last executing test programs: 19.63368395s ago: executing program 2 (id=2787): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x16, 0x2, 0x0, 0x0, 0x4, 0x8a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, @perf_config_ext={0x3, 0x6c99e481}, 0x100001, 0xca, 0x5, 0x5, 0xd12, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x2000000000000000}, 0x0, 0x3, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="b702000000001700bfa300000000000007030000f0ffffff720af0ff1100000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000000000006a0af2fe0000000085000000a3000000b700000000000000950000000000000000e154cd844a954b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129da487130d5f24bf901115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4b9535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024a0041b1df65b3e1b9bf115646d14ce53d13d0ccacda1efc5f9094fa737c28b994a8512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4fdc4b4861004eefbc17f54f82a804d4a69bf9bc5fa77ee2922bd165a5a68488e010030166565a097b103b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f940b6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c2d7f22b0d22772c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d366501753a7ac7fedb8d34f5bc381604fcd46105c457e7dd13cab6692422a47e9ffe2d4a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c9585638c2153a6eee01738b0c10671f4f559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670100be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c160119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d300e4d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d0000002000000001c800000000000000000000000928ee53595a779d243a48cea769470424d28804c024ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d74bf0a305790c9d644735efbf3411718d6ee7aebf9ef40662d7836d252c566f5ee934c679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da2022f23daec61854f640f701db0276652f6c031578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada209bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6155e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2f085185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bcdb7c89739f5d81e750d50517a59a3ad09e8802e8f4f535447cc0facd5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5b473332f2011e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d3fcd116bce9c764c714c9402c21d181aae59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755367fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf00000048d2570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749e1338636555009edf66be445d6975d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab0043ebf7c79a953e023f74afad591821610b857e8717764b633b21cb32f09f4db033e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c1960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000000000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd5c17d5486b0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dff7aa46e820a74f9530bdcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fdca4e9eda0072f6df342f3e7071e28ef6806bc8e139c49b91c76b0d3958f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7194d1eb3de6a5f99f301f89c2ee627e949cdd22000026a9960503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640000cd9e7f2e236ef5f1e3a94b108eb9750b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a2050000c375c705c798e0e208e4a5259d0bda526b462af45a6e9a84aebe025c8a7f65819f397574db7ab01bd2b3e3cd28c5aec50f8edfe39a00bafd688a7eea04efdeed96f67012bc3f795edb68b5dec80ad31a858eb756c815e7695d00000000000000000000000000000000000000000000000000007ccf0ce549d97510f7f8765408bb702f0000006d4754d98b7064cf31a681421994e1f307f0ab4ff2e33d3c88fea5d218a276b77adfee7c8fb145783ee1f8cf632c2604eab3a62a28611da1cae5ce60003111ce5c96a1d6e45ee144ffa3dcca32a33f8f0ce2995b7b7aa0bce228cbf37412e1bdebae06edb51a134301b4627d4927287daf9dcae6720334862f3a18094f1edd9e3503379815dcfbbc8141f6e1bbb0901ae91357677fd9d2bb00d4f17fb441c2dfa2b424bf46ae299d68ac27792cdac2f09e99f4ab5546ba1e5ad6a329f24e73a9c38eec34bd4dcc1609f6150e2de72f6599a2310c3841f4bb7f39cabc82c9fdfff5587ed4fa84090635fa3445c4cc54478b2f98320944ac7cb1c4e414556f7b0b763a00a84327cec7e11b3470f0384b27bbfdd8b2472497e7fe8c5df7e0a00641872472efa21c9ad3979e642dcc85c17ca8e084aa9689b83426e2fdaa01f500000000000000000000f9fd84fa991466ff749afe900d02281b2bb60d458340c4f68ec34835760ceca945bf181a000000c000000000b4a76515564ae189de7c1765f0ff68a0388ca8dd2aa831d0e01f0d7ce74401a58cef60e63e97a50c18de54121ce66380224ab7b9c0d4710f2347bad2c9b3e41cc738c1092728687f33e5cdb077223dc82c2137b4e3ba6791a2cd764e654f904c9505b7c5e3b2897072e747534952dcda50cde3e4deb6ebf85a04c3e415112b01eed6515c845a8a20519cd21787d560e9d8283fa8ff0c17b63ba06577c26678ff45420a1f85df47dbfc44e534f71aae5693fb5df61c5096219091ce0cd8e1e2e79bf9d37779e52007c66a00e6ded1499ed3892ed1544d1577906b52e16c734d4aec07dd15faa768c97298be87dd34ce704ffe3da8b46708cf972de4f31c0705ac933db80bdcfcb35c0d4620d4ec270ff7c9ce1b78994dd2b28b9d1c5c469d4c1a61781dce2f1b54d6138bd3f7df9e9ca613bec407c1b8d1bd0c7cb9d76eebf2f17c"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010002000000000000000003"], 0x0, 0x42}, 0x28) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) recvmsg$unix(r1, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYRES8=r2, @ANYBLOB="3eca", @ANYRES8], 0x9a) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x100905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="2e00000011008188040f80ec59acbc0413a181003100000001010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10, 0x0}, 0x240008d0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x4, 0x4, 0xc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000001800000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{0x1}, 0x0, &(0x7f00000003c0)}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x1, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4) 19.32175697s ago: executing program 3 (id=2789): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, &(0x7f0000002800)=[{&(0x7f0000000c00)="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", 0x1ec}, {&(0x7f0000001680)="fae0835ee82c20abb86f7c287ffb04a52a0b2339a4efc8216bada6fb7f4385ead471969bdf9b82994c10898db8b0fd9a6068b87f4547eff53d6cb7b37534e44d27c79042f5c405c0ff3eaf643001000000000000008263d71ee0e5b2cb31215ded6df9c76d150aa52a4eecb94fe48e79205c96a0aab13eaa4681860576d2e32f6873b200d669e65d56bd8a4703cbea6b8c610ec158fe5f8683f7", 0x9a}, {&(0x7f00000015c0)="6b75b597d05d969a191023", 0xb}, {&(0x7f0000001740)="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", 0x2ea}], 0x4}, 0x0) recvmsg$kcm(r0, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x10002) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="eb0000020200000000000000000004cb930000000000"], 0x0, 0x26}, 0x20) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb0100180000000000000050d2f6b69800000002000000090000000000000e03000000010000000a0000000000000203000000000000000500000d00000000060000000100000000000000000000000000000000000000090000000000000001000000030010"], 0x0, 0x6a, 0x0, 0x0, 0x7fffffff}, 0x28) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b84, 0x2, @perf_bp={0x0, 0x8}, 0x8000, 0x5, 0x43a1bd76, 0x1, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x10, &(0x7f0000000600)=ANY=[@ANYRES32=r2], 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x2f, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x5d, &(0x7f0000000080)=[{&(0x7f0000000c40)="c106020022003505d25a806f8c6394f90435fc60040011000a740100053582c137153e37024801", 0x27}], 0x3b, 0x0, 0xffffffc2}, 0x4000804) r3 = socket$kcm(0xf, 0x4, 0x2) socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0xfe, &(0x7f0000000000)=[{&(0x7f0000000040)="0207000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2000000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x40000) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030030000b12d25a80648c2594f90124fc60100c034002040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0xa, 0x0, 0x0, 0x4000}, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x21) r6 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r7, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r7, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18000001000100000000000000"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r8}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x2, &(0x7f0000000000)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x16}], &(0x7f00000000c0)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x41100, 0x0, '\x00', r8, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) perf_event_open(0x0, 0x0, 0x0, r6, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x0) 18.68049632s ago: executing program 2 (id=2791): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) (async) openat$cgroup_ro(r0, &(0x7f0000000080)='freezer.parent_freezing\x00', 0x0, 0x0) (async) socket$kcm(0x2, 0x5, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32, @ANYBLOB="0d00ff"], 0x0}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x10001, 0x0, 0xfffffffc, 0x2}, {0x2}]}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0xc, 0x0, 0x0, 0x0, 0x9, 0x80, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x382a, 0xffffffffffff0001}, 0x18000, 0x20000003, 0x43a1bd76, 0x7, 0x9, 0x658, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = socket$kcm(0x11, 0xa, 0x300) sendmsg$inet(r1, &(0x7f0000000b40)={0x0, 0xfffffffffffffe68, 0x0}, 0x2004e900) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x3, 0x0, 0x0, 0x6, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x23, 0x0, 0x0) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x43}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0}, 0x94) (async) r3 = socket$kcm(0x22, 0x3, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x300080c5) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x9, &(0x7f0000000040), 0x4) (async) close(0xffffffffffffffff) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x80044943, 0x0) r4 = socket$kcm(0x2c, 0x3, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) setsockopt$sock_attach_bpf(r4, 0x11b, 0x2, &(0x7f0000000040)=r5, 0x4) (async) sendmsg$tipc(r5, 0x0, 0x20000041) syz_clone(0xa49a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="3640000048009125745c7388641f9c0e0a"], 0xfe33) (async) recvmsg$unix(r6, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) 18.577938234s ago: executing program 0 (id=2792): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000020000000000000000000095"], &(0x7f0000000340)='GPL\x00', 0x1}, 0x94) r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x13, &(0x7f0000000800), 0x4) 18.38988954s ago: executing program 2 (id=2794): socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0xffffffff, 0x0, 0xb}, {0x10000002, 0xfffffffe, 0x4, 0x9}], 0x10, 0xd5}, 0x94) close(0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x2, {0x2, 0x0, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x0) r1 = socket$kcm(0xa, 0x6, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000002280)=ANY=[@ANYBLOB="18020000e2ffffff00000000000000c685000000360000009500001800000000922ae83713ab9600010000801b10fb54a8cb72d232ad558c46fff4208d4990ec11ce9413ac30e00bd0081f8504e19a5183d769676520e98a263345e44d5ad12bca35510100c4d86abeb12303ff1c9fe0d0020000d60400000007d3670000008aff66d6b3181ffc1d62a3954c1198bbc4fa13aee48ca9e8969faebf3183fe803ab3f5024b52dc265b36fc9dae00a09404f01f9504d0976d252bd8d24538556e5e57bee3b8cf464ef3c6a7def8bad3ca6e3abdb21696e340bb8e2a093add57196b40def3858ef569147fa4108328392d322ab5df10a2f69a6bdf72ee7944e810d0223917c3d042410f57466f59544047d6d8ac44060000000000ee16c729300d2301800000000000002b5a8b05fcc154ad5290a8cdb97c343f454ff69dd6cbde49b28a6cb5f4fc0001745cff6e00e7ffffff0000acf3209a08439f1ff01779b6f6df7e02aa6d7760525b595fe1f697bc114ed1778e97a3f0395f946974cfb458be2a34cf924dc37b5592bf17956f3547497aba814382ff67b345b677a9d6523d87008000000400000000003fe8613ca29ff92be0d8deffff7b68136b0046d535dd39c0f35408869e9b342b953f91447e6b9eab304f134306320600a44095254b45a6c1312a13696c7202df5f764713504facc532c5a6d44d99ec7530ed7b0311000000000000e54e9072a22d911f4a2c2e2fa806e63c5cd98a8569a6d6bcfb000064885117e2ad910eae67e0ebe380d0f648713e68153579e02d71c58d147b00821ab9a6475b31e1ebf1369a04000000fbf3983f283f2f00000000992774814d63c933912d000006000000a66acb0a38856929e7d8b1b06c9bd5d7e5490f3b8596b694ea9483bd4bd287c83dd998a74694d18bdd8ad0983bc90770bbd26a82b9d99d5fc04563b523c47ef8c33400e90d02000000000000000edf1147a7afe772cd45af8aeffe2753088e02ca6bb2feec446ce7dbce66f0a93a03371320980865c7c62ea4d8f8a864dce9fa85aeb0454349100296ee2dba39c3f6fd6cf96714e11fe03b5062809a7418b165dd0336d226bac1e1223be1c97b15175d0e664beb126000e96549e1a1228c686edb475b705eaa9515c96f4fc6b3c925ea404e0f1de61026dc6c6618580fd6ce9eac602c1756f6d1056712412131ed9925989e01eae489ec7052e0ed72c326c7a8aa63999e2297c54ce1822d14b7c7699a9d0600f11f2e7f474cffbc35bc8623cd5eb68af82275a940be0400000000423346da092cbe220de96d6a8e9f32f18d1f606b381e4903b500000000000000000000004a2357ba5f03000000000000005dcf4f2aaee86d4802000000000000007cdb686d5da2a42e4b5024b6535811f362201d4f82012e6af704973d04ea923c19e6cb723c1923b3eea2d73e176dff383c9fbbac53dfdcb1a68c98e96fe39eec23963faf3ebed3409144c7c53d6318ced678a621450a9b01e9f2772e5f2999d3435da02556e36c3215d2bd4e96c93bff3ad04a82ff3cfadcf65eb92adc6c68d66b11cb2d7556414a86dfa94bb7aa52c7febb1e9b2efcbbc5bccf9d39bed802f4f056976a9a362ee9cc624ec454b90200fd9603f96908bddc14500000000000000000000000000044d917c62b27679913075731e8fddb07c10c82002d60181588ae63a440454287de9e340f611267f37bdd0f2d21cb06fcaf45a0a297e396f428d43371424b307eef82c5d6d19f3ef0d3b8f7fa51957e3099caab31133b34a1d3eebc0f0c9056df2e9667ba0b55695c7894010079b07e7aef7785e248deb8c83ab6eb2c72c484241dc3b66da78260f800fffd39368b952f6f4a10295c50c887a31d8b543c5d10f2dbd4d0b84eaad43feb6e169a9f2fcff7000000000000000000e011bc6366f56fa787f212c1f8c0f47f5078191c8a02ad436725771738a2a98891971e3b932352896e1ea10f62e8ef7a87e16151b39d6c27575714540d8c293a3fa4b5a825360423c1cbc8b5d19167152823ed853140edda002c16c842b168bb55f6bb713deb57d0aa78d6d4e5fc5be2c402bd77125d98120358900000892b135a92e8c844938aa98ba4839a1408a696454d40e5eed4d4dce481ca86bfac54c330331b7f2cde17cbaeb0377696faf546ecbe742d73d47d726a50f6e752f3325255bd7e8b5923aa3cfb6f7e06494f21ca450139c558000000000000000000000800000000000000000075aa0000000000000000000000005560bd9eb81e839e4992e64b074a66cccccf00334fa94da8477be7d99b558ec6a5b1596ac1e7617c6b32eed0cc70286caf2c5189a103f4b0b04aff171c4d388ccf67fea37e782f025c94c853cde330a193a967d907a8c88fcb033e680f559a72150cb900bafcd536f48797915a2fe9922ce27300009e1b36aa4730117d9b00000000003c630000000000008fbbd11b015c415ca04192fbfb1a8b0e3460af35771dbac10062835c9bab3ad09f7a022c52d8000000000000000000004000000000000000000000000000000000000000000400000000000000000000000000006ec473c54399b7b8aa1ee46132fc45da8292631178cecf19550108b8b8423de4295777a17bf4dfdfee5de0f3e4dadf51ab9562827b762fa611ba5f32861c19dffe1dc9fd5c41cd46cf131fd6b0c2ddad90ac33f768f9ecc70327c59918fa5a249befe98262f53c8182d95f6da3698a6a88c2c31d801a8f1f5e0ce05138d5422da0a6a62b9dfe1f39775d1d0c9186096415f544aaf76b0a1c877a6c826a5adcfb22c4a0e5a46271caa3eaf4f389dd5f3c20dbddc0377a4266d7b9fd61b9287e9b4be0a413ee31be0ddecab0ef7b25cba1fb3654ddf291ecb7768ac1e177042cb4c452fa6b3966950000000000000000c187da23d6855500fe8510b51e13a890e394b84a6ea2cc8d42b97c697c29122298d55e2e1cca8e07abda2606a3f381c64b9fec0000000a7965e4854e8e3572ad5149b3872342dea9252132860c9af1bd5fe263c0313dea5d6e0c11a466d6892ed65f34667dd79b07b5cbdd8aa7dd561a26b5562d4861a7e1b0f48930e0b696ea3bee7eb72794e163d7aeac9a0fa5403ac9cb421eae283b0550f1d0d339cd7b96e71d3ab48ad9d7975e0c9b117f71d3ab80a0c9b0284ecc469fa6181c9c71fce07a6ffb23296a107763138e8d9876291af2076890c47925ac773d95d2ca42acb3e5f3a1550665b898462c139ffd0106bc8a61b6117d252efcab7106b4c3a3c13a70ff452e9d2096142c517b0e91b5cf88332faca5b3ee96363065c3ce32d3d39ec36e20d597e05664f2526bd918090649da11f7299789d00f502cdf1e99d3efecb9b457642fe810370ba4fbe00fa60a28af966a27a1659e448bbe43a1dcd2ea760018b57a36ac41ef2051a7b703d55c0602540663016e20d50385766df4dac47802a55bd38dd767ee9960c6daa704fc5d01a14591f26b7b538c9bb22f6a2f7a34d1b9edfd125a9e25a110228c64253588ff420644dbc0854e69a7bdda72f93ceaccf92cfe7dd6296c950db10f6dd8a5ef9b73cf6a12a1ba16fdc7e35b805f4fd2fcff0a623722149c1465e4de2d53f0f10b14c21865027abc71a12cb1e9f8029c7a20000000eeb0d53a83e518c8d2052c08b515d9d0bde24ac4e798040c7db0bb03c019507d6377f3d5dd94a27abc6d6b120d61f772407e0d2cb50d29168b68aef9f176b4c3aa8b21279d4ea9c1f669aa8c2c17d5b3a8d1dda58d26f1019af04b7774c85d5bce8be010f27c5211938031c3404680b01279c778bd1fe1b48c4b5b8e0fe756e54a8d76b7cec5e3407d93b4eadc446440607de844acf5524a4657e33af2115547b735b57b5092d0bc8fa6acb832509abe0882d570ce400aaebd7baff88526608d6991aac95751671174129457e4a03aca69d82b64b89e6ad6ed1e275ec5002e48170e4c7b4f3971481098dedb88fba90770e44bf404d5a97fefe2fe8e459fe45933b78c7ab5fe985a480193a20fb07da1455fb283df68af569ac82aa6dc703e29bf158931fb79f2abfa6ff7eb8c4f381c9da58bea460e2ead969933e5391970ca4fddd64da2e5df9c4d82044068caaaab771b37bb06bbe673056d849825525f1120b2250f6b8520381f7a74b1c687781cb6b23e67b918844b83dbaeeb559ec8520d710dd6d6b4e64838bd434a36ed03fc0c488b24571032ffbc9f8ce97041e1bc4729d539358dc9599c1266b9ce2cb6dd0ad57a6e9d3d4a11a27f70b2934c96237e2ba09c58eeda678d4d08b6da99b7a86e946215afb1b48792fde54492e306cb5342e2589874b603a1de972b1f09cc350096f5c3e814118af9ba0793cfdf20c77b34eacfdf63ce59ec4d2f867bf884e941559b068d908325667672b5e1cf71f4829c0493e8b141399ed926b822becead7a0a2b4a4c008ab16b616d60f347e4da54f06443507efe57ea62399ef4eb11b2f559e1b056456a53998bf1c6d13c92e75136147f91ae3a75ca15eb1b51bf700b3c0bf54bc3745ff313c5e75dc66386897f6ee45429371b8d0878c442ad2fe9baf85c1390da13efc353ccbef950c29f39ddf436f0d9bf1be1515ed251d8b6f11ecb16b1e8d1ed04196e9b6c2f9e068b7749bb6c1f533e493f22c901662c65cb761dc2eeff2f698bd4dbae83e2dfdc4f1c7f918a00515c1bc189d10ec22b35c92725cbf0ba244fd029c4f026f68e000000060000ab0476c3fd7f7c1e5c000000000000000000000011e43e39d3f4394fbfa13c416b1c443c5e52eea726491ad75100ebad7c6d5a665c59a3fb158e43da904f19e7e8daa4e90390b8da945f6cd78536c0d2be07221f85ad46b180f256d4d84592691d15d65896b66b63a46705338b67b72dc1c3075fcdc5cbffb0366151632ba5be8ae815dfea9fadfd31c473a24a73d3e5116c3023b3563c72d26fbd59877132bde5ca4ef8d92fd3613c768b35223f6fd0b5e9a8b98cccf1e2b4612e620e3a159d6365c9045aaa826aa0ee6d26cf0397ce674c20824584b464ebdc2f3ea26a7aec4570b242a6677a4e9187f8591c3a9bdc0000001a002364bbd93964a8d0bdc802b9be2500"/3636], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) setsockopt$sock_attach_bpf(r1, 0x29, 0x22, &(0x7f0000000100)=r2, 0x120) 18.35919415s ago: executing program 0 (id=2795): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b703000018000000850000006900000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x66, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x2, 0x200000000000001, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{0x1}, 0x0, &(0x7f00000003c0)}, 0x20) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x1, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0x106) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x100) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x2d, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 18.182172706s ago: executing program 2 (id=2796): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffd51, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpu.max.burst\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000100)=0x9, 0x12) r2 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) socket$kcm(0x2, 0x5, 0x84) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r6) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8b18, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @local}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000080)) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000004100)={0x5, 0x80, 0x0, 0x3, 0x87, 0x0, 0x0, 0x1, 0x100, 0x5, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7ffd, 0x2, @perf_config_ext={0xffff8880b8627a20, 0x1}, 0x11098, 0xfffffffffffffffe, 0x465, 0x5, 0x0, 0x3, 0xc, 0x0, 0xb, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRESHEX, @ANYRES32], 0x48) r7 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000580)=ANY=[@ANYBLOB="364000001a00913a09b51bcb3cc5a05f"], 0xfe33) r8 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_bp={0x0, 0x6}, 0x100000, 0x200, 0xffffffff, 0x0, 0x9, 0x2c, 0x3, 0x0, 0x0, 0x0, 0x100000032}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="322efc649e4416ef01b7aa3d577f9be2b353ebb52baf887d63ef0c6f550e7e90331687e727247f66411e8c2e4359a53de5681dbe320aa9d7185320f6b0578d00f7f6d8172032cf038a7e16ed25b1a87228f4351f6ebd01469cb00848"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, 0x0, 0x10b8}, 0x106) r9 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r9, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r9, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, 0xffffffffffffffff) recvmsg$kcm(r7, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x222) 18.181726116s ago: executing program 0 (id=2797): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffd51, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpu.max.burst\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000100)=0x9, 0x12) r2 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) socket$kcm(0x2, 0x5, 0x84) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r6) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8b18, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @local}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000080)) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000004100)={0x5, 0x80, 0x0, 0x3, 0x87, 0x0, 0x0, 0x1, 0x100, 0x5, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7ffd, 0x2, @perf_config_ext={0xffff8880b8627a20, 0x1}, 0x11098, 0xfffffffffffffffe, 0x465, 0x5, 0x0, 0x3, 0xc, 0x0, 0xb, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRESHEX, @ANYRES32], 0x48) r7 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000580)=ANY=[@ANYBLOB="364000001a00913a09b51bcb3cc5a05f"], 0xfe33) r8 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_bp={0x0, 0x6}, 0x100000, 0x200, 0xffffffff, 0x0, 0x9, 0x2c, 0x3, 0x0, 0x0, 0x0, 0x100000032}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="322efc649e4416ef01b7aa3d577f9be2b353ebb52baf887d63ef0c6f550e7e90331687e727247f66411e8c2e4359a53de5681dbe320aa9d7185320f6b0578d00f7f6d8172032cf038a7e16ed25b1a87228f4351f6ebd01469cb00848"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, 0x0, 0x10b8}, 0x106) r9 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r9, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r9, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, 0xffffffffffffffff) recvmsg$kcm(r7, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x222) 17.929781844s ago: executing program 0 (id=2798): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x10a0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r2, 0x0, 0x24040810) bpf$PROG_BIND_MAP(0x23, &(0x7f0000001500)={r0, r0}, 0xc) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000003940)=[{&(0x7f0000000500)=""/4086, 0xff6}], 0x1}, 0x0) socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000001580)}], 0x1}, 0x0) r4 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, 0x0, 0x100000000000000, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x90) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000001000)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000001040), 0x12) socket$kcm(0x10, 0x6, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x300, &(0x7f00000001c0)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000011c0)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x14, &(0x7f0000001200)=ANY=[@ANYBLOB="180000000000000000", @ANYRESHEX=r7, @ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000100), 0x4) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd79, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x2, 0x0) r9 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) 17.929314104s ago: executing program 3 (id=2799): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0xffffffff, 0x0, 0xb}, {0x10000002, 0xfffffffe, 0x4, 0x9}], 0x10, 0xd5}, 0x94) close(0x3) r1 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000)=r4, 0x10) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f00000005c0)="df", 0x1}], 0x1}, 0x0) perf_event_open(&(0x7f0000000840)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640bd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x98, 0x2}, 0x8002, 0x6, 0x43a1bd74, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$kcm(0x22, 0x2, 0x26) socket$kcm(0x2, 0x5, 0x0) r5 = socket$kcm(0x2, 0x1, 0x84) r6 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r5, &(0x7f0000002700)={&(0x7f0000000080)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000180)="90", 0x1}], 0x1}, 0x8040) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d00028422fb564500006e23e3f58e76110165f450e71bfc74e3002500028d459e37000f0000000000bf9367a17e51f60a64c9f4d4938037e786a6d0bdd700000000000000000051fd1f33597225", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000) setsockopt$sock_attach_bpf(r0, 0x84, 0x10, &(0x7f0000000000), 0x8) 17.881708766s ago: executing program 1 (id=2800): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x16, 0x2, 0x0, 0x0, 0x4, 0x8a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, @perf_config_ext={0x3, 0x6c99e481}, 0x100001, 0xca, 0x5, 0x5, 0xd12, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x2000000000000000}, 0x0, 0x3, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="b702000000001700bfa300000000000007030000f0ffffff720af0ff1100000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000000000006a0af2fe0000000085000000a3000000b700000000000000950000000000000000e154cd844a954b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129da487130d5f24bf901115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4b9535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024a0041b1df65b3e1b9bf115646d14ce53d13d0ccacda1efc5f9094fa737c28b994a8512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4fdc4b4861004eefbc17f54f82a804d4a69bf9bc5fa77ee2922bd165a5a68488e010030166565a097b103b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f940b6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c2d7f22b0d22772c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d366501753a7ac7fedb8d34f5bc381604fcd46105c457e7dd13cab6692422a47e9ffe2d4a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c9585638c2153a6eee01738b0c10671f4f559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670100be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c160119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d300e4d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d0000002000000001c800000000000000000000000928ee53595a779d243a48cea769470424d28804c024ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d74bf0a305790c9d644735efbf3411718d6ee7aebf9ef40662d7836d252c566f5ee934c679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da2022f23daec61854f640f701db0276652f6c031578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada209bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6155e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2f085185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bcdb7c89739f5d81e750d50517a59a3ad09e8802e8f4f535447cc0facd5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5b473332f2011e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d3fcd116bce9c764c714c9402c21d181aae59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755367fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf00000048d2570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749e1338636555009edf66be445d6975d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab0043ebf7c79a953e023f74afad591821610b857e8717764b633b21cb32f09f4db033e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c1960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000000000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd5c17d5486b0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dff7aa46e820a74f9530bdcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fdca4e9eda0072f6df342f3e7071e28ef6806bc8e139c49b91c76b0d3958f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7194d1eb3de6a5f99f301f89c2ee627e949cdd22000026a9960503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640000cd9e7f2e236ef5f1e3a94b108eb9750b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a2050000c375c705c798e0e208e4a5259d0bda526b462af45a6e9a84aebe025c8a7f65819f397574db7ab01bd2b3e3cd28c5aec50f8edfe39a00bafd688a7eea04efdeed96f67012bc3f795edb68b5dec80ad31a858eb756c815e7695d00000000000000000000000000000000000000000000000000007ccf0ce549d97510f7f8765408bb702f0000006d4754d98b7064cf31a681421994e1f307f0ab4ff2e33d3c88fea5d218a276b77adfee7c8fb145783ee1f8cf632c2604eab3a62a28611da1cae5ce60003111ce5c96a1d6e45ee144ffa3dcca32a33f8f0ce2995b7b7aa0bce228cbf37412e1bdebae06edb51a134301b4627d4927287daf9dcae6720334862f3a18094f1edd9e3503379815dcfbbc8141f6e1bbb0901ae91357677fd9d2bb00d4f17fb441c2dfa2b424bf46ae299d68ac27792cdac2f09e99f4ab5546ba1e5ad6a329f24e73a9c38eec34bd4dcc1609f6150e2de72f6599a2310c3841f4bb7f39cabc82c9fdfff5587ed4fa84090635fa3445c4cc54478b2f98320944ac7cb1c4e414556f7b0b763a00a84327cec7e11b3470f0384b27bbfdd8b2472497e7fe8c5df7e0a00641872472efa21c9ad3979e642dcc85c17ca8e084aa9689b83426e2fdaa01f500000000000000000000f9fd84fa991466ff749afe900d02281b2bb60d458340c4f68ec34835760ceca945bf181a000000c000000000b4a76515564ae189de7c1765f0ff68a0388ca8dd2aa831d0e01f0d7ce74401a58cef60e63e97a50c18de54121ce66380224ab7b9c0d4710f2347bad2c9b3e41cc738c1092728687f33e5cdb077223dc82c2137b4e3ba6791a2cd764e654f904c9505b7c5e3b2897072e747534952dcda50cde3e4deb6ebf85a04c3e415112b01eed6515c845a8a20519cd21787d560e9d8283fa8ff0c17b63ba06577c26678ff45420a1f85df47dbfc44e534f71aae5693fb5df61c5096219091ce0cd8e1e2e79bf9d37779e52007c66a00e6ded1499ed3892ed1544d1577906b52e16c734d4aec07dd15faa768c97298be87dd34ce704ffe3da8b46708cf972de4f31c0705ac933db80bdcfcb35c0d4620d4ec270ff7c9ce1b78994dd2b28b9d1c5c469d4c1a61781dce2f1b54d6138bd3f7df9e9ca613bec407c1b8d1bd0c7cb9d76eebf2f17c"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010002000000000000000003"], 0x0, 0x42}, 0x28) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) recvmsg$unix(r1, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYRES8=r2, @ANYBLOB="3eca", @ANYRES8], 0x9a) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x100905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="2e00000011008188040f80ec59acbc0413a181003100000001010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10, 0x0}, 0x240008d0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x4, 0x4, 0xc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000001800000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{0x1}, 0x0, &(0x7f00000003c0)}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x1, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4) 17.868408896s ago: executing program 2 (id=2801): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x10a0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r2, 0x0, 0x24040810) bpf$PROG_BIND_MAP(0x23, &(0x7f0000001500)={r0, r0}, 0xc) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000003940)=[{&(0x7f0000000500)=""/4086, 0xff6}], 0x1}, 0x0) socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000001580)}], 0x1}, 0x0) r4 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, 0x0, 0x100000000000000, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x90) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000001000)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000001040), 0x12) socket$kcm(0x10, 0x6, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x300, &(0x7f00000001c0)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000011c0)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x14, &(0x7f0000001200)=ANY=[@ANYBLOB="180000000000000000", @ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000100), 0x4) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd79, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x2, 0x0) r9 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) 17.455255339s ago: executing program 3 (id=2802): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x26}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b0000000000000000000000f7ffffff00000000", @ANYRES32, @ANYBLOB="d9b300"/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="05f2c300010000000100"/28], 0x50) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xd, 0xc, 0x0, 0x0, 0x0, 0x8, 0x640b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x4, @perf_config_ext={0x9a, 0x7}, 0x8000, 0x82, 0xffffff81, 0x7, 0x9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0xa0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x9, 0x4022, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x5, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000740)="d800000019008111e0020f060d8107040a60000000020000001455a12a00090008000699e3ffffff14000500fe80817806000567b8b7b94002000009080016060000000000000000d67f6f9400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237e09000000b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b7b4338c9f1ac76efb42a9ecbee5de6ccd44242f4d643f6fd0f26187b51980dd6", 0xd8}], 0x1}, 0x80) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xbe}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000080), 0x24) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071183f000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x65, '\x00', 0x0, @fallback=0x1a, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) 17.312083924s ago: executing program 1 (id=2803): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x13, &(0x7f0000000800), 0x4) 17.192538487s ago: executing program 1 (id=2805): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x2000, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x0) 17.095598931s ago: executing program 3 (id=2806): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff0000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000018000000850000006900000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x66, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x2, 0x200000000000001, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{0x1}, 0x0, &(0x7f00000003c0)}, 0x20) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x1, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0x106) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x100) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x2d, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 17.049761202s ago: executing program 0 (id=2807): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffd51, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpu.max.burst\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000100)=0x9, 0x12) r2 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) socket$kcm(0x2, 0x5, 0x84) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r6) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8b18, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @local}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000080)) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000004100)={0x5, 0x80, 0x0, 0x3, 0x87, 0x0, 0x0, 0x1, 0x100, 0x5, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7ffd, 0x2, @perf_config_ext={0xffff8880b8627a20, 0x1}, 0x11098, 0xfffffffffffffffe, 0x465, 0x5, 0x0, 0x3, 0xc, 0x0, 0xb, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRESHEX, @ANYRES32], 0x48) r7 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000580)=ANY=[@ANYBLOB="364000001a00913a09b51bcb3cc5a05f"], 0xfe33) r8 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_bp={0x0, 0x6}, 0x100000, 0x200, 0xffffffff, 0x0, 0x9, 0x2c, 0x3, 0x0, 0x0, 0x0, 0x100000032}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="322efc649e4416ef01b7aa3d577f9be2b353ebb52baf887d63ef0c6f550e7e90331687e727247f66411e8c2e4359a53de5681dbe320aa9d7185320f6b0578d00f7f6d8172032cf038a7e16ed25b1a87228f4351f6ebd01469cb00848"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, 0x0, 0x10b8}, 0x106) r9 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r9, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r9, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, 0xffffffffffffffff) recvmsg$kcm(r7, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x222) 16.831883689s ago: executing program 2 (id=2808): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, &(0x7f0000002800)=[{&(0x7f0000000c00)="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", 0x1ec}, {&(0x7f0000001680)="fae0835ee82c20abb86f7c287ffb04a52a0b2339a4efc8216bada6fb7f4385ead471969bdf9b82994c10898db8b0fd9a6068b87f4547eff53d6cb7b37534e44d27c79042f5c405c0ff3eaf643001000000000000008263d71ee0e5b2cb31215ded6df9c76d150aa52a4eecb94fe48e79205c96a0aab13eaa4681860576d2e32f6873b200d669e65d56bd8a4703cbea6b8c610ec158fe5f8683f7", 0x9a}, {&(0x7f00000015c0)="6b75b597d05d969a191023", 0xb}, {&(0x7f0000001740)="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", 0x2ea}], 0x4}, 0x0) recvmsg$kcm(r0, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x10002) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="eb0000020200000000000000000004cb930000000000"], 0x0, 0x26}, 0x20) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb0100180000000000000050d2f6b69800000002000000090000000000000e03000000010000000a0000000000000203000000000000000500000d00000000060000000100000000000000000000000000000000000000090000000000000001000000030010"], 0x0, 0x6a, 0x0, 0x0, 0x7fffffff}, 0x28) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b84, 0x2, @perf_bp={0x0, 0x8}, 0x8000, 0x5, 0x43a1bd76, 0x1, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x10, &(0x7f0000000600)=ANY=[@ANYRES32=r2], 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x2f, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x5d, &(0x7f0000000080)=[{&(0x7f0000000c40)="c106020022003505d25a806f8c6394f90435fc60040011000a740100053582c137153e37024801", 0x27}], 0x3b, 0x0, 0xffffffc2}, 0x4000804) r3 = socket$kcm(0xf, 0x4, 0x2) socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0xfe, &(0x7f0000000000)=[{&(0x7f0000000040)="0207000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2000000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x40000) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030030000b12d25a80648c2594f90124fc60100c034002040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0xa, 0x0, 0x0, 0x4000}, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x21) r6 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r7, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r7, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18000001000100000000000000"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r8}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x2, &(0x7f0000000000)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x16}], &(0x7f00000000c0)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x41100, 0x0, '\x00', r8, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) perf_event_open(0x0, 0x0, 0x0, r6, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x0) 16.831600769s ago: executing program 3 (id=2809): socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0xffffffff, 0x0, 0xb}, {0x10000002, 0xfffffffe, 0x4, 0x9}], 0x10, 0xd5}, 0x94) close(0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x2, {0x2, 0x0, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x0) r1 = socket$kcm(0xa, 0x6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000002280)=ANY=[@ANYBLOB="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"/3636], &(0x7f0000000040)='GPL\x00', 0x4, 0xfdc0, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) setsockopt$sock_attach_bpf(r1, 0x29, 0x22, 0x0, 0x0) 16.822865579s ago: executing program 1 (id=2810): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3efd7ab4c41335d9, @perf_config_ext={0x7, 0x4}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000480)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32], 0x20) socketpair$unix(0x1, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) close(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1b, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="18080000d0ef00000a004000000000950000000000000000c9806700a7ea51faeb"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x38}, 0x94) bpf$MAP_DELETE_ELEM(0x2, 0x0, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, 0x0, 0x106) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f00000003c0)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r3, 0xffffffffffffffff}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x0, 0xe, 0x48000000, &(0x7f0000000300)="40f0538ef047b21fb60068305500", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x100) syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/cgroup\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x21, 0x0, 0x0, 0x4, 0x2, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r8 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r8, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0xff00) sendmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)='a', 0x1}], 0x1, 0x0, 0x0, 0x20004004}, 0x15) recvmsg$unix(r6, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) 16.78046222s ago: executing program 0 (id=2811): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x2, 0x5, 0x0, 0x9, 0x660b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xffffffffffffffff, 0x3fff7ffa}, 0x0, 0x35, 0x4, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x1}, 0x86) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1b, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x1f63, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000d0df00850000001b"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7ff}, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x84}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x33, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c0000000800000002000000000000080300000047e3ffffffffff00000000000f00220100615f6f5f306100"], 0x0, 0x3c, 0x0, 0x1, 0x1}, 0x28) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x5, 0x7ff}, 0x104101, 0x4, 0x0, 0x7, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x6, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r4 = socket$kcm(0x10, 0x2, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000003c0)="d8000000180081064e81f782db4cb904021d0800fe027c05e8fe55a10a0005000140020003600e41b0000900ac0006e01120000016001600014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b4ff010000000000000dd6e4edef3d93452a09004b43370e9703920723f97e46bb5c07540d3b", 0xd8}], 0x1}, 0x0) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0xfffffffe}, {0x10040002, 0x0, 0x0, 0x3}]}, 0x94) close(r7) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x70}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f00000001c0)='\x96{\x00') setsockopt$sock_attach_bpf(r5, 0x107, 0x12, &(0x7f00000008c0)=r8, 0x4) r9 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f0300", 0x4}], 0x1}, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b40000007f"], 0x48) 16.565581937s ago: executing program 3 (id=2812): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x16, 0x2, 0x0, 0x0, 0x4, 0x8a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, @perf_config_ext={0x3, 0x6c99e481}, 0x100001, 0xca, 0x5, 0x5, 0xd12, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x2000000000000000}, 0x0, 0x3, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010002000000000000000003"], 0x0, 0x42}, 0x28) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) recvmsg$unix(r1, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYRES8=r2, @ANYBLOB="3eca", @ANYRES8], 0x9a) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x100905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="2e00000011008188040f80ec59acbc0413a181003100000001010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10, 0x0}, 0x240008d0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x4, 0x4, 0xc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000001800000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{0x1}, 0x0, &(0x7f00000003c0)}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x1, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4) 15.84554919s ago: executing program 1 (id=2813): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x13, &(0x7f0000000800), 0x4) 15.717150354s ago: executing program 1 (id=2814): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x26}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b0000000000000000000000f7ffffff00000000", @ANYRES32, @ANYBLOB="d9b300"/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="05f2c300010000000100"/28], 0x50) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xd, 0xc, 0x0, 0x0, 0x0, 0x8, 0x640b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x4, @perf_config_ext={0x9a, 0x7}, 0x8000, 0x82, 0xffffff81, 0x7, 0x9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0xa0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x9, 0x4022, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x5, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000740)="d800000019008111e0020f060d8107040a60000000020000001455a12a00090008000699e3ffffff14000500fe80817806000567b8b7b94002000009080016060000000000000000d67f6f9400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237e09000000b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b7b4338c9f1ac76efb42a9ecbee5de6ccd44242f4d643f6fd0f26187b51980dd6", 0xd8}], 0x1}, 0x80) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xbe}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000080), 0x24) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071183f000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x65, '\x00', 0x0, @fallback=0x1a, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) 1.142117384s ago: executing program 32 (id=2811): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x2, 0x5, 0x0, 0x9, 0x660b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xffffffffffffffff, 0x3fff7ffa}, 0x0, 0x35, 0x4, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x1}, 0x86) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1b, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x1f63, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000d0df00850000001b"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7ff}, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x84}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x33, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c0000000800000002000000000000080300000047e3ffffffffff00000000000f00220100615f6f5f306100"], 0x0, 0x3c, 0x0, 0x1, 0x1}, 0x28) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x5, 0x7ff}, 0x104101, 0x4, 0x0, 0x7, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x6, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r4 = socket$kcm(0x10, 0x2, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000003c0)="d8000000180081064e81f782db4cb904021d0800fe027c05e8fe55a10a0005000140020003600e41b0000900ac0006e01120000016001600014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b4ff010000000000000dd6e4edef3d93452a09004b43370e9703920723f97e46bb5c07540d3b", 0xd8}], 0x1}, 0x0) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0xfffffffe}, {0x10040002, 0x0, 0x0, 0x3}]}, 0x94) close(r7) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x70}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f00000001c0)='\x96{\x00') setsockopt$sock_attach_bpf(r5, 0x107, 0x12, &(0x7f00000008c0)=r8, 0x4) r9 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f0300", 0x4}], 0x1}, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b40000007f"], 0x48) 1.092190166s ago: executing program 33 (id=2808): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, &(0x7f0000002800)=[{&(0x7f0000000c00)="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", 0x1ec}, {&(0x7f0000001680)="fae0835ee82c20abb86f7c287ffb04a52a0b2339a4efc8216bada6fb7f4385ead471969bdf9b82994c10898db8b0fd9a6068b87f4547eff53d6cb7b37534e44d27c79042f5c405c0ff3eaf643001000000000000008263d71ee0e5b2cb31215ded6df9c76d150aa52a4eecb94fe48e79205c96a0aab13eaa4681860576d2e32f6873b200d669e65d56bd8a4703cbea6b8c610ec158fe5f8683f7", 0x9a}, {&(0x7f00000015c0)="6b75b597d05d969a191023", 0xb}, {&(0x7f0000001740)="3f013c9ef434ca4df0854ba1c14f7db8ccda5e87715ffd1ead9c4d9a2306168b07d3c6763a3ceabf6dfae235f3d783ddc8a7bbd796b345df843b5f0a623ab36b3123dfcd05bf4a6e3f35d859ffc0b699be4052995533be91880029387cc3e15b2d9bf3513e617572d965ba8f665eedcbdaad53d04cddeed78a3904956c5dc95f47132090648f98558d14a4850ac4b92e1b41a06dee6198c74c72607a032c3c7ef5abd0ba4a7f9f5dfebd75457b2ec358e951ade2375ad6524eb4263d6ef72e05901da983aac2b31a5e2631e39301a6dd04c128aabcea9134ec99685df1068506541f1265c77c85300497abfebce6ed768d9922ba3699dc6cc1863c0aa9321170b9e63a74986c1996d0fa1a5886e7023836ddbe64bea33edfe6fc1cb64784da18c2d4930eb481930b9298b57c7939189df401aed6a586f0103fccf70f92a53666d5afd3dd0b12273e5c1f2ddee89ed9a280c10df8e55ed24dcf9d631b693cd38006da4629a6b4a599de94a5b8ba6bccffdaa9d3fe0970623c118ba7e811d534915e4c63fa40df1e5a37ad9e5827ff65b2e4d8480a3f66576a3a52c0c80606098c0cb0b203f20d4f7b614652e4d8eb595d29ad1a4ce2c97aa30328c9987e1f1d8b7954ff54ddb69d5c3d2225bdd84e93b19edc2d33116373b0b5be8eea62d84896d2412edf5d321f75811360f89fe6ca8ac6545ec1c9f86ab285d1b5ba00c269514dab7a076c01cbfecaaff336d116481b16e434262de851a70ff056b1f9319840e27d5f446a3476210f4e70ceb71eeec17619911d56b74d7e761ff9c43dd237772377f888bfad215f3ee19eeeb87564f77241258874dd70bdd976305092426d18a3bc60022cb0acc2d21b3e246ae7f49f5b6461b888a3d353362c2ec9bed1f7d4d3a0200e3af42fcf36f4c09bc095b3fd391a23faad86bfa29696b80093da6a97d6c4a54eca89d4979f12acbf89bca0c8cc5f490737b09fd77b8b7fcfa7b94787f81cff59ae583b5309bdb82ff76ceaf739cd254b32cc8e289541b8921aa2aedac4bf6c91c2aab801c459", 0x2ea}], 0x4}, 0x0) recvmsg$kcm(r0, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x10002) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="eb0000020200000000000000000004cb930000000000"], 0x0, 0x26}, 0x20) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb0100180000000000000050d2f6b69800000002000000090000000000000e03000000010000000a0000000000000203000000000000000500000d00000000060000000100000000000000000000000000000000000000090000000000000001000000030010"], 0x0, 0x6a, 0x0, 0x0, 0x7fffffff}, 0x28) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b84, 0x2, @perf_bp={0x0, 0x8}, 0x8000, 0x5, 0x43a1bd76, 0x1, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x10, &(0x7f0000000600)=ANY=[@ANYRES32=r2], 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x2f, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x5d, &(0x7f0000000080)=[{&(0x7f0000000c40)="c106020022003505d25a806f8c6394f90435fc60040011000a740100053582c137153e37024801", 0x27}], 0x3b, 0x0, 0xffffffc2}, 0x4000804) r3 = socket$kcm(0xf, 0x4, 0x2) socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0xfe, &(0x7f0000000000)=[{&(0x7f0000000040)="0207000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2000000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x40000) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030030000b12d25a80648c2594f90124fc60100c034002040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0xa, 0x0, 0x0, 0x4000}, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x21) r6 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r7, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r7, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18000001000100000000000000"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r8}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x2, &(0x7f0000000000)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x16}], &(0x7f00000000c0)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x41100, 0x0, '\x00', r8, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) perf_event_open(0x0, 0x0, 0x0, r6, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x0) 1.044700867s ago: executing program 34 (id=2812): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x16, 0x2, 0x0, 0x0, 0x4, 0x8a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, @perf_config_ext={0x3, 0x6c99e481}, 0x100001, 0xca, 0x5, 0x5, 0xd12, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x2000000000000000}, 0x0, 0x3, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010002000000000000000003"], 0x0, 0x42}, 0x28) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) recvmsg$unix(r1, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYRES8=r2, @ANYBLOB="3eca", @ANYRES8], 0x9a) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x100905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="2e00000011008188040f80ec59acbc0413a181003100000001010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10, 0x0}, 0x240008d0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x4, 0x4, 0xc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000001800000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{0x1}, 0x0, &(0x7f00000003c0)}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x1, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4) 0s ago: executing program 35 (id=2814): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x26}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b0000000000000000000000f7ffffff00000000", @ANYRES32, @ANYBLOB="d9b300"/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="05f2c300010000000100"/28], 0x50) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xd, 0xc, 0x0, 0x0, 0x0, 0x8, 0x640b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x4, @perf_config_ext={0x9a, 0x7}, 0x8000, 0x82, 0xffffff81, 0x7, 0x9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0xa0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x9, 0x4022, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x5, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000740)="d800000019008111e0020f060d8107040a60000000020000001455a12a00090008000699e3ffffff14000500fe80817806000567b8b7b94002000009080016060000000000000000d67f6f9400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237e09000000b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b7b4338c9f1ac76efb42a9ecbee5de6ccd44242f4d643f6fd0f26187b51980dd6", 0xd8}], 0x1}, 0x80) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xbe}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000080), 0x24) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071183f000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x65, '\x00', 0x0, @fallback=0x1a, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) kernel console output (not intermixed with test programs): 3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 396.615816][T12128] RSP: 002b:00007f3966372028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 396.624259][T12128] RAX: ffffffffffffffda RBX: 00007f3965815fa0 RCX: 00007f396559ce59 [ 396.632253][T12128] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 396.640239][T12128] RBP: 00007f3966372090 R08: 0000000000000000 R09: 0000000000000000 [ 396.648221][T12128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 396.656214][T12128] R13: 00007f3965816038 R14: 00007f3965815fa0 R15: 00007ffe860affe8 [ 396.664234][T12128] [ 396.915804][T12141] netlink: 'syz.2.2197': attribute type 10 has an invalid length. [ 396.964777][T12143] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2198'. [ 397.174353][T12150] netlink: 'syz.3.2202': attribute type 39 has an invalid length. [ 397.604903][T12168] netlink: 'syz.3.2209': attribute type 10 has an invalid length. [ 398.080782][T12175] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2210'. [ 400.816737][T12184] netlink: 'syz.0.2214': attribute type 39 has an invalid length. [ 400.942246][T12179] netlink: 'syz.3.2211': attribute type 9 has an invalid length. [ 400.950795][T12179] netlink: 184904 bytes leftover after parsing attributes in process `syz.3.2211'. [ 401.167505][T12188] FAULT_INJECTION: forcing a failure. [ 401.167505][T12188] name failslab, interval 1, probability 0, space 0, times 0 [ 401.211613][T12188] CPU: 0 PID: 12188 Comm: syz.2.2216 Not tainted syzkaller #0 [ 401.219169][T12188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 401.229267][T12188] Call Trace: [ 401.232587][T12188] [ 401.235585][T12188] dump_stack_lvl+0x18c/0x250 [ 401.240336][T12188] ? show_regs_print_info+0x20/0x20 [ 401.245578][T12188] ? load_image+0x420/0x420 [ 401.250130][T12188] ? verify_lock_unused+0x140/0x140 [ 401.255380][T12188] should_fail_ex+0x39d/0x4d0 [ 401.260112][T12188] should_failslab+0x9/0x20 [ 401.264671][T12188] slab_pre_alloc_hook+0x59/0x310 [ 401.269756][T12188] kmem_cache_alloc+0x5a/0x2d0 [ 401.274580][T12188] ? skb_clone+0x1eb/0x370 [ 401.279046][T12188] skb_clone+0x1eb/0x370 [ 401.283339][T12188] __netlink_deliver_tap+0x41c/0x830 [ 401.288698][T12188] ? netlink_deliver_tap+0x2e/0x1b0 [ 401.293960][T12188] netlink_deliver_tap+0x19c/0x1b0 [ 401.299124][T12188] __netlink_sendskb+0x4b/0x90 [ 401.303937][T12188] netlink_dump+0xa75/0xe50 [ 401.308498][T12188] ? netlink_lookup+0x200/0x200 [ 401.313419][T12188] ? __asan_memset+0x22/0x40 [ 401.318069][T12188] ? genl_start+0x493/0x6b0 [ 401.322622][T12188] __netlink_dump_start+0x5f1/0x810 [ 401.327881][T12188] genl_family_rcv_msg_dumpit+0x214/0x310 [ 401.333651][T12188] ? genl_rcv_msg+0x7a0/0x7a0 [ 401.338362][T12188] ? genl_get_cmd+0x4a9/0x920 [ 401.343088][T12188] ? genl_family_rcv_msg_doit+0x310/0x310 [ 401.348852][T12188] ? genl_start+0x6b0/0x6b0 [ 401.353396][T12188] ? genl_dumpit+0x1a0/0x1a0 [ 401.358041][T12188] genl_rcv_msg+0x5e5/0x7a0 [ 401.362592][T12188] ? genl_bind+0x360/0x360 [ 401.367047][T12188] ? devlink_nl_port_fill+0x7e0/0x7e0 [ 401.372556][T12188] ? ref_tracker_free+0x690/0x840 [ 401.377658][T12188] netlink_rcv_skb+0x241/0x4d0 [ 401.382477][T12188] ? genl_bind+0x360/0x360 [ 401.386932][T12188] ? netlink_ack+0x1180/0x1180 [ 401.391774][T12188] ? down_read+0x1ac/0x2e0 [ 401.396241][T12188] genl_rcv+0x28/0x40 [ 401.400266][T12188] netlink_unicast+0x751/0x8d0 [ 401.405100][T12188] netlink_sendmsg+0x8d0/0xbf0 [ 401.409928][T12188] ? netlink_getsockopt+0x590/0x590 [ 401.415183][T12188] ? aa_sock_msg_perm+0x94/0x150 [ 401.420172][T12188] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 401.425528][T12188] ? security_socket_sendmsg+0x80/0xa0 [ 401.431063][T12188] ? netlink_getsockopt+0x590/0x590 [ 401.436340][T12188] ____sys_sendmsg+0x5ba/0x960 [ 401.441176][T12188] ? __asan_memset+0x22/0x40 [ 401.445849][T12188] ? __sys_sendmsg_sock+0x30/0x30 [ 401.450927][T12188] ? __import_iovec+0x5f2/0x850 [ 401.455841][T12188] ? import_iovec+0x73/0xa0 [ 401.460406][T12188] ___sys_sendmsg+0x2a6/0x360 [ 401.465144][T12188] ? get_pid_task+0x20/0x1e0 [ 401.469808][T12188] ? __sys_sendmsg+0x2a0/0x2a0 [ 401.474636][T12188] ? perf_trace_preemptirq_template+0xac/0x330 [ 401.480914][T12188] __se_sys_sendmsg+0x1c2/0x2b0 [ 401.485829][T12188] ? __x64_sys_sendmsg+0x80/0x80 [ 401.490901][T12188] ? lockdep_hardirqs_on+0x98/0x150 [ 401.496166][T12188] do_syscall_64+0x55/0xb0 [ 401.500637][T12188] ? clear_bhb_loop+0x40/0x90 [ 401.505379][T12188] ? clear_bhb_loop+0x40/0x90 [ 401.510104][T12188] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 401.516042][T12188] RIP: 0033:0x7f396559ce59 [ 401.520502][T12188] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 401.540152][T12188] RSP: 002b:00007f3966372028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 401.548652][T12188] RAX: ffffffffffffffda RBX: 00007f3965815fa0 RCX: 00007f396559ce59 [ 401.556660][T12188] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 401.564667][T12188] RBP: 00007f3966372090 R08: 0000000000000000 R09: 0000000000000000 [ 401.572695][T12188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 401.580730][T12188] R13: 00007f3965816038 R14: 00007f3965815fa0 R15: 00007ffe860affe8 [ 401.588759][T12188] [ 402.017489][T12195] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.2218'. [ 402.029856][T12195] netlink: 6332 bytes leftover after parsing attributes in process `syz.2.2218'. [ 402.096885][T12197] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.2219'. [ 402.125772][T12197] netlink: 6332 bytes leftover after parsing attributes in process `syz.3.2219'. [ 402.348254][T12204] netlink: 'syz.2.2220': attribute type 10 has an invalid length. [ 402.623865][T12212] netlink: 'syz.3.2223': attribute type 39 has an invalid length. [ 402.731249][T12211] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2222'. [ 402.783802][ T5777] Bluetooth: hci2: ISO packet for unknown connection handle 2622 [ 402.820551][T12215] netlink: 'syz.2.2224': attribute type 10 has an invalid length. [ 403.095509][ T5777] Bluetooth: hci1: ISO packet for unknown connection handle 2622 [ 403.123418][T12220] netlink: 'syz.3.2226': attribute type 10 has an invalid length. [ 403.386336][T12223] netlink: 'syz.1.2227': attribute type 9 has an invalid length. [ 403.411193][T12223] netlink: 184904 bytes leftover after parsing attributes in process `syz.1.2227'. [ 404.230222][T12226] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.2229'. [ 404.252318][T12226] netlink: 6332 bytes leftover after parsing attributes in process `syz.2.2229'. [ 404.450406][T12242] netlink: 'syz.2.2234': attribute type 39 has an invalid length. [ 404.554543][T12244] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2235'. [ 404.833240][T12250] netlink: 'syz.2.2245': attribute type 39 has an invalid length. [ 404.997126][ T5777] Bluetooth: hci1: ISO packet for unknown connection handle 2622 [ 405.072553][T12252] netlink: 'syz.3.2237': attribute type 10 has an invalid length. [ 405.122810][T12256] FAULT_INJECTION: forcing a failure. [ 405.122810][T12256] name failslab, interval 1, probability 0, space 0, times 0 [ 405.141920][T12256] CPU: 0 PID: 12256 Comm: syz.2.2239 Not tainted syzkaller #0 [ 405.149451][T12256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 405.159547][T12256] Call Trace: [ 405.162865][T12256] [ 405.165831][T12256] dump_stack_lvl+0x18c/0x250 [ 405.170568][T12256] ? show_regs_print_info+0x20/0x20 [ 405.175800][T12256] ? load_image+0x420/0x420 [ 405.180340][T12256] ? __lock_acquire+0x7d40/0x7d40 [ 405.185398][T12256] should_fail_ex+0x39d/0x4d0 [ 405.190113][T12256] should_failslab+0x9/0x20 [ 405.194654][T12256] slab_pre_alloc_hook+0x59/0x310 [ 405.199705][T12256] ? sock_write_iter+0x2df/0x420 [ 405.204674][T12256] ? vfs_write+0x46c/0x990 [ 405.209116][T12256] ? ksys_write+0x150/0x260 [ 405.213644][T12256] kmem_cache_alloc_node+0x60/0x320 [ 405.218875][T12256] ? alloc_vmap_area+0x1b4/0x1e30 [ 405.223933][T12256] alloc_vmap_area+0x1b4/0x1e30 [ 405.228827][T12256] ? vm_map_ram+0xcb0/0xcb0 [ 405.233360][T12256] ? rcu_is_watching+0x15/0xb0 [ 405.238154][T12256] __get_vm_area_node+0x162/0x370 [ 405.243216][T12256] __vmalloc_node_range+0x36e/0x1330 [ 405.248530][T12256] ? netlink_sendmsg+0x602/0xbf0 [ 405.253504][T12256] ? netlink_insert+0x109f/0x13a0 [ 405.258572][T12256] ? netlink_data_ready+0x10/0x10 [ 405.263635][T12256] ? free_vm_area+0x50/0x50 [ 405.268175][T12256] ? netlink_sendmsg+0x602/0xbf0 [ 405.273139][T12256] vmalloc+0x79/0x90 [ 405.277061][T12256] ? netlink_sendmsg+0x602/0xbf0 [ 405.282031][T12256] netlink_sendmsg+0x602/0xbf0 [ 405.286831][T12256] ? netlink_getsockopt+0x590/0x590 [ 405.292064][T12256] ? aa_sock_msg_perm+0x94/0x150 [ 405.297025][T12256] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 405.302343][T12256] ? security_socket_sendmsg+0x80/0xa0 [ 405.307842][T12256] sock_write_iter+0x2df/0x420 [ 405.312637][T12256] ? sock_read_iter+0x3e0/0x3e0 [ 405.317516][T12256] ? common_file_perm+0x198/0x1f0 [ 405.322572][T12256] vfs_write+0x46c/0x990 [ 405.326843][T12256] ? file_end_write+0x250/0x250 [ 405.331729][T12256] ? __fget_files+0x43d/0x4b0 [ 405.336438][T12256] ? __fdget_pos+0x1d8/0x330 [ 405.341056][T12256] ? ksys_write+0x75/0x260 [ 405.345505][T12256] ksys_write+0x150/0x260 [ 405.349924][T12256] ? __ia32_sys_read+0x90/0x90 [ 405.354719][T12256] ? lockdep_hardirqs_on+0x98/0x150 [ 405.359942][T12256] do_syscall_64+0x55/0xb0 [ 405.364375][T12256] ? clear_bhb_loop+0x40/0x90 [ 405.369077][T12256] ? clear_bhb_loop+0x40/0x90 [ 405.373780][T12256] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 405.379698][T12256] RIP: 0033:0x7f396559ce59 [ 405.384139][T12256] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 405.403772][T12256] RSP: 002b:00007f3966372028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 405.412213][T12256] RAX: ffffffffffffffda RBX: 00007f3965815fa0 RCX: 00007f396559ce59 [ 405.420218][T12256] RDX: 000000000000fe33 RSI: 0000200000000000 RDI: 0000000000000003 [ 405.428220][T12256] RBP: 00007f3966372090 R08: 0000000000000000 R09: 0000000000000000 [ 405.436213][T12256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 405.444204][T12256] R13: 00007f3965816038 R14: 00007f3965815fa0 R15: 00007ffe860affe8 [ 405.452209][T12256] [ 405.516428][T12256] syz.2.2239: vmalloc error: size 65408, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 405.541040][T12256] CPU: 1 PID: 12256 Comm: syz.2.2239 Not tainted syzkaller #0 [ 405.548571][T12256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 405.558665][T12256] Call Trace: [ 405.561986][T12256] [ 405.564949][T12256] dump_stack_lvl+0x18c/0x250 [ 405.569671][T12256] ? show_regs_print_info+0x20/0x20 [ 405.574909][T12256] ? load_image+0x420/0x420 [ 405.579465][T12256] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 405.585926][T12256] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 405.592478][T12256] warn_alloc+0x246/0x340 [ 405.596908][T12256] ? slab_free_freelist_hook+0x130/0x1a0 [ 405.602608][T12256] ? zone_watermark_ok_safe+0x230/0x230 [ 405.608196][T12256] ? __get_vm_area_node+0x17b/0x370 [ 405.613449][T12256] ? __get_vm_area_node+0x17b/0x370 [ 405.618704][T12256] __vmalloc_node_range+0x393/0x1330 [ 405.624042][T12256] ? netlink_insert+0x109f/0x13a0 [ 405.629128][T12256] ? netlink_data_ready+0x10/0x10 [ 405.634205][T12256] ? free_vm_area+0x50/0x50 [ 405.638774][T12256] ? netlink_sendmsg+0x602/0xbf0 [ 405.643773][T12256] vmalloc+0x79/0x90 [ 405.647712][T12256] ? netlink_sendmsg+0x602/0xbf0 [ 405.652702][T12256] netlink_sendmsg+0x602/0xbf0 [ 405.657498][T12256] ? netlink_getsockopt+0x590/0x590 [ 405.662722][T12256] ? aa_sock_msg_perm+0x94/0x150 [ 405.667695][T12256] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 405.673000][T12256] ? security_socket_sendmsg+0x80/0xa0 [ 405.678477][T12256] sock_write_iter+0x2df/0x420 [ 405.683262][T12256] ? sock_read_iter+0x3e0/0x3e0 [ 405.688138][T12256] ? common_file_perm+0x198/0x1f0 [ 405.693194][T12256] vfs_write+0x46c/0x990 [ 405.697470][T12256] ? file_end_write+0x250/0x250 [ 405.702354][T12256] ? __fget_files+0x43d/0x4b0 [ 405.707065][T12256] ? __fdget_pos+0x1d8/0x330 [ 405.711680][T12256] ? ksys_write+0x75/0x260 [ 405.716135][T12256] ksys_write+0x150/0x260 [ 405.720488][T12256] ? __ia32_sys_read+0x90/0x90 [ 405.725284][T12256] ? lockdep_hardirqs_on+0x98/0x150 [ 405.730510][T12256] do_syscall_64+0x55/0xb0 [ 405.734946][T12256] ? clear_bhb_loop+0x40/0x90 [ 405.739647][T12256] ? clear_bhb_loop+0x40/0x90 [ 405.744358][T12256] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 405.750270][T12256] RIP: 0033:0x7f396559ce59 [ 405.754704][T12256] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 405.774332][T12256] RSP: 002b:00007f3966372028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 405.782770][T12256] RAX: ffffffffffffffda RBX: 00007f3965815fa0 RCX: 00007f396559ce59 [ 405.790769][T12256] RDX: 000000000000fe33 RSI: 0000200000000000 RDI: 0000000000000003 [ 405.798778][T12256] RBP: 00007f3966372090 R08: 0000000000000000 R09: 0000000000000000 [ 405.806771][T12256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 405.814768][T12256] R13: 00007f3965816038 R14: 00007f3965815fa0 R15: 00007ffe860affe8 [ 405.822767][T12256] [ 405.904378][T12256] Mem-Info: [ 405.907704][T12256] active_anon:36807 inactive_anon:0 isolated_anon:0 [ 405.907704][T12256] active_file:19330 inactive_file:40076 isolated_file:0 [ 405.907704][T12256] unevictable:768 dirty:243 writeback:0 [ 405.907704][T12256] slab_reclaimable:16397 slab_unreclaimable:130511 [ 405.907704][T12256] mapped:37279 shmem:32940 pagetables:668 [ 405.907704][T12256] sec_pagetables:0 bounce:0 [ 405.907704][T12256] kernel_misc_reclaimable:0 [ 405.907704][T12256] free:1272416 free_pcp:6759 free_cma:0 [ 406.012664][T12256] Node 0 active_anon:152172kB inactive_anon:0kB active_file:77336kB inactive_file:160112kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:149212kB dirty:980kB writeback:0kB shmem:135116kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10440kB pagetables:2668kB sec_pagetables:0kB all_unreclaimable? no [ 406.111343][T12256] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 406.162760][T12256] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 406.241061][T12256] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 406.247055][T12256] Node 0 DMA32 free:1165504kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:157832kB inactive_anon:0kB active_file:77336kB inactive_file:159284kB unevictable:1536kB writepending:980kB present:3129332kB managed:2586944kB mlocked:0kB bounce:0kB free_pcp:6780kB local_pcp:4080kB free_cma:0kB [ 406.291077][T12256] lowmem_reserve[]: 0 0 0 0 0 [ 406.305797][T12256] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 406.353696][T12256] lowmem_reserve[]: 0 0 0 0 0 [ 406.358592][T12256] Node 1 Normal free:3898216kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:19956kB local_pcp:10228kB free_cma:0kB [ 406.419576][T12256] lowmem_reserve[]: 0 0 0 0 0 [ 406.429755][T12256] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 406.454813][T12256] Node 0 DMA32: 557*4kB (U) 454*8kB (UM) 222*16kB (UE) 318*32kB (UM) 508*64kB (U) 243*128kB (U) 295*256kB (UE) 178*512kB (UE) 202*1024kB (UME) 8*2048kB (UME) 168*4096kB (M) = 1161220kB [ 406.494139][T12256] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 406.561837][T12256] Node 1 Normal: 176*4kB (UM) 33*8kB (UME) 24*16kB (UME) 29*32kB (UME) 6*64kB (UE) 8*128kB (UME) 1*256kB (E) 2*512kB (ME) 0*1024kB 1*2048kB (E) 950*4096kB (M) = 3898216kB [ 406.601215][T12256] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 406.632717][T12256] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 406.671555][T12256] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 406.699535][T12256] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 406.719363][T12256] 96850 total pagecache pages [ 406.731836][T12256] 0 pages in swap cache [ 406.741237][T12256] Free swap = 124996kB [ 406.749759][T12256] Total swap = 124996kB [ 406.756538][T12256] 2097051 pages RAM [ 406.770669][T12256] 0 pages HighMem/MovableOnly [ 406.778965][T12256] 416929 pages reserved [ 406.783686][T12256] 0 pages cma reserved [ 406.958502][T12269] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.2243'. [ 406.979899][T12269] netlink: 6332 bytes leftover after parsing attributes in process `syz.2.2243'. [ 407.020450][T12271] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2246'. [ 407.066881][T12274] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.2244'. [ 407.261341][ T5777] Bluetooth: hci3: ISO packet for unknown connection handle 2622 [ 407.274504][T12276] netlink: 'syz.0.2247': attribute type 10 has an invalid length. [ 407.601751][T12286] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.2249'. [ 407.629899][T12286] netlink: 6332 bytes leftover after parsing attributes in process `syz.1.2249'. [ 407.671207][ T5777] Bluetooth: hci3: ISO packet for unknown connection handle 2622 [ 407.685870][T12285] netlink: 'syz.0.2250': attribute type 10 has an invalid length. [ 407.967630][T12289] netlink: 'syz.2.2251': attribute type 9 has an invalid length. [ 407.992836][T12289] netlink: 184904 bytes leftover after parsing attributes in process `syz.2.2251'. [ 408.757733][T12302] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2255'. [ 409.059400][T12311] netlink: 'syz.0.2260': attribute type 39 has an invalid length. [ 409.072119][ T5777] Bluetooth: hci2: ISO packet for unknown connection handle 2622 [ 409.112098][T12309] netlink: 'syz.2.2259': attribute type 10 has an invalid length. [ 409.120024][T12305] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.2256'. [ 409.120328][T12305] netlink: 6332 bytes leftover after parsing attributes in process `syz.1.2256'. [ 410.038236][T12327] netlink: 'syz.2.2265': attribute type 9 has an invalid length. [ 410.852458][ T5777] Bluetooth: hci1: ISO packet for unknown connection handle 2622 [ 410.874699][T12342] netlink: 'syz.3.2271': attribute type 10 has an invalid length. [ 410.954194][T12338] netlink: 'syz.1.2269': attribute type 9 has an invalid length. [ 411.206074][ T5777] Bluetooth: hci3: ISO packet for unknown connection handle 2622 [ 411.471148][T12347] netlink: 'syz.3.2273': attribute type 39 has an invalid length. [ 411.490880][T12348] netlink: 'syz.0.2281': attribute type 10 has an invalid length. [ 412.024824][T12365] __nla_validate_parse: 5 callbacks suppressed [ 412.024844][T12365] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2277'. [ 412.272205][T12369] netlink: 184904 bytes leftover after parsing attributes in process `syz.0.2279'. [ 412.836443][T12377] validate_nla: 1 callbacks suppressed [ 412.836465][T12377] netlink: 'syz.2.2284': attribute type 39 has an invalid length. [ 413.088391][T12371] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.2280'. [ 413.111133][T12371] netlink: 6332 bytes leftover after parsing attributes in process `syz.3.2280'. [ 413.252238][ T5777] Bluetooth: hci2: ISO packet for unknown connection handle 2622 [ 413.273121][T12379] netlink: 'syz.2.2285': attribute type 10 has an invalid length. [ 413.429983][T12381] netlink: 'syz.0.2287': attribute type 9 has an invalid length. [ 413.449155][T12381] netlink: 184904 bytes leftover after parsing attributes in process `syz.0.2287'. [ 414.051281][T12394] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2292'. [ 414.294886][T12404] FAULT_INJECTION: forcing a failure. [ 414.294886][T12404] name failslab, interval 1, probability 0, space 0, times 0 [ 414.307974][T12404] CPU: 0 PID: 12404 Comm: syz.2.2295 Not tainted syzkaller #0 [ 414.315470][T12404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 414.325544][T12404] Call Trace: [ 414.328847][T12404] [ 414.331796][T12404] dump_stack_lvl+0x18c/0x250 [ 414.336506][T12404] ? show_regs_print_info+0x20/0x20 [ 414.341730][T12404] ? load_image+0x420/0x420 [ 414.346273][T12404] ? __might_sleep+0xe0/0xe0 [ 414.350925][T12404] ? __lock_acquire+0x7d40/0x7d40 [ 414.355992][T12404] should_fail_ex+0x39d/0x4d0 [ 414.360725][T12404] should_failslab+0x9/0x20 [ 414.365264][T12404] slab_pre_alloc_hook+0x59/0x310 [ 414.370334][T12404] kmem_cache_alloc_node+0x60/0x320 [ 414.375561][T12404] ? __alloc_skb+0x103/0x2c0 [ 414.380174][T12404] __alloc_skb+0x103/0x2c0 [ 414.384614][T12404] netlink_dump+0x1ec/0xe50 [ 414.389240][T12404] ? ethnl_ops_complete+0xc0/0xc0 [ 414.394299][T12404] ? netlink_lookup+0x200/0x200 [ 414.399200][T12404] ? genl_start+0x574/0x6b0 [ 414.403737][T12404] __netlink_dump_start+0x5f1/0x810 [ 414.408979][T12404] genl_family_rcv_msg_dumpit+0x214/0x310 [ 414.414724][T12404] ? genl_rcv_msg+0x7a0/0x7a0 [ 414.419426][T12404] ? genl_get_cmd+0x692/0x920 [ 414.424130][T12404] ? genl_family_rcv_msg_doit+0x310/0x310 [ 414.429875][T12404] ? genl_start+0x6b0/0x6b0 [ 414.434399][T12404] ? genl_dumpit+0x1a0/0x1a0 [ 414.439025][T12404] genl_rcv_msg+0x5e5/0x7a0 [ 414.443556][T12404] ? genl_bind+0x360/0x360 [ 414.447987][T12404] ? ethnl_default_doit+0xb80/0xb80 [ 414.453215][T12404] ? ethnl_default_start+0x560/0x560 [ 414.458526][T12404] ? ethnl_default_dumpit+0x8a0/0x8a0 [ 414.463938][T12404] ? ref_tracker_free+0x690/0x840 [ 414.468992][T12404] netlink_rcv_skb+0x241/0x4d0 [ 414.473777][T12404] ? genl_bind+0x360/0x360 [ 414.478206][T12404] ? netlink_ack+0x1180/0x1180 [ 414.483007][T12404] ? __lock_acquire+0x7d40/0x7d40 [ 414.488061][T12404] ? down_read+0x1ac/0x2e0 [ 414.492500][T12404] genl_rcv+0x28/0x40 [ 414.496499][T12404] netlink_unicast+0x751/0x8d0 [ 414.501309][T12404] netlink_sendmsg+0x8d0/0xbf0 [ 414.506122][T12404] ? netlink_getsockopt+0x590/0x590 [ 414.511359][T12404] ? aa_sock_msg_perm+0x94/0x150 [ 414.516324][T12404] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 414.521634][T12404] ? security_socket_sendmsg+0x80/0xa0 [ 414.527116][T12404] ? netlink_getsockopt+0x590/0x590 [ 414.532347][T12404] ____sys_sendmsg+0x5ba/0x960 [ 414.537146][T12404] ? __asan_memset+0x22/0x40 [ 414.541773][T12404] ? __sys_sendmsg_sock+0x30/0x30 [ 414.546821][T12404] ? __import_iovec+0x5f2/0x850 [ 414.551701][T12404] ? import_iovec+0x73/0xa0 [ 414.556231][T12404] ___sys_sendmsg+0x2a6/0x360 [ 414.560944][T12404] ? __sys_sendmsg+0x2a0/0x2a0 [ 414.565756][T12404] ? seqcount_lockdep_reader_access+0x17b/0x1d0 [ 414.572050][T12404] __se_sys_sendmsg+0x1c2/0x2b0 [ 414.576922][T12404] ? hrtimer_interrupt+0x7bb/0x9c0 [ 414.582059][T12404] ? __x64_sys_sendmsg+0x80/0x80 [ 414.587063][T12404] ? lockdep_hardirqs_on+0x98/0x150 [ 414.592293][T12404] do_syscall_64+0x55/0xb0 [ 414.596725][T12404] ? clear_bhb_loop+0x40/0x90 [ 414.601430][T12404] ? clear_bhb_loop+0x40/0x90 [ 414.606151][T12404] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 414.612079][T12404] RIP: 0033:0x7f396559ce59 [ 414.616516][T12404] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 414.636148][T12404] RSP: 002b:00007f3966372028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 414.644579][T12404] RAX: ffffffffffffffda RBX: 00007f3965815fa0 RCX: 00007f396559ce59 [ 414.652568][T12404] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 414.660555][T12404] RBP: 00007f3966372090 R08: 0000000000000000 R09: 0000000000000000 [ 414.668546][T12404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 414.676540][T12404] R13: 00007f3965816038 R14: 00007f3965815fa0 R15: 00007ffe860affe8 [ 414.684548][T12404] [ 414.930886][ T5777] Bluetooth: hci2: ISO packet for unknown connection handle 2622 [ 415.002517][T12411] netlink: 'syz.2.2298': attribute type 10 has an invalid length. [ 415.054740][T12408] netlink: 'syz.3.2296': attribute type 9 has an invalid length. [ 415.062870][T12408] netlink: 184904 bytes leftover after parsing attributes in process `syz.3.2296'. [ 415.876496][T12412] netlink: 209796 bytes leftover after parsing attributes in process `syz.0.2297'. [ 415.960444][T12421] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2301'. [ 416.090790][T12427] netlink: 'syz.0.2303': attribute type 10 has an invalid length. [ 416.592985][T12432] netlink: 'syz.3.2304': attribute type 9 has an invalid length. [ 416.621175][T12432] netlink: 184904 bytes leftover after parsing attributes in process `syz.3.2304'. [ 416.797684][ T5777] Bluetooth: hci3: ISO packet for unknown connection handle 2622 [ 417.009861][T12447] delete_channel: no stack [ 417.020454][T12447] delete_channel: no stack [ 417.106610][T12443] netlink: 'syz.0.2308': attribute type 10 has an invalid length. [ 417.377062][T12455] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2313'. [ 417.390186][T12454] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.2311'. [ 417.433414][T12454] netlink: 6332 bytes leftover after parsing attributes in process `syz.2.2311'. [ 417.558632][T12462] netlink: 'syz.1.2315': attribute type 10 has an invalid length. [ 417.884610][T12469] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2317'. [ 418.421150][T12476] FAULT_INJECTION: forcing a failure. [ 418.421150][T12476] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 418.471305][T12476] CPU: 1 PID: 12476 Comm: syz.2.2320 Not tainted syzkaller #0 [ 418.478886][T12476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 418.489007][T12476] Call Trace: [ 418.492343][T12476] [ 418.495339][T12476] dump_stack_lvl+0x18c/0x250 [ 418.500118][T12476] ? show_regs_print_info+0x20/0x20 [ 418.505398][T12476] ? load_image+0x420/0x420 [ 418.510003][T12476] ? __lock_acquire+0x7d40/0x7d40 [ 418.515106][T12476] ? snprintf+0xe9/0x140 [ 418.519442][T12476] should_fail_ex+0x39d/0x4d0 [ 418.524220][T12476] _copy_to_user+0x2f/0xa0 [ 418.528726][T12476] simple_read_from_buffer+0xe7/0x150 [ 418.534197][T12476] proc_fail_nth_read+0x1e8/0x260 [ 418.539314][T12476] ? proc_fault_inject_write+0x360/0x360 [ 418.545051][T12476] ? fsnotify_perm+0x271/0x5e0 [ 418.549881][T12476] ? proc_fault_inject_write+0x360/0x360 [ 418.555608][T12476] vfs_read+0x28b/0x970 [ 418.559858][T12476] ? kernel_read+0x1e0/0x1e0 [ 418.564532][T12476] ? __fget_files+0x28/0x4b0 [ 418.569192][T12476] ? __fget_files+0x28/0x4b0 [ 418.573861][T12476] ? __fget_files+0x43d/0x4b0 [ 418.578636][T12476] ? __fdget_pos+0x2a3/0x330 [ 418.583290][T12476] ? ksys_read+0x75/0x260 [ 418.587710][T12476] ksys_read+0x150/0x260 [ 418.592047][T12476] ? vfs_write+0x990/0x990 [ 418.596554][T12476] ? lockdep_hardirqs_on+0x98/0x150 [ 418.601843][T12476] do_syscall_64+0x55/0xb0 [ 418.606336][T12476] ? clear_bhb_loop+0x40/0x90 [ 418.611088][T12476] ? clear_bhb_loop+0x40/0x90 [ 418.615869][T12476] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 418.621836][T12476] RIP: 0033:0x7f396555d68e [ 418.626328][T12476] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 418.646013][T12476] RSP: 002b:00007f3966371fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 418.654508][T12476] RAX: ffffffffffffffda RBX: 00007f39663726c0 RCX: 00007f396555d68e [ 418.662542][T12476] RDX: 000000000000000f RSI: 00007f39663720a0 RDI: 0000000000000005 [ 418.670569][T12476] RBP: 00007f3966372090 R08: 0000000000000000 R09: 0000000000000000 [ 418.678605][T12476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 418.686646][T12476] R13: 00007f3965816038 R14: 00007f3965815fa0 R15: 00007ffe860affe8 [ 418.694761][T12476] [ 418.857994][ T5777] Bluetooth: hci1: ISO packet for unknown connection handle 2622 [ 418.875978][T12478] netlink: 'syz.3.2322': attribute type 10 has an invalid length. [ 419.051203][T12484] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2324'. [ 419.237002][T12489] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.2325'. [ 419.286375][T12489] netlink: 6332 bytes leftover after parsing attributes in process `syz.3.2325'. [ 419.405051][T12493] netlink: 'syz.2.2326': attribute type 10 has an invalid length. [ 420.046785][T12510] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2333'. [ 421.038688][ T5777] Bluetooth: hci0: ISO packet for unknown connection handle 2622 [ 421.049531][T12518] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2334'. [ 421.250065][T12519] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.2336'. [ 421.540310][T12530] netlink: 'syz.3.2338': attribute type 10 has an invalid length. [ 421.597441][T12531] netlink: 'syz.1.2339': attribute type 9 has an invalid length. [ 421.631192][T12525] netlink: 'syz.1.2339': attribute type 10 has an invalid length. [ 421.692301][T12525] team0: Port device hsr_slave_0 added [ 422.717342][T12541] netlink: 'syz.1.2344': attribute type 10 has an invalid length. [ 422.783165][T12545] netlink: 'syz.1.2344': attribute type 9 has an invalid length. [ 422.804931][T12545] __nla_validate_parse: 2 callbacks suppressed [ 422.804947][T12545] netlink: 184904 bytes leftover after parsing attributes in process `syz.1.2344'. [ 422.852570][T12546] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2346'. [ 423.164665][ T5777] Bluetooth: hci3: ISO packet for unknown connection handle 2622 [ 423.443729][T12561] netlink: 'syz.2.2351': attribute type 10 has an invalid length. [ 424.751877][ T5777] Bluetooth: hci2: ISO packet for unknown connection handle 2622 [ 424.894588][T12580] netlink: 'syz.1.2357': attribute type 39 has an invalid length. [ 425.140741][T12582] netlink: 'syz.2.2359': attribute type 10 has an invalid length. [ 425.208815][T12584] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2358'. [ 425.273374][T12582] netlink: 'syz.2.2359': attribute type 9 has an invalid length. [ 425.291273][T12582] netlink: 184904 bytes leftover after parsing attributes in process `syz.2.2359'. [ 425.415693][ T5777] Bluetooth: hci1: ISO packet for unknown connection handle 2622 [ 425.880480][T12595] netlink: 'syz.1.2362': attribute type 10 has an invalid length. [ 426.034618][T12600] netlink: 'syz.0.2364': attribute type 10 has an invalid length. [ 426.063948][T12600] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2364'. [ 426.109660][T12600] team0: entered promiscuous mode [ 426.162084][T12600] team_slave_1: entered promiscuous mode [ 426.168094][T12600] geneve1: entered promiscuous mode [ 426.202842][T12600] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 426.719569][T12613] netlink: 'syz.3.2370': attribute type 39 has an invalid length. [ 426.858817][T12615] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2372'. [ 426.986816][ T5085] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 426.997106][ T5085] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 427.007113][ T5085] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 427.025081][ T5085] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 427.039574][ T5085] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 427.047651][ T5085] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 427.377290][ T3552] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.414512][ T5085] Bluetooth: hci2: ISO packet for unknown connection handle 2622 [ 427.428504][T12624] netlink: 'syz.2.2373': attribute type 10 has an invalid length. [ 427.601910][ T3552] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.740303][T12625] netlink: 'syz.3.2374': attribute type 10 has an invalid length. [ 427.765987][T12631] netlink: 'syz.3.2374': attribute type 9 has an invalid length. [ 427.810854][T12625] team0: Port device hsr_slave_0 added [ 427.834210][T12631] netlink: 184904 bytes leftover after parsing attributes in process `syz.3.2374'. [ 427.934659][ T3552] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.958174][T12632] netlink: 'syz.2.2375': attribute type 10 has an invalid length. [ 428.092621][ T3552] bond0: (slave netdevsim0): Releasing backup interface [ 428.122489][ T3552] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.443554][T12641] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2379'. [ 428.727728][T12651] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2380'. [ 428.973949][ T5085] Bluetooth: hci2: ISO packet for unknown connection handle 2622 [ 429.020005][T12618] chnl_net:caif_netlink_parms(): no params data found [ 429.151234][ T5085] Bluetooth: hci4: command tx timeout [ 430.152956][T12618] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.160275][T12618] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.172308][T12618] bridge_slave_0: entered allmulticast mode [ 430.191250][T12618] bridge_slave_0: entered promiscuous mode [ 430.200308][T12703] validate_nla: 2 callbacks suppressed [ 430.200326][T12703] netlink: 'syz.2.2389': attribute type 9 has an invalid length. [ 430.224386][T12618] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.231798][T12618] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.239087][T12618] bridge_slave_1: entered allmulticast mode [ 430.245253][T12703] netlink: 184904 bytes leftover after parsing attributes in process `syz.2.2389'. [ 430.262678][T12618] bridge_slave_1: entered promiscuous mode [ 430.293918][T12696] netlink: 'syz.2.2389': attribute type 10 has an invalid length. [ 430.606743][T12618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 430.645051][T12618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 430.780297][T12618] team0: Port device team_slave_0 added [ 430.805353][T12618] team0: Port device team_slave_1 added [ 431.022691][T12710] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2392'. [ 431.210701][T12618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 431.231045][T12618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 431.231435][ T5085] Bluetooth: hci4: command tx timeout [ 431.307659][T12618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 431.443314][T12618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 431.450331][T12618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 431.512051][T12618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 431.662797][T12728] FAULT_INJECTION: forcing a failure. [ 431.662797][T12728] name failslab, interval 1, probability 0, space 0, times 0 [ 431.728924][T12725] netlink: 'syz.3.2397': attribute type 10 has an invalid length. [ 431.741043][T12728] CPU: 0 PID: 12728 Comm: syz.2.2400 Not tainted syzkaller #0 [ 431.748563][T12728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 431.758661][T12728] Call Trace: [ 431.761986][T12728] [ 431.764959][T12728] dump_stack_lvl+0x18c/0x250 [ 431.769693][T12728] ? show_regs_print_info+0x20/0x20 [ 431.774944][T12728] ? load_image+0x420/0x420 [ 431.779511][T12728] ? __might_sleep+0xe0/0xe0 [ 431.784157][T12728] ? __lock_acquire+0x7d40/0x7d40 [ 431.789255][T12728] should_fail_ex+0x39d/0x4d0 [ 431.793994][T12728] should_failslab+0x9/0x20 [ 431.798555][T12728] slab_pre_alloc_hook+0x59/0x310 [ 431.803646][T12728] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 431.809415][T12728] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 431.815186][T12728] __kmem_cache_alloc_node+0x53/0x250 [ 431.820620][T12728] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 431.826393][T12728] __kmalloc+0xa4/0x230 [ 431.830609][T12728] tomoyo_realpath_from_path+0xe3/0x5d0 [ 431.836222][T12728] tomoyo_path_number_perm+0x248/0x620 [ 431.841740][T12728] ? tomoyo_path_number_perm+0x217/0x620 [ 431.847439][T12728] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 431.852967][T12728] ? ksys_write+0x1c4/0x260 [ 431.857576][T12728] ? __fget_files+0x28/0x4b0 [ 431.862218][T12728] ? __fget_files+0x28/0x4b0 [ 431.866880][T12728] security_file_ioctl+0x70/0xa0 [ 431.871884][T12728] __se_sys_ioctl+0x48/0x170 [ 431.876531][T12728] do_syscall_64+0x55/0xb0 [ 431.881085][T12728] ? clear_bhb_loop+0x40/0x90 [ 431.885815][T12728] ? clear_bhb_loop+0x40/0x90 [ 431.890548][T12728] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 431.896488][T12728] RIP: 0033:0x7f396559ce59 [ 431.900937][T12728] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 431.920587][T12728] RSP: 002b:00007f3966372028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 431.929050][T12728] RAX: ffffffffffffffda RBX: 00007f3965815fa0 RCX: 00007f396559ce59 [ 431.937083][T12728] RDX: 0000200000000000 RSI: 0000000000008b1b RDI: 0000000000000003 [ 431.945098][T12728] RBP: 00007f3966372090 R08: 0000000000000000 R09: 0000000000000000 [ 431.953108][T12728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 431.961126][T12728] R13: 00007f3965816038 R14: 00007f3965815fa0 R15: 00007ffe860affe8 [ 431.969290][T12728] [ 431.980211][T12731] netlink: 'syz.0.2399': attribute type 10 has an invalid length. [ 431.999052][T12728] ERROR: Out of memory at tomoyo_realpath_from_path. [ 432.005916][ T5085] Bluetooth: hci3: ISO packet for unknown connection handle 2622 [ 432.202614][T12618] hsr_slave_0: entered promiscuous mode [ 432.261724][T12618] hsr_slave_1: entered promiscuous mode [ 432.849697][T12754] netlink: 'syz.0.2402': attribute type 9 has an invalid length. [ 432.900995][T12754] netlink: 184904 bytes leftover after parsing attributes in process `syz.0.2402'. [ 432.994815][T12744] netlink: 'syz.0.2402': attribute type 10 has an invalid length. [ 433.076173][T12744] hsr_slave_0: entered promiscuous mode [ 433.108438][T12744] team0: Port device hsr_slave_0 added [ 433.311019][ T5085] Bluetooth: hci4: command tx timeout [ 433.563442][T12759] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2405'. [ 434.004153][T12767] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.2408'. [ 434.074618][T12767] netlink: 6332 bytes leftover after parsing attributes in process `syz.2.2408'. [ 434.903447][T12772] netlink: 'syz.3.2410': attribute type 10 has an invalid length. [ 435.392203][ T5085] Bluetooth: hci4: command tx timeout [ 436.033496][T12808] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2418'. [ 436.319242][T12816] netlink: 'syz.3.2417': attribute type 9 has an invalid length. [ 436.361011][T12816] netlink: 184904 bytes leftover after parsing attributes in process `syz.3.2417'. [ 436.393438][T12812] netlink: 'syz.3.2417': attribute type 10 has an invalid length. [ 436.415811][T12819] netlink: 'syz.2.2419': attribute type 29 has an invalid length. [ 436.542165][T12819] netlink: 'syz.2.2419': attribute type 29 has an invalid length. [ 436.852891][T12820] netlink: 'syz.2.2419': attribute type 29 has an invalid length. [ 436.958071][T12821] netlink: 'syz.2.2419': attribute type 29 has an invalid length. [ 437.008809][T12618] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 437.110167][T12824] netlink: 'syz.2.2419': attribute type 29 has an invalid length. [ 437.163565][T12833] netlink: 'syz.0.2421': attribute type 10 has an invalid length. [ 437.194702][T12618] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 437.241535][T12618] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 437.291735][T12618] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 438.072923][T12857] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2427'. [ 438.154093][T12618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 438.277225][T12618] 8021q: adding VLAN 0 to HW filter on device team0 [ 438.387131][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.394365][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 438.496995][ T1080] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.504330][ T1080] bridge0: port 2(bridge_slave_1) entered forwarding state [ 438.734528][T12868] netlink: 'syz.0.2429': attribute type 10 has an invalid length. [ 439.021020][T12879] netlink: 'syz.2.2431': attribute type 10 has an invalid length. [ 439.707440][T12904] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.2435'. [ 439.733287][T12904] netlink: 6332 bytes leftover after parsing attributes in process `syz.3.2435'. [ 439.819270][T12618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 440.120616][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.131141][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.372126][T12618] veth0_vlan: entered promiscuous mode [ 440.444915][T12919] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2437'. [ 440.509081][T12618] veth1_vlan: entered promiscuous mode [ 440.788788][T12618] veth0_macvtap: entered promiscuous mode [ 440.807423][T12618] veth1_macvtap: entered promiscuous mode [ 440.912904][T12618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 441.165764][T12618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 441.202478][T12618] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.231204][T12618] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.263013][T12618] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.282376][T12618] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.544204][T12946] validate_nla: 1 callbacks suppressed [ 441.544223][T12946] netlink: 'syz.0.2440': attribute type 10 has an invalid length. [ 442.304719][T12962] netlink: 'syz.0.2451': attribute type 10 has an invalid length. [ 442.364701][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 442.411307][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 442.576369][T12959] netlink: 'syz.3.2443': attribute type 10 has an invalid length. [ 442.788067][T12959] netlink: 'syz.3.2443': attribute type 9 has an invalid length. [ 442.863201][T12959] netlink: 184904 bytes leftover after parsing attributes in process `syz.3.2443'. [ 442.974407][ T1080] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 443.011275][ T1080] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 443.629276][T12982] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2447'. [ 443.870129][T12991] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.2448'. [ 443.911170][T12991] netlink: 6332 bytes leftover after parsing attributes in process `syz.2.2448'. [ 445.133699][T13015] Q6`Ҙ: renamed from lo (while UP) [ 445.168591][ T5777] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 445.182429][ T5777] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 445.190334][ T5777] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 445.216734][ T5777] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 445.226437][T13017] netlink: 'syz.1.2454': attribute type 10 has an invalid length. [ 445.253940][ T5777] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 445.264277][ T5777] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 445.316662][T13019] netlink: 'syz.3.2455': attribute type 29 has an invalid length. [ 445.359906][T13017] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 445.470244][T13019] netlink: 'syz.3.2455': attribute type 29 has an invalid length. [ 445.497029][T13025] netlink: 'syz.3.2455': attribute type 29 has an invalid length. [ 445.519389][T13024] netlink: 'syz.3.2455': attribute type 29 has an invalid length. [ 445.666979][T13029] FAULT_INJECTION: forcing a failure. [ 445.666979][T13029] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 445.692883][T13029] CPU: 1 PID: 13029 Comm: syz.1.2457 Not tainted syzkaller #0 [ 445.700535][T13029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 445.710632][T13029] Call Trace: [ 445.713946][T13029] [ 445.716923][T13029] dump_stack_lvl+0x18c/0x250 [ 445.721657][T13029] ? show_regs_print_info+0x20/0x20 [ 445.726904][T13029] ? load_image+0x420/0x420 [ 445.731474][T13029] ? __might_fault+0xaa/0x120 [ 445.736202][T13029] should_fail_ex+0x39d/0x4d0 [ 445.740936][T13029] copyin+0x1a/0x90 [ 445.744808][T13029] _copy_from_iter+0x54f/0x12e0 [ 445.749707][T13029] ? __virt_addr_valid+0x18c/0x540 [ 445.754968][T13029] ? copyout_mc+0x70/0x70 [ 445.759375][T13029] ? __virt_addr_valid+0x18c/0x540 [ 445.764543][T13029] ? __virt_addr_valid+0x18c/0x540 [ 445.769697][T13029] ? __virt_addr_valid+0x469/0x540 [ 445.774862][T13029] ? __check_object_size+0x506/0xa20 [ 445.780195][T13029] kcm_sendmsg+0xd95/0x28b0 [ 445.784785][T13029] ? kcm_getsockopt+0x280/0x280 [ 445.789695][T13029] ? aa_sock_msg_perm+0x94/0x150 [ 445.794684][T13029] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 445.800017][T13029] ? security_socket_sendmsg+0x80/0xa0 [ 445.805518][T13029] ? kcm_getsockopt+0x280/0x280 [ 445.810420][T13029] ____sys_sendmsg+0x5ba/0x960 [ 445.815233][T13029] ? __asan_memset+0x22/0x40 [ 445.819898][T13029] ? __sys_sendmsg_sock+0x30/0x30 [ 445.824966][T13029] ? __import_iovec+0x3fa/0x850 [ 445.829865][T13029] ? import_iovec+0x73/0xa0 [ 445.834412][T13029] ___sys_sendmsg+0x2a6/0x360 [ 445.839144][T13029] ? get_pid_task+0x20/0x1e0 [ 445.843788][T13029] ? __sys_sendmsg+0x2a0/0x2a0 [ 445.848628][T13029] ? __lock_acquire+0x7d40/0x7d40 [ 445.853725][T13029] __se_sys_sendmsg+0x1c2/0x2b0 [ 445.858620][T13029] ? __x64_sys_sendmsg+0x80/0x80 [ 445.863623][T13029] ? lockdep_hardirqs_on+0x98/0x150 [ 445.868879][T13029] do_syscall_64+0x55/0xb0 [ 445.873353][T13029] ? clear_bhb_loop+0x40/0x90 [ 445.878078][T13029] ? clear_bhb_loop+0x40/0x90 [ 445.882806][T13029] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 445.888764][T13029] RIP: 0033:0x7f4c8a39ce59 [ 445.893222][T13029] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 445.912867][T13029] RSP: 002b:00007f4c8b29d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 445.921317][T13029] RAX: ffffffffffffffda RBX: 00007f4c8a615fa0 RCX: 00007f4c8a39ce59 [ 445.929328][T13029] RDX: 0000000000000000 RSI: 0000200000003680 RDI: 0000000000000003 [ 445.937336][T13029] RBP: 00007f4c8b29d090 R08: 0000000000000000 R09: 0000000000000000 [ 445.945344][T13029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 445.953351][T13029] R13: 00007f4c8a616038 R14: 00007f4c8a615fa0 R15: 00007fffb158d408 [ 445.961386][T13029] [ 445.999496][T13025] netlink: 'syz.3.2455': attribute type 29 has an invalid length. [ 446.933659][T13021] chnl_net:caif_netlink_parms(): no params data found [ 447.312690][ T5085] Bluetooth: hci0: command tx timeout [ 447.498920][T13021] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.507856][T13021] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.524014][T13021] bridge_slave_0: entered allmulticast mode [ 447.550503][T13021] bridge_slave_0: entered promiscuous mode [ 447.605889][T13021] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.621964][T13021] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.641281][T13021] bridge_slave_1: entered allmulticast mode [ 447.670618][T13021] bridge_slave_1: entered promiscuous mode [ 447.986808][T13059] mac80211_hwsim hwsim227 wlan1: entered allmulticast mode [ 448.129336][T13060] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2464'. [ 448.153877][T13021] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 448.214994][T13021] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 448.404666][T13021] team0: Port device team_slave_0 added [ 448.465046][T13021] team0: Port device team_slave_1 added [ 448.611733][T13021] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 448.626810][T13021] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 448.703118][T13021] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 448.742612][T13021] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 448.778916][T13021] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 448.838627][T13021] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 448.909015][T13072] netlink: 'syz.1.2468': attribute type 9 has an invalid length. [ 448.956721][T13072] netlink: 184904 bytes leftover after parsing attributes in process `syz.1.2468'. [ 448.990732][T13074] netlink: 'syz.1.2468': attribute type 10 has an invalid length. [ 449.080628][T13074] team0: Device hsr_slave_0 failed to register rx_handler [ 449.396531][ T5085] Bluetooth: hci0: command tx timeout [ 449.645795][T13021] hsr_slave_0: entered promiscuous mode [ 449.663082][T13021] hsr_slave_1: entered promiscuous mode [ 449.673576][T13021] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 449.689575][T13021] Cannot create hsr debugfs directory [ 450.254389][T13021] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.425725][T13021] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.626656][T13021] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.666181][T13093] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2476'. [ 450.749563][T13021] bond0: (slave netdevsim0): Releasing backup interface [ 450.766381][T13021] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.818929][T13099] FAULT_INJECTION: forcing a failure. [ 450.818929][T13099] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 450.889305][T13099] CPU: 1 PID: 13099 Comm: syz.1.2478 Not tainted syzkaller #0 [ 450.896933][T13099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 450.907018][T13099] Call Trace: [ 450.910342][T13099] [ 450.913301][T13099] dump_stack_lvl+0x18c/0x250 [ 450.918042][T13099] ? show_regs_print_info+0x20/0x20 [ 450.923283][T13099] ? load_image+0x420/0x420 [ 450.927833][T13099] ? __might_fault+0xaa/0x120 [ 450.932556][T13099] ? __lock_acquire+0x7d40/0x7d40 [ 450.937623][T13099] should_fail_ex+0x39d/0x4d0 [ 450.942365][T13099] _copy_to_user+0x2f/0xa0 [ 450.946830][T13099] bpf_verifier_vlog+0x5db/0x870 [ 450.951828][T13099] __btf_verifier_log+0xe3/0x140 [ 450.956821][T13099] ? btf_check_sec_info+0x350/0x350 [ 450.962078][T13099] ? __lock_acquire+0x7d40/0x7d40 [ 450.967141][T13099] ? btf_parse_hdr+0x1f5/0x710 [ 450.971953][T13099] btf_parse_hdr+0x2a2/0x710 [ 450.976585][T13099] btf_new_fd+0x397/0x9f0 [ 450.980963][T13099] ? bpf_lsm_capable+0x9/0x10 [ 450.985701][T13099] ? bpf_btf_show_fdinfo+0x80/0x80 [ 450.990853][T13099] ? capable+0x88/0xe0 [ 450.994982][T13099] __sys_bpf+0x670/0x890 [ 450.999267][T13099] ? bpf_link_show_fdinfo+0x390/0x390 [ 451.004684][T13099] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 451.010892][T13099] __x64_sys_bpf+0x7c/0x90 [ 451.015355][T13099] do_syscall_64+0x55/0xb0 [ 451.019827][T13099] ? clear_bhb_loop+0x40/0x90 [ 451.024545][T13099] ? clear_bhb_loop+0x40/0x90 [ 451.029266][T13099] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 451.035196][T13099] RIP: 0033:0x7f4c8a39ce59 [ 451.039642][T13099] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 451.059305][T13099] RSP: 002b:00007f4c8b29d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 451.067760][T13099] RAX: ffffffffffffffda RBX: 00007f4c8a615fa0 RCX: 00007f4c8a39ce59 [ 451.075805][T13099] RDX: 0000000000000028 RSI: 0000200000000640 RDI: 0000000000000012 [ 451.083821][T13099] RBP: 00007f4c8b29d090 R08: 0000000000000000 R09: 0000000000000000 [ 451.091832][T13099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 451.099846][T13099] R13: 00007f4c8a616038 R14: 00007f4c8a615fa0 R15: 00007fffb158d408 [ 451.107866][T13099] [ 451.485963][T13021] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 451.489150][ T5085] Bluetooth: hci0: command tx timeout [ 451.552763][T13021] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 451.643611][T13021] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 451.732752][T13021] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 452.175174][ T3552] veth0_macvtap: left promiscuous mode [ 452.198171][ T3552] veth1_vlan: left promiscuous mode [ 452.346300][T13117] netlink: 'syz.1.2483': attribute type 9 has an invalid length. [ 452.360724][T13117] netlink: 184904 bytes leftover after parsing attributes in process `syz.1.2483'. [ 452.419696][ T3552] team0 (unregistering): Port device geneve1 removed [ 452.452147][ T3552] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 452.773900][ T3552] team0 (unregistering): Port device hsr_slave_0 removed [ 452.880352][ T3552] team0 (unregistering): Port device team_slave_1 removed [ 452.920817][ T3552] team0 (unregistering): Port device C removed [ 452.960009][ T3552] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 453.006836][ T3552] bond0 (unregistering): (slave 1@): Releasing backup interface [ 453.274681][ T3552] bond0 (unregistering): Released all slaves [ 453.314558][T13113] netlink: 'syz.1.2483': attribute type 10 has an invalid length. [ 453.326026][T13113] team0: Device hsr_slave_0 failed to register rx_handler [ 453.425518][T13121] sctp: [Deprecated]: syz.2.2492 (pid 13121) Use of struct sctp_assoc_value in delayed_ack socket option. [ 453.425518][T13121] Use struct sctp_sack_info instead [ 453.556927][ T5085] Bluetooth: hci0: command tx timeout [ 453.575488][T13021] 8021q: adding VLAN 0 to HW filter on device bond0 [ 453.658103][T13021] 8021q: adding VLAN 0 to HW filter on device team0 [ 453.673517][ T992] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.680681][ T992] bridge0: port 1(bridge_slave_0) entered forwarding state [ 453.750866][ T992] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.758133][ T992] bridge0: port 2(bridge_slave_1) entered forwarding state [ 453.926306][T13123] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.2486'. [ 453.950307][T13123] netlink: 6332 bytes leftover after parsing attributes in process `syz.1.2486'. [ 454.409115][ T3552] ip6gretap0 (unregistering): left allmulticast mode [ 454.430339][ T3552] ip6gretap0 (unregistering): left promiscuous mode [ 454.439014][ T3552] : port 1(ip6gretap0) entered disabled state [ 454.681380][T13021] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 454.925187][T13021] veth0_vlan: entered promiscuous mode [ 454.935068][T13143] netlink: 'syz.2.2491': attribute type 10 has an invalid length. [ 454.994616][T13147] netlink: 'syz.3.2494': attribute type 39 has an invalid length. [ 455.030785][T13021] veth1_vlan: entered promiscuous mode [ 455.036821][T13143] netlink: 'syz.2.2491': attribute type 9 has an invalid length. [ 455.051846][T13143] netlink: 184904 bytes leftover after parsing attributes in process `syz.2.2491'. [ 455.426724][T13154] netlink: 'syz.3.2495': attribute type 10 has an invalid length. [ 455.622062][T13154] netlink: 'syz.3.2495': attribute type 9 has an invalid length. [ 455.645076][T13154] netlink: 184904 bytes leftover after parsing attributes in process `syz.3.2495'. [ 455.874235][T13157] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 455.891630][T13157] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 455.933752][T13157] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 455.942352][T13157] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 456.215292][T13021] veth0_macvtap: entered promiscuous mode [ 456.335261][T13021] veth1_macvtap: entered promiscuous mode [ 456.344415][T13159] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.2498'. [ 456.364774][T13159] netlink: 6332 bytes leftover after parsing attributes in process `syz.2.2498'. [ 456.466384][T13021] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 456.489517][T13021] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 456.678381][T13021] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.693772][T13021] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.703086][T13021] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.713847][T13021] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.734466][T13170] netlink: 'syz.1.2502': attribute type 39 has an invalid length. [ 457.243556][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 457.262619][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 457.451745][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 457.460761][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 457.627965][T13183] netlink: 'syz.3.2507': attribute type 10 has an invalid length. [ 457.659062][T13185] netlink: 'syz.2.2508': attribute type 10 has an invalid length. [ 457.670013][T13183] netlink: 'syz.3.2507': attribute type 9 has an invalid length. [ 457.680222][T13183] netlink: 184904 bytes leftover after parsing attributes in process `syz.3.2507'. [ 458.153589][T13191] netlink: 'syz.0.2449': attribute type 10 has an invalid length. [ 458.167696][T13191] hsr_slave_0: left promiscuous mode [ 458.177833][T13191] hsr_slave_1: left promiscuous mode [ 458.252038][T13198] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2511'. [ 458.295166][T13196] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.303789][T13196] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.319791][T13196] bridge0: entered allmulticast mode [ 458.377970][T13186] netlink: 184904 bytes leftover after parsing attributes in process `syz.2.2508'. [ 458.798646][T13201] mac80211_hwsim hwsim234 wlan1: entered allmulticast mode [ 459.172744][ T5777] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 459.184320][ T5777] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 459.211688][ T5777] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 459.225351][ T5777] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 459.236006][ T5777] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 459.243865][ T5777] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 459.544646][T13225] FAULT_INJECTION: forcing a failure. [ 459.544646][T13225] name failslab, interval 1, probability 0, space 0, times 0 [ 459.559640][T13225] CPU: 1 PID: 13225 Comm: syz.1.2520 Not tainted syzkaller #0 [ 459.567145][T13225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 459.577229][T13225] Call Trace: [ 459.580535][T13225] [ 459.583504][T13225] dump_stack_lvl+0x18c/0x250 [ 459.588224][T13225] ? show_regs_print_info+0x20/0x20 [ 459.593455][T13225] ? load_image+0x420/0x420 [ 459.598017][T13225] ? __might_sleep+0xe0/0xe0 [ 459.602655][T13225] ? __lock_acquire+0x7d40/0x7d40 [ 459.607728][T13225] should_fail_ex+0x39d/0x4d0 [ 459.612463][T13225] should_failslab+0x9/0x20 [ 459.617008][T13225] slab_pre_alloc_hook+0x59/0x310 [ 459.622110][T13225] ? tomoyo_encode+0x28b/0x540 [ 459.626915][T13225] ? tomoyo_encode+0x28b/0x540 [ 459.631712][T13225] __kmem_cache_alloc_node+0x53/0x250 [ 459.637139][T13225] ? tomoyo_encode+0x28b/0x540 [ 459.641946][T13225] __kmalloc+0xa4/0x230 [ 459.646152][T13225] tomoyo_encode+0x28b/0x540 [ 459.650801][T13225] tomoyo_realpath_from_path+0x592/0x5d0 [ 459.656494][T13225] tomoyo_path_number_perm+0x248/0x620 [ 459.662010][T13225] ? tomoyo_path_number_perm+0x217/0x620 [ 459.667695][T13225] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 459.673207][T13225] ? ktime_get+0x7f/0x280 [ 459.677637][T13225] ? __fget_files+0x28/0x4b0 [ 459.682270][T13225] ? __fget_files+0x28/0x4b0 [ 459.686940][T13225] security_file_ioctl+0x70/0xa0 [ 459.691928][T13225] __se_sys_ioctl+0x48/0x170 [ 459.696569][T13225] do_syscall_64+0x55/0xb0 [ 459.701023][T13225] ? clear_bhb_loop+0x40/0x90 [ 459.705745][T13225] ? clear_bhb_loop+0x40/0x90 [ 459.710462][T13225] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 459.716394][T13225] RIP: 0033:0x7f4c8a39ce59 [ 459.720848][T13225] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 459.740486][T13225] RSP: 002b:00007f4c8b29d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 459.748936][T13225] RAX: ffffffffffffffda RBX: 00007f4c8a615fa0 RCX: 00007f4c8a39ce59 [ 459.756944][T13225] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 0000000000000009 [ 459.765000][T13225] RBP: 00007f4c8b29d090 R08: 0000000000000000 R09: 0000000000000000 [ 459.773016][T13225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 459.781023][T13225] R13: 00007f4c8a616038 R14: 00007f4c8a615fa0 R15: 00007fffb158d408 [ 459.789053][T13225] [ 459.824685][T13225] ERROR: Out of memory at tomoyo_realpath_from_path. [ 459.953131][T13234] validate_nla: 2 callbacks suppressed [ 459.953149][T13234] netlink: 'syz.2.2522': attribute type 10 has an invalid length. [ 460.045641][T13229] netlink: 'syz.0.2521': attribute type 10 has an invalid length. [ 460.099229][T13237] netlink: 'syz.0.2521': attribute type 9 has an invalid length. [ 460.120317][T13237] netlink: 184904 bytes leftover after parsing attributes in process `syz.0.2521'. [ 460.237119][T13229] team0: Port device hsr_slave_0 added [ 460.282657][T13213] chnl_net:caif_netlink_parms(): no params data found [ 460.692840][T13213] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.703020][T13213] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.710516][T13213] bridge_slave_0: entered allmulticast mode [ 460.718593][T13213] bridge_slave_0: entered promiscuous mode [ 460.763659][T13248] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 460.771802][T13248] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 460.780373][T13248] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 460.789906][T13248] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 460.873945][T13213] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.885068][T13213] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.892916][T13213] bridge_slave_1: entered allmulticast mode [ 460.900438][T13213] bridge_slave_1: entered promiscuous mode [ 460.988862][T13213] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 461.020341][T13213] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 461.098467][T13213] team0: Port device team_slave_0 added [ 461.133913][T13213] team0: Port device team_slave_1 added [ 461.217125][T13213] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 461.230567][T13213] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 461.260059][T13213] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 461.274451][T13213] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 461.281823][T13213] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 461.316762][T13213] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 461.329436][T13258] Q6`Ҙ: renamed from lo (while UP) [ 461.394282][ T5085] Bluetooth: hci3: command tx timeout [ 461.426829][T13259] netlink: 'syz.0.2530': attribute type 10 has an invalid length. [ 461.461443][T13259] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 461.643467][T13213] hsr_slave_0: entered promiscuous mode [ 461.651257][T13213] hsr_slave_1: entered promiscuous mode [ 461.657891][T13213] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 461.665710][T13213] Cannot create hsr debugfs directory [ 461.976040][T13213] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.137593][T13274] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.2537'. [ 462.157581][T13277] FAULT_INJECTION: forcing a failure. [ 462.157581][T13277] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 462.163938][T13274] netlink: 6332 bytes leftover after parsing attributes in process `syz.2.2537'. [ 462.196740][T13277] CPU: 1 PID: 13277 Comm: syz.0.2538 Not tainted syzkaller #0 [ 462.204274][T13277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 462.214374][T13277] Call Trace: [ 462.217681][T13277] [ 462.220648][T13277] dump_stack_lvl+0x18c/0x250 [ 462.225367][T13277] ? show_regs_print_info+0x20/0x20 [ 462.230601][T13277] ? load_image+0x420/0x420 [ 462.235148][T13277] ? __might_fault+0xaa/0x120 [ 462.239857][T13277] ? __lock_acquire+0x7d40/0x7d40 [ 462.244918][T13277] should_fail_ex+0x39d/0x4d0 [ 462.249644][T13277] _copy_to_user+0x2f/0xa0 [ 462.254106][T13277] bpf_verifier_vlog+0x5db/0x870 [ 462.259100][T13277] __btf_verifier_log+0xe3/0x140 [ 462.264090][T13277] ? btf_check_sec_info+0x350/0x350 [ 462.269326][T13277] ? __lock_acquire+0x7d40/0x7d40 [ 462.274387][T13277] ? btf_parse_hdr+0x1f5/0x710 [ 462.279195][T13277] btf_parse_hdr+0x2a2/0x710 [ 462.283847][T13277] btf_new_fd+0x397/0x9f0 [ 462.288226][T13277] ? bpf_btf_show_fdinfo+0x80/0x80 [ 462.293391][T13277] ? capable+0x88/0xe0 [ 462.297516][T13277] __sys_bpf+0x670/0x890 [ 462.301797][T13277] ? bpf_link_show_fdinfo+0x390/0x390 [ 462.307227][T13277] ? lock_chain_count+0x20/0x20 [ 462.312127][T13277] __x64_sys_bpf+0x7c/0x90 [ 462.316587][T13277] do_syscall_64+0x55/0xb0 [ 462.321044][T13277] ? clear_bhb_loop+0x40/0x90 [ 462.325760][T13277] ? clear_bhb_loop+0x40/0x90 [ 462.330483][T13277] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 462.336436][T13277] RIP: 0033:0x7feac4b9ce59 [ 462.340894][T13277] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 462.360545][T13277] RSP: 002b:00007feac5b39028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 462.369004][T13277] RAX: ffffffffffffffda RBX: 00007feac4e15fa0 RCX: 00007feac4b9ce59 [ 462.377021][T13277] RDX: 0000000000000028 RSI: 0000200000000640 RDI: 0000000000000012 [ 462.385032][T13277] RBP: 00007feac5b39090 R08: 0000000000000000 R09: 0000000000000000 [ 462.393043][T13277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 462.401043][T13277] R13: 00007feac4e16038 R14: 00007feac4e15fa0 R15: 00007ffcd68d7218 [ 462.409068][T13277] [ 462.423217][T13213] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.673229][T13213] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.718603][T13293] netlink: 'syz.0.2540': attribute type 10 has an invalid length. [ 462.859717][T13213] bond0: (slave netdevsim0): Releasing backup interface [ 462.873790][T13213] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.278027][T13213] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 463.312645][T13213] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 463.350543][T13213] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 463.374107][T13213] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 463.386677][T13306] netlink: 'syz.2.2543': attribute type 10 has an invalid length. [ 463.471159][ T5085] Bluetooth: hci3: command tx timeout [ 463.533732][T13306] netlink: 'syz.2.2543': attribute type 9 has an invalid length. [ 463.548676][T13306] netlink: 184904 bytes leftover after parsing attributes in process `syz.2.2543'. [ 463.653613][ T5085] Bluetooth: hci4: ISO packet for unknown connection handle 2622 [ 464.053400][T13315] netlink: 'syz.1.2546': attribute type 10 has an invalid length. [ 464.066083][T13315] hsr_slave_0: left promiscuous mode [ 464.077498][T13315] hsr_slave_1: left promiscuous mode [ 464.300478][T13213] 8021q: adding VLAN 0 to HW filter on device bond0 [ 464.335529][T13213] 8021q: adding VLAN 0 to HW filter on device team0 [ 464.366654][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.373975][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 464.411711][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.418977][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 464.660613][T13213] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 464.697440][T13213] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 464.882971][T13328] netlink: 'syz.1.2551': attribute type 10 has an invalid length. [ 465.335736][T13343] netlink: 'syz.2.2555': attribute type 10 has an invalid length. [ 465.404734][T13213] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 465.447811][T13346] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 465.455421][T13346] IPv6: NLM_F_CREATE should be set when creating new route [ 465.463151][T13346] IPv6: NLM_F_CREATE should be set when creating new route [ 465.470757][T13346] IPv6: NLM_F_CREATE should be set when creating new route [ 465.556631][ T5085] Bluetooth: hci3: command tx timeout [ 465.635166][T13213] veth0_vlan: entered promiscuous mode [ 465.648778][T13213] veth1_vlan: entered promiscuous mode [ 465.762422][ T3552] veth1_macvtap: left promiscuous mode [ 465.768154][ T3552] veth1_vlan: left promiscuous mode [ 465.793176][T13351] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.2560'. [ 465.811240][T13351] netlink: 6332 bytes leftover after parsing attributes in process `syz.2.2560'. [ 465.867466][ T5085] Bluetooth: hci0: ISO packet for unknown connection handle 2622 [ 466.088784][ T3552] geneve1 (unregistering): left promiscuous mode [ 466.102246][ T3552] team0 (unregistering): Port device geneve1 removed [ 466.132200][ T3552] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 466.452717][ T3552] hsr_slave_0 (unregistering): left promiscuous mode [ 466.463358][ T3552] team0 (unregistering): Port device hsr_slave_0 removed [ 466.603747][ T3552] team_slave_1 (unregistering): left promiscuous mode [ 466.617180][ T3552] team0 (unregistering): Port device team_slave_1 removed [ 466.660746][ T3552] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 466.709158][ T3552] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 466.757161][ T3552] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 467.004599][ T3552] bond0 (unregistering): Released all slaves [ 467.044934][T13354] netlink: 'syz.0.2562': attribute type 10 has an invalid length. [ 467.054501][T13360] netlink: 'syz.2.2563': attribute type 10 has an invalid length. [ 467.205523][T13213] veth0_macvtap: entered promiscuous mode [ 467.234431][T13213] veth1_macvtap: entered promiscuous mode [ 467.298701][T13213] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 467.317242][T13213] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 467.343680][T13213] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.357528][T13213] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.366490][T13213] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.376579][T13213] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.510363][T13372] netlink: 'syz.2.2573': attribute type 10 has an invalid length. [ 467.617255][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 467.660490][ T5085] Bluetooth: hci3: command tx timeout [ 467.698493][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 467.811326][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 467.819226][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 468.039200][T13383] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.2570'. [ 468.082232][T13383] netlink: 6332 bytes leftover after parsing attributes in process `syz.0.2570'. [ 468.289603][T13391] netlink: 'syz.3.2513': attribute type 10 has an invalid length. [ 468.312975][T13391] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2513'. [ 468.341579][T13391] batman_adv: batadv0: Adding interface: veth0_vlan [ 468.356703][T13391] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 468.422777][T13391] batman_adv: batadv0: Interface activated: veth0_vlan [ 468.910729][ T5777] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 468.926232][ T5777] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 468.934574][ T5777] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 468.952790][ T5777] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 468.976985][ T5777] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 468.985037][ T5777] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 469.040168][T13400] syzkaller0: entered promiscuous mode [ 469.046180][T13400] syzkaller0: entered allmulticast mode [ 469.246401][T13411] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.2581'. [ 469.256513][T13411] netlink: 6332 bytes leftover after parsing attributes in process `syz.0.2581'. [ 471.082694][ T5085] Bluetooth: hci1: command tx timeout [ 471.934435][T13437] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.2591'. [ 471.944553][T13437] netlink: 6332 bytes leftover after parsing attributes in process `syz.3.2591'. [ 472.118624][T13405] chnl_net:caif_netlink_parms(): no params data found [ 472.407947][T13405] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.416236][T13405] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.442426][T13405] bridge_slave_0: entered allmulticast mode [ 472.449947][T13405] bridge_slave_0: entered promiscuous mode [ 472.477693][T13405] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.484972][T13405] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.492785][T13405] bridge_slave_1: entered allmulticast mode [ 472.500301][T13405] bridge_slave_1: entered promiscuous mode [ 472.605910][T13451] mac80211_hwsim hwsim240 wlan1: entered allmulticast mode [ 472.746801][T13405] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 472.760297][T13405] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 472.962767][T13405] team0: Port device team_slave_0 added [ 472.971970][T13405] team0: Port device team_slave_1 added [ 473.013965][T13459] netlink: 'syz.1.2598': attribute type 10 has an invalid length. [ 473.029181][T13463] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.2600'. [ 473.072516][T13463] netlink: 6332 bytes leftover after parsing attributes in process `syz.0.2600'. [ 473.087749][T13464] netlink: 'syz.1.2598': attribute type 9 has an invalid length. [ 473.097156][T13464] netlink: 184904 bytes leftover after parsing attributes in process `syz.1.2598'. [ 473.130527][T13459] team0: Port device hsr_slave_0 added [ 473.159928][ T5085] Bluetooth: hci1: command tx timeout [ 473.166962][T13462] netlink: 'syz.3.2599': attribute type 10 has an invalid length. [ 473.240634][T13462] team0: Device hsr_slave_0 failed to register rx_handler [ 473.368554][T13405] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 473.392929][T13405] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 473.422625][T13405] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 473.482988][T13405] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 473.490020][T13405] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 473.518743][T13405] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 473.558887][T13468] netlink: 'syz.3.2599': attribute type 9 has an invalid length. [ 473.579801][T13468] netlink: 184904 bytes leftover after parsing attributes in process `syz.3.2599'. [ 473.676444][T13405] hsr_slave_0: entered promiscuous mode [ 473.689214][T13405] hsr_slave_1: entered promiscuous mode [ 473.759691][ T5085] Bluetooth: hci4: ISO packet for unknown connection handle 2622 [ 473.828159][T13475] netlink: 'syz.1.2604': attribute type 10 has an invalid length. [ 474.277391][T13490] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.2608'. [ 474.287379][T13490] netlink: 6332 bytes leftover after parsing attributes in process `syz.3.2608'. [ 474.355799][T13405] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.535132][T13405] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.800575][T13500] netlink: 'syz.0.2611': attribute type 9 has an invalid length. [ 474.808611][T13500] netlink: 184904 bytes leftover after parsing attributes in process `syz.0.2611'. [ 474.812868][T13405] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.833581][T13498] netlink: 'syz.0.2611': attribute type 10 has an invalid length. [ 474.913169][T13405] bond0: (slave netdevsim0): Releasing backup interface [ 474.938450][T13405] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.973968][ T5085] Bluetooth: hci4: ISO packet for unknown connection handle 2622 [ 475.133940][T13505] netlink: 'syz.1.2614': attribute type 10 has an invalid length. [ 475.231091][ T5085] Bluetooth: hci1: command tx timeout [ 475.537400][T13516] netlink: 'syz.1.2616': attribute type 9 has an invalid length. [ 475.549420][T13514] syzkaller0: entered promiscuous mode [ 475.555212][T13516] netlink: 184904 bytes leftover after parsing attributes in process `syz.1.2616'. [ 475.586440][T13514] syzkaller0: entered allmulticast mode [ 475.647469][T13513] netlink: 'syz.1.2616': attribute type 10 has an invalid length. [ 477.311581][ T5085] Bluetooth: hci1: command tx timeout [ 477.378110][T13405] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 477.409057][T13405] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 477.485147][T13526] FAULT_INJECTION: forcing a failure. [ 477.485147][T13526] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 477.502712][T13526] CPU: 0 PID: 13526 Comm: syz.0.2621 Not tainted syzkaller #0 [ 477.510215][T13526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 477.512816][T13405] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 477.520282][T13526] Call Trace: [ 477.520293][T13526] [ 477.533241][T13526] dump_stack_lvl+0x18c/0x250 [ 477.537963][T13526] ? show_regs_print_info+0x20/0x20 [ 477.543210][T13526] ? load_image+0x420/0x420 [ 477.547773][T13526] ? __lock_acquire+0x7d40/0x7d40 [ 477.552862][T13526] should_fail_ex+0x39d/0x4d0 [ 477.557590][T13526] prepare_alloc_pages+0x1e2/0x5f0 [ 477.562746][T13526] __alloc_pages+0x134/0x460 [ 477.567380][T13526] ? zone_statistics+0x170/0x170 [ 477.572360][T13526] ? rcuref_put_slowpath+0xe1/0x150 [ 477.577600][T13526] bpf_prog_test_run_xdp+0xc37/0x10e0 [ 477.583017][T13526] ? dev_put+0x80/0x80 [ 477.587153][T13526] ? dev_put+0x80/0x80 [ 477.591262][T13526] bpf_prog_test_run+0x321/0x390 [ 477.596252][T13526] __sys_bpf+0x49d/0x890 [ 477.600546][T13526] ? bpf_link_show_fdinfo+0x390/0x390 [ 477.605975][T13526] ? lock_chain_count+0x20/0x20 [ 477.610880][T13526] __x64_sys_bpf+0x7c/0x90 [ 477.615348][T13526] do_syscall_64+0x55/0xb0 [ 477.619795][T13526] ? clear_bhb_loop+0x40/0x90 [ 477.624516][T13526] ? clear_bhb_loop+0x40/0x90 [ 477.629240][T13526] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 477.635177][T13526] RIP: 0033:0x7feac4b9ce59 [ 477.639631][T13526] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 477.659381][T13526] RSP: 002b:00007feac5b39028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 477.667846][T13526] RAX: ffffffffffffffda RBX: 00007feac4e15fa0 RCX: 00007feac4b9ce59 [ 477.675862][T13526] RDX: 0000000000000050 RSI: 00002000000011c0 RDI: 000000000000000a [ 477.683873][T13526] RBP: 00007feac5b39090 R08: 0000000000000000 R09: 0000000000000000 [ 477.691881][T13526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 477.699902][T13526] R13: 00007feac4e16038 R14: 00007feac4e15fa0 R15: 00007ffcd68d7218 [ 477.707923][T13526] [ 477.715766][T13405] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 477.927197][T13405] 8021q: adding VLAN 0 to HW filter on device bond0 [ 477.967242][T13405] 8021q: adding VLAN 0 to HW filter on device team0 [ 477.979963][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.987170][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 478.010824][ T992] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.018017][ T992] bridge0: port 2(bridge_slave_1) entered forwarding state [ 478.183157][T13405] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 478.638281][T13405] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 478.826391][T13405] veth0_vlan: entered promiscuous mode [ 478.854880][T13405] veth1_vlan: entered promiscuous mode [ 479.014459][T13405] veth0_macvtap: entered promiscuous mode [ 479.036168][T13405] veth1_macvtap: entered promiscuous mode [ 479.148792][T13405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 479.169946][T13405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.187835][T13537] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.2630'. [ 479.200009][T13405] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 479.208496][T13537] netlink: 6332 bytes leftover after parsing attributes in process `syz.0.2630'. [ 479.250133][T13405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 479.267677][T13405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.407874][T13405] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 479.495571][T13405] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.510437][T13405] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.534507][T13405] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.595781][T13405] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.552179][ T992] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 481.560071][ T992] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 481.846630][T13562] netlink: 'syz.3.2631': attribute type 10 has an invalid length. [ 481.861569][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 481.869468][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 481.879994][T13562] hsr_slave_0: left promiscuous mode [ 481.909489][T13562] hsr_slave_1: left promiscuous mode [ 483.005521][T13571] FAULT_INJECTION: forcing a failure. [ 483.005521][T13571] name failslab, interval 1, probability 0, space 0, times 0 [ 483.040823][T13571] CPU: 1 PID: 13571 Comm: syz.2.2633 Not tainted syzkaller #0 [ 483.048366][T13571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 483.058547][T13571] Call Trace: [ 483.061864][T13571] [ 483.064825][T13571] dump_stack_lvl+0x18c/0x250 [ 483.069569][T13571] ? show_regs_print_info+0x20/0x20 [ 483.074803][T13571] ? load_image+0x420/0x420 [ 483.079371][T13571] should_fail_ex+0x39d/0x4d0 [ 483.084106][T13571] should_failslab+0x9/0x20 [ 483.088657][T13571] slab_pre_alloc_hook+0x59/0x310 [ 483.093742][T13571] kmem_cache_alloc+0x5a/0x2d0 [ 483.098571][T13571] ? __nf_conntrack_alloc+0x99/0x380 [ 483.103992][T13571] __nf_conntrack_alloc+0x99/0x380 [ 483.109155][T13571] init_conntrack+0x177/0xf10 [ 483.113893][T13571] ? early_drop+0x7f0/0x7f0 [ 483.118441][T13571] ? nf_conntrack_find_get+0x650/0x650 [ 483.123935][T13571] ? __siphash_unaligned+0x22e/0x3a0 [ 483.129285][T13571] nf_conntrack_in+0xc06/0x15c0 [ 483.134198][T13571] ? nf_ct_pernet+0x270/0x270 [ 483.138910][T13571] ? ip6t_do_table+0x1d9/0x1510 [ 483.143886][T13571] ? ip6t_alloc_initial_table+0x640/0x640 [ 483.149658][T13571] ? ipv6_defrag+0x2d6/0x3a0 [ 483.154290][T13571] ? ipv6_conntrack_in+0x20/0x20 [ 483.159275][T13571] nf_hook_slow+0xbd/0x200 [ 483.163765][T13571] __ip6_local_out+0x784/0x8a0 [ 483.168585][T13571] ? __ip6_local_out+0x60c/0x8a0 [ 483.173569][T13571] ? ip6_dst_hoplimit+0x350/0x350 [ 483.178642][T13571] ? __ip6_local_out+0x8a0/0x8a0 [ 483.183626][T13571] ? read_lock_is_recursive+0x20/0x20 [ 483.189069][T13571] ip6_local_out+0x2a/0x130 [ 483.193615][T13571] ? ip6_send_skb+0x10f/0x380 [ 483.198457][T13571] ip6_send_skb+0x1d5/0x380 [ 483.203021][T13571] rawv6_push_pending_frames+0x6ee/0x8d0 [ 483.208754][T13571] ? raw6_getfrag+0x3a0/0x3a0 [ 483.213473][T13571] ? rawv6_send_hdrinc+0x1640/0x1640 [ 483.218826][T13571] rawv6_sendmsg+0x131b/0x1770 [ 483.223645][T13571] ? compat_rawv6_ioctl+0x70/0x70 [ 483.228767][T13571] ? aa_sk_perm+0x83c/0x970 [ 483.233324][T13571] ? tomoyo_socket_sendmsg_permission+0x216/0x2f0 [ 483.239799][T13571] ? inet_sendmsg+0x7c/0x2f0 [ 483.244475][T13571] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 483.249810][T13571] ? security_socket_sendmsg+0x80/0xa0 [ 483.255329][T13571] ? inet_send_prepare+0x260/0x260 [ 483.260504][T13571] ____sys_sendmsg+0x5ba/0x960 [ 483.265324][T13571] ? __lock_acquire+0x7d40/0x7d40 [ 483.270417][T13571] ? __asan_memset+0x22/0x40 [ 483.275065][T13571] ? __sys_sendmsg_sock+0x30/0x30 [ 483.280125][T13571] ? __import_iovec+0x5f2/0x850 [ 483.285016][T13571] ? import_iovec+0x73/0xa0 [ 483.289557][T13571] ___sys_sendmsg+0x2a6/0x360 [ 483.294266][T13571] ? get_pid_task+0x20/0x1e0 [ 483.298900][T13571] ? __sys_sendmsg+0x2a0/0x2a0 [ 483.303726][T13571] ? __lock_acquire+0x7d40/0x7d40 [ 483.308815][T13571] __se_sys_sendmsg+0x1c2/0x2b0 [ 483.313711][T13571] ? __x64_sys_sendmsg+0x80/0x80 [ 483.318808][T13571] ? lockdep_hardirqs_on+0x98/0x150 [ 483.324048][T13571] do_syscall_64+0x55/0xb0 [ 483.328518][T13571] ? clear_bhb_loop+0x40/0x90 [ 483.333243][T13571] ? clear_bhb_loop+0x40/0x90 [ 483.337968][T13571] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 483.343903][T13571] RIP: 0033:0x7fafdad9ce59 [ 483.348352][T13571] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 483.367997][T13571] RSP: 002b:00007fafdbc88028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 483.376453][T13571] RAX: ffffffffffffffda RBX: 00007fafdb015fa0 RCX: 00007fafdad9ce59 [ 483.384463][T13571] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 483.392476][T13571] RBP: 00007fafdbc88090 R08: 0000000000000000 R09: 0000000000000000 [ 483.400481][T13571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 483.408483][T13571] R13: 00007fafdb016038 R14: 00007fafdb015fa0 R15: 00007fff93055608 [ 483.416507][T13571] [ 483.423752][ T5879] page_pool_release_retry() stalled pool shutdown 1 inflight 61 sec [ 483.763998][T13577] netlink: 'syz.2.2636': attribute type 10 has an invalid length. [ 483.825017][T13585] netlink: 'syz.2.2636': attribute type 9 has an invalid length. [ 483.866196][T13577] team0: Device hsr_slave_0 failed to register rx_handler [ 483.886628][T13585] netlink: 184904 bytes leftover after parsing attributes in process `syz.2.2636'. [ 484.159213][T13591] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.2641'. [ 484.179148][T13591] netlink: 6332 bytes leftover after parsing attributes in process `syz.3.2641'. [ 485.018538][T13606] netlink: 'syz.0.2652': attribute type 10 has an invalid length. [ 485.120297][T13606] netlink: 'syz.0.2652': attribute type 9 has an invalid length. [ 485.148930][T13606] netlink: 184904 bytes leftover after parsing attributes in process `syz.0.2652'. [ 485.838531][T13612] syzkaller0: entered promiscuous mode [ 485.846481][T13612] syzkaller0: entered allmulticast mode [ 486.073953][T13622] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.2650'. [ 486.083832][T13622] netlink: 6332 bytes leftover after parsing attributes in process `syz.0.2650'. [ 488.488144][T13646] netlink: 'syz.0.2657': attribute type 10 has an invalid length. [ 488.625452][T13646] netlink: 'syz.0.2657': attribute type 9 has an invalid length. [ 488.656770][T13646] netlink: 184904 bytes leftover after parsing attributes in process `syz.0.2657'. [ 489.198064][T13656] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 489.207027][T13656] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 489.216046][T13656] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 489.225068][T13656] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 489.242938][T13656] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 489.250736][T13656] batman_adv: batadv0: Removing interface: veth0_vlan [ 489.323364][T13655] netlink: 'syz.1.2662': attribute type 10 has an invalid length. [ 489.435658][T13655] team0: Port device dummy0 added [ 489.841227][T13658] syzkaller0: entered promiscuous mode [ 489.846809][T13658] syzkaller0: entered allmulticast mode [ 490.022942][T13665] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.2665'. [ 490.055355][T13665] netlink: 6332 bytes leftover after parsing attributes in process `syz.1.2665'. [ 492.665267][ T3552] veth1_macvtap: left promiscuous mode [ 492.673524][ T3552] veth0_macvtap: left promiscuous mode [ 492.694993][ T3552] veth1_vlan: left promiscuous mode [ 493.055724][ T3552] team0 (unregistering): Port device geneve1 removed [ 493.876786][ T3552] team0 (unregistering): Port device hsr_slave_0 removed [ 494.051739][ T3552] team0 (unregistering): Port device team_slave_1 removed [ 494.090236][ T3552] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 494.138161][ T3552] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 494.182671][ T3552] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 494.406101][ T3552] bond0 (unregistering): Released all slaves [ 495.936083][T13680] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2671'. [ 496.277848][T13686] netlink: 'syz.0.2672': attribute type 10 has an invalid length. [ 496.412794][T13686] netlink: 'syz.0.2672': attribute type 9 has an invalid length. [ 496.425590][T13686] netlink: 184904 bytes leftover after parsing attributes in process `syz.0.2672'. [ 497.095780][T13691] netlink: 'syz.3.2674': attribute type 10 has an invalid length. [ 497.134589][T13691] team0: Port device dummy0 added [ 497.333238][T13698] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.2676'. [ 497.362292][T13698] netlink: 6332 bytes leftover after parsing attributes in process `syz.1.2676'. [ 497.484241][T13706] Q6`Ҙ: renamed from lo (while UP) [ 500.247389][T13710] netlink: 'syz.3.2679': attribute type 10 has an invalid length. [ 500.276915][T13710] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 500.576999][ T5085] Bluetooth: hci3: ISO packet for unknown connection handle 2622 [ 500.781683][T13722] netlink: 'syz.3.2683': attribute type 10 has an invalid length. [ 500.796188][T13729] netlink: 'syz.0.2682': attribute type 10 has an invalid length. [ 500.819584][T13728] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2685'. [ 501.071648][T13741] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.2689'. [ 501.102515][T13741] netlink: 6332 bytes leftover after parsing attributes in process `syz.0.2689'. [ 501.196391][T13746] netlink: 'syz.3.2688': attribute type 9 has an invalid length. [ 501.204430][T13746] netlink: 184904 bytes leftover after parsing attributes in process `syz.3.2688'. [ 501.214374][T13739] netlink: 'syz.3.2688': attribute type 10 has an invalid length. [ 501.257820][T13739] team0: Port device hsr_slave_0 added [ 501.515959][T13756] syzkaller0: entered promiscuous mode [ 501.522136][T13756] syzkaller0: entered allmulticast mode [ 501.548111][T13755] netlink: 'syz.1.2692': attribute type 10 has an invalid length. [ 501.564321][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.570778][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.734217][ T5085] Bluetooth: hci4: ISO packet for unknown connection handle 2622 [ 503.504999][T13765] netlink: 'syz.1.2696': attribute type 10 has an invalid length. [ 503.515966][T13774] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2699'. [ 503.700203][T13781] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2710'. [ 503.919869][T13785] mac80211_hwsim hwsim246 wlan1: entered allmulticast mode [ 504.090665][T13801] netlink: 'syz.0.2705': attribute type 10 has an invalid length. [ 504.471388][ T5085] Bluetooth: hci0: ISO packet for unknown connection handle 2622 [ 504.543537][T13810] syzkaller0: entered promiscuous mode [ 504.549083][T13810] syzkaller0: entered allmulticast mode [ 504.566221][T13814] netlink: 'syz.2.2706': attribute type 9 has an invalid length. [ 504.576410][T13806] netlink: 'syz.2.2706': attribute type 10 has an invalid length. [ 504.576438][T13814] netlink: 184904 bytes leftover after parsing attributes in process `syz.2.2706'. [ 504.597616][T13806] team0: Device hsr_slave_0 failed to register rx_handler [ 504.657776][T13813] netlink: 'syz.0.2709': attribute type 10 has an invalid length. [ 505.087731][T13824] netlink: 'syz.0.2715': attribute type 29 has an invalid length. [ 506.443433][T13822] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2714'. [ 506.455001][T13824] netlink: 'syz.0.2715': attribute type 29 has an invalid length. [ 506.779632][T13837] netlink: 180 bytes leftover after parsing attributes in process `syz.1.2719'. [ 506.968239][T13841] syzkaller0: entered promiscuous mode [ 506.973884][T13841] syzkaller0: entered allmulticast mode [ 506.982135][T13843] netlink: 'syz.0.2723': attribute type 10 has an invalid length. [ 507.246937][T13854] netlink: 'syz.2.2725': attribute type 9 has an invalid length. [ 507.255148][T13854] netlink: 184904 bytes leftover after parsing attributes in process `syz.2.2725'. [ 508.783944][T13852] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2726'. [ 508.794201][T13850] netlink: 'syz.2.2725': attribute type 10 has an invalid length. [ 508.807145][T13850] team0: Device hsr_slave_0 failed to register rx_handler [ 509.084931][T13864] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.2728'. [ 509.095683][T13864] netlink: 6332 bytes leftover after parsing attributes in process `syz.3.2728'. [ 509.149945][T13870] FAULT_INJECTION: forcing a failure. [ 509.149945][T13870] name failslab, interval 1, probability 0, space 0, times 0 [ 509.181104][T13870] CPU: 1 PID: 13870 Comm: syz.1.2730 Not tainted syzkaller #0 [ 509.188755][T13870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 509.198859][T13870] Call Trace: [ 509.202170][T13870] [ 509.205129][T13870] dump_stack_lvl+0x18c/0x250 [ 509.209843][T13870] ? show_regs_print_info+0x20/0x20 [ 509.215076][T13870] ? load_image+0x420/0x420 [ 509.219622][T13870] ? __lock_acquire+0x7d40/0x7d40 [ 509.224688][T13870] should_fail_ex+0x39d/0x4d0 [ 509.229409][T13870] should_failslab+0x9/0x20 [ 509.233954][T13870] slab_pre_alloc_hook+0x59/0x310 [ 509.239036][T13870] ? bpf_prog_alloc+0x3d/0x1a0 [ 509.243830][T13870] ? bpf_prog_load+0x6eb/0x1670 [ 509.248714][T13870] ? __sys_bpf+0x5ba/0x890 [ 509.253166][T13870] kmem_cache_alloc_node+0x60/0x320 [ 509.258398][T13870] ? alloc_vmap_area+0x1b4/0x1e30 [ 509.263462][T13870] alloc_vmap_area+0x1b4/0x1e30 [ 509.268373][T13870] ? vm_map_ram+0xcb0/0xcb0 [ 509.272916][T13870] ? rcu_is_watching+0x15/0xb0 [ 509.277737][T13870] __get_vm_area_node+0x162/0x370 [ 509.282803][T13870] __vmalloc_node_range+0x36e/0x1330 [ 509.288127][T13870] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 509.293709][T13870] ? perf_trace_preemptirq_template+0x269/0x330 [ 509.299993][T13870] ? lock_chain_count+0x20/0x20 [ 509.304904][T13870] ? free_vm_area+0x50/0x50 [ 509.309441][T13870] ? lockdep_hardirqs_on+0x98/0x150 [ 509.314677][T13870] ? end_current_label_crit_section+0x170/0x170 [ 509.320972][T13870] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 509.326560][T13870] __vmalloc+0x7a/0x90 [ 509.330662][T13870] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 509.336246][T13870] bpf_prog_alloc_no_stats+0x47/0x440 [ 509.341656][T13870] ? bpf_prog_alloc+0x2b/0x1a0 [ 509.346454][T13870] bpf_prog_alloc+0x3d/0x1a0 [ 509.351095][T13870] bpf_prog_load+0x6eb/0x1670 [ 509.355819][T13870] ? map_freeze+0x420/0x420 [ 509.360374][T13870] ? __might_fault+0xaa/0x120 [ 509.365076][T13870] ? __lock_acquire+0x7d40/0x7d40 [ 509.370137][T13870] ? __might_fault+0xaa/0x120 [ 509.374847][T13870] ? __might_fault+0xc6/0x120 [ 509.379562][T13870] ? __might_fault+0xaa/0x120 [ 509.384269][T13870] ? bpf_lsm_bpf+0x9/0x10 [ 509.388636][T13870] ? security_bpf+0x7e/0xa0 [ 509.393178][T13870] __sys_bpf+0x5ba/0x890 [ 509.397455][T13870] ? bpf_link_show_fdinfo+0x390/0x390 [ 509.402876][T13870] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 509.409078][T13870] __x64_sys_bpf+0x7c/0x90 [ 509.413528][T13870] do_syscall_64+0x55/0xb0 [ 509.417968][T13870] ? clear_bhb_loop+0x40/0x90 [ 509.422679][T13870] ? clear_bhb_loop+0x40/0x90 [ 509.427401][T13870] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 509.433350][T13870] RIP: 0033:0x7f4c8a39ce59 [ 509.437801][T13870] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 509.457467][T13870] RSP: 002b:00007f4c8b29d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 509.465919][T13870] RAX: ffffffffffffffda RBX: 00007f4c8a615fa0 RCX: 00007f4c8a39ce59 [ 509.473929][T13870] RDX: 0000000000000080 RSI: 00002000000001c0 RDI: 0000000000000005 [ 509.481933][T13870] RBP: 00007f4c8b29d090 R08: 0000000000000000 R09: 0000000000000000 [ 509.489935][T13870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 509.497938][T13870] R13: 00007f4c8a616038 R14: 00007f4c8a615fa0 R15: 00007fffb158d408 [ 509.505959][T13870] [ 509.610655][T13870] syz.1.2730: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 509.667533][T13870] CPU: 1 PID: 13870 Comm: syz.1.2730 Not tainted syzkaller #0 [ 509.675079][T13870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 509.685171][T13870] Call Trace: [ 509.688480][T13870] [ 509.691440][T13870] dump_stack_lvl+0x18c/0x250 [ 509.696161][T13870] ? show_regs_print_info+0x20/0x20 [ 509.701394][T13870] ? load_image+0x420/0x420 [ 509.705941][T13870] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 509.712391][T13870] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 509.718925][T13870] warn_alloc+0x246/0x340 [ 509.723326][T13870] ? slab_free_freelist_hook+0x130/0x1a0 [ 509.728996][T13870] ? zone_watermark_ok_safe+0x230/0x230 [ 509.734580][T13870] ? __get_vm_area_node+0x17b/0x370 [ 509.739819][T13870] ? __get_vm_area_node+0x17b/0x370 [ 509.745064][T13870] __vmalloc_node_range+0x393/0x1330 [ 509.750395][T13870] ? perf_trace_preemptirq_template+0x269/0x330 [ 509.756697][T13870] ? lock_chain_count+0x20/0x20 [ 509.761606][T13870] ? free_vm_area+0x50/0x50 [ 509.766145][T13870] ? lockdep_hardirqs_on+0x98/0x150 [ 509.771388][T13870] ? end_current_label_crit_section+0x170/0x170 [ 509.777684][T13870] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 509.783258][T13870] __vmalloc+0x7a/0x90 [ 509.787363][T13870] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 509.792952][T13870] bpf_prog_alloc_no_stats+0x47/0x440 [ 509.798361][T13870] ? bpf_prog_alloc+0x2b/0x1a0 [ 509.803161][T13870] bpf_prog_alloc+0x3d/0x1a0 [ 509.807793][T13870] bpf_prog_load+0x6eb/0x1670 [ 509.812515][T13870] ? map_freeze+0x420/0x420 [ 509.817062][T13870] ? __might_fault+0xaa/0x120 [ 509.821776][T13870] ? __lock_acquire+0x7d40/0x7d40 [ 509.826840][T13870] ? __might_fault+0xaa/0x120 [ 509.831546][T13870] ? __might_fault+0xc6/0x120 [ 509.836248][T13870] ? __might_fault+0xaa/0x120 [ 509.840962][T13870] ? bpf_lsm_bpf+0x9/0x10 [ 509.845324][T13870] ? security_bpf+0x7e/0xa0 [ 509.849862][T13870] __sys_bpf+0x5ba/0x890 [ 509.854141][T13870] ? bpf_link_show_fdinfo+0x390/0x390 [ 509.859558][T13870] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 509.865774][T13870] __x64_sys_bpf+0x7c/0x90 [ 509.870226][T13870] do_syscall_64+0x55/0xb0 [ 509.874792][T13870] ? clear_bhb_loop+0x40/0x90 [ 509.879503][T13870] ? clear_bhb_loop+0x40/0x90 [ 509.884222][T13870] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 509.890157][T13870] RIP: 0033:0x7f4c8a39ce59 [ 509.894623][T13870] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 509.914278][T13870] RSP: 002b:00007f4c8b29d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 509.922728][T13870] RAX: ffffffffffffffda RBX: 00007f4c8a615fa0 RCX: 00007f4c8a39ce59 [ 509.930724][T13870] RDX: 0000000000000080 RSI: 00002000000001c0 RDI: 0000000000000005 [ 509.938742][T13870] RBP: 00007f4c8b29d090 R08: 0000000000000000 R09: 0000000000000000 [ 509.946737][T13870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 509.954730][T13870] R13: 00007f4c8a616038 R14: 00007f4c8a615fa0 R15: 00007fffb158d408 [ 509.962771][T13870] [ 510.000601][T13870] Mem-Info: [ 510.029455][T13870] active_anon:5220 inactive_anon:0 isolated_anon:0 [ 510.029455][T13870] active_file:19334 inactive_file:40127 isolated_file:0 [ 510.029455][T13870] unevictable:768 dirty:228 writeback:0 [ 510.029455][T13870] slab_reclaimable:13755 slab_unreclaimable:108731 [ 510.029455][T13870] mapped:24971 shmem:1361 pagetables:538 [ 510.029455][T13870] sec_pagetables:0 bounce:0 [ 510.029455][T13870] kernel_misc_reclaimable:0 [ 510.029455][T13870] free:1326277 free_pcp:9391 free_cma:0 [ 510.075617][T13870] Node 0 active_anon:20880kB inactive_anon:0kB active_file:77336kB inactive_file:160308kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:99884kB dirty:912kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10412kB pagetables:2152kB sec_pagetables:0kB all_unreclaimable? no [ 510.110406][T13870] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 510.144004][T13870] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 510.174883][T13870] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 510.180730][T13870] Node 0 DMA32 free:1391532kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:20840kB inactive_anon:0kB active_file:77336kB inactive_file:159480kB unevictable:1536kB writepending:912kB present:3129332kB managed:2586944kB mlocked:0kB bounce:0kB free_pcp:17172kB local_pcp:3064kB free_cma:0kB [ 510.228593][T13870] lowmem_reserve[]: 0 0 0 0 0 [ 510.235981][T13870] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 510.263800][T13870] lowmem_reserve[]: 0 0 0 0 0 [ 510.268912][T13870] Node 1 Normal free:3898216kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:19988kB local_pcp:10228kB free_cma:0kB [ 510.299031][T13870] lowmem_reserve[]: 0 0 0 0 0 [ 510.304236][T13870] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 510.318351][T13870] Node 0 DMA32: 1341*4kB (UME) 1603*8kB (UME) 1224*16kB (UME) 881*32kB (UME) 404*64kB (UME) 679*128kB (UME) 478*256kB (UM) 343*512kB (UM) 238*1024kB (UME) 8*2048kB (UM) 160*4096kB (M) = 1392172kB [ 510.342634][T13870] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 510.354349][T13870] Node 1 Normal: 176*4kB (UM) 33*8kB (UME) 24*16kB (UME) 29*32kB (UME) 6*64kB (UE) 8*128kB (UME) 1*256kB (E) 2*512kB (ME) 0*1024kB 1*2048kB (E) 950*4096kB (M) = 3898216kB [ 510.372119][T13870] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 510.381834][T13870] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 510.396136][T13870] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 510.416062][T13870] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 510.426100][T13870] 60822 total pagecache pages [ 510.432900][T13870] 0 pages in swap cache [ 510.437112][T13870] Free swap = 124996kB [ 510.443275][T13870] Total swap = 124996kB [ 510.447489][T13870] 2097051 pages RAM [ 510.465924][T13870] 0 pages HighMem/MovableOnly [ 510.483663][T13870] 416929 pages reserved [ 510.487880][T13870] 0 pages cma reserved [ 510.581206][T13879] netlink: 'syz.0.2734': attribute type 10 has an invalid length. [ 510.707440][T13885] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2737'. [ 510.918620][T13887] FAULT_INJECTION: forcing a failure. [ 510.918620][T13887] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 510.951268][T13887] CPU: 1 PID: 13887 Comm: syz.2.2738 Not tainted syzkaller #0 [ 510.958816][T13887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 510.968914][T13887] Call Trace: [ 510.972233][T13887] [ 510.975204][T13887] dump_stack_lvl+0x18c/0x250 [ 510.979944][T13887] ? show_regs_print_info+0x20/0x20 [ 510.985200][T13887] ? load_image+0x420/0x420 [ 510.989762][T13887] ? __might_fault+0xaa/0x120 [ 510.994518][T13887] ? __lock_acquire+0x7d40/0x7d40 [ 510.999598][T13887] should_fail_ex+0x39d/0x4d0 [ 511.004356][T13887] _copy_from_user+0x2f/0xe0 [ 511.009016][T13887] ___sys_sendmsg+0x1c7/0x360 [ 511.013744][T13887] ? __sys_sendmsg+0x2a0/0x2a0 [ 511.018583][T13887] ? seqcount_lockdep_reader_access+0x17b/0x1d0 [ 511.024914][T13887] __se_sys_sendmsg+0x1c2/0x2b0 [ 511.029835][T13887] ? __x64_sys_sendmsg+0x80/0x80 [ 511.034830][T13887] ? lockdep_hardirqs_on+0x98/0x150 [ 511.040102][T13887] do_syscall_64+0x55/0xb0 [ 511.044611][T13887] ? clear_bhb_loop+0x40/0x90 [ 511.049350][T13887] ? clear_bhb_loop+0x40/0x90 [ 511.054084][T13887] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 511.060041][T13887] RIP: 0033:0x7fafdad9ce59 [ 511.064505][T13887] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 511.084169][T13887] RSP: 002b:00007fafdbc88028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 511.092658][T13887] RAX: ffffffffffffffda RBX: 00007fafdb015fa0 RCX: 00007fafdad9ce59 [ 511.100667][T13887] RDX: 0000000000004804 RSI: 00002000000008c0 RDI: 0000000000000007 [ 511.108683][T13887] RBP: 00007fafdbc88090 R08: 0000000000000000 R09: 0000000000000000 [ 511.116692][T13887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 511.124703][T13887] R13: 00007fafdb016038 R14: 00007fafdb015fa0 R15: 00007fff93055608 [ 511.132737][T13887] [ 511.159438][T13891] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.2740'. [ 511.169260][T13891] netlink: 6332 bytes leftover after parsing attributes in process `syz.3.2740'. [ 511.291448][T13887] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 511.332526][T13892] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 511.668340][T13906] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 511.857603][T13914] sctp: [Deprecated]: syz.0.2745 (pid 13914) Use of struct sctp_assoc_value in delayed_ack socket option. [ 511.857603][T13914] Use struct sctp_sack_info instead [ 511.936400][ T5085] Bluetooth: hci4: ISO packet for unknown connection handle 2622 [ 511.987656][T13915] netlink: 'syz.1.2747': attribute type 10 has an invalid length. [ 512.012947][T13920] sctp: [Deprecated]: syz.2.2748 (pid 13920) Use of struct sctp_assoc_value in delayed_ack socket option. [ 512.012947][T13920] Use struct sctp_sack_info instead [ 512.359345][T13930] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.2751'. [ 512.377377][T13930] netlink: 6332 bytes leftover after parsing attributes in process `syz.1.2751'. [ 512.480119][T13935] netlink: 'syz.3.2752': attribute type 5 has an invalid length. [ 512.735907][T13916] delete_channel: no stack [ 512.814409][T13942] tc_dump_action: action bad kind [ 512.989734][ T5085] Bluetooth: hci1: ISO packet for unknown connection handle 2622 [ 513.009416][ T5085] Bluetooth: hci0: ISO packet for unknown connection handle 2622 [ 513.095238][T13953] netlink: 'syz.0.2759': attribute type 10 has an invalid length. [ 513.555306][T13964] netlink: 'syz.0.2761': attribute type 10 has an invalid length. [ 513.607574][T13967] netlink: 'syz.3.2762': attribute type 10 has an invalid length. [ 513.708359][T13971] netlink: 'syz.3.2762': attribute type 9 has an invalid length. [ 513.720257][T13971] netlink: 184904 bytes leftover after parsing attributes in process `syz.3.2762'. [ 513.974737][T13964] netlink: 'syz.0.2761': attribute type 9 has an invalid length. [ 514.018112][T13964] netlink: 184904 bytes leftover after parsing attributes in process `syz.0.2761'. [ 514.038563][T13977] syzkaller0: entered promiscuous mode [ 514.060467][T13977] syzkaller0: entered allmulticast mode [ 514.068838][T13979] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2766'. [ 514.426665][ T5085] Bluetooth: hci4: ISO packet for unknown connection handle 2622 [ 516.220714][T13990] netlink: 'syz.1.2770': attribute type 10 has an invalid length. [ 516.322421][T14011] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2777'. [ 516.593871][T14017] netlink: 'syz.1.2778': attribute type 10 has an invalid length. [ 516.716730][T14019] netlink: 'syz.1.2778': attribute type 9 has an invalid length. [ 516.771301][T14019] netlink: 184904 bytes leftover after parsing attributes in process `syz.1.2778'. [ 517.122585][T14035] netlink: 'syz.0.2785': attribute type 10 has an invalid length. [ 517.261386][T14030] netlink: 184904 bytes leftover after parsing attributes in process `syz.0.2785'. [ 517.282208][ T5085] Bluetooth: hci1: ISO packet for unknown connection handle 2622 [ 517.425146][T14033] hsr_slave_0: left promiscuous mode [ 517.486464][T14033] hsr_slave_1: left promiscuous mode [ 517.520454][T14039] sctp: [Deprecated]: syz.1.2788 (pid 14039) Use of struct sctp_assoc_value in delayed_ack socket option. [ 517.520454][T14039] Use struct sctp_sack_info instead [ 517.545381][T14038] delete_channel: no stack [ 517.977548][T14043] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2790'. [ 518.924526][T14068] sctp: [Deprecated]: syz.3.2799 (pid 14068) Use of struct sctp_assoc_value in delayed_ack socket option. [ 518.924526][T14068] Use struct sctp_sack_info instead [ 518.941964][ T5085] Bluetooth: hci4: ISO packet for unknown connection handle 2622 [ 518.973133][T14071] validate_nla: 2 callbacks suppressed [ 518.973152][T14071] netlink: 'syz.1.2800': attribute type 10 has an invalid length. [ 519.022317][T14067] delete_channel: no stack [ 519.201647][T14074] netlink: 'syz.2.2801': attribute type 10 has an invalid length. [ 519.290592][T14076] netlink: 'syz.0.2798': attribute type 9 has an invalid length. [ 519.319456][T14074] team0: Port device hsr_slave_0 added [ 519.324013][T14076] netlink: 184904 bytes leftover after parsing attributes in process `syz.0.2798'. [ 519.339302][T14072] netlink: 'syz.0.2798': attribute type 10 has an invalid length. [ 519.415060][T14079] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2802'. [ 519.464718][T14077] netlink: 'syz.2.2801': attribute type 9 has an invalid length. [ 519.491902][T14077] netlink: 184904 bytes leftover after parsing attributes in process `syz.2.2801'. [ 519.568609][T14083] netlink: 'syz.1.2805': attribute type 10 has an invalid length. [ 519.691483][T14083] veth0_vlan: left promiscuous mode [ 519.700980][T14083] veth0_vlan: entered promiscuous mode [ 519.715976][T14083] team0: Device veth0_vlan failed to register rx_handler [ 520.005454][ T3552] veth1_macvtap: left promiscuous mode [ 520.011290][ T3552] veth1_vlan: left promiscuous mode [ 520.268814][ T5085] Bluetooth: hci3: ISO packet for unknown connection handle 2622 [ 536.071434][ T5777] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 536.081362][ T5777] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 536.089960][ T5777] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 536.099035][ T5777] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 536.114582][ T5777] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 536.122266][ T5777] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 536.155801][ T5777] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 536.166396][ T5777] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 536.174909][ T5777] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 536.184751][ T5777] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 536.195352][ T5777] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 536.203857][ T5777] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 536.329640][ T5777] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 536.338034][ T5777] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 536.346433][ T5777] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 536.356242][ T5777] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 536.364091][ T5777] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 536.372528][ T5777] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 536.980668][ T5777] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 536.991725][ T5777] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 537.000813][ T5777] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 537.009843][ T5777] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 537.018427][ T5777] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 537.026445][ T5777] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 538.191239][ T5085] Bluetooth: hci2: command tx timeout [ 538.271057][ T5085] Bluetooth: hci5: command tx timeout [ 538.431130][ T5085] Bluetooth: hci6: command tx timeout [ 539.071024][ T5085] Bluetooth: hci7: command tx timeout [ 540.271080][ T5085] Bluetooth: hci2: command tx timeout [ 540.350986][ T5085] Bluetooth: hci5: command tx timeout [ 540.511897][ T5085] Bluetooth: hci6: command tx timeout [ 541.151042][ T5085] Bluetooth: hci7: command tx timeout [ 542.351072][ T5085] Bluetooth: hci2: command tx timeout [ 542.431068][ T5085] Bluetooth: hci5: command tx timeout [ 542.591039][ T5085] Bluetooth: hci6: command tx timeout [ 543.231021][ T5085] Bluetooth: hci7: command tx timeout [ 544.431224][ T5085] Bluetooth: hci2: command tx timeout [ 544.510981][ T5085] Bluetooth: hci5: command tx timeout [ 544.671002][ T5085] Bluetooth: hci6: command tx timeout [ 545.320966][ T5085] Bluetooth: hci7: command tx timeout [ 549.711074][ T5777] Bluetooth: hci4: command 0x0406 tx timeout [ 562.995378][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.002008][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 570.190978][ T5777] Bluetooth: hci0: command 0x0406 tx timeout [ 585.551076][ T5085] Bluetooth: hci3: command 0x0406 tx timeout [ 595.791122][ T5085] Bluetooth: hci1: command 0x0406 tx timeout [ 595.968541][ T5085] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 595.978512][ T5085] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 595.986866][ T5085] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 596.012439][ T5085] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 596.020248][ T5085] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 596.028867][ T5085] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 596.082774][ T5085] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 596.092524][ T5085] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 596.100665][ T5085] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 596.110293][ T5085] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 596.118785][ T5085] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 596.126232][ T5085] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 596.880108][ T5777] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 596.889007][ T5777] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 596.898144][ T5777] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 596.906856][ T5777] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 596.915057][T14151] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 596.923119][T14151] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 597.893492][T14151] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 597.901972][T14151] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 597.910782][T14151] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 597.919836][T14151] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 597.928429][T14151] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 597.936531][T14151] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 598.110985][ T5085] Bluetooth: hci8: command tx timeout [ 598.191179][ T5085] Bluetooth: hci9: command tx timeout [ 598.991191][ T5085] Bluetooth: hci10: command tx timeout [ 600.041024][ T5085] Bluetooth: hci11: command tx timeout [ 600.190958][ T5085] Bluetooth: hci8: command tx timeout [ 600.280988][ T5085] Bluetooth: hci9: command tx timeout [ 601.080969][ T5085] Bluetooth: hci10: command tx timeout [ 602.111009][ T5085] Bluetooth: hci11: command tx timeout [ 602.280996][ T5085] Bluetooth: hci8: command tx timeout [ 602.351030][ T5085] Bluetooth: hci9: command tx timeout [ 603.150978][ T5085] Bluetooth: hci10: command tx timeout [ 604.191055][ T5085] Bluetooth: hci11: command tx timeout [ 604.350979][ T5085] Bluetooth: hci8: command tx timeout [ 604.430994][ T5085] Bluetooth: hci9: command tx timeout [ 605.231058][ T5085] Bluetooth: hci10: command tx timeout [ 606.271847][ T5085] Bluetooth: hci11: command tx timeout [ 624.439893][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.446350][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 656.623110][ T5777] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 656.628207][T14119] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 656.639364][T14168] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 656.651162][T14168] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 656.659574][T14119] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 656.668987][T14119] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 656.676435][T14168] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 656.694924][T14119] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 656.703479][T14119] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 656.710965][T14168] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 656.723194][T14119] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 656.731598][T14119] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 657.035913][T14119] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 657.045861][T14119] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 657.054130][T14119] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 657.064016][T14119] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 657.073252][T14119] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 657.080700][T14119] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 658.055643][T14168] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 658.064344][T14168] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 658.073811][T14168] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 658.083094][T14168] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 658.091943][T14168] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 658.099430][T14168] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 658.751086][T14168] Bluetooth: hci13: command tx timeout [ 658.762441][T14168] Bluetooth: hci12: command tx timeout [ 659.151044][T14168] Bluetooth: hci14: command tx timeout [ 660.191054][T14168] Bluetooth: hci15: command tx timeout [ 660.830979][T14179] Bluetooth: hci12: command tx timeout [ 660.836559][T14179] Bluetooth: hci13: command tx timeout [ 661.230925][T14179] Bluetooth: hci14: command tx timeout [ 662.280998][T14179] Bluetooth: hci15: command tx timeout [ 662.350929][T14179] Bluetooth: hci2: command 0x0406 tx timeout [ 662.357217][T14179] Bluetooth: hci5: command 0x0406 tx timeout [ 662.361314][T14178] Bluetooth: hci6: command 0x0406 tx timeout [ 662.366571][T14179] Bluetooth: hci7: command 0x0406 tx timeout [ 662.921024][T14119] Bluetooth: hci13: command tx timeout [ 662.926573][T14119] Bluetooth: hci12: command tx timeout [ 663.320953][T14119] Bluetooth: hci14: command tx timeout [ 664.350961][T14119] Bluetooth: hci15: command tx timeout [ 664.991067][T14119] Bluetooth: hci12: command tx timeout [ 664.991217][T14168] Bluetooth: hci13: command tx timeout [ 665.391919][T14168] Bluetooth: hci14: command tx timeout [ 666.430967][T14168] Bluetooth: hci15: command tx timeout [ 673.071017][ T29] INFO: task kworker/u4:6:992 blocked for more than 143 seconds. [ 673.079039][ T29] Not tainted syzkaller #0 [ 673.084159][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 673.092892][ T29] task:kworker/u4:6 state:D stack:22008 pid:992 ppid:2 flags:0x00004000 [ 673.102188][ T29] Workqueue: events_unbound linkwatch_event [ 673.108149][ T29] Call Trace: [ 673.111499][ T29] [ 673.114498][ T29] __schedule+0x1553/0x45a0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 673.119051][ T29] ? trace_event_raw_event_lock+0x250/0x250 [ 673.125108][ T29] ? asan.module_dtor+0x20/0x20 [ 673.130022][ T29] ? __mutex_lock+0x6a4/0xcc0 [ 673.134830][ T29] ? __mutex_trylock_common+0x8a/0x260 [ 673.140587][ T29] ? kthread_data+0x4f/0xc0 [ 673.145262][ T29] ? wq_worker_sleeping+0x63/0x240 [ 673.150428][ T29] schedule+0xbd/0x170 [ 673.154581][ T29] schedule_preempt_disabled+0x13/0x20 [ 673.160087][ T29] __mutex_lock+0x6a9/0xcc0 [ 673.164799][ T29] ? __mutex_lock+0x4f9/0xcc0 [ 673.169534][ T29] ? linkwatch_event+0xe/0x60 [ 673.174311][ T29] ? mutex_lock_nested+0x20/0x20 [ 673.179311][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 673.184891][ T29] ? process_scheduled_works+0x96f/0x15d0 [ 673.190667][ T29] linkwatch_event+0xe/0x60 [ 673.198400][ T29] process_scheduled_works+0xa5d/0x15d0 [ 673.207949][ T29] ? worker_attach_to_pool+0x380/0x380 [ 673.218923][ T29] ? assign_work+0x3d2/0x5d0 [ 673.224550][ T29] worker_thread+0xa55/0xfc0 [ 673.229205][ T29] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 673.235549][ T29] ? _raw_spin_unlock+0x40/0x40 [ 673.240457][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 673.261207][ T29] kthread+0x2fa/0x390 [ 673.265377][ T29] ? pr_cont_work+0x560/0x560 [ 673.270150][ T29] ? kthread_blkcg+0xd0/0xd0 [ 673.311925][ T29] ret_from_fork+0x48/0x80 [ 673.316438][ T29] ? kthread_blkcg+0xd0/0xd0 [ 673.329148][ T29] ret_from_fork_asm+0x11/0x20 [ 673.334358][ T29] [ 673.337527][ T29] INFO: task kworker/u4:11:3502 blocked for more than 143 seconds. [ 673.345964][ T29] Not tainted syzkaller #0 [ 673.351211][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 673.359919][ T29] task:kworker/u4:11 state:D stack:22008 pid:3502 ppid:2 flags:0x00004000 [ 673.370553][ T29] Workqueue: ipv6_addrconf addrconf_dad_work [ 673.377048][ T29] Call Trace: [ 673.380377][ T29] [ 673.383684][ T29] __schedule+0x1553/0x45a0 [ 673.388625][ T29] ? asan.module_dtor+0x20/0x20 [ 673.393751][ T29] ? __mutex_lock+0x6a4/0xcc0 [ 673.398479][ T29] ? __mutex_trylock_common+0x8a/0x260 [ 673.404022][ T29] ? kthread_data+0x4f/0xc0 [ 673.408570][ T29] ? wq_worker_sleeping+0x63/0x240 [ 673.413768][ T29] schedule+0xbd/0x170 [ 673.417905][ T29] schedule_preempt_disabled+0x13/0x20 [ 673.423602][ T29] __mutex_lock+0x6a9/0xcc0 [ 673.428169][ T29] ? __mutex_lock+0x4f9/0xcc0 [ 673.433240][ T29] ? addrconf_dad_work+0xd4/0x1530 [ 673.438417][ T29] ? mutex_lock_nested+0x20/0x20 [ 673.443633][ T29] addrconf_dad_work+0xd4/0x1530 [ 673.448633][ T29] ? ipv6_get_saddr_eval+0xee0/0xee0 [ 673.454388][ T29] ? read_lock_is_recursive+0x20/0x20 [ 673.459835][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 673.465134][ T29] ? process_scheduled_works+0x96f/0x15d0 [ 673.470965][ T29] ? process_scheduled_works+0x96f/0x15d0 [ 673.476915][ T29] process_scheduled_works+0xa5d/0x15d0 [ 673.482612][ T29] ? worker_attach_to_pool+0x380/0x380 [ 673.488338][ T29] ? assign_work+0x3d2/0x5d0 [ 673.493115][ T29] worker_thread+0xa55/0xfc0 [ 673.497769][ T29] kthread+0x2fa/0x390 [ 673.501959][ T29] ? pr_cont_work+0x560/0x560 [ 673.506705][ T29] ? kthread_blkcg+0xd0/0xd0 [ 673.511385][ T29] ret_from_fork+0x48/0x80 [ 673.515849][ T29] ? kthread_blkcg+0xd0/0xd0 [ 673.520481][ T29] ret_from_fork_asm+0x11/0x20 [ 673.525380][ T29] [ 673.528477][ T29] INFO: task kworker/0:5:5818 blocked for more than 143 seconds. [ 673.536509][ T29] Not tainted syzkaller #0 [ 673.541723][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 673.550443][ T29] task:kworker/0:5 state:D stack:22408 pid:5818 ppid:2 flags:0x00004000 [ 673.559948][ T29] Workqueue: events bpf_prog_free_deferred [ 673.565867][ T29] Call Trace: [ 673.569188][ T29] [ 673.572206][ T29] __schedule+0x1553/0x45a0 [ 673.576862][ T29] ? do_raw_spin_lock+0x11f/0x2c0 [ 673.582006][ T29] ? schedule+0x6b/0x170 [ 673.586298][ T29] ? mark_lock+0x94/0x320 [ 673.590953][ T29] ? asan.module_dtor+0x20/0x20 [ 673.595898][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 673.601262][ T29] schedule+0xbd/0x170 [ 673.605377][ T29] schedule_preempt_disabled+0x13/0x20 [ 673.611641][ T29] __mutex_lock+0x6a9/0xcc0 [ 673.616196][ T29] ? __mutex_lock+0x4f9/0xcc0 [ 673.620959][ T29] ? bpf_prog_dev_bound_destroy+0x76/0x590 [ 673.626807][ T29] ? mutex_lock_nested+0x20/0x20 [ 673.631848][ T29] bpf_prog_dev_bound_destroy+0x76/0x590 [ 673.637536][ T29] ? bpf_prog_offload_remove_insns+0x1d0/0x1d0 [ 673.643800][ T29] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 673.649833][ T29] ? bpf_prog_free_deferred+0x2d7/0x650 [ 673.655454][ T29] ? rcu_is_watching+0x15/0xb0 [ 673.660290][ T29] bpf_prog_free_deferred+0x324/0x650 [ 673.665763][ T29] ? process_scheduled_works+0x96f/0x15d0 [ 673.671971][ T29] ? process_scheduled_works+0x96f/0x15d0 [ 673.677753][ T29] process_scheduled_works+0xa5d/0x15d0 [ 673.683696][ T29] ? worker_attach_to_pool+0x380/0x380 [ 673.689210][ T29] ? assign_work+0x3d2/0x5d0 [ 673.694279][ T29] worker_thread+0xa55/0xfc0 [ 673.698927][ T29] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 673.705109][ T29] ? _raw_spin_unlock+0x40/0x40 [ 673.710024][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 673.716665][ T29] kthread+0x2fa/0x390 [ 673.721113][ T29] ? pr_cont_work+0x560/0x560 [ 673.725852][ T29] ? kthread_blkcg+0xd0/0xd0 [ 673.730483][ T29] ret_from_fork+0x48/0x80 [ 673.735358][ T29] ? kthread_blkcg+0xd0/0xd0 [ 673.739993][ T29] ret_from_fork_asm+0x11/0x20 [ 673.745068][ T29] [ 673.748164][ T29] INFO: task kworker/0:1:13420 blocked for more than 144 seconds. [ 673.756060][ T29] Not tainted syzkaller #0 [ 673.761095][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 673.769796][ T29] task:kworker/0:1 state:D stack:24424 pid:13420 ppid:2 flags:0x00004000 [ 673.779113][ T29] Workqueue: events bpf_prog_free_deferred [ 673.785015][ T29] Call Trace: [ 673.788343][ T29] [ 673.791420][ T29] __schedule+0x1553/0x45a0 [ 673.796213][ T29] ? do_raw_spin_lock+0x11f/0x2c0 [ 673.801615][ T29] ? schedule+0x6b/0x170 [ 673.805915][ T29] ? mark_lock+0x94/0x320 [ 673.810291][ T29] ? asan.module_dtor+0x20/0x20 [ 673.815699][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 673.821123][ T29] schedule+0xbd/0x170 [ 673.825304][ T29] schedule_preempt_disabled+0x13/0x20 [ 673.830895][ T29] __mutex_lock+0x6a9/0xcc0 [ 673.835449][ T29] ? __mutex_lock+0x4f9/0xcc0 [ 673.840176][ T29] ? bpf_prog_dev_bound_destroy+0x76/0x590 [ 673.846079][ T29] ? mutex_lock_nested+0x20/0x20 [ 673.851184][ T29] bpf_prog_dev_bound_destroy+0x76/0x590 [ 673.856883][ T29] ? bpf_prog_offload_remove_insns+0x1d0/0x1d0 [ 673.863109][ T29] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 673.869153][ T29] ? bpf_prog_free_deferred+0x2d7/0x650 [ 673.874847][ T29] ? rcu_is_watching+0x15/0xb0 [ 673.879678][ T29] bpf_prog_free_deferred+0x324/0x650 [ 673.885149][ T29] ? process_scheduled_works+0x96f/0x15d0 [ 673.890960][ T29] ? process_scheduled_works+0x96f/0x15d0 [ 673.896733][ T29] process_scheduled_works+0xa5d/0x15d0 [ 673.902692][ T29] ? worker_attach_to_pool+0x380/0x380 [ 673.908197][ T29] ? assign_work+0x3d2/0x5d0 [ 673.912928][ T29] worker_thread+0xa55/0xfc0 [ 673.917604][ T29] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 673.923601][ T29] ? _raw_spin_unlock+0x40/0x40 [ 673.928499][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 673.934581][ T29] kthread+0x2fa/0x390 [ 673.938686][ T29] ? pr_cont_work+0x560/0x560 [ 673.943502][ T29] ? kthread_blkcg+0xd0/0xd0 [ 673.948228][ T29] ret_from_fork+0x48/0x80 [ 673.953069][ T29] ? kthread_blkcg+0xd0/0xd0 [ 673.957722][ T29] ret_from_fork_asm+0x11/0x20 [ 673.962592][ T29] [ 673.965704][ T29] INFO: task syz.2.2808:14099 blocked for more than 144 seconds. [ 673.973537][ T29] Not tainted syzkaller #0 [ 673.978528][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 673.987286][ T29] task:syz.2.2808 state:D stack:25704 pid:14099 ppid:13405 flags:0x00004004 [ 673.996597][ T29] Call Trace: [ 674.000180][ T29] [ 674.003203][ T29] __schedule+0x1553/0x45a0 [ 674.007773][ T29] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 674.013883][ T29] ? asan.module_dtor+0x20/0x20 [ 674.018801][ T29] ? __mutex_lock+0x6a4/0xcc0 [ 674.023573][ T29] ? __mutex_trylock_common+0x8a/0x260 [ 674.029084][ T29] ? trace_raw_output_contention_end+0xd0/0xd0 [ 674.035445][ T29] schedule+0xbd/0x170 [ 674.039560][ T29] schedule_preempt_disabled+0x13/0x20 [ 674.045172][ T29] __mutex_lock+0x6a9/0xcc0 [ 674.049732][ T29] ? __mutex_lock+0x4f9/0xcc0 [ 674.054535][ T29] ? rtnetlink_rcv_msg+0x811/0xfa0 [ 674.059723][ T29] ? mutex_lock_nested+0x20/0x20 [ 674.064769][ T29] rtnetlink_rcv_msg+0x811/0xfa0 [ 674.069759][ T29] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 674.074972][ T29] ? rtnetlink_bind+0x80/0x80 [ 674.079711][ T29] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 674.085946][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 674.091224][ T29] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 674.097432][ T29] ? __dev_queue_xmit+0x265/0x3660 [ 674.102853][ T29] ? __local_bh_enable_ip+0x142/0x1c0 [ 674.108278][ T29] ? _local_bh_enable+0xa0/0xa0 [ 674.113220][ T29] ? __dev_queue_xmit+0x265/0x3660 [ 674.118379][ T29] ? __dev_queue_xmit+0x265/0x3660 [ 674.123584][ T29] ? __dev_queue_xmit+0x1b2c/0x3660 [ 674.128882][ T29] ? __dev_queue_xmit+0x265/0x3660 [ 674.134121][ T29] ? ref_tracker_free+0x690/0x840 [ 674.139238][ T29] netlink_rcv_skb+0x241/0x4d0 [ 674.144110][ T29] ? rtnetlink_bind+0x80/0x80 [ 674.148842][ T29] ? netlink_ack+0x1180/0x1180 [ 674.153791][ T29] ? __lock_acquire+0x7d40/0x7d40 [ 674.158877][ T29] ? netlink_deliver_tap+0x2e/0x1b0 [ 674.164164][ T29] netlink_unicast+0x751/0x8d0 [ 674.168998][ T29] netlink_sendmsg+0x8d0/0xbf0 [ 674.173850][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 674.179103][ T29] ? netlink_getsockopt+0x590/0x590 [ 674.184399][ T29] ? aa_sock_msg_perm+0x94/0x150 [ 674.189398][ T29] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 674.194781][ T29] ? security_socket_sendmsg+0x80/0xa0 [ 674.200301][ T29] ? netlink_getsockopt+0x590/0x590 [ 674.205848][ T29] ____sys_sendmsg+0x5ba/0x960 [ 674.210661][ T29] ? __asan_memset+0x22/0x40 [ 674.215360][ T29] ? __sys_sendmsg_sock+0x30/0x30 [ 674.220427][ T29] ? __import_iovec+0x5f2/0x850 [ 674.225359][ T29] ? import_iovec+0x73/0xa0 [ 674.229921][ T29] ___sys_sendmsg+0x2a6/0x360 [ 674.234717][ T29] ? __sys_sendmsg+0x2a0/0x2a0 [ 674.239550][ T29] ? seqcount_lockdep_reader_access+0x17b/0x1d0 [ 674.245907][ T29] __se_sys_sendmsg+0x1c2/0x2b0 [ 674.250848][ T29] ? __x64_sys_sendmsg+0x80/0x80 [ 674.255862][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 674.261259][ T29] do_syscall_64+0x55/0xb0 [ 674.265731][ T29] ? clear_bhb_loop+0x40/0x90 [ 674.270455][ T29] ? clear_bhb_loop+0x40/0x90 [ 674.275232][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 674.281207][ T29] RIP: 0033:0x7fafdad9ce59 [ 674.285667][ T29] RSP: 002b:00007fafdbc67028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 674.294184][ T29] RAX: ffffffffffffffda RBX: 00007fafdb016090 RCX: 00007fafdad9ce59 [ 674.302224][ T29] RDX: 0000000000040000 RSI: 0000200000000140 RDI: 0000000000000009 [ 674.310450][ T29] RBP: 00007fafdae32d6f R08: 0000000000000000 R09: 0000000000000000 [ 674.318510][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 674.326551][ T29] R13: 00007fafdb016128 R14: 00007fafdb016090 R15: 00007fff93055608 [ 674.334664][ T29] [ 674.337748][ T29] INFO: task syz.2.2808:14103 blocked for more than 144 seconds. [ 674.345537][ T29] Not tainted syzkaller #0 [ 674.350505][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 674.364340][ T29] task:syz.2.2808 state:D stack:24776 pid:14103 ppid:13405 flags:0x00004004 [ 674.373963][ T29] Call Trace: [ 674.377305][ T29] [ 674.380296][ T29] __schedule+0x1553/0x45a0 [ 674.385757][ T29] ? trace_event_raw_event_lock+0x250/0x250 [ 674.391820][ T29] ? asan.module_dtor+0x20/0x20 [ 674.396756][ T29] ? __mutex_lock+0x6a4/0xcc0 [ 674.401755][ T29] ? __mutex_trylock_common+0x8a/0x260 [ 674.407273][ T29] ? trace_raw_output_contention_end+0xd0/0xd0 [ 674.413746][ T29] schedule+0xbd/0x170 [ 674.417870][ T29] schedule_preempt_disabled+0x13/0x20 [ 674.423421][ T29] __mutex_lock+0x6a9/0xcc0 [ 674.427982][ T29] ? __mutex_lock+0x4f9/0xcc0 [ 674.432888][ T29] ? rtnetlink_rcv_msg+0x811/0xfa0 [ 674.438064][ T29] ? mutex_lock_nested+0x20/0x20 [ 674.443099][ T29] rtnetlink_rcv_msg+0x811/0xfa0 [ 674.448084][ T29] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 674.453323][ T29] ? rtnetlink_bind+0x80/0x80 [ 674.458041][ T29] ? perf_trace_preemptirq_template+0xac/0x330 [ 674.464306][ T29] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 674.470179][ T29] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 674.476459][ T29] ? __dev_queue_xmit+0x265/0x3660 [ 674.481849][ T29] ? __dev_queue_xmit+0x265/0x3660 [ 674.487019][ T29] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 674.492899][ T29] ? perf_trace_lock+0x304/0x3b0 [ 674.497905][ T29] netlink_rcv_skb+0x241/0x4d0 [ 674.503216][ T29] ? rtnetlink_bind+0x80/0x80 [ 674.507965][ T29] ? netlink_ack+0x1180/0x1180 [ 674.513357][ T29] ? __lock_acquire+0x7d40/0x7d40 [ 674.518447][ T29] ? netlink_deliver_tap+0x2e/0x1b0 [ 674.524057][ T29] netlink_unicast+0x751/0x8d0 [ 674.528895][ T29] netlink_sendmsg+0x8d0/0xbf0 [ 674.533790][ T29] ? perf_trace_lock+0x304/0x3b0 [ 674.538800][ T29] ? netlink_getsockopt+0x590/0x590 [ 674.544094][ T29] ? aa_sock_msg_perm+0x94/0x150 [ 674.549085][ T29] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 674.554467][ T29] ? security_socket_sendmsg+0x80/0xa0 [ 674.559974][ T29] ? netlink_getsockopt+0x590/0x590 [ 674.565266][ T29] ____sys_sendmsg+0x5ba/0x960 [ 674.570105][ T29] ? __asan_memset+0x22/0x40 [ 674.574805][ T29] ? __sys_sendmsg_sock+0x30/0x30 [ 674.579878][ T29] ? __import_iovec+0x5f2/0x850 [ 674.584837][ T29] ? import_iovec+0x73/0xa0 [ 674.589389][ T29] ___sys_sendmsg+0x2a6/0x360 [ 674.594265][ T29] ? __sys_sendmsg+0x2a0/0x2a0 [ 674.599136][ T29] __se_sys_sendmsg+0x1c2/0x2b0 [ 674.604148][ T29] ? __x64_sys_sendmsg+0x80/0x80 [ 674.609139][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 674.614676][ T29] do_syscall_64+0x55/0xb0 [ 674.619150][ T29] ? clear_bhb_loop+0x40/0x90 [ 674.623955][ T29] ? clear_bhb_loop+0x40/0x90 [ 674.628680][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 674.634654][ T29] RIP: 0033:0x7fafdad9ce59 [ 674.639102][ T29] RSP: 002b:00007fafdbc46028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 674.647595][ T29] RAX: ffffffffffffffda RBX: 00007fafdb016180 RCX: 00007fafdad9ce59 [ 674.655630][ T29] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 000000000000000d [ 674.663680][ T29] RBP: 00007fafdae32d6f R08: 0000000000000000 R09: 0000000000000000 [ 674.671747][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 674.679744][ T29] R13: 00007fafdb016218 R14: 00007fafdb016180 R15: 00007fff93055608 [ 674.687845][ T29] [ 674.690965][ T29] INFO: task syz.0.2811:14097 blocked for more than 144 seconds. [ 674.698720][ T29] Not tainted syzkaller #0 [ 674.703725][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 674.712529][ T29] task:syz.0.2811 state:D stack:27880 pid:14097 ppid:13021 flags:0x00004004 [ 674.722063][ T29] Call Trace: [ 674.725395][ T29] [ 674.728378][ T29] __schedule+0x1553/0x45a0 [ 674.732983][ T29] ? arch_stack_walk+0x160/0x190 [ 674.737966][ T29] ? trace_event_raw_event_lock+0x250/0x250 [ 674.743971][ T29] ? asan.module_dtor+0x20/0x20 [ 674.748877][ T29] ? __mutex_lock+0x6a4/0xcc0 [ 674.753643][ T29] ? __mutex_trylock_common+0x8a/0x260 [ 674.759145][ T29] ? trace_raw_output_contention_end+0xd0/0xd0 [ 674.765386][ T29] schedule+0xbd/0x170 [ 674.769501][ T29] schedule_preempt_disabled+0x13/0x20 [ 674.775045][ T29] __mutex_lock+0x6a9/0xcc0 [ 674.779600][ T29] ? __mutex_lock+0x4f9/0xcc0 [ 674.784355][ T29] ? dev_ethtool+0x1e2/0x18d0 [ 674.789113][ T29] ? mutex_lock_nested+0x20/0x20 [ 674.794142][ T29] dev_ethtool+0x1e2/0x18d0 [ 674.798695][ T29] ? module_enforce_rwx_sections+0x150/0x150 [ 674.804782][ T29] ? ethtool_get_module_eeprom_call+0x170/0x170 [ 674.811111][ T29] ? apparmor_capable+0x137/0x1a0 [ 674.816210][ T29] ? dev_load+0x21/0x1f0 [ 674.820683][ T29] dev_ioctl+0x392/0x1140 [ 674.825215][ T29] sock_do_ioctl+0x239/0x310 [ 674.829863][ T29] ? sock_show_fdinfo+0xb0/0xb0 [ 674.834908][ T29] sock_ioctl+0x5ba/0x7e0 [ 674.839457][ T29] ? sock_poll+0x3e0/0x3e0 [ 674.843957][ T29] ? bpf_lsm_file_ioctl+0x9/0x10 [ 674.848936][ T29] ? security_file_ioctl+0x80/0xa0 [ 674.854122][ T29] ? sock_poll+0x3e0/0x3e0 [ 674.858594][ T29] __se_sys_ioctl+0xfd/0x170 [ 674.863306][ T29] do_syscall_64+0x55/0xb0 [ 674.867763][ T29] ? clear_bhb_loop+0x40/0x90 [ 674.872529][ T29] ? clear_bhb_loop+0x40/0x90 [ 674.877253][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 674.883265][ T29] RIP: 0033:0x7feac4b9ce59 [ 674.887721][ T29] RSP: 002b:00007feac5b39028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 674.896221][ T29] RAX: ffffffffffffffda RBX: 00007feac4e15fa0 RCX: 00007feac4b9ce59 [ 674.904265][ T29] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000004 [ 674.912320][ T29] RBP: 00007feac4c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 674.920336][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 674.928606][ T29] R13: 00007feac4e16038 R14: 00007feac4e15fa0 R15: 00007ffcd68d7218 [ 674.936776][ T29] [ 674.939840][ T29] INFO: task syz.0.2811:14100 blocked for more than 145 seconds. [ 674.947619][ T29] Not tainted syzkaller #0 [ 674.952616][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 674.961379][ T29] task:syz.0.2811 state:D stack:22632 pid:14100 ppid:13021 flags:0x00004004 [ 674.970628][ T29] Call Trace: [ 674.973996][ T29] [ 674.976974][ T29] __schedule+0x1553/0x45a0 [ 674.981569][ T29] ? trace_event_raw_event_lock+0x250/0x250 [ 674.987527][ T29] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 674.994299][ T29] ? asan.module_dtor+0x20/0x20 [ 674.999208][ T29] ? __mutex_lock+0x6a4/0xcc0 [ 675.004244][ T29] ? __mutex_trylock_common+0x8a/0x260 [ 675.009748][ T29] ? trace_raw_output_contention_end+0xd0/0xd0 [ 675.016010][ T29] schedule+0xbd/0x170 [ 675.020283][ T29] schedule_preempt_disabled+0x13/0x20 [ 675.026030][ T29] __mutex_lock+0x6a9/0xcc0 [ 675.030599][ T29] ? __mutex_lock+0x4f9/0xcc0 [ 675.035374][ T29] ? rtnetlink_rcv_msg+0x811/0xfa0 [ 675.040524][ T29] ? mutex_lock_nested+0x20/0x20 [ 675.045664][ T29] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 675.050860][ T29] rtnetlink_rcv_msg+0x811/0xfa0 [ 675.055850][ T29] ? rtnetlink_bind+0x80/0x80 [ 675.060572][ T29] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 675.066824][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 675.072151][ T29] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 675.078337][ T29] ? __dev_queue_xmit+0x265/0x3660 [ 675.083546][ T29] ? __local_bh_enable_ip+0x142/0x1c0 [ 675.088967][ T29] ? _local_bh_enable+0xa0/0xa0 [ 675.093912][ T29] ? __dev_queue_xmit+0x265/0x3660 [ 675.099072][ T29] ? __dev_queue_xmit+0x265/0x3660 [ 675.104274][ T29] ? __dev_queue_xmit+0x1b2c/0x3660 [ 675.109544][ T29] ? __dev_queue_xmit+0x265/0x3660 [ 675.114780][ T29] ? perf_trace_lock+0xfc/0x3b0 [ 675.119690][ T29] netlink_rcv_skb+0x241/0x4d0 [ 675.124560][ T29] ? rtnetlink_bind+0x80/0x80 [ 675.129503][ T29] ? netlink_ack+0x1180/0x1180 [ 675.134363][ T29] ? __lock_acquire+0x7d40/0x7d40 [ 675.139441][ T29] ? netlink_deliver_tap+0x2e/0x1b0 [ 675.144720][ T29] netlink_unicast+0x751/0x8d0 [ 675.149581][ T29] netlink_sendmsg+0x8d0/0xbf0 [ 675.154536][ T29] ? netlink_getsockopt+0x590/0x590 [ 675.159790][ T29] ? aa_sock_msg_perm+0x94/0x150 [ 675.164826][ T29] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 675.170171][ T29] ? security_socket_sendmsg+0x80/0xa0 [ 675.175754][ T29] ? netlink_getsockopt+0x590/0x590 [ 675.181055][ T29] ____sys_sendmsg+0x5ba/0x960 [ 675.185876][ T29] ? __asan_memset+0x22/0x40 [ 675.190511][ T29] ? __sys_sendmsg_sock+0x30/0x30 [ 675.195617][ T29] ? __import_iovec+0x5f2/0x850 [ 675.200508][ T29] ? import_iovec+0x73/0xa0 [ 675.205114][ T29] ___sys_sendmsg+0x2a6/0x360 [ 675.209941][ T29] ? __sys_sendmsg+0x2a0/0x2a0 [ 675.214817][ T29] ? seqcount_lockdep_reader_access+0x17b/0x1d0 [ 675.221172][ T29] __se_sys_sendmsg+0x1c2/0x2b0 [ 675.226079][ T29] ? __x64_sys_sendmsg+0x80/0x80 [ 675.231363][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 675.236618][ T29] do_syscall_64+0x55/0xb0 [ 675.241129][ T29] ? clear_bhb_loop+0x40/0x90 [ 675.245865][ T29] ? clear_bhb_loop+0x40/0x90 [ 675.250584][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 675.256573][ T29] RIP: 0033:0x7feac4b9ce59 [ 675.261150][ T29] RSP: 002b:00007feac5b18028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 675.269606][ T29] RAX: ffffffffffffffda RBX: 00007feac4e16090 RCX: 00007feac4b9ce59 [ 675.277696][ T29] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 000000000000000a [ 675.285727][ T29] RBP: 00007feac4c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 675.293780][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 675.301832][ T29] R13: 00007feac4e16128 R14: 00007feac4e16090 R15: 00007ffcd68d7218 [ 675.309858][ T29] [ 675.312967][ T29] INFO: task syz.3.2812:14105 blocked for more than 145 seconds. [ 675.320721][ T29] Not tainted syzkaller #0 [ 675.325739][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 675.334731][ T29] task:syz.3.2812 state:D stack:23464 pid:14105 ppid:13213 flags:0x00004004 [ 675.344106][ T29] Call Trace: [ 675.347427][ T29] [ 675.350408][ T29] __schedule+0x1553/0x45a0 [ 675.355002][ T29] ? trace_event_raw_event_lock+0x250/0x250 [ 675.361022][ T29] ? asan.module_dtor+0x20/0x20 [ 675.365926][ T29] ? __mutex_lock+0x6a4/0xcc0 [ 675.370646][ T29] ? __mutex_trylock_common+0x8a/0x260 [ 675.376270][ T29] ? trace_raw_output_contention_end+0xd0/0xd0 [ 675.382511][ T29] schedule+0xbd/0x170 [ 675.386616][ T29] schedule_preempt_disabled+0x13/0x20 [ 675.394728][ T29] __mutex_lock+0x6a9/0xcc0 [ 675.399311][ T29] ? __mutex_lock+0x4f9/0xcc0 [ 675.405521][ T29] ? rtnetlink_rcv_msg+0x811/0xfa0 [ 675.410761][ T29] ? mutex_lock_nested+0x20/0x20 [ 675.415833][ T29] rtnetlink_rcv_msg+0x811/0xfa0 [ 675.420846][ T29] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 675.426007][ T29] ? perf_trace_lock+0xfc/0x3b0 [ 675.430958][ T29] ? rtnetlink_bind+0x80/0x80 [ 675.435898][ T29] ? trace_event_raw_event_lock+0x250/0x250 [ 675.441899][ T29] ? preempt_schedule_common+0x82/0xc0 [ 675.447406][ T29] ? preempt_schedule+0xc0/0xd0 [ 675.452316][ T29] ? schedule_preempt_disabled+0x20/0x20 [ 675.457986][ T29] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 675.464072][ T29] ? rcu_preempt_deferred_qs_irqrestore+0x88e/0xce0 [ 675.470728][ T29] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 675.477033][ T29] ? lock_chain_count+0x20/0x20 [ 675.482154][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 675.488098][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 675.493391][ T29] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 675.499506][ T29] ? _raw_spin_unlock+0x40/0x40 [ 675.504463][ T29] ? rcu_preempt_deferred_qs_irqrestore+0x88e/0xce0 [ 675.511142][ T29] ? perf_trace_lock+0xfc/0x3b0 [ 675.516047][ T29] netlink_rcv_skb+0x241/0x4d0 [ 675.520928][ T29] ? rtnetlink_bind+0x80/0x80 [ 675.525671][ T29] ? netlink_ack+0x1180/0x1180 [ 675.530595][ T29] ? __lock_acquire+0x7d40/0x7d40 [ 675.535967][ T29] ? __rcu_read_unlock+0x7c/0xd0 [ 675.540991][ T29] ? netlink_deliver_tap+0x2e/0x1b0 [ 675.546262][ T29] netlink_unicast+0x751/0x8d0 [ 675.551128][ T29] netlink_sendmsg+0x8d0/0xbf0 [ 675.555960][ T29] ? netlink_getsockopt+0x590/0x590 [ 675.561285][ T29] ? aa_sock_msg_perm+0x94/0x150 [ 675.566371][ T29] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 675.571755][ T29] ? security_socket_sendmsg+0x80/0xa0 [ 675.577265][ T29] ? netlink_getsockopt+0x590/0x590 [ 675.582555][ T29] ____sys_sendmsg+0x5ba/0x960 [ 675.587371][ T29] ? __asan_memset+0x22/0x40 [ 675.592183][ T29] ? __sys_sendmsg_sock+0x30/0x30 [ 675.597331][ T29] ? __import_iovec+0x5f2/0x850 [ 675.602302][ T29] ? import_iovec+0x73/0xa0 [ 675.606860][ T29] ___sys_sendmsg+0x2a6/0x360 [ 675.611647][ T29] ? __sys_sendmsg+0x2a0/0x2a0 [ 675.616505][ T29] __se_sys_sendmsg+0x1c2/0x2b0 [ 675.621478][ T29] ? __x64_sys_sendmsg+0x80/0x80 [ 675.626485][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 675.631906][ T29] do_syscall_64+0x55/0xb0 [ 675.636371][ T29] ? clear_bhb_loop+0x40/0x90 [ 675.641364][ T29] ? clear_bhb_loop+0x40/0x90 [ 675.646099][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 675.652115][ T29] RIP: 0033:0x7fb96b79ce59 [ 675.656573][ T29] RSP: 002b:00007fb96c594028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 675.665093][ T29] RAX: ffffffffffffffda RBX: 00007fb96ba15fa0 RCX: 00007fb96b79ce59 [ 675.673157][ T29] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 000000000000000e [ 675.681220][ T29] RBP: 00007fb96b832d6f R08: 0000000000000000 R09: 0000000000000000 [ 675.689226][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 675.697265][ T29] R13: 00007fb96ba16038 R14: 00007fb96ba15fa0 R15: 00007ffc572b8168 [ 675.705398][ T29] [ 675.708455][ T29] INFO: task syz.1.2814:14111 blocked for more than 145 seconds. [ 675.716297][ T29] Not tainted syzkaller #0 [ 675.721321][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 675.730010][ T29] task:syz.1.2814 state:D stack:26504 pid:14111 ppid:12618 flags:0x00004004 [ 675.739323][ T29] Call Trace: [ 675.742919][ T29] [ 675.745901][ T29] __schedule+0x1553/0x45a0 [ 675.750456][ T29] ? trace_event_raw_event_lock+0x250/0x250 [ 675.756479][ T29] ? asan.module_dtor+0x20/0x20 [ 675.761413][ T29] ? __mutex_lock+0x6a4/0xcc0 [ 675.766124][ T29] ? __mutex_trylock_common+0x8a/0x260 [ 675.771688][ T29] ? trace_raw_output_contention_end+0xd0/0xd0 [ 675.777979][ T29] schedule+0xbd/0x170 [ 675.782373][ T29] schedule_preempt_disabled+0x13/0x20 [ 675.787939][ T29] __mutex_lock+0x6a9/0xcc0 [ 675.793274][ T29] ? __mutex_lock+0x4f9/0xcc0 [ 675.798025][ T29] ? rtnetlink_rcv_msg+0x811/0xfa0 [ 675.804357][ T29] ? mutex_lock_nested+0x20/0x20 [ 675.809388][ T29] rtnetlink_rcv_msg+0x811/0xfa0 [ 675.814489][ T29] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 675.819658][ T29] ? rtnetlink_bind+0x80/0x80 [ 675.824437][ T29] ? perf_trace_preemptirq_template+0x269/0x330 [ 675.830733][ T29] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 675.836795][ T29] ? lock_chain_count+0x20/0x20 [ 675.841748][ T29] ? __local_bh_enable_ip+0x13a/0x1c0 [ 675.847383][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 675.852673][ T29] ? __local_bh_enable_ip+0x13a/0x1c0 [ 675.858096][ T29] ? _local_bh_enable+0xa0/0xa0 [ 675.863049][ T29] ? __dev_queue_xmit+0x265/0x3660 [ 675.868211][ T29] ? __dev_queue_xmit+0x265/0x3660 [ 675.873439][ T29] ? __dev_queue_xmit+0x1b2c/0x3660 [ 675.878712][ T29] ? __dev_queue_xmit+0x265/0x3660 [ 675.883943][ T29] ? perf_trace_lock+0xfc/0x3b0 [ 675.888863][ T29] netlink_rcv_skb+0x241/0x4d0 [ 675.893757][ T29] ? rtnetlink_bind+0x80/0x80 [ 675.898489][ T29] ? netlink_ack+0x1180/0x1180 [ 675.903413][ T29] ? __lock_acquire+0x7d40/0x7d40 [ 675.908497][ T29] ? netlink_deliver_tap+0x2e/0x1b0 [ 675.913793][ T29] netlink_unicast+0x751/0x8d0 [ 675.918622][ T29] netlink_sendmsg+0x8d0/0xbf0 [ 675.923568][ T29] ? netlink_getsockopt+0x590/0x590 [ 675.928831][ T29] ? aa_sock_msg_perm+0x94/0x150 [ 675.933859][ T29] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 675.939199][ T29] ? security_socket_sendmsg+0x80/0xa0 [ 675.944747][ T29] ? netlink_getsockopt+0x590/0x590 [ 675.950261][ T29] ____sys_sendmsg+0x5ba/0x960 [ 675.955255][ T29] ? __asan_memset+0x22/0x40 [ 675.959894][ T29] ? __sys_sendmsg_sock+0x30/0x30 [ 675.964997][ T29] ? __import_iovec+0x5f2/0x850 [ 675.969901][ T29] ? import_iovec+0x73/0xa0 [ 675.974502][ T29] ___sys_sendmsg+0x2a6/0x360 [ 675.979231][ T29] ? __sys_sendmsg+0x2a0/0x2a0 [ 675.984142][ T29] __se_sys_sendmsg+0x1c2/0x2b0 [ 675.989045][ T29] ? __x64_sys_sendmsg+0x80/0x80 [ 675.994073][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 675.999328][ T29] do_syscall_64+0x55/0xb0 [ 676.003834][ T29] ? clear_bhb_loop+0x40/0x90 [ 676.008570][ T29] ? clear_bhb_loop+0x40/0x90 [ 676.013362][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 676.019307][ T29] RIP: 0033:0x7f4c8a39ce59 [ 676.023797][ T29] RSP: 002b:00007f4c8b29d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 676.032513][ T29] RAX: ffffffffffffffda RBX: 00007f4c8a615fa0 RCX: 00007f4c8a39ce59 [ 676.040554][ T29] RDX: 0000000000000080 RSI: 00002000000000c0 RDI: 0000000000000006 [ 676.048856][ T29] RBP: 00007f4c8a432d6f R08: 0000000000000000 R09: 0000000000000000 [ 676.056939][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 676.065006][ T29] R13: 00007f4c8a616038 R14: 00007f4c8a615fa0 R15: 00007fffb158d408 [ 676.073063][ T29] [ 676.076118][ T29] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 676.085237][ T29] [ 676.085237][ T29] Showing all locks held in the system: [ 676.093014][ T29] 1 lock held by khungtaskd/29: [ 676.097916][ T29] #0: ffffffff8d132160 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 676.107899][ T29] 3 locks held by kworker/u4:6/992: [ 676.113157][ T29] #0: ffff888017c71538 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 676.124930][ T29] #1: ffffc900042c7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 676.136016][ T29] #2: ffffffff8e3c3a88 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 676.145214][ T29] 3 locks held by kworker/u4:11/3502: [ 676.150880][ T29] #0: ffff88802ccff138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 676.162593][ T29] #1: ffffc9000cfe7d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 676.175496][ T29] #2: ffffffff8e3c3a88 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd4/0x1530 [ 676.185024][ T29] 4 locks held by kworker/u4:12/3552: [ 676.190442][ T29] 2 locks held by getty/5533: [ 676.195198][ T29] #0: ffff8880321320a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 676.205122][ T29] #1: ffffc9000326e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x433/0x1390 [ 676.215320][ T29] 3 locks held by kworker/0:5/5818: [ 676.220553][ T29] #0: ffff888017c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 676.231665][ T29] #1: ffffc900048cfd00 ((work_completion)(&aux->work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 676.243434][ T29] #2: ffffffff8e3c3a88 (rtnl_mutex){+.+.}-{3:3}, at: bpf_prog_dev_bound_destroy+0x76/0x590 [ 676.253930][ T29] 3 locks held by kworker/1:4/5879: [ 676.259166][ T29] #0: ffff888017c71d38 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 676.271730][ T29] #1: ffffc90004b1fd00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 676.282918][ T29] #2: ffffffff8e3c3a88 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x92/0xd90 [ 676.292742][ T29] 3 locks held by kworker/0:1/13420: [ 676.298060][ T29] #0: ffff888017c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 676.309139][ T29] #1: ffffc90004747d00 ((work_completion)(&aux->work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 676.320935][ T29] #2: ffffffff8e3c3a88 (rtnl_mutex){+.+.}-{3:3}, at: bpf_prog_dev_bound_destroy+0x76/0x590 [ 676.331156][ T29] 5 locks held by kworker/u4:2/13550: [ 676.336565][ T29] 1 lock held by syz.2.2808/14099: [ 676.342807][ T29] #0: ffffffff8e3c3a88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 676.352354][ T29] 1 lock held by syz.2.2808/14103: [ 676.357723][ T29] #0: ffffffff8e3c3a88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 676.367269][ T29] 1 lock held by syz.0.2811/14097: [ 676.373214][ T29] #0: ffffffff8e3c3a88 (rtnl_mutex){+.+.}-{3:3}, at: dev_ethtool+0x1e2/0x18d0 [ 676.382291][ T29] 1 lock held by syz.0.2811/14100: [ 676.387436][ T29] #0: ffffffff8e3c3a88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 676.396946][ T29] 1 lock held by syz.3.2812/14105: [ 676.403091][ T29] #0: ffffffff8e3c3a88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 676.412592][ T29] 1 lock held by syz.1.2814/14111: [ 676.417809][ T29] #0: ffffffff8e3c3a88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 676.427322][ T29] 1 lock held by syz.1.2814/14112: [ 676.433805][ T29] #0: ffffffff8e3c3a88 (rtnl_mutex){+.+.}-{3:3}, at: dev_ethtool+0x1e2/0x18d0 [ 676.442997][ T29] 1 lock held by syz-executor/14117: [ 676.449289][ T29] #0: ffffffff8e3c3a88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 676.459106][ T29] 1 lock held by syz-executor/14121: [ 676.464534][ T29] #0: ffffffff8e3c3a88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 676.474190][ T29] 1 lock held by syz-executor/14126: [ 676.479523][ T29] #0: ffffffff8e3c3a88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 676.489228][ T29] 1 lock held by syz-executor/14129: [ 676.495704][ T29] #0: ffffffff8e3c3a88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 676.505251][ T29] 1 lock held by syz-executor/14143: [ 676.510568][ T29] #0: ffffffff8e3c3a88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 676.520197][ T29] 1 lock held by syz-executor/14146: [ 676.525766][ T29] #0: ffffffff8e3c3a88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 676.535290][ T29] 1 lock held by syz-executor/14149: [ 676.540605][ T29] #0: ffffffff8e3c3a88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 676.550129][ T29] 1 lock held by syz-executor/14153: [ 676.555511][ T29] #0: ffffffff8e3c3a88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 676.565262][ T29] 1 lock held by syz-executor/14163: [ 676.570670][ T29] #0: ffffffff8e3c3a88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 676.580221][ T29] 1 lock held by syz-executor/14164: [ 676.585621][ T29] #0: ffffffff8e3c3a88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 676.595211][ T29] 1 lock held by syz-executor/14173: [ 676.600522][ T29] #0: ffffffff8e3c3a88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 676.610062][ T29] 1 lock held by syz-executor/14176: [ 676.615614][ T29] #0: ffffffff8e3c3a88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 676.625130][ T29] [ 676.627473][ T29] ============================================= [ 676.627473][ T29] [ 676.636131][ T29] NMI backtrace for cpu 1 [ 676.640490][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 676.647708][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 676.657797][ T29] Call Trace: [ 676.661096][ T29] [ 676.664062][ T29] dump_stack_lvl+0x18c/0x250 [ 676.668780][ T29] ? preempt_count_add+0x91/0x1a0 [ 676.673836][ T29] ? show_regs_print_info+0x20/0x20 [ 676.679083][ T29] ? load_image+0x420/0x420 [ 676.683622][ T29] nmi_cpu_backtrace+0x3a6/0x3e0 [ 676.688587][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 676.694795][ T29] ? _printk+0xde/0x130 [ 676.698994][ T29] ? load_image+0x420/0x420 [ 676.703521][ T29] ? load_image+0x420/0x420 [ 676.708067][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 676.714194][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 676.720208][ T29] watchdog+0xf3d/0xf80 [ 676.724412][ T29] ? watchdog+0x1e1/0xf80 [ 676.728777][ T29] kthread+0x2fa/0x390 [ 676.732887][ T29] ? hungtask_pm_notify+0x90/0x90 [ 676.737942][ T29] ? kthread_blkcg+0xd0/0xd0 [ 676.742559][ T29] ret_from_fork+0x48/0x80 [ 676.747020][ T29] ? kthread_blkcg+0xd0/0xd0 [ 676.751653][ T29] ret_from_fork_asm+0x11/0x20 [ 676.756477][ T29] [ 676.759956][ T29] Sending NMI from CPU 1 to CPUs 0: [ 676.765526][ C0] NMI backtrace for cpu 0 [ 676.765537][ C0] CPU: 0 PID: 5122 Comm: syslogd Not tainted syzkaller #0 [ 676.765554][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 676.765565][ C0] RIP: 0010:kasan_check_range+0x89/0x290 [ 676.765591][ C0] Code: 00 fc ff df 4d 8d 34 19 4d 89 f4 4d 29 dc 49 83 fc 10 7f 29 4d 85 e4 0f 84 3d 01 00 00 4c 89 cb 48 f7 d3 4c 01 fb 41 80 3b 00 <0f> 85 8d 01 00 00 49 ff c3 48 ff c3 75 ee e9 1d 01 00 00 44 89 dd [ 676.765606][ C0] RSP: 0018:ffffc900032977c8 EFLAGS: 00000246 [ 676.765622][ C0] RAX: ffffffff8427ec01 RBX: fffffffffffffff2 RCX: ffffffff8427ec1b [ 676.765636][ C0] RDX: 0000000000000000 RSI: 000000000000006a RDI: ffff888030724400 [ 676.765648][ C0] RBP: ffffc90003297960 R08: ffff888030724469 R09: 1ffff110060e488d [ 676.765661][ C0] R10: dffffc0000000000 R11: ffffed10060e4880 R12: 000000000000000e [ 676.765679][ C0] R13: 0000564abfefe950 R14: ffffed10060e488e R15: 1ffff110060e4880 [ 676.765692][ C0] FS: 00007f3b1a42ac80(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 676.765708][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 676.765720][ C0] CR2: 00007fc48062f98c CR3: 000000007e324000 CR4: 00000000003506f0 [ 676.765736][ C0] DR0: 0000000000000000 DR1: 0000200000000300 DR2: 0000000000000000 [ 676.765746][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 676.765757][ C0] Call Trace: [ 676.765762][ C0] [ 676.765771][ C0] _copy_to_iter+0x23b/0x1120 [ 676.765800][ C0] ? lock_chain_count+0x20/0x20 [ 676.765823][ C0] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 676.765846][ C0] ? iov_iter_init+0x1e0/0x1e0 [ 676.765872][ C0] ? __virt_addr_valid+0x18c/0x540 [ 676.765895][ C0] ? __virt_addr_valid+0x469/0x540 [ 676.765918][ C0] ? __phys_addr_symbol+0x2f/0x70 [ 676.765944][ C0] __skb_datagram_iter+0xdb/0x780 [ 676.765972][ C0] ? skb_copy_datagram_iter+0x200/0x200 [ 676.766000][ C0] skb_copy_datagram_iter+0xb1/0x200 [ 676.766026][ C0] __unix_dgram_recvmsg+0x6a1/0xd80 [ 676.766136][ C0] ? unix_unhash+0x10/0x10 [ 676.766163][ C0] ? aa_af_perm+0x330/0x330 [ 676.766178][ C0] ? aa_file_perm+0x3e3/0xee0 [ 676.766206][ C0] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 676.766239][ C0] ? security_socket_recvmsg+0x89/0xb0 [ 676.766259][ C0] ? unix_dgram_recvmsg+0xad/0xd0 [ 676.766277][ C0] sock_read_iter+0x2d9/0x3e0 [ 676.766297][ C0] ? kernel_sock_ip_overhead+0x5a0/0x5a0 [ 676.766323][ C0] ? common_file_perm+0x198/0x1f0 [ 676.766348][ C0] vfs_read+0x46a/0x970 [ 676.766379][ C0] ? kernel_read+0x1e0/0x1e0 [ 676.766401][ C0] ? rcu_is_watching+0x15/0xb0 [ 676.766431][ C0] ? __fdget_pos+0x1d8/0x330 [ 676.766456][ C0] ksys_read+0x150/0x260 [ 676.766480][ C0] ? vfs_write+0x990/0x990 [ 676.766504][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 676.766528][ C0] do_syscall_64+0x55/0xb0 [ 676.766544][ C0] ? clear_bhb_loop+0x40/0x90 [ 676.766566][ C0] ? clear_bhb_loop+0x40/0x90 [ 676.766588][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 676.766610][ C0] RIP: 0033:0x7f3b1a57a407 [ 676.766623][ C0] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 676.766637][ C0] RSP: 002b:00007ffe06325150 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 676.766653][ C0] RAX: ffffffffffffffda RBX: 00007f3b1a42ac80 RCX: 00007f3b1a57a407 [ 676.766665][ C0] RDX: 00000000000000ff RSI: 0000564abfefe950 RDI: 0000000000000000 [ 676.766676][ C0] RBP: 0000564abfefe910 R08: 0000000000000000 R09: 0000000000000000 [ 676.766686][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000564abfefe999 [ 676.766696][ C0] R13: 0000000000000000 R14: 0000564abfefe950 R15: 0000564aae6ddd98 [ 676.766716][ C0] [ 676.767591][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 677.141436][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 677.148649][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 677.158722][ T29] Call Trace: [ 677.162027][ T29] [ 677.164981][ T29] dump_stack_lvl+0x18c/0x250 [ 677.169682][ T29] ? show_regs_print_info+0x20/0x20 [ 677.174986][ T29] ? load_image+0x420/0x420 [ 677.179522][ T29] panic+0x2dc/0x730 [ 677.183439][ T29] ? schedule_preempt_disabled+0x20/0x20 [ 677.189104][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 677.193625][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 677.199190][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 677.205361][ T29] watchdog+0xf7c/0xf80 [ 677.209541][ T29] ? watchdog+0x1e1/0xf80 [ 677.213898][ T29] kthread+0x2fa/0x390 [ 677.217999][ T29] ? hungtask_pm_notify+0x90/0x90 [ 677.223047][ T29] ? kthread_blkcg+0xd0/0xd0 [ 677.227653][ T29] ret_from_fork+0x48/0x80 [ 677.232090][ T29] ? kthread_blkcg+0xd0/0xd0 [ 677.236723][ T29] ret_from_fork_asm+0x11/0x20 [ 677.241536][ T29] [ 677.245169][ T29] Kernel Offset: disabled [ 677.249517][ T29] Rebooting in 86400 seconds..