.411057][ T28] ? clear_bhb_loop+0x40/0x90 [ 340.416458][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 340.433478][ T28] RIP: 0033:0x7fec0e19ce59 [ 340.437957][ T28] RSP: 002b:00007ffef5220a98 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 340.454607][ T28] RAX: 0000000000000000 RBX: 00007fec0e417da0 RCX: 00007fec0e19ce59 [ 340.468678][ T28] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 340.477294][ T28] RBP: 00007fec0e417da0 R08: 0000000000000006 R09: 0000000000000000 [ 340.492731][ T28] R10: 00007fec0e417cb0 R11: 0000000000000246 R12: 000000000002f139 [ 340.500753][ T28] R13: 00007fec0e41618c R14: 000000000002f073 R15: 00007fec0e416180 [ 340.520801][ T28] [ 340.524226][ T28] [ 340.524226][ T28] Showing all locks held in the system: [ 340.532930][ T28] 2 locks held by kworker/0:1/9: [ 340.537901][ T28] #0: ffff888017c72538 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 340.560041][ T28] #1: ffffc900000e7d00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 340.581502][ T28] 3 locks held by kworker/u4:1/12: [ 340.587016][ T28] #0: ffff88802c4f6938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 340.607587][ T28] #1: ffffc90000117d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 340.632638][ T28] #2: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd4/0x1530 [ 340.642295][ T28] 1 lock held by khungtaskd/28: [ 340.657290][ T28] #0: ffffffff8d132160 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 340.667661][ T28] 3 locks held by kworker/u4:3/49: [ 340.681643][ T28] #0: ffff888017c71538 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 340.694180][ T28] #1: ffffc90000ba7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 340.718595][ T28] #2: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 340.732093][ T28] 5 locks held by kworker/u5:0/51: [ 340.742618][ T28] #0: ffff88802bcdcd38 ((wq_completion)hci3){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 340.764692][ T28] #1: ffffc90000bc7d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 340.782574][ T28] #2: ffff888074b90e70 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1d4/0x380 [ 340.801598][ T28] #3: ffff888074b900b8 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x98a/0xec0 [ 340.811647][ T28] #4: ffffffff8e534ca8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x165/0x300 [ 340.822865][ T28] 2 locks held by kworker/1:3/973: [ 340.828038][ T28] 2 locks held by kworker/u4:9/4428: [ 340.862525][ T28] 6 locks held by kworker/u5:1/5086: [ 340.867874][ T28] #0: ffff8880253c6538 ((wq_completion)hci2){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 340.888080][ T28] #1: ffffc900101efd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 340.902879][ T28] #2: ffff888079478e70 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1d4/0x380 [ 340.921478][ T28] #3: ffff8880794780b8 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x98a/0xec0 [ 340.935694][ T28] #4: ffffffff8e534ca8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x165/0x300 [ 340.959496][ T28] #5: ffff88814e6d9338 (&conn->lock#2){+.+.}-{3:3}, at: l2cap_conn_del+0x70/0x660 [ 340.978762][ T28] 2 locks held by getty/5532: [ 340.983927][ T28] #0: ffff88814d0e70a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 341.003318][ T28] #1: ffffc9000326e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x433/0x1390 [ 341.030224][ T28] 4 locks held by kworker/u5:2/5776: [ 341.035755][ T28] #0: ffff88805e331538 ((wq_completion)hci9#2){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 341.057568][ T28] #1: ffffc900044e7d00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 341.082264][ T28] #2: ffff888043fec0b8 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x9c/0x900 [ 341.101266][ T28] #3: ffffffff8e534ca8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x547/0x900 [ 341.122630][ T28] 4 locks held by kworker/u5:3/5781: [ 341.127976][ T28] #0: ffff88805e732938 ((wq_completion)hci4#2){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 341.148639][ T28] #1: ffffc900045f7d00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 341.171377][ T28] #2: ffff88805f62c0b8 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x9c/0x900 [ 341.182137][ T28] #3: ffffffff8e534ca8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x547/0x900 [ 341.203088][ T28] 4 locks held by kworker/u5:4/5782: [ 341.208416][ T28] #0: ffff888025c54138 ((wq_completion)hci7#2){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 341.230005][ T28] #1: ffffc90004607d00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 341.252584][ T28] #2: ffff8880461800b8 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x9c/0x900 [ 341.271611][ T28] #3: ffffffff8e534ca8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x547/0x900 [ 341.282956][ T28] 4 locks held by kworker/u5:5/5783: [ 341.288296][ T28] #0: ffff8880266eb138 ((wq_completion)hci1){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 341.312246][ T28] #1: ffffc90004617d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 341.335374][ T28] #2: ffff88807945ce70 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1d4/0x380 [ 341.352453][ T28] #3: ffff88807945c0b8 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x98a/0xec0 [ 341.362333][ T28] 4 locks held by kworker/u5:6/5786: [ 341.376670][ T28] #0: ffff88805e311d38 ((wq_completion)hci6#2){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 341.392452][ T28] #1: ffffc90004647d00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 341.420937][ T28] #2: ffff8880494780b8 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x9c/0x900 [ 341.431475][ T28] #3: ffffffff8e534ca8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x547/0x900 [ 341.453838][ T28] 5 locks held by kworker/u5:7/5787: [ 341.459176][ T28] #0: ffff8880266ead38 ((wq_completion)hci0){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 341.479687][ T28] #1: ffffc90004657d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 341.493016][ T28] #2: ffff888076efce70 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1d4/0x380 [ 341.511493][ T28] #3: ffff888076efc0b8 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x98a/0xec0 [ 341.521742][ T28] #4: ffffffff8e534ca8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x165/0x300 [ 341.532081][ T28] 4 locks held by kworker/u5:8/5788: [ 341.550203][ T28] #0: ffff88802ed9dd38 ((wq_completion)hci5#2){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 341.572308][ T28] #1: ffffc90004667d00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 341.592825][ T28] #2: ffff88802285c0b8 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x9c/0x900 [ 341.611427][ T28] #3: ffffffff8e534ca8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x547/0x900 [ 341.622297][ T28] 3 locks held by kworker/1:5/5817: [ 341.628071][ T28] #0: ffff888017c71d38 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 341.654944][ T28] #1: ffffc9000488fd00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 341.672357][ T28] #2: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x92/0xd90 [ 341.682741][ T28] 1 lock held by syz.0.397/7080: [ 341.687709][ T28] #0: ffff8880261bfca8 (&ctx->mutex){+.+.}-{3:3}, at: perf_event_ctx_lock_nested+0x3b9/0x490 [ 341.710048][ T28] 7 locks held by syz.0.397/7081: [ 341.717019][ T28] 1 lock held by syz-executor/7103: [ 341.722248][ T28] #0: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 341.741296][ T28] 1 lock held by syz-executor/7106: [ 341.747300][ T28] #0: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 341.770082][ T28] 1 lock held by syz-executor/7121: [ 341.777139][ T28] #0: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 341.792550][ T28] 1 lock held by syz-executor/7123: [ 341.797788][ T28] #0: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 341.816906][ T28] 2 locks held by dhcpcd/7130: [ 341.821806][ T28] #0: ffff88805e9abe20 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x9b/0x230 [ 341.841314][ T28] #1: ffffffff8d137b38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3da/0x880 [ 341.852986][ T28] 1 lock held by dhcpcd/7131: [ 341.858280][ T28] #0: ffff88805e9ab220 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x9b/0x230 [ 341.882186][ T28] 1 lock held by dhcpcd/7132: [ 341.906174][ T28] #0: ffff88805e9aac20 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x9b/0x230 [ 341.922353][ T28] 2 locks held by dhcpcd/7133: [ 341.932429][ T28] #0: ffff88805e9a8820 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x9b/0x230 [ 341.951752][ T28] #1: ffffffff8d137b38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3da/0x880 [ 341.964159][ T28] 1 lock held by dhcpcd/7134: [ 341.968873][ T28] #0: ffff888054cd6220 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x9b/0x230 [ 341.996801][ T28] 1 lock held by dhcpcd/7135: [ 342.001533][ T28] #0: ffff888054cd5620 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x9b/0x230 [ 342.020830][ T28] 1 lock held by syz-executor/7138: [ 342.027753][ T28] #0: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 342.037796][ T28] 4 locks held by kworker/u5:10/7140: [ 342.061617][ T28] #0: ffff888043738d38 ((wq_completion)hci8#2){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 342.083657][ T28] #1: ffffc900044c7d00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 342.106915][ T28] #2: ffff88805d9680b8 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x9c/0x900 [ 342.121701][ T28] #3: ffffffff8e534ca8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x547/0x900 [ 342.133348][ T28] 1 lock held by syz-executor/7141: [ 342.138585][ T28] #0: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 342.158438][ T28] 4 locks held by kworker/u5:11/7145: [ 342.168972][ T28] #0: ffff88802118a938 ((wq_completion)hci12#2){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 342.180705][ T28] #1: ffffc900048ffd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 342.205952][ T28] #2: ffff88803b7980b8 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x9c/0x900 [ 342.222519][ T28] #3: ffffffff8e534ca8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x547/0x900 [ 342.241677][ T28] 1 lock held by syz-executor/7149: [ 342.247412][ T28] #0: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 342.267116][ T28] 4 locks held by kworker/u5:12/7150: [ 342.278540][ T28] #0: ffff88805dd20138 ((wq_completion)hci10#2){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 342.292735][ T28] #1: ffffc9000495fd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 342.317092][ T28] #2: ffff888043ff40b8 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x9c/0x900 [ 342.332931][ T28] #3: ffffffff8e534ca8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x547/0x900 [ 342.351122][ T28] 1 lock held by syz-executor/7152: [ 342.356785][ T28] #0: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 342.372643][ T28] 4 locks held by kworker/u5:13/7153: [ 342.378091][ T28] #0: ffff88805e07cd38 ((wq_completion)hci11#2){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 342.399380][ T28] #1: ffffc9000496fd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 342.421419][ T28] #2: ffff888043ff80b8 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x9c/0x900 [ 342.442913][ T28] #3: ffffffff8e534ca8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x547/0x900 [ 342.462429][ T28] 1 lock held by syz-executor/7157: [ 342.467996][ T28] #0: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 342.489640][ T28] 4 locks held by kworker/u5:14/7159: [ 342.495609][ T28] #0: ffff88805e69d538 ((wq_completion)hci14#2){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 342.516166][ T28] #1: ffffc9000499fd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 342.533061][ T28] #2: ffff8880421bc0b8 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x9c/0x900 [ 342.552898][ T28] #3: ffffffff8e534ca8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x547/0x900 [ 342.571842][ T28] 1 lock held by syz-executor/7162: [ 342.578688][ T28] #0: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 342.598186][ T28] 4 locks held by kworker/u5:15/7164: [ 342.606953][ T28] #0: ffff88802536c938 ((wq_completion)hci13#2){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 342.618638][ T28] #1: ffffc900049cfd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 342.641520][ T28] #2: ffff888040c300b8 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x9c/0x900 [ 342.664683][ T28] #3: ffffffff8e534ca8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x547/0x900 [ 342.682834][ T28] 1 lock held by syz-executor/7167: [ 342.688161][ T28] #0: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 342.707295][ T28] 4 locks held by kworker/u5:16/7168: [ 342.716053][ T28] #0: ffff8880421b1d38 ((wq_completion)hci15#2){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 342.732713][ T28] #1: ffffc900049ffd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 342.754738][ T28] #2: ffff88803b71c0b8 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x9c/0x900 [ 342.773017][ T28] #3: ffffffff8e534ca8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x547/0x900 [ 342.793536][ T28] 1 lock held by syz-executor/7170: [ 342.798781][ T28] #0: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 342.812669][ T28] [ 342.815044][ T28] ============================================= [ 342.815044][ T28] [ 342.831655][ T28] NMI backtrace for cpu 0 [ 342.836018][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 342.843240][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 342.853317][ T28] Call Trace: [ 342.856623][ T28] [ 342.859581][ T28] dump_stack_lvl+0x18c/0x250 [ 342.864302][ T28] ? nmi_cpu_backtrace+0x1b6/0x3e0 [ 342.869450][ T28] ? show_regs_print_info+0x20/0x20 [ 342.874686][ T28] ? load_image+0x420/0x420 [ 342.879320][ T28] nmi_cpu_backtrace+0x3a6/0x3e0 [ 342.884302][ T28] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 342.890507][ T28] ? _printk+0xde/0x130 [ 342.894692][ T28] ? load_image+0x420/0x420 [ 342.899234][ T28] ? load_image+0x420/0x420 [ 342.903767][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 342.909878][ T28] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 342.915992][ T28] watchdog+0xf3d/0xf80 [ 342.920184][ T28] ? watchdog+0x1e1/0xf80 [ 342.924556][ T28] kthread+0x2fa/0x390 [ 342.928648][ T28] ? hungtask_pm_notify+0x90/0x90 [ 342.933711][ T28] ? kthread_blkcg+0xd0/0xd0 [ 342.938328][ T28] ret_from_fork+0x48/0x80 [ 342.942774][ T28] ? kthread_blkcg+0xd0/0xd0 [ 342.947395][ T28] ret_from_fork_asm+0x11/0x20 [ 342.952213][ T28] [ 342.956533][ T28] Sending NMI from CPU 0 to CPUs 1: [ 342.961777][ C1] NMI backtrace for cpu 1 [ 342.961791][ C1] CPU: 1 PID: 7081 Comm: syz.0.397 Not tainted syzkaller #0 [ 342.961806][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 342.961813][ C1] RIP: 0010:native_apic_msr_write+0x39/0x50 [ 342.961833][ C1] Code: 74 2a 83 ff 30 74 25 eb 10 81 ff d0 00 00 00 74 1b 81 ff e0 00 00 00 74 13 c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <66> 90 c3 89 f6 31 d2 e9 db 55 24 03 66 2e 0f 1f 84 00 00 00 00 00 [ 342.961845][ C1] RSP: 0018:ffffc900001efb10 EFLAGS: 00000046 [ 342.961858][ C1] RAX: 0000000000000290 RBX: ffff8880b8f282c0 RCX: 0000000000000838 [ 342.961869][ C1] RDX: 0000000000000000 RSI: 0000000000000290 RDI: 0000000000000838 [ 342.961878][ C1] RBP: 0000000000000000 R08: ffffffff8e8b666f R09: 1ffffffff1d16ccd [ 342.961887][ C1] R10: dffffc0000000000 R11: fffffbfff1d16cce R12: dffffc0000000000 [ 342.961897][ C1] R13: 0000000010000a10 R14: 0000000000000290 R15: 0000000000000020 [ 342.961907][ C1] FS: 00007fec0eff26c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 342.961920][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 342.961930][ C1] CR2: 0000000100000000 CR3: 000000007b893000 CR4: 00000000003506e0 [ 342.961945][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 342.961953][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 342.961962][ C1] Call Trace: [ 342.961967][ C1] [ 342.961972][ C1] lapic_next_event+0x11/0x20 [ 342.961989][ C1] clockevents_program_event+0x1c0/0x310 [ 342.962011][ C1] hrtimer_interrupt+0x5a1/0x9c0 [ 342.962043][ C1] __sysvec_apic_timer_interrupt+0xfb/0x3b0 [ 342.962062][ C1] sysvec_apic_timer_interrupt+0x51/0xc0 [ 342.962082][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 342.962102][ C1] RIP: 0010:unwind_next_frame+0x1a8/0x2970 [ 342.962117][ C1] Code: 48 89 df 4c 89 fe e8 57 f4 4b 00 4c 29 fb 4c 89 24 24 4c 89 74 24 08 75 11 e8 34 f2 4b 00 48 c7 c3 a0 4d c8 8a e9 65 04 00 00 <49> 89 df 48 89 6c 24 10 48 c7 c3 00 00 00 81 4c 89 ff 48 c7 c6 00 [ 342.962127][ C1] RSP: 0018:ffffc900001efd78 EFLAGS: 00000282 [ 342.962138][ C1] RAX: ffffffff813b3949 RBX: ffffffff887b5425 RCX: ffff8880313a5a00 [ 342.962148][ C1] RDX: 0000000000000100 RSI: 0000000000000001 RDI: ffffffff887b5426 [ 342.962157][ C1] RBP: ffffc900001efe98 R08: ffffc900001eff10 R09: 0000000000000008 [ 342.962166][ C1] R10: 0000000000000004 R11: 0000000000000100 R12: ffffc900001efe48 [ 342.962175][ C1] R13: dffffc0000000000 R14: ffffc900001efe7d R15: 0000000000000001 [ 342.962187][ C1] ? dev_hard_start_xmit+0x245/0x740 [ 342.962209][ C1] ? unwind_next_frame+0x189/0x2970 [ 342.962223][ C1] ? dev_hard_start_xmit+0x246/0x740 [ 342.962244][ C1] ? unwind_next_frame+0x189/0x2970 [ 342.962264][ C1] ? dev_hard_start_xmit+0x246/0x740 [ 342.962284][ C1] ? dev_hard_start_xmit+0x246/0x740 [ 342.962302][ C1] ? stack_trace_save+0x100/0x100 [ 342.962319][ C1] arch_stack_walk+0x144/0x190 [ 342.962338][ C1] ? dev_hard_start_xmit+0x246/0x740 [ 342.962360][ C1] stack_trace_save+0xaa/0x100 [ 342.962376][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 342.962394][ C1] ? mark_lock+0x94/0x320 [ 342.962422][ C1] kasan_set_track+0x4e/0x70 [ 342.962436][ C1] ? kasan_set_track+0x4e/0x70 [ 342.962450][ C1] ? kasan_save_free_info+0x2e/0x50 [ 342.962467][ C1] ? ____kasan_slab_free+0x126/0x1e0 [ 342.962485][ C1] ? slab_free_freelist_hook+0x130/0x1a0 [ 342.962500][ C1] ? __kmem_cache_free+0xba/0x1e0 [ 342.962520][ C1] ? skb_release_data+0x5dc/0x7b0 [ 342.962538][ C1] ? kfree_skb_reason+0x10e/0x170 [ 342.962556][ C1] ? batadv_interface_tx+0x58b/0x1470 [ 342.962576][ C1] ? dev_hard_start_xmit+0x246/0x740 [ 342.962629][ C1] ? __kmem_cache_free+0xba/0x1e0 [ 342.962651][ C1] kasan_save_free_info+0x2e/0x50 [ 342.962672][ C1] ____kasan_slab_free+0x126/0x1e0 [ 342.962690][ C1] slab_free_freelist_hook+0x130/0x1a0 [ 342.962707][ C1] ? skb_release_data+0x5dc/0x7b0 [ 342.962723][ C1] __kmem_cache_free+0xba/0x1e0 [ 342.962746][ C1] skb_release_data+0x5dc/0x7b0 [ 342.962769][ C1] kfree_skb_reason+0x10e/0x170 [ 342.962787][ C1] batadv_interface_tx+0x58b/0x1470 [ 342.962814][ C1] ? batadv_softif_is_valid+0x70/0x70 [ 342.962842][ C1] dev_hard_start_xmit+0x246/0x740 [ 342.962872][ C1] __dev_queue_xmit+0x19a3/0x3660 [ 342.962897][ C1] ? read_seqbegin+0x196/0x270 [ 342.962918][ C1] ? __dev_queue_xmit+0x265/0x3660 [ 342.962937][ C1] ? read_seqbegin+0x19a/0x270 [ 342.962956][ C1] ? read_seqbegin+0x1c8/0x270 [ 342.962977][ C1] ? neigh_event_send+0x110/0x110 [ 342.962997][ C1] ? netdev_core_pick_tx+0x340/0x340 [ 342.963017][ C1] ? __asan_memcpy+0x40/0x70 [ 342.963036][ C1] ? eth_header+0x11b/0x200 [ 342.963053][ C1] ? llc_sysctl_exit+0x70/0x70 [ 342.963067][ C1] ? neigh_resolve_output+0x618/0x730 [ 342.963097][ C1] ip6_finish_output2+0xe3d/0x1630 [ 342.963122][ C1] ? ip6_finish_output2+0x645/0x1630 [ 342.963143][ C1] ? ip6_mtu+0x7d/0x3f0 [ 342.963157][ C1] ? nf_hook+0x390/0x390 [ 342.963177][ C1] ? ip6_finish_output+0x57b/0x820 [ 342.963201][ C1] ndisc_send_skb+0xc26/0x14f0 [ 342.963219][ C1] ? ndisc_send_skb+0x1f5/0x14f0 [ 342.963241][ C1] ? ndisc_mc_map+0x680/0x680 [ 342.963259][ C1] ? skb_dst+0xd0/0xd0 [ 342.963291][ C1] addrconf_rs_timer+0x2d5/0x630 [ 342.963311][ C1] ? addrconf_disable_policy_idev+0x480/0x480 [ 342.963328][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 342.963351][ C1] call_timer_fn+0x189/0x540 [ 342.963364][ C1] ? addrconf_disable_policy_idev+0x480/0x480 [ 342.963381][ C1] ? call_timer_fn+0xd2/0x540 [ 342.963394][ C1] ? __run_timers+0x800/0x800 [ 342.963423][ C1] ? addrconf_disable_policy_idev+0x480/0x480 [ 342.963441][ C1] __run_timers+0x542/0x800 [ 342.963463][ C1] ? detach_timer+0x2b0/0x2b0 [ 342.963488][ C1] run_timer_softirq+0x67/0xf0 [ 342.963503][ C1] handle_softirqs+0x280/0x820 [ 342.963521][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 342.963538][ C1] ? do_softirq+0x1a0/0x1a0 [ 342.963555][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 342.963575][ C1] __irq_exit_rcu+0xd3/0x190 [ 342.963590][ C1] ? irq_exit_rcu+0x20/0x20 [ 342.963609][ C1] irq_exit_rcu+0x9/0x20 [ 342.963622][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 342.963641][ C1] [ 342.963645][ C1] [ 342.963650][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 342.963669][ C1] RIP: 0010:finish_task_switch+0x26a/0x8f0 [ 342.963684][ C1] Code: 0f 84 33 01 00 00 48 85 db 0f 85 52 01 00 00 0f 1f 44 00 00 4c 8b 75 d0 4c 89 e7 e8 e0 94 34 09 e8 1b 2f 30 00 fb 4c 8b 65 c0 <49> 8d bc 24 f8 15 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 [ 342.963695][ C1] RSP: 0018:ffffc90003adf758 EFLAGS: 00000282 [ 342.963706][ C1] RAX: 8807cc4685966700 RBX: 0000000000000000 RCX: 8807cc4685966700 [ 342.963716][ C1] RDX: dffffc0000000000 RSI: ffffffff8acacbe0 RDI: ffffffff8b1c9c20 [ 342.963725][ C1] RBP: ffffc90003adf7b0 R08: ffffffff911cd5ff R09: 1ffffffff2239abf [ 342.963735][ C1] R10: dffffc0000000000 R11: fffffbfff2239ac0 R12: ffff8880313a5a00 [ 342.963745][ C1] R13: dffffc0000000000 R14: ffff88801c248000 R15: ffff8880b8f3cb48 [ 342.963765][ C1] ? finish_task_switch+0x265/0x8f0 [ 342.963784][ C1] __schedule+0x155b/0x45a0 [ 342.963808][ C1] ? mark_lock+0x94/0x320 [ 342.963825][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 342.963843][ C1] ? lock_chain_count+0x20/0x20 [ 342.963859][ C1] ? asan.module_dtor+0x20/0x20 [ 342.963876][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 342.963896][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 342.963921][ C1] ? preempt_schedule+0xc0/0xd0 [ 342.963937][ C1] preempt_schedule_common+0x82/0xc0 [ 342.963954][ C1] preempt_schedule+0xc0/0xd0 [ 342.963970][ C1] ? schedule_preempt_disabled+0x20/0x20 [ 342.963984][ C1] ? event_function+0x300/0x300 [ 342.964001][ C1] ? smp_call_function_single+0x5a0/0x5a0 [ 342.964021][ C1] preempt_schedule_thunk+0x1a/0x30 [ 342.964042][ C1] ? smp_call_function_single+0x488/0x5a0 [ 342.964059][ C1] smp_call_function_single+0x48d/0x5a0 [ 342.964075][ C1] ? event_function+0x300/0x300 [ 342.964092][ C1] ? flush_smp_call_function_queue+0x250/0x250 [ 342.964108][ C1] ? event_function+0x300/0x300 [ 342.964133][ C1] perf_install_in_context+0x5be/0x920 [ 342.964156][ C1] ? exclusive_event_installable+0x2c0/0x2c0 [ 342.964173][ C1] ? add_event_to_ctx+0x1180/0x1180 [ 342.964200][ C1] ? anon_inode_getfile+0x109/0x1a0 [ 342.964218][ C1] ? perf_event__header_size+0x165/0x220 [ 342.964238][ C1] __se_sys_perf_event_open+0x1836/0x1c50 [ 342.964263][ C1] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 342.964288][ C1] ? lock_chain_count+0x20/0x20 [ 342.964308][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 342.964325][ C1] ? __x64_sys_perf_event_open+0x20/0xc0 [ 342.964342][ C1] do_syscall_64+0x55/0xb0 [ 342.964357][ C1] ? clear_bhb_loop+0x40/0x90 [ 342.964369][ C1] ? clear_bhb_loop+0x40/0x90 [ 342.964382][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 342.964408][ C1] RIP: 0033:0x7fec0e19ce59 [ 342.964421][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 342.964431][ C1] RSP: 002b:00007fec0eff2028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 342.964445][ C1] RAX: ffffffffffffffda RBX: 00007fec0e415fa0 RCX: 00007fec0e19ce59 [ 342.964454][ C1] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000480 [ 342.964464][ C1] RBP: 00007fec0e232d6f R08: 0000000000000000 R09: 0000000000000000 [ 342.964472][ C1] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 342.964481][ C1] R13: 00007fec0e416038 R14: 00007fec0e415fa0 R15: 00007ffef5220938 [ 342.964501][ C1] [ 343.932577][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 343.939499][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 343.946808][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 343.956884][ T28] Call Trace: [ 343.960195][ T28] [ 343.963148][ T28] dump_stack_lvl+0x18c/0x250 [ 343.967874][ T28] ? show_regs_print_info+0x20/0x20 [ 343.973194][ T28] ? load_image+0x420/0x420 [ 343.977738][ T28] panic+0x2dc/0x730 [ 343.981663][ T28] ? schedule_preempt_disabled+0x20/0x20 [ 343.987328][ T28] ? bpf_jit_dump+0xd0/0xd0 [ 343.991863][ T28] ? __irq_work_queue_local+0x13a/0x3b0 [ 343.997445][ T28] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 344.003638][ T28] watchdog+0xf7c/0xf80 [ 344.007824][ T28] ? watchdog+0x1e1/0xf80 [ 344.012193][ T28] kthread+0x2fa/0x390 [ 344.016288][ T28] ? hungtask_pm_notify+0x90/0x90 [ 344.021344][ T28] ? kthread_blkcg+0xd0/0xd0 [ 344.025961][ T28] ret_from_fork+0x48/0x80 [ 344.030407][ T28] ? kthread_blkcg+0xd0/0xd0 [ 344.035026][ T28] ret_from_fork_asm+0x11/0x20 [ 344.039842][ T28] [ 344.043291][ T28] Kernel Offset: disabled [ 344.047619][ T28] Rebooting in 86400 seconds..