last executing test programs: 2m46.212834271s ago: executing program 2 (id=673): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0x7, 0x0, &(0x7f0000000580)="6eee773f1c8e29", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe3}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0xa, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd0, &(0x7f0000000380)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0x58, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xb31e, '\x00', r2, 0xffffffffffffffff, 0x5, 0x5, 0x5}, 0x50) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x13, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x5, 0x3, 0x0, 0x0, 0x7fff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001100)={0xffffffffffffffff, 0x0, &(0x7f0000001700)=""/53}, 0x20) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x401c5820, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000f"], 0x0, 0x26}, 0x20) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000002b21c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0xfca6}, {&(0x7f0000001400)="7f4ba13c5a27118dc920175650f0c9ba1809dd13a6e2d5b38f40adfa278c09e0e3bd05add4d780cd753b50f06f3b51f43761c7783f38ceaefc2dad57889d8b3a2d21314410f64ec2fa92e3a14b0141b39c020021d1edd011fbccb808a317fff4cf49aab12da619d67102048ec43c76cdb9d395e8b7b6e589d788aeeecb5080fc3d5ec6ccd656e49c0a642671d3fc363b46240bbc46ad965399b71db3c8f2b269b20870a3d2a6a8de5213b0f9d41c510c827056b7284391da244ec7653648b670f9a3483b314d861992ed7fb369eda093e1643c300b94d996fc592adb22c379be070ce5cd806da85a492dd4199cceb4c5b750222485325cf1073bf87e93bdf7da8af8f5f626541afd142e24ee8f4be9f038453c0edf500deabfe4d1a7a9de51df012bc2f3b767b3c03be6ace8c37ad571323cd363116e01f98a8ff8148d3900a65b788e99ddf9d9a2383f1730c7868d2dd031034bce5a77bd1ef3385105968be7bd830bde788092f657be36f89ea55ced486e18982d01339ed04a934a43c7b3be5e6bd03cbe773a938f621809345ec07cfceb013e3d76d500d97c8bee6ff54980ac3d221fcb35724ba64adb29ae8db909e097d78ff9542196635a14266944b850c9d436e96cc806a88090cbfc9db7ce83231bc043ded67966cfd68b800f6030a85f6bb070a2a5b372be2dacea7884b42e76e164af04e47f90ce0694623dce23cd1471f1a6029f68331317073e1a2d8cfb16f821c867d35a609649cf36aa781fa0a381f934844366d4e3ab8dd239c6ec35c15f307a7ed07869aacec38d787fd9c08e9dda1a28bf1a15b004bb1d88aa429ee8e927f5a1e1445685d8923cad92c90c79726d5e73dfe741de35498842cf51a4f09b97b1c14d33213705b95e84a8853fab4e1ced6faecea9d9203b038594bceb202a9d47f862c4f1853db9a0a7bf98ed9d2e3012358b38d092bd1ed7efb1a9e582ac5ef30c9b476e185f537f40ae8189528b480436122a939967e8d862e01172245ebced9f5251dd302e7e974c1db40be1e9e79799c27384caf6485e7c469b77cd6b28f71e39f84d2adbe074dd2bed6636e6853655adc3d1a47eff697e8edba53e6b281aea94798d82da7d3e86d09d869e5e345316eeeced4e15fc39234a0b0104e0b205c95eda632d0e86b095b284f441a62cb0e7262bc1967ee75f5c2d459011b0c15f4c85b02150a8834eda7f84cc96dde04e4abbdf5985a9c7218797820251b5804cae80c9a726afddf36793ae52cfb38e4e19740d6e07e4ed7c01001ab87b7fb12d5b70a75938d234c83d863b1763aec37b41d204fc319c6e802734ed681ea179fe6cad4857c3ca0e236e7b9867688d8bd7749e919f2d4f57f2249c9ccaf76a23760569b0fbde2db12ca0169e74982c1f4f0494aae13f4838b3f50d9ab0f6e328250d6fc34c0156e4b754c5c648b4ef8af32c91859f9706048f029634cefd0d767e8b7743262cb8a468ad37dfa47a745495e3f03cfa1d4ed71af55453c0a25fa1122a9054bcc4d9960c9a54f36b6db55154ab7dd19890d9f8ff3549e0fbd5a655319566b7f9c72be0242e7ffb59020356c3ffb5b9c43858e69d7b677a9bc5b8a64721a51b75a254e07199a73726834bea05901455ad53b38116b953c970b2002d0d1f91deb73ccb7266fbb21aa8555599daed7585575ef3efbd737f2523018ba4645d862889d5c3d91b12f04166db8bffecde54ee278d0d5351f3bf1f8902ff3f4c24a8c0c8a4e6addc9baadc471813589324d3128a1b193137c15c01be9f367317b1c885301ff8e9df728efa37df27f65eb0464055091f2ed469fdab48f413e3978f73ff9dffeb85453e841f86594612ac91b50add8d14910748bfa903033662f3e735ce6d299ce52338a96035aa89f63bd59d151fb20c38125236cbc0d795ac6f8da4cafc74714ed62a23b017e15adcaade58385b78c6945fb30a2539c42b1e415879433b9fb6966c6d19ed19f9f90cbd360d936a8b9f8e03bca5a83c063651b4636a7783bbda6417c83e470a16dfb115344a527436242ace9341432b5816b5e6609d97d600e142ca3cf74cbc00e1d9ee203cdfad339ce460b294f3931c5bd8ae6da8fc14d66a01bae4a212ef3d914e58c13217c8ad91628636b56257c7ca41b404cc2d4b5d50e26ebefc74656c62b1b4e9b6c5b6cc8d79101460f719d95925630bf99e042018439c50026513d680ea573620132ded57dea9e2da4e16f17dbc171642b1e80a3f41311ee73441302285668792160db6614fdb30d25a5719d2ae03ab98ea167597c48dd8197e7faf6189d801134462027901506c5ff1ae2558d96722217f65131d2f429693ae9fae19c101319473608976d08cc1c0d98f789b0c364e8aca574321ab2857af1015f1588afd313503085db4d99961a9391db06c10477ceb44199f1648594e8f9b452fafdab49b1962d02ee77ebd31b7931174a729fa943cb18102130e7e08eaba77df066069c2c3564fc85881ba0dad12c4f06a9e6dea9fea53931ff85e38505eb7ad60a52e2a8a248b3f4d0d55eee31f75f110c70e3b12409a79a5a98b0156c6d2a5d94604b8fa202b12746a365c708c671316cc0ffff6e9b7139b337953be22672a4910e1eb28cccc023b77028e20a6d377a339372f0dc235069f41c2692b0a3a7e0f315f4aebeef435a46b2e8b8462739293f9184c01b1434e87bf3fd48be54bf437056a1d2cff0c7aa52578013f96b1d5100ca936ff029cfd6f9a093621f684196ed7e1d363a97c647c34fe5f2370e7ab9dc718a1fc317779ab8a04bc12c01b778d17eea0b546bce03475fc6373c860714df0322dde550186c553ebd61ed18c0b80655f0827a63d209117ca23b026c1ad30bac4d43a4611292c7049f855b829a3a17fd2b83c142078beed8ca07b7cb7cd624705ccc160246c81174a4d3a9f2057caffe84b1ac073375e065c1ff4e9e22e7d87b3adb40ff796132e4ed86e5fc9f9616f8e4116be96497621692fb516e9316cfd15ad01742a1de4aa35fe02861236295823edf4c48fc37faf55226044e393a3733d58e8ef0f0c7941bc30f09739f37dea2f395f2e9e9b2c31a11923a2d6c9b14f1bacce15094cbbd6445f3581c6d45b76943b4d0db8fd4d4acbdb91780f57c872827abd7a1f13290a0d17dda220493476c92ce65e33f07afcf763aec0e67450f547101f1a5ada0f760c8f12137679324e22c7a13fdf78575115acb0ae4a2818b7b3ead27eea5eccba6f7a34c61819382eebfad742a3c603c6d2f332726996b3e8fcbdfd56b436c1173b1b3bc1ab66a717e31f2f918f0bea3f4801e04c14c881c59324fd9bc38745dd0e47da6bc8e98fe74a760304d74f17cd3cfceb33503397cf592d2b6a51b641d559ba8d6dc449e19b289fd1a4b3772b3998181e787723fe3893362d8f3e346c0ab0abe933e9bdd9a82b377914018377af9d2cbc58ab4fc08cea2623174239cea585603b8acd20da923a44799b1745c3bd65640508f96a0d92a6a2fd8314573f10b4f6e6cbf61e8828bd6e69b1b0c47f5795917a5035b3424dc3cadd2aadbbafb9d18349fab41d79ba13660f2c9400ff87784b26c3e88785db8522c93d3d4f12608736a235c8b9fff98a17934fe36792cb1992ea1b72b5e151cfe82b4ebc4f510882e4b34ee9f6ada188b104ba36e8acbd7bafe39b32f957da45c2743017545fd61667d36d58952de0cdbacb3abc549e1001bf6d9b19f9a353bb84bd152e04c061c691b514d6f1b36a8895424ce210a4cd75d537443a2791dc68e9fff510358f7586d3b73ed04223e683adf6a1c79d3bc92aa595cc6167", 0xa91}], 0x3}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="d8000000200081044e81f782db44b90402000000e8fe450f55a1180015001800142603600e120900100000000401a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8cbf7a7ff4841ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4d180a54f14f00004d9db22fe7c9f8775730d16a4683f1aea4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce3bb9ad809d561cace91ed0bffd6e4edef3d93452a92954b43370e00"/216, 0xd8}], 0x1}, 0x0) 2m45.163537222s ago: executing program 2 (id=677): socket$kcm(0x2, 0x200000000000001, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="052010bee79dad8b00000100000011000000070000207f00009abda3ea00", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)=""/4091, 0xffb}], 0x1}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000c80)=ANY=[@ANYBLOB="9feb010018000000000000006d01"], 0x0, 0x192, 0x0, 0x1, 0x1}, 0x28) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90324fc60100005000a000200053582c137153e37000c0680050002000300", 0x33fe0}], 0x1}, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x500, &(0x7f0000000080)=[{&(0x7f0000000480)="d80000001c0081064e81f782db44b9040a1d080400000000000002a1180015000600142603600e1208000f0000810401a8001600200001400300000007600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a08400e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r3, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xfffffffffffffde3}, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x35, &(0x7f0000000040)=r5, 0x13) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000d000000b700000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=ANY=[@ANYBLOB="0600000004000000ff0f000000000000000000009dfb60a6c8d8843d0b58e43212cab0b74e3a889dd84396761edfd76368c1ee0b4f41dbf844a1585e3ffdef258c1c8010fb8de89b70e640d6b54f54b00c0194b06a5319c3755f34ce8e9a6160395ef4254420c4887dfe98e4692634fbec0dee9322b23c32859d4080f67f52bf056dc71e725f43dcadf6474b6ed31674d87d32c4b8e898583e795144725b9e09f064ad321ab61f873fdd00b6def6b662a3a091d815a0ce1231e9d0a726c35d0bbad1a213d37a0b3e4074c955a8ffe81e397978e98af4224fc5ce2f119a69eb4675a9", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0x8}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x8}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10) syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m44.533041847s ago: executing program 2 (id=682): socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4f34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x1a49, 0xf2f3}, 0x42, 0xc8, 0x0, 0x5, 0x65, 0x0, 0x211, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0x4, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="8fedcb7907031175f37538e486dd630080fc00f5ff00db5b686158bbcfe8875a060300001123000000000000000000000000ac1414aa89"], 0xfdef) 2m44.296720058s ago: executing program 2 (id=685): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000010000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x40009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0xff, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0x1000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x45, '\x00', 0x0, @fallback=0x31}, 0x94) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b"], 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080)) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 2m43.834710528s ago: executing program 2 (id=687): write$cgroup_devices(0xffffffffffffffff, 0x0, 0x32ebc896d1d19d11) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0b000000ff000000324902007f00000001000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000000)=0x7d8, &(0x7f0000000180)='%ps \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000100)=0x7d8, &(0x7f0000000140)='%pi6 \x00'}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={0x0, &(0x7f0000000200)=""/197, &(0x7f0000000380), &(0x7f0000000300), 0x2, r1}, 0x38) (fail_nth: 81) 2m42.844626644s ago: executing program 2 (id=688): write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x48510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x10, 0x2, 0x4) socketpair(0x1, 0x20000000000001, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x5, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3e}, [@call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x600}, 0x94) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x37}, [@ldst={0x6, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0xa) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x5474) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x110, 0xd, {0x0, @initdev={0xac, 0x1e, 0x8, 0x0}, @dev={0xac, 0x14, 0x14, 0x38}}}}], 0x20}, 0x40800) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_clone(0x70000, &(0x7f0000000500)="e9c8fb106694fb5eed1c77f96749049c69793abe", 0x14, 0x0, 0x0, &(0x7f00000005c0)="b6e5dfa482efdf3f37eb5bc357b67be6c754a313d3689501b78325fa35b2cbb4a7c3bfafd56ee9cbab217d1bd6f7743dc63b8f74a812849109e49e2f43ceb651315277a3c1") r2 = syz_clone(0x40000200, &(0x7f0000001240), 0x0, 0x0, &(0x7f0000001300), &(0x7f0000001340)="543d74d8054e54e391d495e2bc35a45fe3ad050eed43677f753807e2a1d7f8a759c6ea13b11512ec5caede8452a185f4acac33ddb64910c7590ae4cf0bbb46e4a15432f8eff0bc312bac96ae0f7445ca0f60fb2b8c750ceac8f90620d21fad6587297325eaec7391587ffd1e28e54fa5f9e07bc72573a53a061495921e1c23ce69b8616f7342c05c9bed373fc069a54d") write$cgroup_pid(r1, &(0x7f0000000100)=r2, 0x12) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[], 0x0, 0x2a, 0x0, 0x1, 0x1, 0x10000, @value=r1}, 0x28) sendmsg$tipc(r1, 0x0, 0x48010) 2m27.703443033s ago: executing program 32 (id=688): write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x48510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x10, 0x2, 0x4) socketpair(0x1, 0x20000000000001, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x5, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3e}, [@call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x600}, 0x94) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x37}, [@ldst={0x6, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0xa) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x5474) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x110, 0xd, {0x0, @initdev={0xac, 0x1e, 0x8, 0x0}, @dev={0xac, 0x14, 0x14, 0x38}}}}], 0x20}, 0x40800) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_clone(0x70000, &(0x7f0000000500)="e9c8fb106694fb5eed1c77f96749049c69793abe", 0x14, 0x0, 0x0, &(0x7f00000005c0)="b6e5dfa482efdf3f37eb5bc357b67be6c754a313d3689501b78325fa35b2cbb4a7c3bfafd56ee9cbab217d1bd6f7743dc63b8f74a812849109e49e2f43ceb651315277a3c1") r2 = syz_clone(0x40000200, &(0x7f0000001240), 0x0, 0x0, &(0x7f0000001300), &(0x7f0000001340)="543d74d8054e54e391d495e2bc35a45fe3ad050eed43677f753807e2a1d7f8a759c6ea13b11512ec5caede8452a185f4acac33ddb64910c7590ae4cf0bbb46e4a15432f8eff0bc312bac96ae0f7445ca0f60fb2b8c750ceac8f90620d21fad6587297325eaec7391587ffd1e28e54fa5f9e07bc72573a53a061495921e1c23ce69b8616f7342c05c9bed373fc069a54d") write$cgroup_pid(r1, &(0x7f0000000100)=r2, 0x12) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[], 0x0, 0x2a, 0x0, 0x1, 0x1, 0x10000, @value=r1}, 0x28) sendmsg$tipc(r1, 0x0, 0x48010) 39.757985917s ago: executing program 3 (id=1176): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x3, 0x3fffa000}, 0x4200, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x1) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x404d) r3 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x84, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080000000"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r5, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7, 0x8, 0x8, &(0x7f0000000840)}}, 0x10) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r5, r4}, 0xc) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xfe80, &(0x7f00000005c0)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="8500090000000000000000e3fffffb00"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x11}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r6 = perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x2, 0x3cd, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r6, 0x4008240b, &(0x7f00000000c0)={0x5, 0x80, 0x7, 0xb, 0x3, 0x7, 0x0, 0x0, 0x814, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0xb, 0x0, @perf_bp={0x0, 0x1}, 0x2000, 0x6, 0xffffffff, 0x7, 0xffffffffffff8000, 0xd, 0x1, 0x0, 0xfff, 0x0, 0x73}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x15008}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000001680), &(0x7f0000002300), 0x8001, r0}, 0x38) 39.594331141s ago: executing program 0 (id=1178): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000007d000000000000000e000a001000000002800000121f", 0x2e}, {&(0x7f00000004c0)="dc31c86bc5c413cbf89fda2b98b812a1f806b28ecb4e69b6a31d9349ba9f5b5d0356702cfff9c8de46b72fbba10467d107d787cbe2fd247267654ecfa9e5af439a85aa6f0e9a68151166ee64038e215a8c7fbcb4c085aed75df3df84e8e74c2df7d96f6b181a3510353696f43e3e59921db3af395d587c55ad496193b3bc270358e5ce5fedfa076b8d78093e6e6de86ecb30fb6733cc", 0x96}, {&(0x7f0000000240)="f3734926d54968ce492f3b006659ca63f6c441103c7ea983fe28bf0a0489be7a2c8dd200c1781e8303cce33d3a6a0055b2bbd206899ff1ecda9c749712b4decf1b158a9224e4299d94971597430417e454d6e6ed", 0x54}], 0x3, 0x0, 0x0, 0x4000000}, 0x84) 39.287611738s ago: executing program 0 (id=1183): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8003}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x17, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRES8=r0], 0x48) r2 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/12, @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x4, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000100000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r4, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000340)="630b00863132fbdedf33c9f7b98670dff50d4d0e3d94aa", 0x0, 0x1ff, 0x0, 0x9cf18fbef8b7d1ec, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={&(0x7f0000000200), 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r6 = socket$kcm(0x10, 0x2, 0x4) close(r6) r7 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r7, &(0x7f0000000100)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000000000), 0x4c00}], 0x1}, 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000001ad3700005c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00040000040000000000000000000000000000000000000000002000"], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r8, 0x1, 0x27, &(0x7f0000000040), 0x4) recvmsg$kcm(r7, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x3, 0x2) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080400007c09e8fe55a10a0015c005001c2603600e1208000f0000000401a8001600a4000140000000007fffffffb94dcf5c0461c1d6900094007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x20004000) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb4, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x8000, 0x1000000, 0x0, 0x5, 0x0, 0xfffffffd, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x9) 39.240134702s ago: executing program 3 (id=1185): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 38.92044811s ago: executing program 3 (id=1186): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000000)='.', 0x1}], 0x1}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="050000007d0000004300000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600), &(0x7f00000001c0), 0x71, r0}, 0x38) bpf$BPF_GET_PROG_INFO(0x4, &(0x7f0000000140)={r0, 0xe0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) close(r1) openat$cgroup(r1, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0xfffffe51) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40305829, &(0x7f0000000040)) r5 = perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000080)='((!)') 38.724665317s ago: executing program 0 (id=1188): socket$kcm(0x2, 0x200000000000001, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="052010bee79dad8b00000100000011000000070000207f00009abda3ea00", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)=""/4091, 0xffb}], 0x1}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000c80)=ANY=[@ANYBLOB="9feb010018000000000000006d01"], 0x0, 0x192, 0x0, 0x1, 0x1}, 0x28) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90324fc60100005000a000200053582c137153e37000c0680050002000300", 0x33fe0}], 0x1}, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x500, &(0x7f0000000080)=[{&(0x7f0000000480)="d80000001c0081064e81f782db44b9040a1d080400000000000002a1180015000600142603600e1208000f0000810401a8001600200001400300000007600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a08400e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r3, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xfffffffffffffde3}, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x35, &(0x7f0000000040)=r5, 0x13) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000d000000b700000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=ANY=[@ANYBLOB="0600000004000000ff0f000000000000000000009dfb60a6c8d8843d0b58e43212cab0b74e3a889dd84396761edfd76368c1ee0b4f41dbf844a1585e3ffdef258c1c8010fb8de89b70e640d6b54f54b00c0194b06a5319c3755f34ce8e9a6160395ef4254420c4887dfe98e4692634fbec0dee9322b23c32859d4080f67f52bf056dc71e725f43dcadf6474b6ed31674d87d32c4b8e898583e795144725b9e09f064ad321ab61f873fdd00b6def6b662a3a091d815a0ce1231e9d0a726c35d0bbad1a213d37a0b3e4074c955a8ffe81e397978e98af4224fc5ce2f119a69eb4675a9", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000001000"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0x8}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x8}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10) syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 38.11639945s ago: executing program 1 (id=1193): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x20, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x24}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x1d, &(0x7f0000000040), 0x4) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0200000004000000040400000900000000000000", @ANYRES32, @ANYBLOB="5304dd35c8de830000000000000000000000000000000000000000fb1a93e2ba76d788c2baff443e96e901f56c95b53b276bf97d6f76273e6b017493fea2f2b2706842295d3f0ffd228119685e243265", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x3, 0x4, 0x801, 0x1, r2, 0x15b4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x8000, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5865}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073113500000000008510000002000000b70a0000000000009500c200000000009500001200000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)="d8000000180081064e81f789db4cb904021d080006007c09e8ee55a10a0015000400142603600e1208000f0000000401a8001600200008800000000000000100a0e408e802ef52a98516277ce06bbace8017cbec4c2ee5a73536138f00001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb3adbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5d9001901df60e1b6649682e1cace81ed0bffece0b42a9ecbee5de6cc0000", 0xd8}], 0x1}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0xeb, 0x9, 0x0, 0x5, 0x0, 0x3, 0xd2dfc, 0xb, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xdfffffff, 0x1, @perf_config_ext={0x2, 0x5}, 0x2, 0x8000, 0x6, 0x8, 0x81, 0x1000004, 0x3, 0x0, 0xfffffffd, 0x0, 0x400000000006}, 0x0, 0x9, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f0, &(0x7f0000000080)) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180200000a0000000000000003000000850000024100000018010000666c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000300000085000000060000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r9 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xe, &(0x7f00000006c0)=ANY=[@ANYBLOB="a477100008000000b7080000000000007b8af8ff00000000b7080000100000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000001dc993ab3148332ea1f82dbe4cf8d6a32d520badc733709ceff4120295dbd387c686db768ffd8622d9004ad1918e"], &(0x7f00000002c0)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x7, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x7}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680)={r5, r0, 0x4, r11}, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x40082406, &(0x7f0000000140)='%,[]J#*.\x00') 37.88492229s ago: executing program 3 (id=1194): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0xe, 0x0, 0x0, 0x0, 0x5, 0x200, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20, 0x1, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x8, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x3500000000000000) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x10049014) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 37.818246876s ago: executing program 0 (id=1195): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={&(0x7f00000001c0), 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5d32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0xa1f5, 0x3}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) close(0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000100)='tasks\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="c50a00000000000079107600000000006104d93e000000000000008040c2bfb5d9b9f93efe014b722855a3711ab0bd8be9044615bee93795cff46d8fd2"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc4, &(0x7f0000000580)=""/196, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0xfffffffffffffeec) r2 = socket$kcm(0x2, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0xc, 0x0, 0x0, 0x0, 0x5d33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x8000, 0x4}, 0x2920, 0x0, 0x0, 0x4, 0x80000000, 0x1, 0x0, 0x0, 0xc9e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg$kcm(r5, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="6000000022007f029e607dd75fcb520000a124b244de91f7f414adcf41bfafdd1b1e93c6292aefa3ca89563a63fb94b2584ca2faa20f2c308b0fe298acec10e3019e1e26e6efd0166e6c1b01132e5423294ac2f4d53c3870c3068461957e5357", 0x60}], 0x1, 0x0, 0x0, 0x6}, 0x0) recvmsg$kcm(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x2002) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x2, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$SIOCSIFHWADDR(r2, 0x8916, &(0x7f0000000000)={'veth1_to_bridge\x00', @random="02000400ac14"}) r6 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000140)={&(0x7f0000000000)=@phonet, 0x80, 0x0, 0x0, 0x0, 0x0, 0xeaff}, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) r7 = openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) write$cgroup_freezer_state(r7, &(0x7f00000000c0)='THAWED\x00', 0x7) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x53}, 0x28) socket$kcm(0xa, 0x5, 0x0) 37.256684455s ago: executing program 0 (id=1197): socket$kcm(0x2, 0x200000000000001, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="052010bee79dad8b00000100000011000000070000207f00009abda3ea00", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)=""/4091, 0xffb}], 0x1}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c0000000000000000000000080000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a00000008000000000000000000", @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000c80)=ANY=[@ANYBLOB="9feb010018000000000000006d01"], 0x0, 0x192, 0x0, 0x1, 0x1}, 0x28) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90324fc60100005000a000200053582c137153e37000c0680050002000300", 0x33fe0}], 0x1}, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x500, &(0x7f0000000080)=[{&(0x7f0000000480)="d80000001c0081064e81f782db44b9040a1d080400000000000002a1180015000600142603600e1208000f0000810401a8001600200001400300000007600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a08400e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000000000000001"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r3, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xfffffffffffffde3}, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x35, &(0x7f0000000040)=r5, 0x13) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="180000000000000000000000000000001802", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=ANY=[@ANYBLOB="0600000004000000ff0f000000000000000000009dfb60a6c8d8843d0b58e43212cab0b74e3a889dd84396761edfd76368c1ee0b4f41dbf844a1585e3ffdef258c1c8010fb8de89b70e640d6b54f54b00c0194b06a5319c3755f34ce8e9a6160395ef4254420c4887dfe98e4692634fbec0dee9322b23c32859d4080f67f52bf056dc71e725f43dcadf6474b6ed31674d87d32c4b8e898583e795144725b9e09f064ad321ab61f873fdd00b6def6b662a3a091d815a0ce1231e9d0a726c35d0bbad1a213d37a0b3e4074c955a8ffe81e397978e98af4224fc5ce2f119a69eb4675", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="000000000000000000000010000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x8}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10) syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 37.243086306s ago: executing program 3 (id=1198): r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r0, 0x58, &(0x7f00000005c0)}, 0x10) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000004000000010000000900000000000000", @ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x7, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018100000", @ANYRES32=r2, @ANYBLOB="000000000000000018", @ANYRES32=r3], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x2, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0800000004000000040000000300000000", @ANYRES32=0x0, @ANYRES32], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000fffffff800000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000640)={r5}, 0x70) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r1}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x13}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) 37.229989237s ago: executing program 1 (id=1199): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000540)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f00ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010004080c00bdad01409bbc7a46e39a54cbbda812176679df", 0x67}], 0x1, 0x0, 0x0, 0x7}, 0x24002040) 37.044378613s ago: executing program 4 (id=1200): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x241a2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe, 0x3, @perf_config_ext={0x0, 0xfffffffffffffff4}, 0x0, 0x2, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)=ANY=[], 0x20) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x3b, 0x9e, 0x7, 0x14082, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x4, 0xf}, 0x50) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000100)=r0, 0x4) 37.006918347s ago: executing program 1 (id=1201): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000000c0)=r1, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xbf, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f008004be0ffff00124000632f77fbacf01416ac141416440c05114d2f87e5940c05ab440c13f2325f1a39010702038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9", 0x0, 0xfe, 0x60000000}, 0x50) 36.925478414s ago: executing program 3 (id=1202): openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000002, 0x652d, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x8081, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r3 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x7, 0x6, 0x0, 0x1}, 0x48) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8000800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r3, r2}) sendmsg(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000780)='G', 0x1}], 0x1}, 0x20000000) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180)={0xffffffffffffffff}, 0x4) setsockopt$sock_attach_bpf(r3, 0x1, 0x7, &(0x7f0000000000), 0x4) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000001000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 36.814632593s ago: executing program 4 (id=1203): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x1}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 36.252877512s ago: executing program 0 (id=1204): r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$sock(r0, &(0x7f00000000c0)={&(0x7f0000000040)=@phonet={0x23, 0x0, 0x0, 0x27}, 0x80, 0x0, 0x0, &(0x7f0000000140)=[@timestamping={{0x14, 0x1, 0x25, 0x102}}, @timestamping={{0x14, 0x1, 0x25, 0xc}}], 0x6}, 0xfffffffe) 35.810338611s ago: executing program 4 (id=1205): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3129, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) (rerun: 64) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) (async, rerun: 64) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x98040, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async, rerun: 32) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) (async, rerun: 32) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x100084, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000001340)=@hci={0x1f, 0x8e88, 0x47}, 0x80, 0x0}, 0x0) (async) r2 = socket$kcm(0x2b, 0x1, 0x0) (async, rerun: 32) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b28, 0x0) (rerun: 32) recvmsg(r2, 0x0, 0x11164) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000200850000001500000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000280)={'wg2\x00', @local}) 35.612983128s ago: executing program 4 (id=1206): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="06ff03076844babeb89e14f086dd", 0x0, 0xfffffffc, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff}, 0x50) 35.543304684s ago: executing program 4 (id=1207): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x40}, [@call={0x85, 0x0, 0x0, 0x27}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41011, 0x25}, 0x94) 35.431929043s ago: executing program 4 (id=1208): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000780)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$kcm(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[], 0x10) r2 = socket$kcm(0xa, 0x2, 0x88) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2100) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r1, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r4}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x10, 0x8}, [@ldst={0x3, 0x0, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x2d) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001500)={r0, 0x0, 0x0, 0x1c, 0x0, &(0x7f00000001c0)=""/28, 0x8, 0x0, 0x0, 0x8c, 0x0, &(0x7f0000001400)="868a51272d395d7e670ad64e4e57d24892d46fe9f41d6d524243f5a1498e7ee66295d80a944955d8704c3fb215429a2187d84cbfa6598be2fb5c65b08062fc2fd1f2a0650dea15561e1cc7a63c6738fcaa7b4a711dabcdc3cc95375e4a1cf0a7ec1ca98c5e2147163991918163ec1ac1b125cda09ee4ecd7804edd284c5f7a06e805db6bb41f10252b98a552", 0x1, 0x0, 0x7}, 0x50) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r6 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r6, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}, 0x0) 31.703594038s ago: executing program 1 (id=1209): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000540)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f00ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010004080c00bdad01409bbc7a46e39a54cbbda812176679df", 0x67}], 0x1, 0x0, 0x0, 0x7}, 0x24002040) 31.674512861s ago: executing program 1 (id=1210): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900, 0x5ba}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000800}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x1e}}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 10.654119572s ago: executing program 1 (id=1211): r0 = socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000), 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x21, &(0x7f0000000100), 0x120) socket$kcm(0x29, 0x5, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) r2 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x20102400, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x81ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0x7fff, 0x0, 0x0, 0x0, 0x20}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000000c0)='\f\x00\x10kqlle\x94\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$TUNSETSNDBUF(r9, 0x400454d4, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x80005, 0x40200, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x2420, 0x3, 0x0, 0x2, 0x3, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0xe, 0x0, 0x0, 0x0, 0x5, 0x200, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20029, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x4, 0x7, 0x2, 0x0, 0x0, 0x0, 0x30000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe825, 0x4, @perf_config_ext={0x24, 0x3}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffc, 0xffffffffffffffff, 0x2) recvmsg$unix(r7, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) 298.68µs ago: executing program 33 (id=1204): r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$sock(r0, &(0x7f00000000c0)={&(0x7f0000000040)=@phonet={0x23, 0x0, 0x0, 0x27}, 0x80, 0x0, 0x0, &(0x7f0000000140)=[@timestamping={{0x14, 0x1, 0x25, 0x102}}, @timestamping={{0x14, 0x1, 0x25, 0xc}}], 0x6}, 0xfffffffe) 0s ago: executing program 34 (id=1211): r0 = socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000), 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x21, &(0x7f0000000100), 0x120) socket$kcm(0x29, 0x5, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) r2 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x20102400, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x81ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0x7fff, 0x0, 0x0, 0x0, 0x20}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000000c0)='\f\x00\x10kqlle\x94\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$TUNSETSNDBUF(r9, 0x400454d4, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x80005, 0x40200, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x2420, 0x3, 0x0, 0x2, 0x3, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0xe, 0x0, 0x0, 0x0, 0x5, 0x200, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20029, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x4, 0x7, 0x2, 0x0, 0x0, 0x0, 0x30000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe825, 0x4, @perf_config_ext={0x24, 0x3}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffc, 0xffffffffffffffff, 0x2) recvmsg$unix(r7, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) kernel console output (not intermixed with test programs): batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.187634][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.198833][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.210604][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.229833][ T5835] warning: `syz.2.5' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 77.272921][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.286109][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.297052][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.309015][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.329605][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.340543][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.365911][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.379579][ T5776] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.390133][ T5776] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.418487][ T5776] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.428532][ T5776] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.470294][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.519559][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.541419][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.553635][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.576664][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.594584][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.610087][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.660556][ T1080] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.676192][ T1080] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.692954][ T5838] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 77.717270][ T5768] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.729383][ T5768] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.751409][ T5768] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.760553][ T5768] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.881869][ T5770] Bluetooth: hci3: command tx timeout [ 77.883318][ T5084] Bluetooth: hci2: command tx timeout [ 77.887397][ T5782] Bluetooth: hci0: command tx timeout [ 77.898057][ T5084] Bluetooth: hci1: command tx timeout [ 77.985316][ T5838] Driver unsupported XDP return value 0 on prog (id 4) dev N/A, expect packet loss! [ 78.060689][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.126251][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.315867][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.353742][ T1092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.371332][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.379755][ T1092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.709245][ T5843] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 78.800786][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.829035][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.919976][ T5847] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 79.545829][ T5843] syz.0.1 (5843) used greatest stack depth: 19056 bytes left [ 79.681916][ T5851] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 79.981115][ T5084] Bluetooth: hci1: command tx timeout [ 79.985758][ T5782] Bluetooth: hci2: command tx timeout [ 79.986862][ T5084] Bluetooth: hci0: command tx timeout [ 79.993989][ T5770] Bluetooth: hci3: command tx timeout [ 80.693872][ T5867] netlink: 'syz.3.9': attribute type 3 has an invalid length. [ 80.757368][ T5867] netlink: 'syz.3.9': attribute type 1 has an invalid length. [ 80.778328][ T5867] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.9'. [ 87.913198][ T8] cfg80211: failed to load regulatory.db [ 88.135828][ T5892] netlink: 56537 bytes leftover after parsing attributes in process `syz.1.14'. [ 88.676404][ T5890] netlink: 183836 bytes leftover after parsing attributes in process `syz.0.13'. [ 88.686536][ T5890] openvswitch: netlink: Key type 4112 is out of range max 32 [ 89.152641][ T5911] raw_sendmsg: syz.0.18 forgot to set AF_INET. Fix it! [ 89.177577][ T5906] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 90.397696][ T5923] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 90.698348][ T5926] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 90.905241][ T5932] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 91.180204][ T5933] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 91.438565][ T5936] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 92.820666][ T5945] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 93.057765][ T5949] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 93.862204][ T5953] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.29'. [ 93.917629][ T5953] netlink: 4612 bytes leftover after parsing attributes in process `syz.1.29'. [ 93.977953][ T5953] netlink: 9 bytes leftover after parsing attributes in process `syz.1.29'. [ 94.108034][ T5956] netlink: 'syz.3.30': attribute type 10 has an invalid length. [ 94.368983][ T5956] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 94.446861][ T5960] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 94.625020][ T5965] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 94.719699][ T5967] syz.1.33[5967] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 94.719889][ T5967] syz.1.33[5967] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 94.964090][ T5969] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 95.021656][ T5972] Zero length message leads to an empty skb [ 95.082313][ T5972] netlink: 'syz.1.33': attribute type 21 has an invalid length. [ 99.252779][ T5990] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 99.871498][ T6006] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 100.964454][ T6012] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 101.637584][ T6018] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 101.865012][ T6022] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 102.476265][ T6025] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 103.552367][ T6035] netlink: 'syz.0.48': attribute type 10 has an invalid length. [ 103.669265][ T6035] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 106.093216][ T6064] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 106.483763][ T6069] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 106.610997][ T6071] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 111.261278][ T6088] netlink: 'syz.2.69': attribute type 10 has an invalid length. [ 111.522971][ T6088] geneve0: entered promiscuous mode [ 111.858904][ T6098] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.63'. [ 111.885554][ T6098] netlink: 4612 bytes leftover after parsing attributes in process `syz.0.63'. [ 111.913133][ T6098] netlink: 9 bytes leftover after parsing attributes in process `syz.0.63'. [ 112.111044][ T6105] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 113.741757][ T6121] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.77'. [ 113.818563][ T6121] netlink: 4612 bytes leftover after parsing attributes in process `syz.1.77'. [ 113.827003][ T6133] FAULT_INJECTION: forcing a failure. [ 113.827003][ T6133] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 113.848642][ T6133] CPU: 1 PID: 6133 Comm: syz.0.71 Not tainted syzkaller #0 [ 113.855925][ T6133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 113.866109][ T6133] Call Trace: [ 113.869431][ T6133] [ 113.872406][ T6133] dump_stack_lvl+0x18c/0x250 [ 113.877138][ T6133] ? show_regs_print_info+0x20/0x20 [ 113.882391][ T6133] ? load_image+0x400/0x400 [ 113.886934][ T6133] ? __lock_acquire+0x7d40/0x7d40 [ 113.892023][ T6133] should_fail_ex+0x39d/0x4d0 [ 113.896830][ T6133] prepare_alloc_pages+0x1e2/0x5f0 [ 113.901994][ T6133] __alloc_pages+0x134/0x460 [ 113.906621][ T6133] ? zone_statistics+0x170/0x170 [ 113.911677][ T6133] ? alloc_pages+0x4dc/0x740 [ 113.916294][ T6133] ? do_raw_spin_unlock+0x121/0x230 [ 113.921707][ T6133] __get_free_pages+0xc/0x30 [ 113.926406][ T6133] kasan_populate_vmalloc_pte+0x35/0x100 [ 113.932253][ T6133] __apply_to_page_range+0x860/0xdd0 [ 113.937619][ T6133] ? kasan_populate_vmalloc+0x70/0x70 [ 113.943118][ T6133] ? apply_to_page_range+0x50/0x50 [ 113.948265][ T6133] ? do_raw_spin_unlock+0x121/0x230 [ 113.953495][ T6133] alloc_vmap_area+0x1d0c/0x1e30 [ 113.958485][ T6133] ? vm_map_ram+0xcb0/0xcb0 [ 113.963028][ T6133] ? rcu_is_watching+0x15/0xb0 [ 113.967916][ T6133] __get_vm_area_node+0x162/0x370 [ 113.972980][ T6133] __vmalloc_node_range+0x36e/0x1330 [ 113.978298][ T6133] ? bloom_map_alloc+0x22a/0x470 [ 113.983376][ T6133] ? end_current_label_crit_section+0x170/0x170 [ 113.989651][ T6133] ? free_vm_area+0x50/0x50 [ 113.994281][ T6133] bpf_map_area_alloc+0xf1/0x110 [ 113.999421][ T6133] ? bloom_map_alloc+0x22a/0x470 [ 114.004414][ T6133] bloom_map_alloc+0x22a/0x470 [ 114.009231][ T6133] map_create+0x877/0x12f0 [ 114.013690][ T6133] ? bpf_lsm_bpf+0x9/0x10 [ 114.018058][ T6133] __sys_bpf+0x651/0x890 [ 114.022504][ T6133] ? bpf_link_show_fdinfo+0x390/0x390 [ 114.028095][ T6133] ? lock_chain_count+0x20/0x20 [ 114.033066][ T6133] __x64_sys_bpf+0x7c/0x90 [ 114.037508][ T6133] do_syscall_64+0x55/0xa0 [ 114.041957][ T6133] ? clear_bhb_loop+0x40/0x90 [ 114.046659][ T6133] ? clear_bhb_loop+0x40/0x90 [ 114.051454][ T6133] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 114.057718][ T6133] RIP: 0033:0x7efddc99c629 [ 114.062430][ T6133] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.082411][ T6133] RSP: 002b:00007efddd8c9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 114.090931][ T6133] RAX: ffffffffffffffda RBX: 00007efddcc15fa0 RCX: 00007efddc99c629 [ 114.098939][ T6133] RDX: 0000000000000048 RSI: 0000200000000000 RDI: 0000000000000000 [ 114.107025][ T6133] RBP: 00007efddd8c9090 R08: 0000000000000000 R09: 0000000000000000 [ 114.115281][ T6133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 114.123453][ T6133] R13: 00007efddcc16038 R14: 00007efddcc15fa0 R15: 00007ffc975575c8 [ 114.132621][ T6133] [ 114.161270][ T6121] netlink: 9 bytes leftover after parsing attributes in process `syz.1.77'. [ 114.172949][ T6130] netlink: 183836 bytes leftover after parsing attributes in process `syz.2.68'. [ 114.251687][ T6130] openvswitch: netlink: Key type 4112 is out of range max 32 [ 115.036712][ T6150] netlink: 60 bytes leftover after parsing attributes in process `syz.1.76'. [ 115.053034][ T6150] netlink: 60 bytes leftover after parsing attributes in process `syz.1.76'. [ 115.085709][ T6150] netlink: 60 bytes leftover after parsing attributes in process `syz.1.76'. [ 115.198214][ T6156] netlink: 'syz.0.81': attribute type 2 has an invalid length. [ 115.533372][ T6158] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 118.483572][ T6205] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 118.781789][ T6210] FAULT_INJECTION: forcing a failure. [ 118.781789][ T6210] name failslab, interval 1, probability 0, space 0, times 1 [ 118.795305][ T6210] CPU: 1 PID: 6210 Comm: syz.0.98 Not tainted syzkaller #0 [ 118.802555][ T6210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 118.812758][ T6210] Call Trace: [ 118.816087][ T6210] [ 118.819151][ T6210] dump_stack_lvl+0x18c/0x250 [ 118.824086][ T6210] ? show_regs_print_info+0x20/0x20 [ 118.829440][ T6210] ? load_image+0x400/0x400 [ 118.834192][ T6210] should_fail_ex+0x39d/0x4d0 [ 118.838950][ T6210] should_failslab+0x9/0x20 [ 118.843505][ T6210] slab_pre_alloc_hook+0x59/0x310 [ 118.848594][ T6210] ? ip_finish_output2+0xb04/0x11e0 [ 118.853849][ T6210] kmem_cache_alloc_node+0x60/0x320 [ 118.859104][ T6210] ? __alloc_skb+0x103/0x2c0 [ 118.863908][ T6210] __alloc_skb+0x103/0x2c0 [ 118.868387][ T6210] ip_frag_next+0xd1/0xaf0 [ 118.872967][ T6210] ip_do_fragment+0x76f/0x1760 [ 118.877795][ T6210] ? __ip_local_out+0x5f0/0x5f0 [ 118.882714][ T6210] ? ip_fragment+0x210/0x210 [ 118.887354][ T6210] ? ip_skb_dst_mtu+0x58a/0x9c0 [ 118.892281][ T6210] ip_output+0x2a1/0x3b0 [ 118.896674][ T6210] ? ip_output+0x60/0x3b0 [ 118.901079][ T6210] iptunnel_xmit+0x4f0/0x920 [ 118.905734][ T6210] ip_tunnel_xmit+0x1cbc/0x2410 [ 118.910851][ T6210] ? ip4_dst_hoplimit+0x2d0/0x2d0 [ 118.915938][ T6210] ? validate_xmit_xfrm+0xbc/0x12c0 [ 118.921281][ T6210] ? gre_build_header+0x25b/0x990 [ 118.926540][ T6210] ipgre_xmit+0x7a6/0xb20 [ 118.931108][ T6210] dev_hard_start_xmit+0x246/0x740 [ 118.936285][ T6210] __dev_queue_xmit+0x1ac2/0x36b0 [ 118.941446][ T6210] ? __dev_queue_xmit+0x26b/0x36b0 [ 118.946636][ T6210] ? netdev_core_pick_tx+0x340/0x340 [ 118.952064][ T6210] ? skb_release_data+0x1cf/0x800 [ 118.957140][ T6210] ? pskb_expand_head+0xbfe/0x1230 [ 118.962319][ T6210] __bpf_tx_skb+0x189/0x250 [ 118.966961][ T6210] bpf_clone_redirect+0x30f/0x4a0 [ 118.972064][ T6210] bpf_prog_208b094576c80b22+0x5e/0x63 [ 118.977750][ T6210] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 118.983779][ T6210] ? preempt_schedule+0xc0/0xd0 [ 118.988934][ T6210] ? bpf_test_run+0x174/0x870 [ 118.993853][ T6210] ? preempt_schedule_common+0x82/0xc0 [ 118.999445][ T6210] ? schedule_preempt_disabled+0x20/0x20 [ 119.005214][ T6210] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 119.011420][ T6210] ? lockdep_softirqs_on+0x580/0x580 [ 119.016756][ T6210] ? lock_chain_count+0x20/0x20 [ 119.021657][ T6210] ? preempt_schedule_thunk+0x1a/0x30 [ 119.027023][ T6212] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 119.027067][ T6210] ? __local_bh_disable_ip+0x108/0x1a0 [ 119.027107][ T6210] ? __cant_sleep+0x220/0x220 [ 119.027130][ T6210] ? __local_bh_enable_ip+0x14b/0x1c0 [ 119.027152][ T6210] ? _local_bh_enable+0xa0/0xa0 [ 119.027178][ T6210] ? bpf_test_timer_continue+0x135/0x380 [ 119.027203][ T6210] ? bpf_test_run+0x174/0x870 [ 119.027225][ T6210] bpf_test_run+0x2df/0x870 [ 119.027265][ T6210] ? bpf_test_run+0x174/0x870 [ 119.027289][ T6210] ? convert___skb_to_skb+0x590/0x590 [ 119.027317][ T6210] ? eth_get_headlen+0x210/0x210 [ 119.027350][ T6210] ? slab_build_skb+0x25f/0x3f0 [ 119.027377][ T6210] ? convert___skb_to_skb+0x3d/0x590 [ 119.027403][ T6210] bpf_prog_test_run_skb+0xad2/0x12b0 [ 119.027447][ T6210] ? cpu_online+0x60/0x60 [ 119.027470][ T6210] bpf_prog_test_run+0x321/0x390 [ 119.027498][ T6210] __sys_bpf+0x49d/0x890 [ 119.027524][ T6210] ? bpf_link_show_fdinfo+0x390/0x390 [ 119.027568][ T6210] ? lock_chain_count+0x20/0x20 [ 119.027604][ T6210] __x64_sys_bpf+0x7c/0x90 [ 119.027628][ T6210] do_syscall_64+0x55/0xa0 [ 119.027653][ T6210] ? clear_bhb_loop+0x40/0x90 [ 119.027675][ T6210] ? clear_bhb_loop+0x40/0x90 [ 119.027700][ T6210] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 119.027721][ T6210] RIP: 0033:0x7efddc99c629 [ 119.027743][ T6210] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.027759][ T6210] RSP: 002b:00007efddd8c9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 119.027784][ T6210] RAX: ffffffffffffffda RBX: 00007efddcc15fa0 RCX: 00007efddc99c629 [ 119.027798][ T6210] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 119.027811][ T6210] RBP: 00007efddd8c9090 R08: 0000000000000000 R09: 0000000000000000 [ 119.027825][ T6210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 119.027838][ T6210] R13: 00007efddcc16038 R14: 00007efddcc15fa0 R15: 00007ffc975575c8 [ 119.027875][ T6210] [ 119.308585][ T6215] __nla_validate_parse: 2 callbacks suppressed [ 119.308601][ T6215] netlink: 14 bytes leftover after parsing attributes in process `syz.1.100'. [ 119.599083][ T6215] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 119.688528][ T6215] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 119.751934][ T6215] bond0 (unregistering): Released all slaves [ 119.788436][ T6219] netlink: 'syz.0.101': attribute type 2 has an invalid length. [ 120.323130][ T6229] netlink: 830 bytes leftover after parsing attributes in process `syz.0.105'. [ 121.079882][ T6233] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.107'. [ 121.131815][ T6233] netlink: 4612 bytes leftover after parsing attributes in process `syz.3.107'. [ 121.231420][ T6233] netlink: 9 bytes leftover after parsing attributes in process `syz.3.107'. [ 121.442338][ T6244] netlink: 156 bytes leftover after parsing attributes in process `syz.1.110'. [ 122.214319][ T6252] netlink: 60 bytes leftover after parsing attributes in process `syz.3.111'. [ 122.801453][ C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 122.987820][ T6257] netlink: 176 bytes leftover after parsing attributes in process `syz.1.112'. [ 123.722563][ T6285] netlink: 'syz.1.121': attribute type 10 has an invalid length. [ 123.976463][ T6285] team0 (unregistering): Port device team_slave_0 removed [ 124.013539][ T6285] team0 (unregistering): Port device team_slave_1 removed [ 124.060414][ T6284] netlink: 'syz.1.121': attribute type 10 has an invalid length. [ 124.122138][ T6289] netlink: 14 bytes leftover after parsing attributes in process `syz.0.119'. [ 124.284759][ T6289] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 124.434854][ T6289] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 124.582877][ T6289] bond0 (unregistering): Released all slaves [ 124.791581][ T6290] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 125.407053][ T6314] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.127'. [ 125.490752][ T6314] netlink: 4612 bytes leftover after parsing attributes in process `syz.0.127'. [ 125.500061][ T6314] netlink: 9 bytes leftover after parsing attributes in process `syz.0.127'. [ 125.745255][ T6317] delete_channel: no stack [ 125.988748][ T6326] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 126.434933][ T6323] netlink: 176 bytes leftover after parsing attributes in process `syz.3.130'. [ 127.227312][ T6340] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 128.267705][ T6357] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 129.164128][ T6371] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.142'. [ 129.502566][ T6374] netlink: 14 bytes leftover after parsing attributes in process `syz.2.144'. [ 130.196043][ T6382] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.145'. [ 130.233273][ T6374] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 130.295177][ T6374] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 130.313071][ T6374] bond0 (unregistering): Released all slaves [ 130.338179][ T6385] netlink: 'syz.3.147': attribute type 10 has an invalid length. [ 130.369806][ T6385] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 130.648248][ T6389] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 130.961088][ T6399] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 131.038487][ T6401] netlink: 'syz.2.154': attribute type 10 has an invalid length. [ 131.197520][ T6403] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 131.720019][ T6407] netlink: 'syz.2.156': attribute type 21 has an invalid length. [ 132.165973][ T6410] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.157'. [ 132.221841][ T6410] netlink: 4612 bytes leftover after parsing attributes in process `syz.1.157'. [ 132.248201][ T6410] netlink: 9 bytes leftover after parsing attributes in process `syz.1.157'. [ 132.599680][ T6420] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.159'. [ 132.949807][ T6431] netlink: 'syz.2.164': attribute type 10 has an invalid length. [ 133.001473][ T6434] netlink: 192 bytes leftover after parsing attributes in process `syz.3.163'. [ 133.063146][ T6427] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.161'. [ 133.165104][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.181399][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.562494][ T6445] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 133.618618][ T6442] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.169'. [ 133.679818][ T6442] netlink: 4612 bytes leftover after parsing attributes in process `syz.1.169'. [ 133.722270][ T6442] netlink: 9 bytes leftover after parsing attributes in process `syz.1.169'. [ 133.768900][ T6446] netlink: 14 bytes leftover after parsing attributes in process `syz.3.170'. [ 133.799808][ T6446] hsr_slave_0: left promiscuous mode [ 133.863746][ T6446] hsr_slave_1: left promiscuous mode [ 134.454201][ T6455] FAULT_INJECTION: forcing a failure. [ 134.454201][ T6455] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 134.468372][ T6455] CPU: 0 PID: 6455 Comm: syz.1.171 Not tainted syzkaller #0 [ 134.475726][ T6455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 134.485867][ T6455] Call Trace: [ 134.489164][ T6455] [ 134.492254][ T6455] dump_stack_lvl+0x18c/0x250 [ 134.497045][ T6455] ? show_regs_print_info+0x20/0x20 [ 134.502272][ T6455] ? load_image+0x400/0x400 [ 134.506896][ T6455] ? __lock_acquire+0x7d40/0x7d40 [ 134.512022][ T6455] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 134.518635][ T6455] should_fail_ex+0x39d/0x4d0 [ 134.523527][ T6455] prepare_alloc_pages+0x1e2/0x5f0 [ 134.528665][ T6455] __alloc_pages+0x134/0x460 [ 134.533357][ T6455] ? zone_statistics+0x170/0x170 [ 134.538409][ T6455] ? mt_find+0x169/0x650 [ 134.542765][ T6455] ? handle_mm_fault+0xe7/0x4c00 [ 134.547806][ T6455] __folio_alloc+0x10/0x20 [ 134.552338][ T6455] vma_alloc_folio+0x47a/0x8f0 [ 134.557660][ T6455] handle_mm_fault+0x1b3b/0x4c00 [ 134.562610][ T6455] ? handle_mm_fault+0xe7/0x4c00 [ 134.567578][ T6455] ? numa_migrate_prep+0x350/0x350 [ 134.572711][ T6455] ? up_read+0x20/0x20 [ 134.576796][ T6455] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 134.582100][ T6455] do_user_addr_fault+0x730/0x12c0 [ 134.587376][ T6455] exc_page_fault+0x64/0x100 [ 134.592100][ T6455] asm_exc_page_fault+0x26/0x30 [ 134.596975][ T6455] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 134.602894][ T6455] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 134.624791][ T6455] RSP: 0018:ffffc90019ac7bb0 EFLAGS: 00050202 [ 134.630892][ T6455] RAX: ffffffff84297401 RBX: 0000000000024932 RCX: 0000000000003564 [ 134.638887][ T6455] RDX: 0000000000000000 RSI: ffff88805b9a14cd RDI: 0000200000046000 [ 134.646962][ T6455] RBP: ffffc90019ac7d20 R08: 0000000000000000 R09: 0000000000000001 [ 134.654946][ T6455] R10: dffffc0000000000 R11: ffffed100b734946 R12: 0000200000049564 [ 134.663018][ T6455] R13: 1ffff92003358f90 R14: 0000200000024c32 R15: ffff88805b9800ff [ 134.671017][ T6455] ? _copy_to_user+0x21/0xa0 [ 134.675691][ T6455] _copy_to_user+0x85/0xa0 [ 134.680208][ T6455] generic_map_lookup_batch+0x8bd/0xc60 [ 134.685793][ T6455] ? bpf_map_update_value+0x720/0x720 [ 134.691188][ T6455] ? __fdget+0x180/0x210 [ 134.695448][ T6455] ? bpf_map_update_value+0x720/0x720 [ 134.700915][ T6455] bpf_map_do_batch+0x2cb/0x610 [ 134.705891][ T6455] ? bpf_lsm_bpf+0x9/0x10 [ 134.710235][ T6455] ? security_bpf+0x7e/0xa0 [ 134.714754][ T6455] __sys_bpf+0x7d7/0x890 [ 134.719539][ T6455] ? bpf_link_show_fdinfo+0x390/0x390 [ 134.724942][ T6455] ? lock_chain_count+0x20/0x20 [ 134.729908][ T6455] __x64_sys_bpf+0x7c/0x90 [ 134.734429][ T6455] do_syscall_64+0x55/0xa0 [ 134.738918][ T6455] ? clear_bhb_loop+0x40/0x90 [ 134.743606][ T6455] ? clear_bhb_loop+0x40/0x90 [ 134.748382][ T6455] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 134.754462][ T6455] RIP: 0033:0x7fbc6b99c629 [ 134.758895][ T6455] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.778688][ T6455] RSP: 002b:00007fbc6c7a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 134.787206][ T6455] RAX: ffffffffffffffda RBX: 00007fbc6bc16090 RCX: 00007fbc6b99c629 [ 134.795246][ T6455] RDX: 0000000000000038 RSI: 0000200000000480 RDI: 0000000000000018 [ 134.803316][ T6455] RBP: 00007fbc6c7a7090 R08: 0000000000000000 R09: 0000000000000000 [ 134.811398][ T6455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 134.819734][ T6455] R13: 00007fbc6bc16128 R14: 00007fbc6bc16090 R15: 00007ffd16cca948 [ 134.827896][ T6455] [ 135.661770][ T6476] netlink: 'syz.0.177': attribute type 4 has an invalid length. [ 135.788972][ T6479] netlink: 'syz.2.178': attribute type 10 has an invalid length. [ 136.190588][ T6483] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 137.346754][ T6497] __nla_validate_parse: 4 callbacks suppressed [ 137.346784][ T6497] netlink: 8175 bytes leftover after parsing attributes in process `syz.1.183'. [ 138.014707][ T6511] netlink: 192436 bytes leftover after parsing attributes in process `syz.1.183'. [ 138.748699][ T6511] openvswitch: netlink: Duplicate key (type 0). [ 140.152149][ T6521] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.190'. [ 141.162379][ T6524] FAULT_INJECTION: forcing a failure. [ 141.162379][ T6524] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 141.189565][ T6524] CPU: 1 PID: 6524 Comm: syz.3.191 Not tainted syzkaller #0 [ 141.197044][ T6524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 141.207141][ T6524] Call Trace: [ 141.210460][ T6524] [ 141.213427][ T6524] dump_stack_lvl+0x18c/0x250 [ 141.218249][ T6524] ? show_regs_print_info+0x20/0x20 [ 141.223498][ T6524] ? load_image+0x400/0x400 [ 141.228063][ T6524] ? __might_fault+0xaa/0x120 [ 141.232887][ T6524] ? __lock_acquire+0x7d40/0x7d40 [ 141.237974][ T6524] should_fail_ex+0x39d/0x4d0 [ 141.242723][ T6524] _copy_from_user+0x2f/0xe0 [ 141.247453][ T6524] ___sys_sendmsg+0x1c7/0x360 [ 141.252265][ T6524] ? __sys_sendmsg+0x2a0/0x2a0 [ 141.257096][ T6524] __se_sys_sendmsg+0x1c2/0x2b0 [ 141.261960][ T6524] ? __x64_sys_sendmsg+0x80/0x80 [ 141.267011][ T6524] ? syscall_enter_from_user_mode+0x2e/0x80 [ 141.273011][ T6524] do_syscall_64+0x55/0xa0 [ 141.277444][ T6524] ? clear_bhb_loop+0x40/0x90 [ 141.282244][ T6524] ? clear_bhb_loop+0x40/0x90 [ 141.287108][ T6524] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 141.293011][ T6524] RIP: 0033:0x7ff15439c629 [ 141.297527][ T6524] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.317229][ T6524] RSP: 002b:00007ff1551ce028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 141.325656][ T6524] RAX: ffffffffffffffda RBX: 00007ff154615fa0 RCX: 00007ff15439c629 [ 141.333735][ T6524] RDX: 7e8166965e22236a RSI: 0000200000007940 RDI: 0000000000000007 [ 141.341719][ T6524] RBP: 00007ff1551ce090 R08: 0000000000000000 R09: 0000000000000000 [ 141.349879][ T6524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.357944][ T6524] R13: 00007ff154616038 R14: 00007ff154615fa0 R15: 00007ffcad98a108 [ 141.365941][ T6524] [ 141.596823][ T6537] netlink: 'syz.0.196': attribute type 2 has an invalid length. [ 141.605384][ T6537] netlink: 51 bytes leftover after parsing attributes in process `syz.0.196'. [ 143.440801][ T6580] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.210'. [ 143.923860][ T6587] netlink: 'syz.0.211': attribute type 7 has an invalid length. [ 146.209793][ T6614] netlink: 183836 bytes leftover after parsing attributes in process `syz.1.218'. [ 146.221341][ T6614] openvswitch: netlink: Key type 4112 is out of range max 32 [ 146.899860][ T6636] delete_channel: no stack [ 148.784480][ T6672] netlink: 'syz.3.236': attribute type 9 has an invalid length. [ 148.852376][ T6672] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.236'. [ 149.422916][ T6678] netlink: 'syz.0.238': attribute type 10 has an invalid length. [ 149.584257][ T6678] geneve0: entered promiscuous mode [ 151.590341][ T6705] netlink: 'syz.1.248': attribute type 9 has an invalid length. [ 151.648873][ T6705] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.248'. [ 151.967959][ T6706] delete_channel: no stack [ 152.861528][ T6725] netlink: 4 bytes leftover after parsing attributes in process `syz.1.253'. [ 152.957410][ T6728] syz.0.254 uses obsolete (PF_INET,SOCK_PACKET) [ 155.135540][ T6759] netlink: 'syz.1.262': attribute type 10 has an invalid length. [ 156.088934][ T6767] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 156.178804][ T6770] wg2: entered promiscuous mode [ 156.199160][ T6770] wg2: entered allmulticast mode [ 158.673348][ T6790] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.272'. [ 158.813775][ T6790] netlink: 4612 bytes leftover after parsing attributes in process `syz.2.272'. [ 158.944921][ T6790] netlink: 9 bytes leftover after parsing attributes in process `syz.2.272'. [ 159.352305][ T6803] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 159.389937][ T6806] netlink: 14560 bytes leftover after parsing attributes in process `syz.3.277'. [ 159.494458][ T6806] netlink: 14463 bytes leftover after parsing attributes in process `syz.3.277'. [ 159.525526][ T6809] netlink: 14463 bytes leftover after parsing attributes in process `syz.3.277'. [ 159.899424][ T6815] netlink: 12 bytes leftover after parsing attributes in process `syz.3.281'. [ 160.757574][ T6832] netlink: 'syz.0.283': attribute type 3 has an invalid length. [ 160.806543][ T6832] netlink: 'syz.0.283': attribute type 4 has an invalid length. [ 160.838371][ T6832] netlink: 9067 bytes leftover after parsing attributes in process `syz.0.283'. [ 160.955271][ T6836] netlink: 'syz.2.284': attribute type 10 has an invalid length. [ 161.041886][ T6836] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.214744][ T6836] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.222456][ T6836] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.324343][ T6836] team0: Port device bridge0 added [ 163.259882][ T6864] delete_channel: no stack [ 165.090483][ T6893] netlink: 'syz.3.300': attribute type 21 has an invalid length. [ 165.115307][ T6893] netlink: 132 bytes leftover after parsing attributes in process `syz.3.300'. [ 165.126891][ T6893] netlink: 28 bytes leftover after parsing attributes in process `syz.3.300'. [ 166.118353][ T6913] netlink: 'syz.1.305': attribute type 10 has an invalid length. [ 166.209074][ T6913] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.217026][ T6913] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.792174][ T6934] netlink: 'syz.2.310': attribute type 10 has an invalid length. [ 166.845324][ T6938] netlink: 1042 bytes leftover after parsing attributes in process `syz.0.312'. [ 167.284046][ T6948] netlink: 'syz.2.315': attribute type 21 has an invalid length. [ 167.319713][ T6948] netlink: 'syz.2.315': attribute type 20 has an invalid length. [ 167.834176][ T6964] netlink: 'syz.3.319': attribute type 10 has an invalid length. [ 167.866621][ T6964] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.874707][ T6964] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.897446][ T6964] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.904919][ T6964] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.913281][ T6964] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.920627][ T6964] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.017156][ T6964] team0: Port device bridge0 added [ 169.166736][ T6975] netlink: 14 bytes leftover after parsing attributes in process `syz.2.323'. [ 169.197285][ T6975] hsr_slave_0: left promiscuous mode [ 169.210753][ T6975] hsr_slave_1: left promiscuous mode [ 170.673114][ T6999] netlink: 1042 bytes leftover after parsing attributes in process `syz.2.332'. [ 171.497212][ T7021] netlink: 'syz.0.336': attribute type 4 has an invalid length. [ 171.541133][ T7021] netlink: 152 bytes leftover after parsing attributes in process `syz.0.336'. [ 172.009580][ T7029] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 172.027085][ T7031] FAULT_INJECTION: forcing a failure. [ 172.027085][ T7031] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 172.111268][ T7031] CPU: 1 PID: 7031 Comm: syz.2.340 Not tainted syzkaller #0 [ 172.118650][ T7031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 172.128755][ T7031] Call Trace: [ 172.132158][ T7031] [ 172.135112][ T7031] dump_stack_lvl+0x18c/0x250 [ 172.139822][ T7031] ? show_regs_print_info+0x20/0x20 [ 172.145145][ T7031] ? load_image+0x400/0x400 [ 172.149698][ T7031] ? __might_fault+0xaa/0x120 [ 172.154404][ T7031] ? __lock_acquire+0x7d40/0x7d40 [ 172.159451][ T7031] should_fail_ex+0x39d/0x4d0 [ 172.164173][ T7031] _copy_from_user+0x2f/0xe0 [ 172.168801][ T7031] ___sys_sendmsg+0x1c7/0x360 [ 172.173496][ T7031] ? get_pid_task+0x20/0x1e0 [ 172.178125][ T7031] ? __sys_sendmsg+0x2a0/0x2a0 [ 172.182959][ T7031] ? __lock_acquire+0x7d40/0x7d40 [ 172.188037][ T7031] __se_sys_sendmsg+0x1c2/0x2b0 [ 172.192909][ T7031] ? __x64_sys_sendmsg+0x80/0x80 [ 172.197877][ T7031] ? lockdep_hardirqs_on+0x98/0x150 [ 172.203114][ T7031] do_syscall_64+0x55/0xa0 [ 172.207594][ T7031] ? clear_bhb_loop+0x40/0x90 [ 172.212334][ T7031] ? clear_bhb_loop+0x40/0x90 [ 172.217142][ T7031] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 172.223095][ T7031] RIP: 0033:0x7f6c6239c629 [ 172.227710][ T7031] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.247412][ T7031] RSP: 002b:00007f6c6323b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 172.256125][ T7031] RAX: ffffffffffffffda RBX: 00007f6c62616090 RCX: 00007f6c6239c629 [ 172.264230][ T7031] RDX: 0000000000004004 RSI: 00002000000008c0 RDI: 0000000000000008 [ 172.272408][ T7031] RBP: 00007f6c6323b090 R08: 0000000000000000 R09: 0000000000000000 [ 172.280667][ T7031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.288663][ T7031] R13: 00007f6c62616128 R14: 00007f6c62616090 R15: 00007ffe268bbda8 [ 172.296690][ T7031] [ 172.540196][ T7034] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 173.265005][ T7054] netlink: 'syz.0.347': attribute type 21 has an invalid length. [ 173.312531][ T7054] netlink: 132 bytes leftover after parsing attributes in process `syz.0.347'. [ 173.364668][ T7054] netlink: 28 bytes leftover after parsing attributes in process `syz.0.347'. [ 173.802735][ T7060] netlink: 1042 bytes leftover after parsing attributes in process `syz.1.348'. [ 177.237207][ T7094] FAULT_INJECTION: forcing a failure. [ 177.237207][ T7094] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 177.254858][ T7094] CPU: 0 PID: 7094 Comm: syz.3.356 Not tainted syzkaller #0 [ 177.262225][ T7094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 177.272344][ T7094] Call Trace: [ 177.275663][ T7094] [ 177.278632][ T7094] dump_stack_lvl+0x18c/0x250 [ 177.283358][ T7094] ? show_regs_print_info+0x20/0x20 [ 177.288770][ T7094] ? load_image+0x400/0x400 [ 177.293310][ T7094] ? __lock_acquire+0x7d40/0x7d40 [ 177.298373][ T7094] should_fail_ex+0x39d/0x4d0 [ 177.303097][ T7094] _copy_from_user+0x2f/0xe0 [ 177.307721][ T7094] __copy_msghdr+0x3bb/0x580 [ 177.312524][ T7094] ___sys_sendmsg+0x214/0x360 [ 177.317256][ T7094] ? __sys_sendmsg+0x2a0/0x2a0 [ 177.322230][ T7094] __se_sys_sendmsg+0x1c2/0x2b0 [ 177.327238][ T7094] ? __x64_sys_sendmsg+0x80/0x80 [ 177.332247][ T7094] do_syscall_64+0x55/0xa0 [ 177.336689][ T7094] ? clear_bhb_loop+0x40/0x90 [ 177.341384][ T7094] ? clear_bhb_loop+0x40/0x90 [ 177.346259][ T7094] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 177.352261][ T7094] RIP: 0033:0x7ff15439c629 [ 177.356781][ T7094] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 177.376409][ T7094] RSP: 002b:00007ff1551ce028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 177.384906][ T7094] RAX: ffffffffffffffda RBX: 00007ff154615fa0 RCX: 00007ff15439c629 [ 177.392980][ T7094] RDX: 7e8166965e22236a RSI: 0000200000007940 RDI: 0000000000000007 [ 177.400983][ T7094] RBP: 00007ff1551ce090 R08: 0000000000000000 R09: 0000000000000000 [ 177.408963][ T7094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.417039][ T7094] R13: 00007ff154616038 R14: 00007ff154615fa0 R15: 00007ffcad98a108 [ 177.425211][ T7094] [ 177.470311][ T7103] netlink: 'syz.2.359': attribute type 2 has an invalid length. [ 177.483998][ T7103] netlink: 51 bytes leftover after parsing attributes in process `syz.2.359'. [ 177.495645][ T7103] FAULT_INJECTION: forcing a failure. [ 177.495645][ T7103] name failslab, interval 1, probability 0, space 0, times 0 [ 177.512708][ T7103] CPU: 1 PID: 7103 Comm: syz.2.359 Not tainted syzkaller #0 [ 177.520140][ T7103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 177.530404][ T7103] Call Trace: [ 177.533814][ T7103] [ 177.536783][ T7103] dump_stack_lvl+0x18c/0x250 [ 177.541545][ T7103] ? show_regs_print_info+0x20/0x20 [ 177.546868][ T7103] ? load_image+0x400/0x400 [ 177.551428][ T7103] ? verify_lock_unused+0x140/0x140 [ 177.556638][ T7103] ? perf_trace_lock+0xfc/0x3b0 [ 177.561602][ T7103] should_fail_ex+0x39d/0x4d0 [ 177.566475][ T7103] should_failslab+0x9/0x20 [ 177.571000][ T7103] slab_pre_alloc_hook+0x59/0x310 [ 177.576148][ T7103] kmem_cache_alloc+0x5a/0x2d0 [ 177.581114][ T7103] ? skb_clone+0x1eb/0x370 [ 177.585724][ T7103] skb_clone+0x1eb/0x370 [ 177.589984][ T7103] __netlink_deliver_tap+0x41c/0x830 [ 177.595299][ T7103] ? netlink_deliver_tap+0x2e/0x1b0 [ 177.600627][ T7103] netlink_deliver_tap+0x19c/0x1b0 [ 177.605754][ T7103] netlink_sendskb+0x68/0x130 [ 177.610634][ T7103] netlink_ack+0xce1/0x1180 [ 177.615153][ T7103] ? __dev_queue_xmit+0x26b/0x36b0 [ 177.620295][ T7103] ? netlink_dump+0xe50/0xe50 [ 177.624988][ T7103] ? perf_trace_lock+0xfc/0x3b0 [ 177.629865][ T7103] netlink_rcv_skb+0x2c5/0x4d0 [ 177.634643][ T7103] ? rtnetlink_bind+0x80/0x80 [ 177.639335][ T7103] ? netlink_ack+0x1180/0x1180 [ 177.644130][ T7103] ? __lock_acquire+0x7d40/0x7d40 [ 177.649197][ T7103] ? netlink_deliver_tap+0x2e/0x1b0 [ 177.654434][ T7103] netlink_unicast+0x751/0x8d0 [ 177.659242][ T7103] netlink_sendmsg+0x8d0/0xbf0 [ 177.664056][ T7103] ? netlink_getsockopt+0x590/0x590 [ 177.669305][ T7103] ? aa_sock_msg_perm+0x94/0x150 [ 177.674274][ T7103] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 177.679585][ T7103] ? security_socket_sendmsg+0x80/0xa0 [ 177.685072][ T7103] ? netlink_getsockopt+0x590/0x590 [ 177.690294][ T7103] ____sys_sendmsg+0x5ba/0x960 [ 177.695091][ T7103] ? __asan_memset+0x22/0x40 [ 177.699793][ T7103] ? __sys_sendmsg_sock+0x30/0x30 [ 177.704835][ T7103] ? __import_iovec+0x5f2/0x850 [ 177.709714][ T7103] ? import_iovec+0x73/0xa0 [ 177.714326][ T7103] ___sys_sendmsg+0x2a6/0x360 [ 177.719035][ T7103] ? __sys_sendmsg+0x2a0/0x2a0 [ 177.723839][ T7103] ? __lock_acquire+0x7d40/0x7d40 [ 177.728912][ T7103] __se_sys_sendmsg+0x1c2/0x2b0 [ 177.733780][ T7103] ? __x64_sys_sendmsg+0x80/0x80 [ 177.738747][ T7103] ? lockdep_hardirqs_on+0x98/0x150 [ 177.743960][ T7103] do_syscall_64+0x55/0xa0 [ 177.748739][ T7103] ? clear_bhb_loop+0x40/0x90 [ 177.753425][ T7103] ? clear_bhb_loop+0x40/0x90 [ 177.758227][ T7103] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 177.764137][ T7103] RIP: 0033:0x7f6c6239c629 [ 177.768563][ T7103] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 177.788181][ T7103] RSP: 002b:00007f6c6325c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 177.796612][ T7103] RAX: ffffffffffffffda RBX: 00007f6c62615fa0 RCX: 00007f6c6239c629 [ 177.804684][ T7103] RDX: 0000000000008094 RSI: 0000200000000080 RDI: 0000000000000003 [ 177.813007][ T7103] RBP: 00007f6c6325c090 R08: 0000000000000000 R09: 0000000000000000 [ 177.821002][ T7103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.829085][ T7103] R13: 00007f6c62616038 R14: 00007f6c62615fa0 R15: 00007ffe268bbda8 [ 177.837086][ T7103] [ 178.312732][ T7110] netlink: 'syz.2.361': attribute type 21 has an invalid length. [ 178.320638][ T7110] netlink: 132 bytes leftover after parsing attributes in process `syz.2.361'. [ 178.411197][ T7110] netlink: 28 bytes leftover after parsing attributes in process `syz.2.361'. [ 181.347134][ T7128] macsec0: entered promiscuous mode [ 181.371391][ T7128] macsec0: entered allmulticast mode [ 181.378439][ T7128] veth1_macvtap: entered allmulticast mode [ 181.830815][ T7142] mac80211_hwsim hwsim3 .3ãc¤±: renamed from wlan1 (while UP) [ 182.140190][ T7147] netlink: 'syz.3.369': attribute type 3 has an invalid length. [ 182.201492][ T7147] netlink: 152 bytes leftover after parsing attributes in process `syz.3.369'. [ 182.358322][ T7152] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.371'. [ 184.524136][ T7183] netlink: 'syz.0.381': attribute type 2 has an invalid length. [ 184.672274][ T7187] netlink: 14 bytes leftover after parsing attributes in process `syz.0.381'. [ 186.451985][ T7204] netlink: 'syz.0.388': attribute type 10 has an invalid length. [ 186.483310][ T7204] netlink: 40 bytes leftover after parsing attributes in process `syz.0.388'. [ 186.576950][ T7204] batman_adv: batadv0: Adding interface: veth0_vlan [ 186.609757][ T7204] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.644898][ T7204] batman_adv: batadv0: Interface activated: veth0_vlan [ 188.842091][ T7241] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.399'. [ 188.868472][ T7241] netlink: 4612 bytes leftover after parsing attributes in process `syz.0.399'. [ 188.880509][ T7241] netlink: 9 bytes leftover after parsing attributes in process `syz.0.399'. [ 190.261503][ T7254] netlink: 'syz.3.403': attribute type 3 has an invalid length. [ 190.326210][ T7254] netlink: 132 bytes leftover after parsing attributes in process `syz.3.403'. [ 190.933999][ T7266] netlink: 'syz.0.407': attribute type 21 has an invalid length. [ 190.946528][ T7266] netlink: 132 bytes leftover after parsing attributes in process `syz.0.407'. [ 190.962284][ T7266] netlink: 28 bytes leftover after parsing attributes in process `syz.0.407'. [ 191.020491][ T7268] netlink: 'syz.2.408': attribute type 10 has an invalid length. [ 191.145014][ T7271] lo: entered allmulticast mode [ 191.192098][ T7268] lo: entered promiscuous mode [ 191.196991][ T7268] lo: left allmulticast mode [ 192.079398][ T7290] FAULT_INJECTION: forcing a failure. [ 192.079398][ T7290] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 192.162447][ T7290] CPU: 0 PID: 7290 Comm: syz.1.413 Not tainted syzkaller #0 [ 192.169990][ T7290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 192.180253][ T7290] Call Trace: [ 192.183736][ T7290] [ 192.186781][ T7290] dump_stack_lvl+0x18c/0x250 [ 192.191500][ T7290] ? show_regs_print_info+0x20/0x20 [ 192.196735][ T7290] ? load_image+0x400/0x400 [ 192.201270][ T7290] ? __lock_acquire+0x7d40/0x7d40 [ 192.206336][ T7290] should_fail_ex+0x39d/0x4d0 [ 192.211162][ T7290] prepare_alloc_pages+0x1e2/0x5f0 [ 192.216318][ T7290] __alloc_pages+0x134/0x460 [ 192.221024][ T7290] ? zone_statistics+0x170/0x170 [ 192.226004][ T7290] ? alloc_pages+0x4dc/0x740 [ 192.230625][ T7290] ? do_raw_spin_unlock+0x121/0x230 [ 192.235863][ T7290] __get_free_pages+0xc/0x30 [ 192.240477][ T7290] kasan_populate_vmalloc_pte+0x35/0x100 [ 192.246144][ T7290] __apply_to_page_range+0x860/0xdd0 [ 192.251478][ T7290] ? kasan_populate_vmalloc+0x70/0x70 [ 192.256895][ T7290] ? apply_to_page_range+0x50/0x50 [ 192.262061][ T7290] ? do_raw_spin_unlock+0x121/0x230 [ 192.267309][ T7290] alloc_vmap_area+0x1d0c/0x1e30 [ 192.272301][ T7290] ? vm_map_ram+0xcb0/0xcb0 [ 192.276950][ T7290] ? rcu_is_watching+0x15/0xb0 [ 192.281851][ T7290] __get_vm_area_node+0x162/0x370 [ 192.287079][ T7290] __vmalloc_node_range+0x36e/0x1330 [ 192.292504][ T7290] ? bloom_map_alloc+0x22a/0x470 [ 192.297525][ T7290] ? end_current_label_crit_section+0x170/0x170 [ 192.303818][ T7290] ? free_vm_area+0x50/0x50 [ 192.308380][ T7290] bpf_map_area_alloc+0xf1/0x110 [ 192.313449][ T7290] ? bloom_map_alloc+0x22a/0x470 [ 192.318429][ T7290] bloom_map_alloc+0x22a/0x470 [ 192.323248][ T7290] map_create+0x877/0x12f0 [ 192.327703][ T7290] ? bpf_lsm_bpf+0x9/0x10 [ 192.332080][ T7290] __sys_bpf+0x651/0x890 [ 192.336357][ T7290] ? bpf_link_show_fdinfo+0x390/0x390 [ 192.341780][ T7290] ? lock_chain_count+0x20/0x20 [ 192.346681][ T7290] __x64_sys_bpf+0x7c/0x90 [ 192.351147][ T7290] do_syscall_64+0x55/0xa0 [ 192.355613][ T7290] ? clear_bhb_loop+0x40/0x90 [ 192.360398][ T7290] ? clear_bhb_loop+0x40/0x90 [ 192.365213][ T7290] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 192.371296][ T7290] RIP: 0033:0x7fbc6b99c629 [ 192.375793][ T7290] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.395616][ T7290] RSP: 002b:00007fbc6c7c8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 192.404143][ T7290] RAX: ffffffffffffffda RBX: 00007fbc6bc15fa0 RCX: 00007fbc6b99c629 [ 192.412143][ T7290] RDX: 0000000000000048 RSI: 0000200000000000 RDI: 0000000000000000 [ 192.420245][ T7290] RBP: 00007fbc6c7c8090 R08: 0000000000000000 R09: 0000000000000000 [ 192.428415][ T7290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 192.436584][ T7290] R13: 00007fbc6bc16038 R14: 00007fbc6bc15fa0 R15: 00007ffd16cca948 [ 192.444673][ T7290] [ 192.729049][ T7295] netlink: 'syz.3.415': attribute type 10 has an invalid length. [ 192.829959][ T7295] geneve0: entered promiscuous mode [ 193.551371][ T7305] netlink: 'syz.1.418': attribute type 10 has an invalid length. [ 193.585445][ T7305] netlink: 40 bytes leftover after parsing attributes in process `syz.1.418'. [ 193.634404][ T7305] batman_adv: batadv0: Adding interface: veth0_vlan [ 193.641617][ T7305] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.680893][ T7305] batman_adv: batadv0: Interface activated: veth0_vlan [ 193.749273][ T7310] netlink: 'syz.0.420': attribute type 21 has an invalid length. [ 193.769566][ T7310] netlink: 132 bytes leftover after parsing attributes in process `syz.0.420'. [ 193.799177][ T7310] netlink: 28 bytes leftover after parsing attributes in process `syz.0.420'. [ 194.632904][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.639495][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.669560][ T7326] netlink: 'syz.3.424': attribute type 41 has an invalid length. [ 194.765223][ T7326] netlink: 40 bytes leftover after parsing attributes in process `syz.3.424'. [ 195.323492][ T7336] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.428'. [ 195.344963][ T7336] netlink: 4612 bytes leftover after parsing attributes in process `syz.2.428'. [ 195.366598][ T7336] netlink: 9 bytes leftover after parsing attributes in process `syz.2.428'. [ 195.529379][ T7348] netlink: 'syz.2.431': attribute type 21 has an invalid length. [ 195.580564][ T7348] netlink: 132 bytes leftover after parsing attributes in process `syz.2.431'. [ 195.673223][ T7348] netlink: 28 bytes leftover after parsing attributes in process `syz.2.431'. [ 196.493196][ T7362] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 196.683501][ T5774] Bluetooth: hci3: command 0x0406 tx timeout [ 196.689948][ T5774] Bluetooth: hci1: command 0x0406 tx timeout [ 196.696457][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 196.696488][ T5781] Bluetooth: hci2: command 0x0406 tx timeout [ 196.893760][ T7375] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.440'. [ 196.906204][ T7375] netlink: 4612 bytes leftover after parsing attributes in process `syz.0.440'. [ 196.917482][ T7375] netlink: 9 bytes leftover after parsing attributes in process `syz.0.440'. [ 196.967288][ T7370] delete_channel: no stack [ 197.627249][ T7397] netlink: 'syz.1.448': attribute type 21 has an invalid length. [ 197.729788][ T7397] netlink: 132 bytes leftover after parsing attributes in process `syz.1.448'. [ 197.825994][ T7397] netlink: 28 bytes leftover after parsing attributes in process `syz.1.448'. [ 198.455038][ T7413] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.453'. [ 199.905704][ T7436] tipc: Started in network mode [ 199.911274][ T7436] tipc: Node identity b, cluster identity 73 [ 199.917325][ T7436] tipc: Node number set to 11 [ 200.068589][ T7433] netlink: 'syz.3.458': attribute type 3 has an invalid length. [ 200.076772][ T7433] netlink: 'syz.3.458': attribute type 9 has an invalid length. [ 200.562846][ T7451] netlink: 'syz.1.464': attribute type 21 has an invalid length. [ 200.576954][ T7451] __nla_validate_parse: 4 callbacks suppressed [ 200.576973][ T7451] netlink: 132 bytes leftover after parsing attributes in process `syz.1.464'. [ 200.593477][ T7451] netlink: 28 bytes leftover after parsing attributes in process `syz.1.464'. [ 200.728077][ T7454] ±ÿ: renamed from bridge_slave_0 (while UP) [ 201.579188][ T7466] netlink: 'syz.1.468': attribute type 10 has an invalid length. [ 201.631436][ T7466] netlink: 'syz.1.468': attribute type 10 has an invalid length. [ 201.673055][ T7466] netlink: 209216 bytes leftover after parsing attributes in process `syz.1.468'. [ 201.721398][ T7466] openvswitch: netlink: Message has 4 unknown bytes. [ 203.304601][ T7491] netlink: 'syz.1.476': attribute type 21 has an invalid length. [ 203.331287][ T7491] netlink: 132 bytes leftover after parsing attributes in process `syz.1.476'. [ 203.387153][ T7491] netlink: 28 bytes leftover after parsing attributes in process `syz.1.476'. [ 204.579182][ T7508] delete_channel: no stack [ 204.709335][ T7523] netlink: 'syz.0.486': attribute type 2 has an invalid length. [ 205.377842][ T7533] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.489'. [ 205.416793][ T7533] netlink: 4612 bytes leftover after parsing attributes in process `syz.0.489'. [ 205.473827][ T7533] netlink: 9 bytes leftover after parsing attributes in process `syz.0.489'. [ 206.122102][ T7539] netlink: 'syz.3.491': attribute type 21 has an invalid length. [ 206.129986][ T7539] netlink: 132 bytes leftover after parsing attributes in process `syz.3.491'. [ 206.161008][ T7539] netlink: 28 bytes leftover after parsing attributes in process `syz.3.491'. [ 208.252184][ T7580] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.502'. [ 208.341029][ T7580] netlink: 6320 bytes leftover after parsing attributes in process `syz.0.502'. [ 208.350140][ T7580] tc_dump_action: action bad kind [ 209.187648][ T7599] netlink: 'syz.0.506': attribute type 21 has an invalid length. [ 209.199326][ T7599] netlink: 132 bytes leftover after parsing attributes in process `syz.0.506'. [ 209.215725][ T7599] netlink: 28 bytes leftover after parsing attributes in process `syz.0.506'. [ 210.201197][ T7615] netlink: 'syz.1.509': attribute type 10 has an invalid length. [ 210.285932][ T7615] bridge_slave_1: left allmulticast mode [ 210.348844][ T7615] bridge_slave_1: left promiscuous mode [ 210.424603][ T7615] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.703454][ T7648] netlink: 'syz.0.520': attribute type 21 has an invalid length. [ 213.725704][ T7648] netlink: 132 bytes leftover after parsing attributes in process `syz.0.520'. [ 213.772175][ T7648] netlink: 28 bytes leftover after parsing attributes in process `syz.0.520'. [ 214.571118][ T7650] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.521'. [ 214.764574][ T7661] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 219.300396][ T7693] netlink: 'syz.1.533': attribute type 21 has an invalid length. [ 219.331515][ T7693] IPv6: NLM_F_CREATE should be specified when creating new route [ 219.457941][ T7696] netlink: 'syz.1.533': attribute type 2 has an invalid length. [ 219.466318][ T7696] netlink: 146896 bytes leftover after parsing attributes in process `syz.1.533'. [ 219.627502][ T7694] netlink: 'syz.0.534': attribute type 10 has an invalid length. [ 219.670703][ T7694] bridge_slave_1: left allmulticast mode [ 219.677015][ T7694] bridge_slave_1: left promiscuous mode [ 219.683497][ T7694] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.553838][ T7705] netlink: 'syz.0.536': attribute type 2 has an invalid length. [ 220.580772][ T7705] netlink: 51 bytes leftover after parsing attributes in process `syz.0.536'. [ 220.590105][ T7705] FAULT_INJECTION: forcing a failure. [ 220.590105][ T7705] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 220.661066][ T7705] CPU: 1 PID: 7705 Comm: syz.0.536 Not tainted syzkaller #0 [ 220.668438][ T7705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 220.678617][ T7705] Call Trace: [ 220.681923][ T7705] [ 220.684879][ T7705] dump_stack_lvl+0x18c/0x250 [ 220.689610][ T7705] ? show_regs_print_info+0x20/0x20 [ 220.694846][ T7705] ? load_image+0x400/0x400 [ 220.699389][ T7705] ? __lock_acquire+0x7d40/0x7d40 [ 220.704461][ T7705] ? snprintf+0xe9/0x140 [ 220.708828][ T7705] should_fail_ex+0x39d/0x4d0 [ 220.713553][ T7705] _copy_to_user+0x2f/0xa0 [ 220.718182][ T7705] simple_read_from_buffer+0xe7/0x150 [ 220.723691][ T7705] proc_fail_nth_read+0x1e8/0x260 [ 220.728764][ T7705] ? proc_fault_inject_write+0x360/0x360 [ 220.734443][ T7705] ? fsnotify_perm+0x271/0x5e0 [ 220.739339][ T7705] ? proc_fault_inject_write+0x360/0x360 [ 220.745017][ T7705] vfs_read+0x28b/0x970 [ 220.749406][ T7705] ? kernel_read+0x1e0/0x1e0 [ 220.754036][ T7705] ? __fget_files+0x28/0x4b0 [ 220.758671][ T7705] ? __fget_files+0x28/0x4b0 [ 220.763399][ T7705] ? __fget_files+0x43d/0x4b0 [ 220.768125][ T7705] ? __fdget_pos+0x2a3/0x330 [ 220.772758][ T7705] ? ksys_read+0x75/0x260 [ 220.777111][ T7705] ksys_read+0x150/0x260 [ 220.781376][ T7705] ? vfs_write+0x990/0x990 [ 220.785810][ T7705] ? lockdep_hardirqs_on+0x98/0x150 [ 220.791116][ T7705] do_syscall_64+0x55/0xa0 [ 220.795549][ T7705] ? clear_bhb_loop+0x40/0x90 [ 220.800243][ T7705] ? clear_bhb_loop+0x40/0x90 [ 220.804941][ T7705] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 220.810870][ T7705] RIP: 0033:0x7efddc95cece [ 220.815412][ T7705] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 220.835141][ T7705] RSP: 002b:00007efddd8c8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 220.843584][ T7705] RAX: ffffffffffffffda RBX: 00007efddd8c96c0 RCX: 00007efddc95cece [ 220.851788][ T7705] RDX: 000000000000000f RSI: 00007efddd8c90a0 RDI: 0000000000000004 [ 220.859796][ T7705] RBP: 00007efddd8c9090 R08: 0000000000000000 R09: 0000000000000000 [ 220.867795][ T7705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 220.875788][ T7705] R13: 00007efddcc16038 R14: 00007efddcc15fa0 R15: 00007ffc975575c8 [ 220.883784][ T7705] [ 221.837538][ T7717] syzkaller0: entered promiscuous mode [ 221.872702][ T7717] syzkaller0: entered allmulticast mode [ 222.302690][ T7727] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.542'. [ 222.314697][ T7725] netlink: 'syz.1.541': attribute type 2 has an invalid length. [ 222.325680][ T7725] netlink: 51 bytes leftover after parsing attributes in process `syz.1.541'. [ 222.405736][ T7727] netlink: 4612 bytes leftover after parsing attributes in process `syz.2.542'. [ 222.416043][ T7727] netlink: 9 bytes leftover after parsing attributes in process `syz.2.542'. [ 224.743708][ T7734] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.543'. [ 224.752882][ T7734] bridge_slave_1: default FDB implementation only supports local addresses [ 225.231045][ T7741] netlink: 'syz.2.545': attribute type 10 has an invalid length. [ 227.407303][ T7764] FAULT_INJECTION: forcing a failure. [ 227.407303][ T7764] name failslab, interval 1, probability 0, space 0, times 0 [ 227.558159][ T7764] CPU: 1 PID: 7764 Comm: syz.1.550 Not tainted syzkaller #0 [ 227.565556][ T7764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 227.575656][ T7764] Call Trace: [ 227.578966][ T7764] [ 227.581931][ T7764] dump_stack_lvl+0x18c/0x250 [ 227.586849][ T7764] ? show_regs_print_info+0x20/0x20 [ 227.592108][ T7764] ? load_image+0x400/0x400 [ 227.596653][ T7764] ? __might_sleep+0xe0/0xe0 [ 227.601293][ T7764] ? __lock_acquire+0x7d40/0x7d40 [ 227.606368][ T7764] should_fail_ex+0x39d/0x4d0 [ 227.611096][ T7764] should_failslab+0x9/0x20 [ 227.615638][ T7764] slab_pre_alloc_hook+0x59/0x310 [ 227.620705][ T7764] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 227.626457][ T7764] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 227.632295][ T7764] __kmem_cache_alloc_node+0x53/0x250 [ 227.637795][ T7764] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 227.643564][ T7764] __kmalloc+0xa4/0x230 [ 227.648113][ T7764] tomoyo_realpath_from_path+0xe3/0x5d0 [ 227.653721][ T7764] tomoyo_path_number_perm+0x248/0x620 [ 227.659315][ T7764] ? tomoyo_path_number_perm+0x217/0x620 [ 227.664994][ T7764] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 227.670499][ T7764] ? ktime_get+0x7f/0x280 [ 227.674975][ T7764] ? __fget_files+0x28/0x4b0 [ 227.679594][ T7764] ? __fget_files+0x28/0x4b0 [ 227.684241][ T7764] security_file_ioctl+0x70/0xa0 [ 227.689233][ T7764] __se_sys_ioctl+0x48/0x170 [ 227.693870][ T7764] do_syscall_64+0x55/0xa0 [ 227.698328][ T7764] ? clear_bhb_loop+0x40/0x90 [ 227.703037][ T7764] ? clear_bhb_loop+0x40/0x90 [ 227.707842][ T7764] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 227.713791][ T7764] RIP: 0033:0x7fbc6b99c629 [ 227.718344][ T7764] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.738068][ T7764] RSP: 002b:00007fbc6c7a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 227.746614][ T7764] RAX: ffffffffffffffda RBX: 00007fbc6bc16090 RCX: 00007fbc6b99c629 [ 227.754699][ T7764] RDX: 0000200000000040 RSI: 000000004030582a RDI: 0000000000000009 [ 227.762682][ T7764] RBP: 00007fbc6c7a7090 R08: 0000000000000000 R09: 0000000000000000 [ 227.770754][ T7764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 227.778746][ T7764] R13: 00007fbc6bc16128 R14: 00007fbc6bc16090 R15: 00007ffd16cca948 [ 227.786759][ T7764] [ 227.844109][ T7764] ERROR: Out of memory at tomoyo_realpath_from_path. [ 228.135983][ T7769] netlink: 'syz.2.552': attribute type 2 has an invalid length. [ 228.199095][ T7769] netlink: 51 bytes leftover after parsing attributes in process `syz.2.552'. [ 228.237340][ T7772] netlink: 'syz.3.553': attribute type 2 has an invalid length. [ 228.310721][ T7775] netlink: 14 bytes leftover after parsing attributes in process `syz.3.553'. [ 228.426281][ T7780] syz.1.556[7780] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 229.786224][ T7808] netlink: 168 bytes leftover after parsing attributes in process `syz.2.566'. [ 230.539643][ T7819] netlink: 'syz.3.568': attribute type 2 has an invalid length. [ 230.561220][ T7819] netlink: 51 bytes leftover after parsing attributes in process `syz.3.568'. [ 230.786466][ T7829] netlink: 'syz.3.573': attribute type 41 has an invalid length. [ 230.806359][ T7829] netlink: 40 bytes leftover after parsing attributes in process `syz.3.573'. [ 230.868936][ T7831] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.572'. [ 230.879212][ T7831] netlink: 4612 bytes leftover after parsing attributes in process `syz.1.572'. [ 230.890262][ T7831] netlink: 9 bytes leftover after parsing attributes in process `syz.1.572'. [ 232.940152][ T7860] À: port 1(vlan0) entered blocking state [ 232.993798][ T7860] À: port 1(vlan0) entered disabled state [ 233.007964][ T7860] vlan0: entered allmulticast mode [ 233.028119][ T7860] veth0_vlan: entered allmulticast mode [ 233.057267][ T7860] vlan0: entered promiscuous mode [ 233.094757][ T7863] netlink: 'syz.0.582': attribute type 2 has an invalid length. [ 233.104870][ T7863] netlink: 51 bytes leftover after parsing attributes in process `syz.0.582'. [ 233.119266][ T7865] netlink: 'syz.1.585': attribute type 10 has an invalid length. [ 233.184574][ T7862] À: port 1(vlan0) entered blocking state [ 233.190714][ T7862] À: port 1(vlan0) entered forwarding state [ 233.464870][ T7873] FAULT_INJECTION: forcing a failure. [ 233.464870][ T7873] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 233.510513][ T7873] CPU: 0 PID: 7873 Comm: syz.1.587 Not tainted syzkaller #0 [ 233.517975][ T7873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 233.528168][ T7873] Call Trace: [ 233.531493][ T7873] [ 233.534458][ T7873] dump_stack_lvl+0x18c/0x250 [ 233.539272][ T7873] ? show_regs_print_info+0x20/0x20 [ 233.544527][ T7873] ? load_image+0x400/0x400 [ 233.549169][ T7873] ? __lock_acquire+0x7d40/0x7d40 [ 233.554235][ T7873] should_fail_ex+0x39d/0x4d0 [ 233.558954][ T7873] prepare_alloc_pages+0x1e2/0x5f0 [ 233.561972][ T7876] netlink: 'syz.3.588': attribute type 2 has an invalid length. [ 233.564090][ T7873] __alloc_pages+0x134/0x460 [ 233.576440][ T7873] ? zone_statistics+0x170/0x170 [ 233.581502][ T7873] ? alloc_pages+0x4dc/0x740 [ 233.586121][ T7873] ? do_raw_spin_unlock+0x121/0x230 [ 233.591082][ T7876] netlink: 132 bytes leftover after parsing attributes in process `syz.3.588'. [ 233.591437][ T7873] __get_free_pages+0xc/0x30 [ 233.605227][ T7873] kasan_populate_vmalloc_pte+0x35/0x100 [ 233.611083][ T7873] __apply_to_page_range+0x860/0xdd0 [ 233.616424][ T7873] ? kasan_populate_vmalloc+0x70/0x70 [ 233.621840][ T7873] ? apply_to_page_range+0x50/0x50 [ 233.627006][ T7873] ? do_raw_spin_unlock+0x121/0x230 [ 233.632441][ T7873] alloc_vmap_area+0x1d0c/0x1e30 [ 233.637447][ T7873] ? vm_map_ram+0xcb0/0xcb0 [ 233.642701][ T7873] ? rcu_is_watching+0x15/0xb0 [ 233.647526][ T7873] __get_vm_area_node+0x162/0x370 [ 233.652617][ T7873] __vmalloc_node_range+0x36e/0x1330 [ 233.657958][ T7873] ? bloom_map_alloc+0x22a/0x470 [ 233.662975][ T7873] ? end_current_label_crit_section+0x170/0x170 [ 233.669267][ T7873] ? free_vm_area+0x50/0x50 [ 233.673829][ T7873] bpf_map_area_alloc+0xf1/0x110 [ 233.678826][ T7873] ? bloom_map_alloc+0x22a/0x470 [ 233.683823][ T7873] bloom_map_alloc+0x22a/0x470 [ 233.688647][ T7873] map_create+0x877/0x12f0 [ 233.693101][ T7873] ? bpf_lsm_bpf+0x9/0x10 [ 233.697487][ T7873] __sys_bpf+0x651/0x890 [ 233.701806][ T7873] ? bpf_link_show_fdinfo+0x390/0x390 [ 233.707245][ T7873] ? lock_chain_count+0x20/0x20 [ 233.712148][ T7873] __x64_sys_bpf+0x7c/0x90 [ 233.716612][ T7873] do_syscall_64+0x55/0xa0 [ 233.721496][ T7873] ? clear_bhb_loop+0x40/0x90 [ 233.726301][ T7873] ? clear_bhb_loop+0x40/0x90 [ 233.731287][ T7873] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 233.737234][ T7873] RIP: 0033:0x7fbc6b99c629 [ 233.741789][ T7873] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.762050][ T7873] RSP: 002b:00007fbc6c7c8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 233.770512][ T7873] RAX: ffffffffffffffda RBX: 00007fbc6bc15fa0 RCX: 00007fbc6b99c629 [ 233.778531][ T7873] RDX: 0000000000000048 RSI: 0000200000000000 RDI: 0000000000000000 [ 233.786547][ T7873] RBP: 00007fbc6c7c8090 R08: 0000000000000000 R09: 0000000000000000 [ 233.794577][ T7873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 233.802589][ T7873] R13: 00007fbc6bc16038 R14: 00007fbc6bc15fa0 R15: 00007ffd16cca948 [ 233.810674][ T7873] [ 234.238986][ T7925] netlink: 'syz.3.594': attribute type 10 has an invalid length. [ 234.277933][ T7925] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 235.747093][ T7966] netlink: 'syz.0.601': attribute type 21 has an invalid length. [ 235.771260][ T7966] netlink: 132 bytes leftover after parsing attributes in process `syz.0.601'. [ 235.780329][ T7966] netlink: 28 bytes leftover after parsing attributes in process `syz.0.601'. [ 236.896725][ T7981] netlink: 188 bytes leftover after parsing attributes in process `syz.1.606'. [ 237.530418][ T7989] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.615'. [ 237.611506][ T7989] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.615'. [ 237.823655][ T7990] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.615'. [ 239.699108][ T8011] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 239.827289][ T8013] netlink: 'syz.0.613': attribute type 21 has an invalid length. [ 239.837949][ T8013] netlink: 132 bytes leftover after parsing attributes in process `syz.0.613'. [ 239.856381][ T8013] netlink: 28 bytes leftover after parsing attributes in process `syz.0.613'. [ 240.247780][ T8024] netlink: 60 bytes leftover after parsing attributes in process `syz.0.617'. [ 240.882155][ T8029] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.618'. [ 240.905268][ T8032] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 240.925670][ T8029] netlink: 4612 bytes leftover after parsing attributes in process `syz.0.618'. [ 240.963689][ T8029] netlink: 9 bytes leftover after parsing attributes in process `syz.0.618'. [ 241.199205][ T8042] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 241.206417][ T8042] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 241.469402][ T8050] netlink: 'syz.2.625': attribute type 21 has an invalid length. [ 241.517994][ T8050] netlink: 132 bytes leftover after parsing attributes in process `syz.2.625'. [ 241.551690][ T8050] netlink: 28 bytes leftover after parsing attributes in process `syz.2.625'. [ 241.566701][ T8046] netlink: 56537 bytes leftover after parsing attributes in process `syz.1.623'. [ 242.365830][ T8055] netlink: 60 bytes leftover after parsing attributes in process `syz.1.627'. [ 242.627363][ T8059] netlink: 'syz.0.629': attribute type 3 has an invalid length. [ 242.654133][ T8059] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.629'. [ 243.446060][ T8068] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.632'. [ 243.474388][ T8073] netlink: 56537 bytes leftover after parsing attributes in process `syz.2.634'. [ 243.604594][ T8078] netlink: 'syz.1.635': attribute type 11 has an invalid length. [ 243.643393][ T8080] netlink: 'syz.2.636': attribute type 21 has an invalid length. [ 244.487958][ T8095] netlink: 'syz.2.641': attribute type 3 has an invalid length. [ 244.972053][ T8114] netlink: 'syz.0.647': attribute type 21 has an invalid length. [ 245.011970][ T8116] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 245.072546][ T8116] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 245.188217][ T8116] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 245.201577][ T8116] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 246.511602][ T8154] netlink: 'syz.0.659': attribute type 21 has an invalid length. [ 246.524791][ T8154] __nla_validate_parse: 13 callbacks suppressed [ 246.524820][ T8154] netlink: 132 bytes leftover after parsing attributes in process `syz.0.659'. [ 246.555276][ T8154] netlink: 28 bytes leftover after parsing attributes in process `syz.0.659'. [ 246.943308][ T8169] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.662'. [ 246.961676][ T8169] netlink: 6332 bytes leftover after parsing attributes in process `syz.3.662'. [ 248.052880][ T8185] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.715067][ T8191] netlink: 'syz.3.672': attribute type 21 has an invalid length. [ 248.773072][ T8191] netlink: 132 bytes leftover after parsing attributes in process `syz.3.672'. [ 248.833688][ T8191] netlink: 28 bytes leftover after parsing attributes in process `syz.3.672'. [ 249.051707][ T8198] netlink: 164 bytes leftover after parsing attributes in process `syz.2.673'. [ 249.749862][ T8208] netlink: 'syz.3.678': attribute type 10 has an invalid length. [ 250.808277][ T8227] netlink: 'syz.0.683': attribute type 10 has an invalid length. [ 250.854117][ T8227] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.683'. [ 250.872836][ T8225] netlink: 14 bytes leftover after parsing attributes in process `syz.1.684'. [ 250.910841][ T8227] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 250.936371][ T8225] hsr_slave_0: left promiscuous mode [ 251.179232][ T8225] hsr_slave_1: left promiscuous mode [ 251.478951][ T8239] FAULT_INJECTION: forcing a failure. [ 251.478951][ T8239] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 251.519428][ T8239] CPU: 0 PID: 8239 Comm: syz.2.687 Not tainted syzkaller #0 [ 251.526886][ T8239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 251.537079][ T8239] Call Trace: [ 251.540396][ T8239] [ 251.543356][ T8239] dump_stack_lvl+0x18c/0x250 [ 251.548080][ T8239] ? show_regs_print_info+0x20/0x20 [ 251.553301][ T8239] ? load_image+0x400/0x400 [ 251.557825][ T8239] ? __lock_acquire+0x7d40/0x7d40 [ 251.562967][ T8239] ? verify_lock_unused+0x140/0x140 [ 251.568186][ T8239] should_fail_ex+0x39d/0x4d0 [ 251.572890][ T8239] prepare_alloc_pages+0x1e2/0x5f0 [ 251.578117][ T8239] __alloc_pages+0x134/0x460 [ 251.582724][ T8239] ? zone_statistics+0x170/0x170 [ 251.587678][ T8239] ? mt_find+0x169/0x650 [ 251.591954][ T8239] ? handle_mm_fault+0xe7/0x4c00 [ 251.596910][ T8239] __folio_alloc+0x10/0x20 [ 251.601358][ T8239] vma_alloc_folio+0x47a/0x8f0 [ 251.606155][ T8239] handle_mm_fault+0x1b3b/0x4c00 [ 251.611123][ T8239] ? handle_mm_fault+0xe7/0x4c00 [ 251.616125][ T8239] ? numa_migrate_prep+0x350/0x350 [ 251.621291][ T8239] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 251.626608][ T8239] do_user_addr_fault+0x730/0x12c0 [ 251.632320][ T8239] exc_page_fault+0x64/0x100 [ 251.636945][ T8239] asm_exc_page_fault+0x26/0x30 [ 251.641810][ T8239] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 251.647643][ T8239] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 251.667464][ T8239] RSP: 0018:ffffc900032b7bb0 EFLAGS: 00050202 [ 251.673725][ T8239] RAX: ffffffff84297401 RBX: 0000000000024932 RCX: 0000000000000564 [ 251.681714][ T8239] RDX: 0000000000000000 RSI: ffff88805b3a44cd RDI: 0000200000049000 [ 251.689867][ T8239] RBP: ffffc900032b7d20 R08: 0000000000000000 R09: 0000000000000001 [ 251.697935][ T8239] R10: dffffc0000000000 R11: ffffed100b674946 R12: 0000200000049564 [ 251.705943][ T8239] R13: 1ffff92000656f90 R14: 0000200000024c32 R15: ffff88805b3800ff [ 251.714023][ T8239] ? _copy_to_user+0x21/0xa0 [ 251.718678][ T8239] _copy_to_user+0x85/0xa0 [ 251.723198][ T8239] generic_map_lookup_batch+0x8bd/0xc60 [ 251.728859][ T8239] ? bpf_map_update_value+0x720/0x720 [ 251.734247][ T8239] ? __fdget+0x180/0x210 [ 251.738509][ T8239] ? bpf_map_update_value+0x720/0x720 [ 251.743976][ T8239] bpf_map_do_batch+0x2cb/0x610 [ 251.748842][ T8239] ? bpf_lsm_bpf+0x9/0x10 [ 251.753191][ T8239] ? security_bpf+0x7e/0xa0 [ 251.757720][ T8239] __sys_bpf+0x7d7/0x890 [ 251.762073][ T8239] ? bpf_link_show_fdinfo+0x390/0x390 [ 251.767474][ T8239] ? lock_chain_count+0x20/0x20 [ 251.772345][ T8239] __x64_sys_bpf+0x7c/0x90 [ 251.776919][ T8239] do_syscall_64+0x55/0xa0 [ 251.781352][ T8239] ? clear_bhb_loop+0x40/0x90 [ 251.786143][ T8239] ? clear_bhb_loop+0x40/0x90 [ 251.790837][ T8239] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 251.796829][ T8239] RIP: 0033:0x7f6c6239c629 [ 251.801267][ T8239] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 251.820996][ T8239] RSP: 002b:00007f6c6323b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 251.829597][ T8239] RAX: ffffffffffffffda RBX: 00007f6c62616090 RCX: 00007f6c6239c629 [ 251.837700][ T8239] RDX: 0000000000000038 RSI: 0000200000000480 RDI: 0000000000000018 [ 251.845856][ T8239] RBP: 00007f6c6323b090 R08: 0000000000000000 R09: 0000000000000000 [ 251.853925][ T8239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 251.862430][ T8239] R13: 00007f6c62616128 R14: 00007f6c62616090 R15: 00007ffe268bbda8 [ 251.870434][ T8239] [ 251.986173][ T8235] netlink: 'syz.3.686': attribute type 21 has an invalid length. [ 251.995646][ T8235] netlink: 132 bytes leftover after parsing attributes in process `syz.3.686'. [ 252.005623][ T8235] netlink: 28 bytes leftover after parsing attributes in process `syz.3.686'. [ 253.122177][ T8258] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 253.160213][ T8258] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 253.292366][ T8258] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 253.299848][ T8258] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 253.459920][ T8258] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 253.499944][ T8258] batman_adv: batadv0: Removing interface: veth0_vlan [ 255.335959][ T8278] netlink: 'syz.0.699': attribute type 21 has an invalid length. [ 255.345229][ T8278] netlink: 132 bytes leftover after parsing attributes in process `syz.0.699'. [ 255.354676][ T8278] netlink: 28 bytes leftover after parsing attributes in process `syz.0.699'. [ 255.567669][ T8287] FAULT_INJECTION: forcing a failure. [ 255.567669][ T8287] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 255.582181][ T8287] CPU: 1 PID: 8287 Comm: syz.3.702 Not tainted syzkaller #0 [ 255.589625][ T8287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 255.599894][ T8287] Call Trace: [ 255.603213][ T8287] [ 255.606176][ T8287] dump_stack_lvl+0x18c/0x250 [ 255.610975][ T8287] ? show_regs_print_info+0x20/0x20 [ 255.616228][ T8287] ? load_image+0x400/0x400 [ 255.620787][ T8287] ? __lock_acquire+0x7d40/0x7d40 [ 255.625956][ T8287] ? __virt_addr_valid+0x18c/0x540 [ 255.631228][ T8287] should_fail_ex+0x39d/0x4d0 [ 255.635966][ T8287] _copy_from_user+0x2f/0xe0 [ 255.640694][ T8287] bpf_vlog_reverse_ubuf+0x141/0x3c0 [ 255.646132][ T8287] bpf_vlog_finalize+0x182/0x3f0 [ 255.651301][ T8287] btf_new_fd+0x4ca/0x9f0 [ 255.655690][ T8287] ? bpf_btf_show_fdinfo+0x80/0x80 [ 255.661134][ T8287] ? capable+0x88/0xe0 [ 255.665429][ T8287] __sys_bpf+0x670/0x890 [ 255.669723][ T8287] ? bpf_link_show_fdinfo+0x390/0x390 [ 255.675199][ T8287] ? lock_chain_count+0x20/0x20 [ 255.680212][ T8287] __x64_sys_bpf+0x7c/0x90 [ 255.684684][ T8287] do_syscall_64+0x55/0xa0 [ 255.689148][ T8287] ? clear_bhb_loop+0x40/0x90 [ 255.693870][ T8287] ? clear_bhb_loop+0x40/0x90 [ 255.698603][ T8287] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 255.704625][ T8287] RIP: 0033:0x7ff15439c629 [ 255.709077][ T8287] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 255.728717][ T8287] RSP: 002b:00007ff1551ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 255.737146][ T8287] RAX: ffffffffffffffda RBX: 00007ff154615fa0 RCX: 00007ff15439c629 [ 255.745129][ T8287] RDX: 0000000000000028 RSI: 0000200000000040 RDI: 0000000000000012 [ 255.753109][ T8287] RBP: 00007ff1551ce090 R08: 0000000000000000 R09: 0000000000000000 [ 255.761179][ T8287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 255.769155][ T8287] R13: 00007ff154616038 R14: 00007ff154615fa0 R15: 00007ffcad98a108 [ 255.777147][ T8287] [ 256.726984][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.733487][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.937733][ T8289] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 257.490764][ T8299] netlink: 'syz.1.705': attribute type 10 has an invalid length. [ 259.702194][ T8323] FAULT_INJECTION: forcing a failure. [ 259.702194][ T8323] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 259.750075][ T8323] CPU: 0 PID: 8323 Comm: syz.0.712 Not tainted syzkaller #0 [ 259.757457][ T8323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 259.767553][ T8323] Call Trace: [ 259.770871][ T8323] [ 259.773845][ T8323] dump_stack_lvl+0x18c/0x250 [ 259.778579][ T8323] ? show_regs_print_info+0x20/0x20 [ 259.783919][ T8323] ? load_image+0x400/0x400 [ 259.788469][ T8323] ? __might_fault+0xaa/0x120 [ 259.793184][ T8323] ? __lock_acquire+0x7d40/0x7d40 [ 259.798263][ T8323] should_fail_ex+0x39d/0x4d0 [ 259.802986][ T8323] _copy_from_user+0x2f/0xe0 [ 259.807623][ T8323] ____sys_sendmsg+0x2fd/0x960 [ 259.812426][ T8323] ? __lock_acquire+0x7d40/0x7d40 [ 259.817496][ T8323] ? __sys_sendmsg_sock+0x30/0x30 [ 259.822558][ T8323] ? __import_iovec+0x3fa/0x850 [ 259.827488][ T8323] ? import_iovec+0x73/0xa0 [ 259.832055][ T8323] ___sys_sendmsg+0x2a6/0x360 [ 259.836808][ T8323] ? __sys_sendmsg+0x2a0/0x2a0 [ 259.841697][ T8323] ? __lock_acquire+0x7d40/0x7d40 [ 259.846785][ T8323] __se_sys_sendmsg+0x1c2/0x2b0 [ 259.851674][ T8323] ? __x64_sys_sendmsg+0x80/0x80 [ 259.856655][ T8323] ? lockdep_hardirqs_on+0x98/0x150 [ 259.861888][ T8323] do_syscall_64+0x55/0xa0 [ 259.866328][ T8323] ? clear_bhb_loop+0x40/0x90 [ 259.871024][ T8323] ? clear_bhb_loop+0x40/0x90 [ 259.875803][ T8323] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 259.881713][ T8323] RIP: 0033:0x7efddc99c629 [ 259.886144][ T8323] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 259.905762][ T8323] RSP: 002b:00007efddd8a8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 259.914280][ T8323] RAX: ffffffffffffffda RBX: 00007efddcc16090 RCX: 00007efddc99c629 [ 259.922275][ T8323] RDX: 7e8166965e22236a RSI: 0000200000007940 RDI: 0000000000000007 [ 259.930256][ T8323] RBP: 00007efddd8a8090 R08: 0000000000000000 R09: 0000000000000000 [ 259.938410][ T8323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 259.946396][ T8323] R13: 00007efddcc16128 R14: 00007efddcc16090 R15: 00007ffc975575c8 [ 259.954394][ T8323] [ 260.016875][ T8316] netlink: 'syz.1.711': attribute type 21 has an invalid length. [ 260.025740][ T8316] netlink: 132 bytes leftover after parsing attributes in process `syz.1.711'. [ 260.036728][ T8316] netlink: 28 bytes leftover after parsing attributes in process `syz.1.711'. [ 260.269489][ T8325] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 260.521519][ T8331] netlink: 'syz.0.716': attribute type 10 has an invalid length. [ 260.536508][ T8331] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.467369][ T8351] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.722'. [ 266.987232][ T8363] netlink: 'syz.0.724': attribute type 21 has an invalid length. [ 266.997436][ T8363] netlink: 132 bytes leftover after parsing attributes in process `syz.0.724'. [ 267.007032][ T8363] netlink: 28 bytes leftover after parsing attributes in process `syz.0.724'. [ 267.425952][ T8365] syzkaller0: entered promiscuous mode [ 267.431899][ T8365] syzkaller0: entered allmulticast mode [ 267.830440][ T5084] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 267.848302][ T5084] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 267.862455][ T5084] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 267.871797][ T5084] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 267.879965][ T5084] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 267.888055][ T5084] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 268.116752][ T8377] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 270.044953][ T5084] Bluetooth: hci4: command tx timeout [ 271.284062][ T8398] netlink: 'syz.0.735': attribute type 21 has an invalid length. [ 271.295021][ T8398] netlink: 132 bytes leftover after parsing attributes in process `syz.0.735'. [ 271.304623][ T8398] netlink: 28 bytes leftover after parsing attributes in process `syz.0.735'. [ 271.400291][ T8410] netlink: 'syz.1.738': attribute type 10 has an invalid length. [ 271.420767][ T8410] netlink: 2 bytes leftover after parsing attributes in process `syz.1.738'. [ 272.121320][ T5084] Bluetooth: hci4: command tx timeout [ 272.331741][ T8380] chnl_net:caif_netlink_parms(): no params data found [ 273.169028][ T8380] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.192128][ T8380] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.199977][ T8380] bridge_slave_0: entered allmulticast mode [ 273.217611][ T8380] bridge_slave_0: entered promiscuous mode [ 273.243594][ T8380] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.251109][ T8380] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.258463][ T8380] bridge_slave_1: entered allmulticast mode [ 273.365506][ T8380] bridge_slave_1: entered promiscuous mode [ 273.762427][ T8380] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 273.825763][ T8380] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.097927][ T8380] team0: Port device team_slave_0 added [ 274.149585][ T8380] team0: Port device team_slave_1 added [ 274.201189][ T5084] Bluetooth: hci4: command tx timeout [ 274.366098][ T8380] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 274.419800][ T8380] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.476799][ T8380] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 274.535122][ T8380] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 274.542304][ T8380] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.575758][ T8380] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 275.586990][ T8380] hsr_slave_0: entered promiscuous mode [ 275.610389][ T8380] hsr_slave_1: entered promiscuous mode [ 276.281255][ T5084] Bluetooth: hci4: command tx timeout [ 277.304305][ T8488] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.756'. [ 277.987884][ T8380] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 278.345266][ T8380] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 278.650574][ T8380] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 278.716367][ T8380] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 280.797547][ T8380] 8021q: adding VLAN 0 to HW filter on device bond0 [ 281.382734][ T8380] 8021q: adding VLAN 0 to HW filter on device team0 [ 281.880315][ T7941] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.887790][ T7941] bridge0: port 1(bridge_slave_0) entered forwarding state [ 282.121225][ T7941] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.128570][ T7941] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.922715][ T8380] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 285.664755][ T8524] netlink: 'syz.0.767': attribute type 2 has an invalid length. [ 285.682696][ T8524] netlink: 132 bytes leftover after parsing attributes in process `syz.0.767'. [ 286.064071][ T7932] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.097793][ T8538] netlink: 'syz.1.770': attribute type 2 has an invalid length. [ 286.116634][ T8534] netlink: 'syz.0.769': attribute type 16 has an invalid length. [ 286.149283][ T8534] netlink: 152 bytes leftover after parsing attributes in process `syz.0.769'. [ 286.285260][ T7932] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.479138][ T8380] veth0_vlan: entered promiscuous mode [ 286.566129][ T8380] veth1_vlan: entered promiscuous mode [ 286.892714][ T7932] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.017670][ T8380] veth0_macvtap: entered promiscuous mode [ 288.759392][ T7932] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.823477][ T8380] veth1_macvtap: entered promiscuous mode [ 288.867162][ T8380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.882930][ T8380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.907277][ T8380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.928549][ T8380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.946957][ T8380] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 288.984675][ T8380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.024613][ T8380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.037942][ T8380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.059753][ T8380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.103464][ T8380] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 289.127685][ T8561] netlink: 'syz.3.776': attribute type 10 has an invalid length. [ 289.188233][ T8380] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.218864][ T8380] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.230999][ T8380] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.250533][ T8380] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.937107][ T7935] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.015168][ T7935] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.307767][ T7938] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.371477][ T7938] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.957156][ T8591] netlink: 14 bytes leftover after parsing attributes in process `syz.0.783'. [ 291.064943][ T8591] hsr_slave_0: left promiscuous mode [ 291.111201][ T8591] hsr_slave_1: left promiscuous mode [ 291.289859][ T8602] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.785'. [ 291.420386][ T8602] netlink: 6332 bytes leftover after parsing attributes in process `syz.1.785'. [ 292.255769][ T8622] netlink: 60 bytes leftover after parsing attributes in process `syz.4.789'. [ 292.265712][ T8622] netlink: 60 bytes leftover after parsing attributes in process `syz.4.789'. [ 292.286434][ T8622] netlink: 60 bytes leftover after parsing attributes in process `syz.4.789'. [ 292.438356][ T8622] netlink: 60 bytes leftover after parsing attributes in process `syz.4.789'. [ 294.194939][ T8651] netlink: 'syz.1.793': attribute type 10 has an invalid length. [ 294.273001][ T8650] netlink: 14 bytes leftover after parsing attributes in process `syz.4.795'. [ 294.380337][ T8650] hsr_slave_0: left promiscuous mode [ 294.500250][ T8650] hsr_slave_1: left promiscuous mode [ 295.315866][ T8672] FAULT_INJECTION: forcing a failure. [ 295.315866][ T8672] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 295.461176][ T8672] CPU: 0 PID: 8672 Comm: syz.4.799 Not tainted syzkaller #0 [ 295.468545][ T8672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 295.478731][ T8672] Call Trace: [ 295.482218][ T8672] [ 295.485363][ T8672] dump_stack_lvl+0x18c/0x250 [ 295.490084][ T8672] ? show_regs_print_info+0x20/0x20 [ 295.495317][ T8672] ? load_image+0x400/0x400 [ 295.499862][ T8672] ? __lock_acquire+0x7d40/0x7d40 [ 295.505122][ T8672] should_fail_ex+0x39d/0x4d0 [ 295.510010][ T8672] _copy_to_user+0x2f/0xa0 [ 295.514477][ T8672] simple_read_from_buffer+0xe7/0x150 [ 295.520020][ T8672] proc_fail_nth_read+0x1e8/0x260 [ 295.525093][ T8672] ? proc_fault_inject_write+0x360/0x360 [ 295.530869][ T8672] ? fsnotify_perm+0x271/0x5e0 [ 295.535689][ T8672] ? proc_fault_inject_write+0x360/0x360 [ 295.541467][ T8672] vfs_read+0x28b/0x970 [ 295.545687][ T8672] ? kernel_read+0x1e0/0x1e0 [ 295.550419][ T8672] ? __fget_files+0x28/0x4b0 [ 295.555071][ T8672] ? __fget_files+0x28/0x4b0 [ 295.559713][ T8672] ? __fget_files+0x43d/0x4b0 [ 295.564453][ T8672] ? __fdget_pos+0x2a3/0x330 [ 295.569182][ T8672] ? ksys_read+0x75/0x260 [ 295.573560][ T8672] ksys_read+0x150/0x260 [ 295.577885][ T8672] ? vfs_write+0x990/0x990 [ 295.582545][ T8672] ? syscall_enter_from_user_mode+0x2e/0x80 [ 295.588661][ T8672] do_syscall_64+0x55/0xa0 [ 295.593120][ T8672] ? clear_bhb_loop+0x40/0x90 [ 295.597853][ T8672] ? clear_bhb_loop+0x40/0x90 [ 295.602579][ T8672] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 295.608515][ T8672] RIP: 0033:0x7f6d4615cece [ 295.612972][ T8672] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 295.632704][ T8672] RSP: 002b:00007f6d46f88fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 295.641241][ T8672] RAX: ffffffffffffffda RBX: 00007f6d46f896c0 RCX: 00007f6d4615cece [ 295.649502][ T8672] RDX: 000000000000000f RSI: 00007f6d46f890a0 RDI: 0000000000000008 [ 295.657508][ T8672] RBP: 00007f6d46f89090 R08: 0000000000000000 R09: 0000000000000000 [ 295.665598][ T8672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 295.673596][ T8672] R13: 00007f6d46416038 R14: 00007f6d46415fa0 R15: 00007ffc3d910b38 [ 295.681621][ T8672] [ 295.740134][ T7932] bridge_slave_0: left allmulticast mode [ 295.753762][ T8682] netlink: 'syz.3.802': attribute type 3 has an invalid length. [ 295.766708][ T7932] bridge_slave_0: left promiscuous mode [ 295.779325][ T8682] netlink: 132 bytes leftover after parsing attributes in process `syz.3.802'. [ 295.805164][ T7932] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.883764][ T8677] netlink: 'syz.0.801': attribute type 11 has an invalid length. [ 295.893399][ T8677] netlink: 184116 bytes leftover after parsing attributes in process `syz.0.801'. [ 295.982604][ T7932] veth1_macvtap: left promiscuous mode [ 296.000277][ T7932] veth0_macvtap: left promiscuous mode [ 296.014918][ T7932] veth1_vlan: left promiscuous mode [ 296.028014][ T7932] veth0_vlan: left promiscuous mode [ 297.380631][ T8702] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.806'. [ 297.795626][ T7932] team0 (unregistering): Port device team_slave_1 removed [ 297.847840][ T7932] team0 (unregistering): Port device team_slave_0 removed [ 298.224223][ T7932] team0 (unregistering): Port device bridge0 removed [ 298.353322][ T8702] netlink: 4612 bytes leftover after parsing attributes in process `syz.1.806'. [ 298.391484][ T8702] netlink: 9 bytes leftover after parsing attributes in process `syz.1.806'. [ 302.082748][ T8796] netlink: 203516 bytes leftover after parsing attributes in process `syz.4.830'. [ 302.142120][ T8796] netlink: 4612 bytes leftover after parsing attributes in process `syz.4.830'. [ 302.219994][ T8796] netlink: 9 bytes leftover after parsing attributes in process `syz.4.830'. [ 302.432785][ T8808] netlink: 'syz.3.832': attribute type 2 has an invalid length. [ 302.463825][ T8808] netlink: 132 bytes leftover after parsing attributes in process `syz.3.832'. [ 303.190683][ T8814] delete_channel: no stack [ 303.248071][ T8833] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 303.382905][ T8832] netlink: 'syz.0.839': attribute type 10 has an invalid length. [ 304.385966][ T8867] syzkaller0: entered promiscuous mode [ 304.415285][ T8867] syzkaller0: entered allmulticast mode [ 304.863011][ T8879] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.849'. [ 304.887427][ T8879] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 307.354678][ T8906] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.857'. [ 307.381272][ T8906] netlink: 6332 bytes leftover after parsing attributes in process `syz.3.857'. [ 307.826415][ T8921] netlink: 173820 bytes leftover after parsing attributes in process `syz.3.861'. [ 308.428584][ T8934] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 308.459876][ T8930] can: request_module (can-proto-0) failed. [ 308.714910][ T8940] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 309.785435][ T8974] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.871'. [ 310.505961][ T8992] netlink: 'syz.3.876': attribute type 21 has an invalid length. [ 310.629292][ T8992] netlink: 'syz.3.876': attribute type 6 has an invalid length. [ 311.779569][ T9016] netlink: 203516 bytes leftover after parsing attributes in process `syz.4.880'. [ 311.891574][ T9016] netlink: 6332 bytes leftover after parsing attributes in process `syz.4.880'. [ 314.295817][ T9050] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.887'. [ 317.135766][ T9082] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.892'. [ 317.161090][ T9082] netlink: 6332 bytes leftover after parsing attributes in process `syz.1.892'. [ 317.902892][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.921453][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 321.174006][ T9100] netlink: 180 bytes leftover after parsing attributes in process `syz.0.897'. [ 321.224601][ T9100] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 321.277462][ T9100] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 321.293760][ T9115] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.901'. [ 321.452529][ T9119] netlink: 'syz.1.904': attribute type 9 has an invalid length. [ 321.541098][ T9119] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.904'. [ 325.065674][ T9175] netlink: 'syz.4.914': attribute type 10 has an invalid length. [ 325.155004][ T9180] netlink: 'syz.4.914': attribute type 9 has an invalid length. [ 325.194045][ T9180] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.914'. [ 326.525890][ T9181] netlink: 180 bytes leftover after parsing attributes in process `syz.3.915'. [ 326.547625][ T9184] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 326.575838][ T9184] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 328.197185][ T9224] netlink: 'syz.1.921': attribute type 11 has an invalid length. [ 328.241709][ T9224] netlink: 184116 bytes leftover after parsing attributes in process `syz.1.921'. [ 329.172373][ T9234] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 329.870994][ T9251] netlink: 180 bytes leftover after parsing attributes in process `syz.1.928'. [ 329.977206][ T9254] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 329.986144][ T9248] netlink: 'syz.0.927': attribute type 9 has an invalid length. [ 330.000948][ T9254] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 330.021552][ T9248] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.927'. [ 330.634757][ T9259] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.930'. [ 330.899879][ T9259] netlink: 'syz.1.930': attribute type 10 has an invalid length. [ 331.411170][ T9273] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.934'. [ 331.457036][ T9273] netlink: 6332 bytes leftover after parsing attributes in process `syz.0.934'. [ 331.533732][ T9266] tap0: tun_chr_ioctl cmd 1074025677 [ 331.539868][ T9266] tap0: linktype set to 778 [ 332.270338][ T9296] FAULT_INJECTION: forcing a failure. [ 332.270338][ T9296] name failslab, interval 1, probability 0, space 0, times 0 [ 332.316334][ T9296] CPU: 0 PID: 9296 Comm: syz.4.937 Not tainted syzkaller #0 [ 332.323807][ T9296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 332.333926][ T9296] Call Trace: [ 332.337240][ T9296] [ 332.340302][ T9296] dump_stack_lvl+0x18c/0x250 [ 332.345057][ T9296] ? sctp_sendmsg+0x1575/0x28c0 [ 332.350041][ T9296] ? ___sys_sendmsg+0x2a6/0x360 [ 332.355024][ T9296] ? show_regs_print_info+0x20/0x20 [ 332.360444][ T9296] ? load_image+0x400/0x400 [ 332.365030][ T9296] should_fail_ex+0x39d/0x4d0 [ 332.369944][ T9296] should_failslab+0x9/0x20 [ 332.374522][ T9296] slab_pre_alloc_hook+0x59/0x310 [ 332.379607][ T9296] ? sctp_add_bind_addr+0x8c/0x360 [ 332.384775][ T9296] __kmem_cache_alloc_node+0x53/0x250 [ 332.390212][ T9296] ? sctp_add_bind_addr+0x8c/0x360 [ 332.395387][ T9296] kmalloc_trace+0x2a/0xe0 [ 332.400037][ T9296] sctp_add_bind_addr+0x8c/0x360 [ 332.405134][ T9296] sctp_copy_local_addr_list+0x315/0x4f0 [ 332.410923][ T9296] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 332.416700][ T9296] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 332.422985][ T9296] ? sctp_v6_is_any+0x64/0x70 [ 332.427725][ T9296] ? sctp_copy_one_addr+0x8c/0x350 [ 332.433022][ T9296] sctp_bind_addr_copy+0xb3/0x3c0 [ 332.438108][ T9296] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 332.444758][ T9296] sctp_connect_new_asoc+0x2f9/0x6a0 [ 332.450187][ T9296] ? __sctp_connect+0xd80/0xd80 [ 332.455083][ T9296] ? __local_bh_enable_ip+0x13a/0x1c0 [ 332.460518][ T9296] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 332.466208][ T9296] ? security_sctp_bind_connect+0x89/0xb0 [ 332.471999][ T9296] sctp_sendmsg+0x1575/0x28c0 [ 332.473055][ T9303] netlink: 'syz.0.940': attribute type 10 has an invalid length. [ 332.476714][ T9296] ? sctp_getsockopt+0xb60/0xb60 [ 332.489625][ T9296] ? aa_sk_perm+0x83c/0x970 [ 332.494203][ T9296] ? aa_af_perm+0x330/0x330 [ 332.498777][ T9296] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 332.505244][ T9296] ? sock_rps_record_flow+0x19/0x3f0 [ 332.510580][ T9296] ? inet_sendmsg+0xe9/0x2f0 [ 332.515400][ T9296] ? inet_send_prepare+0x260/0x260 [ 332.520564][ T9296] ____sys_sendmsg+0x5ba/0x960 [ 332.525377][ T9296] ? __lock_acquire+0x7d40/0x7d40 [ 332.530461][ T9296] ? __sys_sendmsg_sock+0x30/0x30 [ 332.535522][ T9296] ? __import_iovec+0x5f2/0x850 [ 332.540847][ T9296] ? import_iovec+0x73/0xa0 [ 332.545385][ T9296] ___sys_sendmsg+0x2a6/0x360 [ 332.550081][ T9296] ? __sys_sendmsg+0x2a0/0x2a0 [ 332.554901][ T9296] ? trace_call_bpf+0xc3/0x6c0 [ 332.559708][ T9296] __se_sys_sendmsg+0x1c2/0x2b0 [ 332.564578][ T9296] ? __x64_sys_sendmsg+0x80/0x80 [ 332.569628][ T9296] ? lockdep_hardirqs_on+0x98/0x150 [ 332.574839][ T9296] do_syscall_64+0x55/0xa0 [ 332.579271][ T9296] ? clear_bhb_loop+0x40/0x90 [ 332.583969][ T9296] ? clear_bhb_loop+0x40/0x90 [ 332.588668][ T9296] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 332.594761][ T9296] RIP: 0033:0x7f6d4619c629 [ 332.599190][ T9296] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 332.618986][ T9296] RSP: 002b:00007f6d46f89028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 332.627681][ T9296] RAX: ffffffffffffffda RBX: 00007f6d46415fa0 RCX: 00007f6d4619c629 [ 332.635670][ T9296] RDX: 0000000000000041 RSI: 0000200000000600 RDI: 0000000000000003 [ 332.643828][ T9296] RBP: 00007f6d46f89090 R08: 0000000000000000 R09: 0000000000000000 [ 332.651809][ T9296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 332.659785][ T9296] R13: 00007f6d46416038 R14: 00007f6d46415fa0 R15: 00007ffc3d910b38 [ 332.667868][ T9296] [ 333.137182][ T9313] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 333.493334][ T9317] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 333.717406][ T9328] netlink: 199364 bytes leftover after parsing attributes in process `syz.3.944'. [ 333.750021][ T9328] openvswitch: netlink: Key type 4112 is out of range max 32 [ 333.933901][ T9331] netlink: 'syz.4.945': attribute type 2 has an invalid length. [ 333.989718][ T9334] netlink: 14 bytes leftover after parsing attributes in process `syz.4.945'. [ 334.125955][ T9337] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.946'. [ 334.161246][ T9337] netlink: 4612 bytes leftover after parsing attributes in process `syz.1.946'. [ 334.209392][ T9337] netlink: 9 bytes leftover after parsing attributes in process `syz.1.946'. [ 335.938080][ T9381] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 337.762245][ T9436] netlink: 'syz.3.970': attribute type 2 has an invalid length. [ 337.770166][ T9436] netlink: 132 bytes leftover after parsing attributes in process `syz.3.970'. [ 338.210023][ T9442] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.972'. [ 338.259779][ T9442] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 338.286482][ T9442] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 338.306227][ T9446] netlink: 'syz.4.973': attribute type 10 has an invalid length. [ 339.229147][ T9462] netlink: 'syz.4.977': attribute type 10 has an invalid length. [ 339.353189][ T9469] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.978'. [ 339.364048][ T9469] netlink: 4612 bytes leftover after parsing attributes in process `syz.0.978'. [ 339.384770][ T9469] netlink: 9 bytes leftover after parsing attributes in process `syz.0.978'. [ 340.374715][ T9496] netlink: 'syz.3.985': attribute type 10 has an invalid length. [ 340.723631][ T9496] team0: Port device hsr_slave_0 added [ 341.156421][ T9517] netlink: 'syz.3.990': attribute type 10 has an invalid length. [ 341.175972][ T9517] team0: Device bond0 is up. Set it down before adding it as a team port [ 341.449980][ T9526] netlink: 'syz.3.993': attribute type 12 has an invalid length. [ 341.467449][ T9526] netlink: 197276 bytes leftover after parsing attributes in process `syz.3.993'. [ 341.491526][ T9526] netlink: 10 bytes leftover after parsing attributes in process `syz.3.993'. [ 341.512538][ T9528] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 341.512706][ T9526] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.993'. [ 341.715630][ T9537] FAULT_INJECTION: forcing a failure. [ 341.715630][ T9537] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 341.788487][ T9537] CPU: 1 PID: 9537 Comm: syz.3.998 Not tainted syzkaller #0 [ 341.795958][ T9537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 341.806242][ T9537] Call Trace: [ 341.809559][ T9537] [ 341.812542][ T9537] dump_stack_lvl+0x18c/0x250 [ 341.817375][ T9537] ? show_regs_print_info+0x20/0x20 [ 341.822813][ T9537] ? load_image+0x400/0x400 [ 341.827379][ T9537] ? __might_fault+0xaa/0x120 [ 341.832276][ T9537] ? __lock_acquire+0x7d40/0x7d40 [ 341.837447][ T9537] should_fail_ex+0x39d/0x4d0 [ 341.842306][ T9537] _copy_from_user+0x2f/0xe0 [ 341.846938][ T9537] get_user_ifreq+0x6b/0x180 [ 341.851642][ T9537] sock_ioctl+0x6f1/0x7e0 [ 341.855986][ T9537] ? sock_poll+0x3e0/0x3e0 [ 341.860423][ T9537] ? bpf_lsm_file_ioctl+0x9/0x10 [ 341.865473][ T9537] ? security_file_ioctl+0x80/0xa0 [ 341.870776][ T9537] ? sock_poll+0x3e0/0x3e0 [ 341.875314][ T9537] __se_sys_ioctl+0xfd/0x170 [ 341.879925][ T9537] do_syscall_64+0x55/0xa0 [ 341.884445][ T9537] ? clear_bhb_loop+0x40/0x90 [ 341.889219][ T9537] ? clear_bhb_loop+0x40/0x90 [ 341.894041][ T9537] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 341.900068][ T9537] RIP: 0033:0x7ff15439c629 [ 341.904515][ T9537] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 341.924491][ T9537] RSP: 002b:00007ff1551ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 341.933040][ T9537] RAX: ffffffffffffffda RBX: 00007ff154615fa0 RCX: 00007ff15439c629 [ 341.941200][ T9537] RDX: 0000200000000080 RSI: 00000000000089f0 RDI: 0000000000000004 [ 341.949183][ T9537] RBP: 00007ff1551ce090 R08: 0000000000000000 R09: 0000000000000000 [ 341.957257][ T9537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 341.965415][ T9537] R13: 00007ff154616038 R14: 00007ff154615fa0 R15: 00007ffcad98a108 [ 341.973412][ T9537] [ 342.499535][ T9553] netlink: 'syz.1.1002': attribute type 17 has an invalid length. [ 342.596161][ T9554] netlink: 56537 bytes leftover after parsing attributes in process `syz.3.1001'. [ 342.753672][ T9549] netlink: 'syz.3.1001': attribute type 1 has an invalid length. [ 342.791274][ T9549] netlink: 191376 bytes leftover after parsing attributes in process `syz.3.1001'. [ 344.167650][ T9575] netlink: 'syz.3.1007': attribute type 21 has an invalid length. [ 344.190998][ T9575] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1007'. [ 344.248867][ T9575] netlink: 'syz.3.1007': attribute type 5 has an invalid length. [ 344.296666][ T9575] netlink: 'syz.3.1007': attribute type 6 has an invalid length. [ 344.304767][ T9575] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1007'. [ 344.364088][ T9582] netlink: 16255 bytes leftover after parsing attributes in process `syz.4.1009'. [ 344.547311][ T9583] netlink: 16255 bytes leftover after parsing attributes in process `syz.4.1009'. [ 344.954099][ T9599] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.1011'. [ 345.018374][ T9599] netlink: 4612 bytes leftover after parsing attributes in process `syz.1.1011'. [ 345.154374][ T9599] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1011'. [ 345.173192][ T9601] netlink: 'syz.4.1013': attribute type 1 has an invalid length. [ 345.208044][ T9601] netlink: 161700 bytes leftover after parsing attributes in process `syz.4.1013'. [ 345.383519][ T9601] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1013'. [ 345.469751][ T9611] netlink: 15119 bytes leftover after parsing attributes in process `syz.0.1016'. [ 347.153848][ T9639] netlink: 'syz.0.1024': attribute type 10 has an invalid length. [ 347.387224][ T9639] team0: Port device hsr_slave_0 added [ 349.112183][ T9659] netlink: 'syz.1.1029': attribute type 10 has an invalid length. [ 350.294967][ T9679] netlink: 'syz.0.1035': attribute type 10 has an invalid length. [ 350.530466][ T9684] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1038'. [ 352.287453][ T9703] netlink: 'syz.1.1044': attribute type 1 has an invalid length. [ 352.741457][ T9703] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.1044'. [ 356.674243][ T9732] netlink: 16066 bytes leftover after parsing attributes in process `syz.4.1054'. [ 356.814493][ T9720] syz.0.1049 (9720) used greatest stack depth: 18920 bytes left [ 357.052466][ T9739] netlink: 'syz.0.1057': attribute type 10 has an invalid length. [ 357.140067][ T9736] netlink: 203516 bytes leftover after parsing attributes in process `syz.4.1056'. [ 357.211712][ T9736] netlink: 4612 bytes leftover after parsing attributes in process `syz.4.1056'. [ 357.270619][ T9736] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1056'. [ 357.612045][ T9751] netlink: 'syz.0.1061': attribute type 10 has an invalid length. [ 357.981405][ T9760] netlink: 16066 bytes leftover after parsing attributes in process `syz.3.1064'. [ 358.001551][ T9763] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1065'. [ 358.992227][ T9764] lo: entered allmulticast mode [ 360.133573][ T9796] netlink: 16066 bytes leftover after parsing attributes in process `syz.0.1074'. [ 360.735920][ T9815] netlink: 49819 bytes leftover after parsing attributes in process `syz.1.1080'. [ 361.663705][ T9834] tap0: tun_chr_ioctl cmd 1074025677 [ 361.678693][ T9834] tap0: linktype set to 778 [ 362.905396][ T9851] netlink: 1057 bytes leftover after parsing attributes in process `syz.4.1092'. [ 362.956055][ T9851] veth1_to_bond: entered allmulticast mode [ 365.150299][ T9887] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1101'. [ 365.245397][ T9887] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1101'. [ 365.324124][ T9880] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1101'. [ 365.521866][ T9887] netlink: 'syz.4.1101': attribute type 28 has an invalid length. [ 365.559454][ T9886] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1101'. [ 365.571529][ T9896] netlink: 'syz.1.1107': attribute type 2 has an invalid length. [ 365.579341][ T9899] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1107'. [ 365.579929][ T9887] netlink: 'syz.4.1101': attribute type 29 has an invalid length. [ 365.619209][ T9887] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1101'. [ 367.461405][ T9939] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.1118'. [ 367.569309][ T9939] netlink: 4612 bytes leftover after parsing attributes in process `syz.1.1118'. [ 367.580644][ T9939] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1118'. [ 368.255038][ T9952] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1119'. [ 368.288953][ T9952] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1119'. [ 368.389081][ T9945] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1119'. [ 368.446482][ T9952] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1119'. [ 368.634182][ T9945] netlink: 'syz.3.1119': attribute type 28 has an invalid length. [ 368.677170][ T9945] netlink: 'syz.3.1119': attribute type 29 has an invalid length. [ 368.872160][ T9945] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1119'. [ 370.422017][ T9989] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.1133'. [ 370.459314][ T9989] netlink: 4612 bytes leftover after parsing attributes in process `syz.1.1133'. [ 370.506359][ T9989] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1133'. [ 370.945069][T10012] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1138'. [ 370.976090][T10012] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1138'. [ 371.142631][T10012] netlink: 'syz.1.1138': attribute type 28 has an invalid length. [ 371.156513][T10012] netlink: 'syz.1.1138': attribute type 29 has an invalid length. [ 373.021591][T10059] netlink: 'syz.4.1157': attribute type 10 has an invalid length. [ 373.603397][T10069] __nla_validate_parse: 8 callbacks suppressed [ 373.603452][T10069] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.1161'. [ 373.651306][T10069] netlink: 4612 bytes leftover after parsing attributes in process `syz.3.1161'. [ 373.671194][T10069] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1161'. [ 373.746409][T10074] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1162'. [ 373.796966][T10074] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1162'. [ 374.220051][T10088] netlink: 'syz.3.1167': attribute type 2 has an invalid length. [ 374.354886][T10089] netlink: 'syz.1.1166': attribute type 10 has an invalid length. [ 374.396263][T10089] geneve0: entered promiscuous mode [ 374.927333][T10104] netlink: 203516 bytes leftover after parsing attributes in process `syz.4.1172'. [ 374.986592][T10104] netlink: 4612 bytes leftover after parsing attributes in process `syz.4.1172'. [ 374.997936][T10104] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1172'. [ 375.058573][T10116] netlink: 56843 bytes leftover after parsing attributes in process `syz.1.1175'. [ 375.198890][T10120] netlink: 'syz.3.1176': attribute type 10 has an invalid length. [ 375.398755][T10124] netlink: 'syz.0.1178': attribute type 10 has an invalid length. [ 375.583700][T10133] FAULT_INJECTION: forcing a failure. [ 375.583700][T10133] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 375.617603][T10133] CPU: 1 PID: 10133 Comm: syz.1.1182 Not tainted syzkaller #0 [ 375.625150][T10133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 375.635250][T10133] Call Trace: [ 375.638576][T10133] [ 375.641546][T10133] dump_stack_lvl+0x18c/0x250 [ 375.646277][T10133] ? show_regs_print_info+0x20/0x20 [ 375.651526][T10133] ? load_image+0x400/0x400 [ 375.656076][T10133] ? __might_fault+0xaa/0x120 [ 375.660822][T10133] ? __lock_acquire+0x7d40/0x7d40 [ 375.666244][T10133] should_fail_ex+0x39d/0x4d0 [ 375.670986][T10133] _copy_from_user+0x2f/0xe0 [ 375.675638][T10133] br_dev_siocdevprivate+0x119/0x1540 [ 375.681058][T10133] ? rcu_is_watching+0x15/0xb0 [ 375.685863][T10133] ? br_handle_local_finish+0x20/0x20 [ 375.691681][T10133] ? trace_contention_end+0x39/0xe0 [ 375.696923][T10133] ? __mutex_lock+0x315/0xcc0 [ 375.701655][T10133] ? dev_load+0x21/0x1f0 [ 375.705940][T10133] ? dev_ioctl+0x83c/0x1140 [ 375.710481][T10133] ? __lock_acquire+0x7d40/0x7d40 [ 375.715631][T10133] ? mutex_lock_nested+0x20/0x20 [ 375.720618][T10133] ? full_name_hash+0x92/0xe0 [ 375.725352][T10133] ? dev_ifsioc+0x958/0xc40 [ 375.729985][T10133] dev_ioctl+0x84c/0x1140 [ 375.734361][T10133] sock_ioctl+0x74c/0x7e0 [ 375.738728][T10133] ? sock_poll+0x3e0/0x3e0 [ 375.743191][T10133] ? bpf_lsm_file_ioctl+0x9/0x10 [ 375.748178][T10133] ? security_file_ioctl+0x80/0xa0 [ 375.753356][T10133] ? sock_poll+0x3e0/0x3e0 [ 375.757812][T10133] __se_sys_ioctl+0xfd/0x170 [ 375.762505][T10133] do_syscall_64+0x55/0xa0 [ 375.767042][T10133] ? clear_bhb_loop+0x40/0x90 [ 375.771816][T10133] ? clear_bhb_loop+0x40/0x90 [ 375.776519][T10133] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 375.782449][T10133] RIP: 0033:0x7fbc6b99c629 [ 375.786908][T10133] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 375.806736][T10133] RSP: 002b:00007fbc6c7c8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 375.815184][T10133] RAX: ffffffffffffffda RBX: 00007fbc6bc15fa0 RCX: 00007fbc6b99c629 [ 375.823187][T10133] RDX: 0000200000000080 RSI: 00000000000089f0 RDI: 0000000000000004 [ 375.831186][T10133] RBP: 00007fbc6c7c8090 R08: 0000000000000000 R09: 0000000000000000 [ 375.839176][T10133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 375.847285][T10133] R13: 00007fbc6bc16038 R14: 00007fbc6bc15fa0 R15: 00007ffd16cca948 [ 375.855371][T10133] [ 375.896082][T10138] netlink: 'syz.0.1183': attribute type 21 has an invalid length. [ 376.211574][T10150] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.1188'. [ 376.287140][T10151] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 376.914787][T10165] netlink: 'syz.1.1193': attribute type 21 has an invalid length. [ 378.937238][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.943806][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 404.109118][ T5084] Bluetooth: hci4: command 0x0406 tx timeout [ 415.227111][ T5770] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 415.240623][ T5770] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 415.249268][ T5770] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 415.262273][ T5770] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 415.271830][ T5770] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 415.279343][ T5770] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 415.613078][ T5782] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 415.623174][ T5782] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 415.631824][ T5782] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 415.641125][ T5782] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 415.651247][ T5782] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 415.659081][ T5782] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 417.106254][T10234] chnl_net:caif_netlink_parms(): no params data found [ 417.266159][ T5781] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 417.280578][ T5781] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 417.289164][ T5781] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 417.297838][ T5781] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 417.306558][ T5781] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 417.314479][ T5781] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 417.462292][ T5773] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 417.472538][ T5773] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 417.480754][ T5773] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 417.491430][ T5773] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 417.499933][ T5773] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 417.507582][ T5773] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 417.588552][T10238] chnl_net:caif_netlink_parms(): no params data found [ 417.725428][T10234] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.738231][T10234] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.746807][T10234] bridge_slave_0: entered allmulticast mode [ 417.754973][T10234] bridge_slave_0: entered promiscuous mode [ 417.804030][T10234] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.817992][T10234] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.826101][T10234] bridge_slave_1: entered allmulticast mode [ 417.840383][T10234] bridge_slave_1: entered promiscuous mode [ 418.057195][T10234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 418.086442][T10234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 475.399448][ T5774] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 475.418006][ T5774] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 475.431420][ T5774] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 475.441088][ T5774] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 475.451520][ T5774] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 475.458925][ T5774] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 477.079775][T10277] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 477.088661][T10277] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 477.099062][T10277] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 477.108096][T10277] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 477.117451][T10277] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 477.126276][T10277] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 477.133953][T10277] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 477.143228][T10277] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 477.151609][T10277] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 477.159037][T10277] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 477.168393][T10277] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 477.177553][ T51] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 478.044431][T10278] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 478.060691][T10278] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 478.069849][T10278] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 478.091431][T10278] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 478.100508][T10278] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 478.108795][T10278] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 487.930802][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 487.937558][ C0] rcu: 0-....: (1 GPs behind) idle=e7a4/1/0x4000000000000000 softirq=29614/29617 fqs=2409 [ 487.948671][ C0] rcu: hardirqs softirqs csw/system [ 487.955302][ C0] rcu: number: 920378 0 0 [ 487.961898][ C0] rcu: cputime: 11799 26712 33 ==> 38550(ms) [ 487.969784][ C0] rcu: (t=10503 jiffies g=35109 q=3082 ncpus=2) [ 487.976253][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 665 jiffies! g35109 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 487.988774][ C0] rcu: Possible timer handling issue on cpu=1 timer-softirq=32313 [ 487.996756][ C0] rcu: rcu_preempt kthread starved for 668 jiffies! g35109 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 488.008734][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 488.018985][ C0] rcu: RCU grace-period kthread stack dump: [ 488.024911][ C0] task:rcu_preempt state:I stack:26760 pid:17 ppid:2 flags:0x00004000 [ 488.034225][ C0] Call Trace: [ 488.037618][ C0] [ 488.040666][ C0] __schedule+0x1553/0x45a0 [ 488.045212][ C0] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 488.051303][ C0] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 488.057233][ C0] ? asan.module_dtor+0x20/0x20 [ 488.062202][ C0] ? enqueue_timer+0x23d/0x550 [ 488.067005][ C0] ? __mod_timer+0x984/0xdb0 [ 488.071643][ C0] schedule+0xbd/0x170 [ 488.075859][ C0] schedule_timeout+0x188/0x2d0 [ 488.080839][ C0] ? console_conditional_schedule+0x40/0x40 [ 488.086855][ C0] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 488.093116][ C0] ? update_process_times+0x1b0/0x1b0 [ 488.098578][ C0] ? prepare_to_swait_event+0x339/0x360 [ 488.104824][ C0] rcu_gp_fqs_loop+0x313/0x1590 [ 488.110394][ C0] ? dyntick_save_progress_counter+0x2b0/0x2b0 [ 488.116669][ C0] ? rcu_gp_init+0x1560/0x1560 [ 488.121539][ C0] ? rcu_gp_cleanup+0xb41/0xc90 [ 488.126694][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 488.132660][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 488.138312][ C0] rcu_gp_kthread+0x9d/0x3b0 [ 488.143022][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 488.148191][ C0] ? __kthread_parkme+0x7a/0x1c0 [ 488.153230][ C0] ? __kthread_parkme+0x162/0x1c0 [ 488.158575][ C0] kthread+0x2fa/0x390 [ 488.162865][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 488.168094][ C0] ? kthread_blkcg+0xd0/0xd0 [ 488.172718][ C0] ret_from_fork+0x48/0x80 [ 488.177313][ C0] ? kthread_blkcg+0xd0/0xd0 [ 488.181994][ C0] ret_from_fork_asm+0x11/0x20 [ 488.186856][ C0] [ 488.190094][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 488.196591][ C0] Sending NMI from CPU 0 to CPUs 1: [ 488.202164][ C1] NMI backtrace for cpu 1 [ 488.202175][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 [ 488.202188][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 488.202196][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x10 [ 488.202217][ C1] Code: c7 22 02 c3 cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d 83 d1 43 00 fb f4 66 0f 1f 00 55 41 57 41 56 41 54 53 50 8b 2f eb 2e 41 89 de 80 [ 488.202229][ C1] RSP: 0018:ffffc900001f08d8 EFLAGS: 00000246 [ 488.202243][ C1] RAX: ffffffff813aa578 RBX: 0000000000000003 RCX: ffff88801b673c00 [ 488.202255][ C1] RDX: 0000000000000100 RSI: ffffffff8acac900 RDI: ffffffff8b1c82e0 [ 488.202265][ C1] RBP: ffffc900001f09b0 R08: ffffffff911bf5c7 R09: 1ffffffff2237eb8 [ 488.202276][ C1] R10: dffffc0000000000 R11: fffffbfff2237eb9 R12: dffffc0000000000 [ 488.202293][ C1] R13: 0000000000000200 R14: 0000000000000003 R15: 1ffff9200003e120 [ 488.202303][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 488.202316][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 488.202326][ C1] CR2: 000056131d98a088 CR3: 000000000cf32000 CR4: 00000000003506e0 [ 488.202342][ C1] DR0: 0000200000000300 DR1: 0000200000000300 DR2: 0000000000000000 [ 488.202351][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 488.202361][ C1] Call Trace: [ 488.202368][ C1] [ 488.202373][ C1] kvm_wait+0x23d/0x2a0 [ 488.202392][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 488.202409][ C1] ? kvm_arch_para_hints+0x50/0x50 [ 488.202432][ C1] __pv_queued_spin_lock_slowpath+0x61a/0x9d0 [ 488.202455][ C1] ? __pv_queued_spin_unlock_slowpath+0x2a0/0x2a0 [ 488.202476][ C1] do_raw_spin_lock+0x23e/0x2c0 [ 488.202496][ C1] ? __rwlock_init+0x150/0x150 [ 488.202513][ C1] ? read_lock_is_recursive+0x20/0x20 [ 488.202533][ C1] tcp_write_timer+0x2d/0x280 [ 488.202553][ C1] call_timer_fn+0x189/0x540 [ 488.202567][ C1] ? tcp_init_xmit_timers+0xb0/0xb0 [ 488.202584][ C1] ? call_timer_fn+0xd2/0x540 [ 488.202597][ C1] ? __run_timers+0x800/0x800 [ 488.202616][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 488.202630][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 488.202643][ C1] ? tcp_init_xmit_timers+0xb0/0xb0 [ 488.202661][ C1] __run_timers+0x542/0x800 [ 488.202680][ C1] ? detach_timer+0x2b0/0x2b0 [ 488.202697][ C1] ? lock_chain_count+0x20/0x20 [ 488.202716][ C1] run_timer_softirq+0x67/0xf0 [ 488.202730][ C1] handle_softirqs+0x280/0x820 [ 488.202747][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 488.202764][ C1] ? do_softirq+0x1a0/0x1a0 [ 488.202779][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 488.202799][ C1] __irq_exit_rcu+0xd3/0x190 [ 488.202813][ C1] ? irq_exit_rcu+0x20/0x20 [ 488.202830][ C1] irq_exit_rcu+0x9/0x20 [ 488.202843][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 488.202858][ C1] [ 488.202862][ C1] [ 488.202867][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 488.202885][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x10 [ 488.202900][ C1] Code: c7 22 02 c3 cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d 83 d1 43 00 fb f4 66 0f 1f 00 55 41 57 41 56 41 54 53 50 8b 2f eb 2e 41 89 de 80 [ 488.202911][ C1] RSP: 0018:ffffc90000187de0 EFLAGS: 000002c2 [ 488.202924][ C1] RAX: 107f49ec625a2700 RBX: ffffffff8162a490 RCX: 107f49ec625a2700 [ 488.202934][ C1] RDX: 0000000000000001 RSI: ffffffff8acac900 RDI: ffffffff8b1c82e0 [ 488.202952][ C1] RBP: ffffc90000187f20 R08: ffff8880b8f36b2b R09: 1ffff110171e6d65 [ 488.202963][ C1] R10: dffffc0000000000 R11: ffffed10171e6d66 R12: 1ffff110036ce780 [ 488.202974][ C1] R13: 1ffff92000030fc8 R14: 0000000000000001 R15: dffffc0000000000 [ 488.202986][ C1] ? do_idle+0x1f0/0x4e0 [ 488.203006][ C1] default_idle+0x13/0x20 [ 488.203021][ C1] default_idle_call+0x6c/0xa0 [ 488.203037][ C1] do_idle+0x1f0/0x4e0 [ 488.203055][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 488.203070][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 488.203086][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 488.203100][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 488.203115][ C1] ? _raw_spin_unlock+0x40/0x40 [ 488.203134][ C1] cpu_startup_entry+0x43/0x60 [ 488.203150][ C1] start_secondary+0xee/0xf0 [ 488.203165][ C1] secondary_startup_64_no_verify+0x179/0x17b [ 488.203191][ C1] [ 488.204179][ C0] CPU: 0 PID: 10188 Comm: syz.3.1202 Not tainted syzkaller #0 [ 488.650107][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 488.660187][ C0] RIP: 0010:kasan_quarantine_put+0x88/0x220 [ 488.666096][ C0] Code: e8 0d 35 ae ff 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 0f 85 83 00 00 00 41 f7 c7 00 02 00 00 74 01 fb 31 c0 <48> 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f c3 48 8d 80 c0 7a 03 00 45 [ 488.685708][ C0] RSP: 0018:ffffc90000006398 EFLAGS: 00000206 [ 488.691795][ C0] RAX: 85ae48512ecd3201 RBX: ffff888062bcfc80 RCX: 85ae48512ecd3200 [ 488.700158][ C0] RDX: dffffc0000000000 RSI: ffffffff8acac900 RDI: ffffffff8b1c82e0 [ 488.708511][ C0] RBP: ffff888062bcfc80 R08: ffffffff911bf5c7 R09: 1ffffffff2237eb8 [ 488.716758][ C0] R10: dffffc0000000000 R11: fffffbfff2237eb9 R12: 0000000000000000 [ 488.725074][ C0] R13: ffffc90000006430 R14: 00000000000e1480 R15: 0000000000000282 [ 488.733314][ C0] FS: 00007ff1551ce6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 488.742605][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 488.749272][ C0] CR2: 000055555e7994e8 CR3: 0000000076721000 CR4: 00000000003506f0 [ 488.757888][ C0] DR0: 0000000000000000 DR1: 0000200000000300 DR2: 0000000000000000 [ 488.766335][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 488.774595][ C0] Call Trace: [ 488.777880][ C0] [ 488.780827][ C0] slab_free_freelist_hook+0x130/0x1a0 [ 488.786476][ C0] ? packet_rcv+0x16b/0x13d0 [ 488.792041][ C0] kmem_cache_free+0xf8/0x270 [ 488.796761][ C0] packet_rcv+0x16b/0x13d0 [ 488.801563][ C0] ? packet_sock_destruct+0x160/0x160 [ 488.807216][ C0] dev_queue_xmit_nit+0xb16/0xbb0 [ 488.812594][ C0] ? dev_queue_xmit_nit+0x2d/0xbb0 [ 488.817811][ C0] dev_hard_start_xmit+0x148/0x740 [ 488.823149][ C0] sch_direct_xmit+0x25e/0x4c0 [ 488.828213][ C0] ? mrp_pdu_parse_vecattr_event+0x2a0/0x2a0 [ 488.834751][ C0] __dev_queue_xmit+0x179c/0x36b0 [ 488.839785][ C0] ? __dev_queue_xmit+0x26b/0x36b0 [ 488.845071][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 488.851493][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 488.857756][ C0] ? netdev_core_pick_tx+0x340/0x340 [ 488.863044][ C0] ? __asan_memcpy+0x40/0x70 [ 488.867724][ C0] ? eth_header+0x11b/0x200 [ 488.872252][ C0] ? llc_sysctl_exit+0x70/0x70 [ 488.877021][ C0] ? neigh_resolve_output+0x618/0x730 [ 488.882686][ C0] ? ip_finish_output2+0x457/0x11e0 [ 488.888190][ C0] ip_finish_output2+0xd3a/0x11e0 [ 488.893309][ C0] ? ip_fragment+0x210/0x210 [ 488.897985][ C0] ? ip_skb_dst_mtu+0x58a/0x9c0 [ 488.903134][ C0] ? ip_finish_output+0x3ef/0x4c0 [ 488.908349][ C0] ip_output+0x2a1/0x3b0 [ 488.912768][ C0] ? ip_output+0x60/0x3b0 [ 488.917094][ C0] ? __ip_queue_xmit+0x5d/0x1950 [ 488.922411][ C0] __ip_queue_xmit+0x1049/0x1950 [ 488.927464][ C0] ? __ip_queue_xmit+0x5d/0x1950 [ 488.932413][ C0] __tcp_transmit_skb+0x1cbd/0x32f0 [ 488.937711][ C0] ? __tcp_send_ack+0x5a0/0x5a0 [ 488.942562][ C0] ? __build_skb_around+0x255/0x3d0 [ 488.947767][ C0] ? __tcp_send_ack+0x176/0x5a0 [ 488.952641][ C0] tcp_validate_incoming+0xf13/0x2250 [ 488.958409][ C0] tcp_rcv_established+0x7de/0x1d20 [ 488.963621][ C0] ? rt_is_expired+0x1c/0x2d0 [ 488.968501][ C0] ? tcp_check_space+0xad0/0xad0 [ 488.973545][ C0] ? rt_is_expired+0x1c/0x2d0 [ 488.978427][ C0] ? rt_is_expired+0x250/0x2d0 [ 488.983212][ C0] tcp_v4_do_rcv+0x4ed/0xb80 [ 488.987834][ C0] tcp_v4_rcv+0x23bf/0x2af0 [ 488.992347][ C0] ? __lock_acquire+0x7d40/0x7d40 [ 488.997459][ C0] ? tcp_v4_rcv+0x1071/0x2af0 [ 489.002155][ C0] ? tcp_filter+0x90/0x90 [ 489.006491][ C0] ip_protocol_deliver_rcu+0x20e/0x3f0 [ 489.011963][ C0] ? ip_local_deliver_finish+0x1cb/0x510 [ 489.017627][ C0] ip_local_deliver_finish+0x2ca/0x510 [ 489.023109][ C0] NF_HOOK+0x32d/0x3b0 [ 489.027196][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 489.032422][ C0] ? NF_HOOK+0x3b0/0x3b0 [ 489.036692][ C0] ? NF_HOOK+0x9f/0x3b0 [ 489.041130][ C0] ? ip_local_deliver+0x1b0/0x1b0 [ 489.046177][ C0] ? NF_HOOK+0x3b0/0x3b0 [ 489.050542][ C0] ? ip_local_deliver+0xd0/0x1b0 [ 489.055658][ C0] ? ip_local_deliver+0x122/0x1b0 [ 489.060842][ C0] ip_sublist_rcv+0xa4c/0xd70 [ 489.065558][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 489.071030][ C0] ? ip_list_rcv+0x440/0x440 [ 489.075736][ C0] ? ip_rcv_core+0xdb0/0xdb0 [ 489.080451][ C0] ip_list_rcv+0x3f2/0x440 [ 489.084889][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 489.091056][ C0] ? ip_rcv_finish+0x250/0x250 [ 489.095918][ C0] ? __netif_receive_skb_list_core+0x272/0x750 [ 489.102262][ C0] ? ip_rcv_finish+0x250/0x250 [ 489.107203][ C0] __netif_receive_skb_list_core+0x583/0x750 [ 489.113473][ C0] ? set_rps_cpu+0x6a0/0x6a0 [ 489.118192][ C0] ? read_tsc+0x9/0x20 [ 489.122381][ C0] netif_receive_skb_list_internal+0x943/0xca0 [ 489.128634][ C0] ? netif_receive_skb_list_internal+0x4b1/0xca0 [ 489.135070][ C0] ? dev_gro_receive+0x10ce/0x22c0 [ 489.140192][ C0] ? netif_receive_skb_core+0x230/0x230 [ 489.145998][ C0] napi_gro_receive+0x565/0xb00 [ 489.150984][ C0] receive_buf+0x2203/0x3820 [ 489.155766][ C0] ? virtnet_poll_tx+0x530/0x530 [ 489.160728][ C0] ? virtqueue_get_buf_ctx+0x697/0xd10 [ 489.166566][ C0] virtnet_poll+0x5dd/0x1280 [ 489.171177][ C0] ? refill_work+0x220/0x220 [ 489.175781][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 489.182822][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 489.188094][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 489.194284][ C0] __napi_poll+0xc0/0x460 [ 489.198654][ C0] net_rx_action+0x616/0xc40 [ 489.203599][ C0] ? net_tx_action+0x980/0x980 [ 489.209014][ C0] ? detach_timer+0x2b0/0x2b0 [ 489.213716][ C0] handle_softirqs+0x280/0x820 [ 489.218493][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 489.223473][ C0] ? do_softirq+0x1a0/0x1a0 [ 489.228180][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 489.233586][ C0] __irq_exit_rcu+0xd3/0x190 [ 489.239384][ C0] ? irq_exit_rcu+0x20/0x20 [ 489.244062][ C0] irq_exit_rcu+0x9/0x20 [ 489.248643][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 489.254688][ C0] [ 489.257651][ C0] [ 489.260847][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 489.268129][ C0] RIP: 0010:finish_task_switch+0x26a/0x8f0 [ 489.274165][ C0] Code: 0f 84 33 01 00 00 48 85 db 0f 85 52 01 00 00 0f 1f 44 00 00 4c 8b 75 d0 4c 89 e7 e8 f0 b3 30 09 e8 fb 23 30 00 fb 4c 8b 65 c0 <49> 8d bc 24 f8 15 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 [ 489.293977][ C0] RSP: 0018:ffffc9000b84f758 EFLAGS: 00000282 [ 489.300084][ C0] RAX: 85ae48512ecd3200 RBX: 0000000000000000 RCX: 85ae48512ecd3200 [ 489.308355][ C0] RDX: dffffc0000000000 RSI: ffffffff8acac900 RDI: ffffffff8b1c82e0 [ 489.316536][ C0] RBP: ffffc9000b84f7b0 R08: ffffffff911bf5ff R09: 1ffffffff2237ebf [ 489.324696][ C0] R10: dffffc0000000000 R11: fffffbfff2237ec0 R12: ffff88802cbbbc00 [ 489.333185][ C0] R13: dffffc0000000000 R14: ffff88802810bc00 R15: ffff8880b8e3cac8 [ 489.341741][ C0] ? finish_task_switch+0x265/0x8f0 [ 489.347249][ C0] __schedule+0x155b/0x45a0 [ 489.352158][ C0] ? mark_lock+0x94/0x320 [ 489.356510][ C0] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 489.362509][ C0] ? lock_chain_count+0x20/0x20 [ 489.367449][ C0] ? asan.module_dtor+0x20/0x20 [ 489.372327][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 489.378582][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 489.383810][ C0] ? preempt_schedule+0xc0/0xd0 [ 489.388749][ C0] preempt_schedule_common+0x82/0xc0 [ 489.394589][ C0] preempt_schedule+0xc0/0xd0 [ 489.399371][ C0] ? schedule_preempt_disabled+0x20/0x20 [ 489.405321][ C0] ? event_function+0x300/0x300 [ 489.410383][ C0] ? smp_call_function_single+0x5a0/0x5a0 [ 489.416157][ C0] preempt_schedule_thunk+0x1a/0x30 [ 489.421565][ C0] ? smp_call_function_single+0x488/0x5a0 [ 489.427599][ C0] smp_call_function_single+0x48d/0x5a0 [ 489.433210][ C0] ? event_function+0x300/0x300 [ 489.438151][ C0] ? flush_smp_call_function_queue+0x250/0x250 [ 489.444311][ C0] ? event_function+0x300/0x300 [ 489.449283][ C0] perf_install_in_context+0x5be/0x920 [ 489.454788][ C0] ? exclusive_event_installable+0x2c0/0x2c0 [ 489.460880][ C0] ? add_event_to_ctx+0x1180/0x1180 [ 489.466184][ C0] ? anon_inode_getfile+0x109/0x1a0 [ 489.471415][ C0] ? perf_event__header_size+0x165/0x220 [ 489.477068][ C0] __se_sys_perf_event_open+0x1836/0x1c50 [ 489.482880][ C0] ? security_bpf+0x7e/0xa0 [ 489.487763][ C0] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 489.493537][ C0] ? lock_chain_count+0x20/0x20 [ 489.498423][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 489.503647][ C0] ? __x64_sys_perf_event_open+0x20/0xc0 [ 489.509443][ C0] do_syscall_64+0x55/0xa0 [ 489.514194][ C0] ? clear_bhb_loop+0x40/0x90 [ 489.519058][ C0] ? clear_bhb_loop+0x40/0x90 [ 489.523955][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 489.530386][ C0] RIP: 0033:0x7ff15439c629 [ 489.534991][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 489.555473][ C0] RSP: 002b:00007ff1551ce028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 489.564160][ C0] RAX: ffffffffffffffda RBX: 00007ff154615fa0 RCX: 00007ff15439c629 [ 489.572222][ C0] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000480 [ 489.580456][ C0] RBP: 00007ff154432b39 R08: 000000000000000a R09: 0000000000000000 [ 489.588899][ C0] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 489.598022][ C0] R13: 00007ff154616038 R14: 00007ff154615fa0 R15: 00007ffcad98a108 [ 489.606020][ C0]