last executing test programs: 3m1.49713741s ago: executing program 1 (id=471): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x80000000}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r1, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) sendmsg$inet(r1, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x4000080) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000900)=r0, 0x4) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000000c0)="14000000350094fb01", 0x9}], 0x1}, 0x20000020) 3m0.751146111s ago: executing program 1 (id=476): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) (async) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xff, @remote}, 0x80, 0x0}, 0x0) (async) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001a00910c07a551559a257aac81"], 0xfe33) (async) r3 = socket$kcm(0x2, 0x3, 0x106) (async) r4 = syz_clone(0x1000, &(0x7f0000000080)="63fc8afa500bb230", 0x8, &(0x7f0000000100), &(0x7f0000000340), &(0x7f0000000440)="378e3828cb02177921b39c47166df240565bc8c16061e2c7989709253c7552ca95518af43bec2a76f6af1d033f604bb4b79f42a26eaffcc923a29417d2e5d994d811fb229e93bfef4c198a57675e9b973962e8a22a296f6952940ebee7eaf53089862f931c5348dfaeebe82f1f50205848b2769bb4aec60ce689d617756eb8793a0d68a7027f73ffa4d73d7dc3291bfa96fdcd638e0d8a86f7eda0373a9c41183d83e02c292439c1920728bdd36fa92230d2235c99e72e9f18b51797a0e55b8a57ade65fa9018013dc390fee0a1f83e92005b2cf6fff10250600248618a27c29d6eef9") perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x9, 0x100, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x9}, r4, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, 0x0}, 0x0) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0x19f}, 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x141141, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002280)={r5, 0x0, 0x9e, 0x8e, &(0x7f00000001c0)="3aab6dd1637b4ffb0b8d4d405538e24da8af39c0b9e1e6fe924d6549de4babf132244e81dff4f75bf3495e39be609a0ceab934f14e0beccd837d9b76317701acdbb2d257591ab30699ec2089cfb229f8b010150739535ef9f5395ecd3846437ead33f4d741398119da7c8dd71c0d9a07e6780d42bf1072f7063fa9361a9ba586adac342aea9b72b5b8ce579832abd075a0b8e0fae400b227cfc49ff05376", &(0x7f0000000280)=""/142, 0x10001, 0x0, 0x1000, 0xa8, &(0x7f00000011c0)="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", &(0x7f00000021c0)="f19e70da9087eeeaf6c4853eea5dbc283fe66e012d60273498b62884dd5939e6ed086c5760ab25cd6d74eddd9e53e5e8b02ce39501359a166171c72214608633667224c83052b8d7ec0f7c28b0be6d350ab47b747009bfcb4abb0ed5a8c46a9ad2f24834c76b9a3444889adc03902caefdbfef4830e5dc1fd8a45ebd4d2fb1fb7b4c4207ccbeea38136fe3745bb2c8be699fb213cc64350e1e40faafba828e206f4cd4d5e7207956", 0x4, 0x0, 0x8}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000340)=@framed={{}, [@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) close(0xffffffffffffffff) (async) sendmsg$inet(r3, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000600)="b9ed29d8fe490a060b483f2dd090fc6889ae6b84", 0xffeb}], 0x1}, 0x0) close(r1) ioctl$SIOCSIFHWADDR(r1, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x4, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000006b8a00fe00000000c7080000010000007b8af0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb7020000080000fa18230000", @ANYRES8=r0, @ANYBLOB="0000000000000000b704000008000000850000004c00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m43.323696518s ago: executing program 1 (id=476): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) (async) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xff, @remote}, 0x80, 0x0}, 0x0) (async) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001a00910c07a551559a257aac81"], 0xfe33) (async) r3 = socket$kcm(0x2, 0x3, 0x106) (async) r4 = syz_clone(0x1000, &(0x7f0000000080)="63fc8afa500bb230", 0x8, &(0x7f0000000100), &(0x7f0000000340), &(0x7f0000000440)="378e3828cb02177921b39c47166df240565bc8c16061e2c7989709253c7552ca95518af43bec2a76f6af1d033f604bb4b79f42a26eaffcc923a29417d2e5d994d811fb229e93bfef4c198a57675e9b973962e8a22a296f6952940ebee7eaf53089862f931c5348dfaeebe82f1f50205848b2769bb4aec60ce689d617756eb8793a0d68a7027f73ffa4d73d7dc3291bfa96fdcd638e0d8a86f7eda0373a9c41183d83e02c292439c1920728bdd36fa92230d2235c99e72e9f18b51797a0e55b8a57ade65fa9018013dc390fee0a1f83e92005b2cf6fff10250600248618a27c29d6eef9") perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x9, 0x100, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x9}, r4, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, 0x0}, 0x0) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0x19f}, 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x141141, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002280)={r5, 0x0, 0x9e, 0x8e, &(0x7f00000001c0)="3aab6dd1637b4ffb0b8d4d405538e24da8af39c0b9e1e6fe924d6549de4babf132244e81dff4f75bf3495e39be609a0ceab934f14e0beccd837d9b76317701acdbb2d257591ab30699ec2089cfb229f8b010150739535ef9f5395ecd3846437ead33f4d741398119da7c8dd71c0d9a07e6780d42bf1072f7063fa9361a9ba586adac342aea9b72b5b8ce579832abd075a0b8e0fae400b227cfc49ff05376", &(0x7f0000000280)=""/142, 0x10001, 0x0, 0x1000, 0xa8, &(0x7f00000011c0)="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", &(0x7f00000021c0)="f19e70da9087eeeaf6c4853eea5dbc283fe66e012d60273498b62884dd5939e6ed086c5760ab25cd6d74eddd9e53e5e8b02ce39501359a166171c72214608633667224c83052b8d7ec0f7c28b0be6d350ab47b747009bfcb4abb0ed5a8c46a9ad2f24834c76b9a3444889adc03902caefdbfef4830e5dc1fd8a45ebd4d2fb1fb7b4c4207ccbeea38136fe3745bb2c8be699fb213cc64350e1e40faafba828e206f4cd4d5e7207956", 0x4, 0x0, 0x8}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000340)=@framed={{}, [@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) close(0xffffffffffffffff) (async) sendmsg$inet(r3, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000600)="b9ed29d8fe490a060b483f2dd090fc6889ae6b84", 0xffeb}], 0x1}, 0x0) close(r1) ioctl$SIOCSIFHWADDR(r1, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x4, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000006b8a00fe00000000c7080000010000007b8af0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb7020000080000fa18230000", @ANYRES8=r0, @ANYBLOB="0000000000000000b704000008000000850000004c00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m43.075948915s ago: executing program 1 (id=502): r0 = perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xf4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x4625, 0x0, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, r0, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7538e475dd6317cebb03c23c00fe80000000000000875a65969ff57b0000040000000000000004"], 0xfe1b) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4200003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="850200000000000018100000", @ANYRES32, @ANYBLOB="0000000000000000950000000000000045"], 0x0}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f3, &(0x7f0000000080)) syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) close(0x3) 2m42.40516152s ago: executing program 1 (id=504): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x10140) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="1e0301003c05000128876b60864668f82f"], 0xffdd) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc) 2m36.495879603s ago: executing program 1 (id=514): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1e, 0x10506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000801, 0x1}, 0x7402, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x55}, 0x94) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfdef) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ff"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) r1 = socket$kcm(0x2, 0x2, 0x73) sendmsg$inet(r1, &(0x7f0000000500)={&(0x7f0000000300)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000340)='+', 0x34000}], 0x1}, 0x900000000000000) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) (async) r3 = openat$cgroup_type(r2, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000280), 0x9) (async) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000c40), 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000140), 0x2, 0x0) syz_clone(0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbffffffffffffffe, r0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[@ANYBLOB='+pids'], 0x6) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$kcm(0x2, 0x5, 0x84) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x2, 0x0) (async) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, 0x0, 0x0) 2m21.245553821s ago: executing program 32 (id=514): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1e, 0x10506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000801, 0x1}, 0x7402, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x55}, 0x94) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfdef) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ff"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) r1 = socket$kcm(0x2, 0x2, 0x73) sendmsg$inet(r1, &(0x7f0000000500)={&(0x7f0000000300)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000340)='+', 0x34000}], 0x1}, 0x900000000000000) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) (async) r3 = openat$cgroup_type(r2, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000280), 0x9) (async) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000c40), 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000140), 0x2, 0x0) syz_clone(0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbffffffffffffffe, r0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[@ANYBLOB='+pids'], 0x6) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$kcm(0x2, 0x5, 0x84) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x2, 0x0) (async) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, 0x0, 0x0) 7.407391076s ago: executing program 2 (id=1159): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079104800000000006104000000000000950000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) recvmsg$unix(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000002c0)=""/37, 0x25}], 0x1}, 0x0) close(r4) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)) 7.234485327s ago: executing program 3 (id=1160): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000000006c"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0xf}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='memory.events\x00', 0x100002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040)=0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32], 0x48) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="36400000250091"], 0xfe33) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000000010000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYRES32, @ANYBLOB='\x00'/15], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.346494388s ago: executing program 2 (id=1164): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x3, 0x4, 0x3fe, 0x7ffffffc, 0x400, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$kcm(0x10, 0x2, 0x2) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x2, 0x20000}, 0x102065, 0x0, 0x0, 0x3, 0x7, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x1e, 0x5, 0x0) socket$kcm(0x2b, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.308279199s ago: executing program 3 (id=1171): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x11c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000180)="d8000000320081024e81f782db44b904121d080005000000e8fe55a1180015000600142603600e4006000000036010fab94dcf5c0461c1d66d6f94007134cf6ee08000a2a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14479f30dfe1d9d322fe7c9f8775730d16bd683f5aeb4edbb57a5025ccca9e00360db7011f215ce3bb9ad809d5e1cace81ed0bffec0dd6e4edef3d93452a92954b43370e97012e33030000000000000000000000000000a521525f13c209f2ef3a427086e3a9512ce3868c54f3", 0xd8}], 0x1}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x11, 0xa, 0x300) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbf, &(0x7f0000000140)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0xeb, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) r5 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYRES16=r4, @ANYRESHEX=r2], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r3, 0x25, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x606}, 0x94) r6 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14}}], 0xfffffffffffffdf8}, 0x12021) setsockopt$sock_attach_bpf(r6, 0x84, 0x82, &(0x7f0000000000), 0x8) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000380)={{}, &(0x7f0000000300), &(0x7f0000000340)='%pS \x00'}, 0x20) socketpair(0x1, 0x5, 0x9, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYRES64=0x0, @ANYRES64=r6], 0x48) bpf$ITER_CREATE(0x21, &(0x7f00000003c0), 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{0x1}, &(0x7f0000000400), &(0x7f0000000440)}, 0x20) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000004c0)={0x0, 0x1}, 0xc) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000500)={0xffffffffffffffff, 0x7fff, 0x18}, 0xc) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x5, 0x408, 0x84, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r8}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, 0x0, &(0x7f0000000540), 0x6c, r8}, 0x38) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="1079e3aa2f742264b400000000000000000000000000000000000000aec4e8fd87e1a95d8aafbc52e968d724180d", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000030000000100"/28], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="1b0000000000000000000000f7ffffff000000001a928ca931bb532b781dbd94dd67bed20e8c9c16b3aa67640407ae64d20448e234f83243c21be98a9a24d66d30faa500310b3aabf522817a4f0d3093e7c6e1e4ae62a9af53e28fa4481b03b2a31a3e2cca9e583bc683fcb8f768aad839fe7218716d5cd2fea1f1e0", @ANYRES32=0x1, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000040000000500"/28], 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x11, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000700000000c06204d900000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000185900000e0000000000000000000000bf91000000000000b7020000030000008500000084000000b7000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x9300, 0x56, &(0x7f0000000200)=""/86, 0x40f00, 0x17, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x0, 0x5, 0x6, 0x4}, 0x10, 0xa8f4, 0xffffffffffffffff, 0x7, &(0x7f0000000640), &(0x7f0000000680)=[{0x0, 0x4, 0xa, 0x8}, {0x2, 0x4, 0x3, 0x5}, {0x0, 0x5, 0x9, 0x7}, {0x3, 0x5, 0xc, 0x7}, {0x4, 0x4, 0xb, 0xa}, {0x3, 0x4, 0xe, 0xc}, {0x4, 0x2, 0x0, 0x9}], 0x10, 0x3}, 0x94) 3.075126111s ago: executing program 4 (id=1175): socket$kcm(0x11, 0x200000000000002, 0x300) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x4, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0xa4, 0x101, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fd, 0x0, @perf_config_ext, 0x0, 0x201, 0x0, 0x7, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x2) socket$kcm(0x2a, 0x2, 0x0) socket$kcm(0x10, 0x400000002, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0e00009bd029ef8020ab070011000523a608463a", @ANYRES16=r4], 0xfe33) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001a"], 0xfe33) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000100)='GPL\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv6\x00\x00s/\x8br\bc_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x90ih\xecd\'%\x11c\x91l,'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) socket$kcm(0x11, 0x20000000000000a, 0x300) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) 3.072782911s ago: executing program 2 (id=1186): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) close(0x3) socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) r2 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x82, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x112c0a, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r2, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0xffffffffffffffcb, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000001c0)=r4, 0x4) sendmsg$inet(r6, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x48c0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3b}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x70) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000025c0)="d8000000240081064e81f882db44b9040a02080006000000e8fe0ba1f1ffffff0200142603600e120800080024000000a80009001100014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a94c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970179b1b36165fb55c82148d29e", 0xd8}], 0x1}, 0x0) 3.002299736s ago: executing program 3 (id=1176): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079104800000000006104000000000000950000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) recvmsg$unix(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000002c0)=""/37, 0x25}], 0x1}, 0x0) close(r4) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)) 2.935147261s ago: executing program 0 (id=1177): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xffffffffffffffff}, 0x104007, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000005d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext}, 0x0, 0xa, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x29, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x7) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x2, 0x7, 0x2, 0x1, 0x0, 0x7, 0x10240, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xa, 0x2, @perf_bp={0x0, 0x5}, 0x0, 0x3, 0x2, 0x9, 0x4, 0xc9, 0xe43f, 0x0, 0x80000000, 0x0, 0x8000000000000001}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x2) sendmsg$inet(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5c00000014006b02000000d86e6c1d0002847ea6ea6567e75110623400cdd46b44dacff32c6e020075e300250002000f000000172f71d34460bc24eab5560000000ebab8bebf9367b4fa51f60a64c9f4d4778037e786a6d0bdd70000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40) sendmsg$unix(0xffffffffffffffff, 0x0, 0x20004011) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r4, &(0x7f0000000100)='hugetlb.1GB.max_usage_in_bytes\x00', 0x2, 0x0) r7 = socket$kcm(0x10, 0x100000000002, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x1}], 0x1}, 0x20000040) sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="39000000140081ae00002c000500015601618575e285af0100d41f215c0000883795c04a31ba377a1b2cc32b38d3440c6942cb76cab3000000", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) write$cgroup_int(r6, &(0x7f00000002c0)=0x80000001, 0x12) r9 = openat$cgroup_subtree(r5, 0x0, 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00 \x00'], 0x5) 2.843494047s ago: executing program 5 (id=1178): openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = socket$kcm(0x2, 0x922000000001, 0x106) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x25, &(0x7f00000002c0)=r1, 0x8) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000600000000001800000018400000020000000000000000000013040000000000000000000009010000000000d386ab3e670ae797d3dca48853"], 0x0, 0x32, 0x0, 0x2}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="0200000002cf0000009bfa57fc4745506c0080"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba, 0x0, 0x64317119, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r4}, &(0x7f00000007c0), &(0x7f0000000640)=r3}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r4, &(0x7f0000000300), &(0x7f0000000400)=""/154}, 0x20) 2.79767279s ago: executing program 2 (id=1179): close(0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1c, 0xc, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES64=r0], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x1c, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x7) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000001c0)=0xeb) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0xa, 0x0, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="18000000000000001101000001000000dc00000000000000"], 0x18}, 0x0) syz_clone(0x60000400, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$kcm(0x2, 0x200000000000001, 0x0) r4 = socket$kcm(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x2, 0x6, 0x0) sendmsg$inet(r6, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRES32=r4, @ANYRES16, @ANYBLOB="0000000000000000000000000000dfffff1dfa6a03000000", @ANYRESOCT=r5, @ANYRES32, @ANYBLOB='\x00'/16], 0x48) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40) r8 = socket$kcm(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x11b, 0x2, &(0x7f0000000900)=r7, 0x4) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x0, &(0x7f00000003c0)=[{0x0, 0x0, 0x80000000}, {0x1000000a, 0x4}], 0x10, 0x4}, 0x2) close(0x3) 2.662053129s ago: executing program 5 (id=1180): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r0, 0x18000000000002a0, 0x204, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 2.257896197s ago: executing program 0 (id=1182): r0 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x28, 0x4}, 0x80, 0x0}, 0x24044051) (fail_nth: 8) 2.229115508s ago: executing program 5 (id=1183): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0d2e0020fdcc6177d93790ff", @ANYRES32, @ANYBLOB="0800000000000000950000000000000045"], 0x0}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x20}, 0x1f00) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x6, 0xb, &(0x7f0000000000)=@framed={{}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10000}, {0x85, 0x0, 0x0, 0x19}}]}, &(0x7f0000001340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90524fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r3, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f00000003c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000100)="b7", 0x1}], 0x1}, 0x40080c0) r5 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, 0x0, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 2.117741936s ago: executing program 4 (id=1184): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000040000000400000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000700000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000059000000850000008c00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4002000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x59) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000040000000400000008"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000700000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000059000000850000008c00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4002000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x59) (async) 1.417117324s ago: executing program 3 (id=1185): socket$kcm(0xa, 0x5, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0xd, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x61, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21bef5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a835701bea8240399c56ce8f58df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b262341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f9ac2f7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63bb20e1e0469f7615f67a9218cbace38f5236821314f76302b98afa93044b83989339ca10e6ae30e70e17a82f03e915b8425e8e7a91614306d2ae0bc3550d856f2d7293672b5673d264fc886b0c8bdf436a0fcd21bf9da7bdca98e34cd6e59b0a7ce4ba1b466561aaa35448dff47bb1d7df23d467689a6669e4300d5acf12e4d0b35abf91569f605b2f6df0d861"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x46}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1c, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600"], 0x0, 0x4}, 0x94) sendmsg$inet(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e068000000110000000000000000dbc790ad000000fc000000000000001400000000000000000000000100000004000000000000001c000000000000000000000008"], 0x68}, 0x0) socket$kcm(0x29, 0x5, 0x0) 1.228917777s ago: executing program 4 (id=1187): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r0, r0}, 0xc) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r2 = bpf$ITER_CREATE(0xb, &(0x7f00000002c0)={r1}, 0x8) write$cgroup_int(r2, &(0x7f00000001c0), 0xfffffdef) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x101}, 0x104046}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.swap.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4020940d, &(0x7f00000005c0)=0x80000000000004) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x1d}}, &(0x7f0000000480)='GPL\x00'}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x12, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xf}, @generic={0xa7}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x80) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x40047440, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) r5 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r5, 0x6, 0x13, &(0x7f0000000200), 0x4) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) ioctl$SIOCSIFHWADDR(r6, 0x541b, &(0x7f0000000180)={'veth0_virt_wifi\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}) 726.381331ms ago: executing program 0 (id=1188): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x31) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x27, 0x14, 0x0, &(0x7f0000000440)="f8ad48cc02cb29efc8007f590800cfd601006e30", 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000180)=r1}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)='%+9llu \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x17, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7ff}, [@map_idx={0x18, 0x7, 0x5, 0x0, 0x1}, @jmp={0x5, 0x0, 0x7, 0x1, 0x7, 0x50, 0x8}, @exit, @map_fd={0x18, 0x5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @btf_id={0x18, 0x9a9ba38f19f59a9d}, @map_val={0x18, 0x7, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x4}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @map_val={0x18, 0x7, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x45b}, @func={0x85, 0x0, 0x1, 0x0, 0x6}]}, &(0x7f0000000640)='GPL\x00', 0x80, 0x0, 0x0, 0x41000, 0x68, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x6, 0x2}, 0x8, 0x10, &(0x7f00000006c0)={0x2, 0x1, 0x3, 0x5}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000700)=[r0, r0, r0, r0, r0, r0], &(0x7f0000000740)=[{0x3, 0x3, 0xd, 0xb}, {0x0, 0x1, 0xe}, {0x3, 0x1, 0x10, 0x8}, {0x3, 0x5, 0x6, 0xa}, {0x0, 0x3, 0x4, 0x2}], 0x10, 0xb49f}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="1e00000001040000070000000300000040000000", @ANYRES32=r0, @ANYBLOB="22d0000000000000000000000000000000000000200571ee7a9814b63c2708094427492f297d66bdbc3465297f0fcf34a6228e69442f3803fbeb8866e1801810a6ce2d83ecebd6c52abfd7bbc0ae5ed167f980f4a27bbf5bf1ebf78b15312d880f15425d274e74764b48d2", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0500000001000000020000000d00"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000a8c5000000a50000001801000020206405000000000004000f7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70400000000000085000000a700000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r5, 0xffffffffffffffff}, 0x4) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x3, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff}, [@call={0x85, 0x0, 0x0, 0x28}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = gettid() r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000004a"], 0x48) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x10, 0xb, &(0x7f00000009c0)=@framed={{0x18, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r10}}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit]}, &(0x7f0000000040)='GPL\x00', 0x4, 0xaf, &(0x7f0000000a80)=""/175, 0x0, 0xa}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r9, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r9, r8, 0x0, 0x1, &(0x7f0000000080)='\x00', 0x0}, 0x30) r13 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r13) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@fallback=r13, 0x83c7466fff36e62f, 0x0, 0x3, &(0x7f0000000140)=[0x0], 0x1, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, &(0x7f0000000240)=[0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000003c0)={@map=r10, r11, 0x29, 0x20, r11, @void, @void, @void, @value=r12, r14}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000880)='GPL\x00', 0x0}, 0x30) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000480)={@map=r4, r1, 0x2b, 0x2a, r7, @void, @void, @void, @value=r15, r14}, 0x20) 632.150457ms ago: executing program 3 (id=1189): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x20, 0x0, 0x0, 0xffff, 0x8a410, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_config_ext, 0x8018, 0xdf67, 0x3, 0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100000001}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000080)=0xc) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x2}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x6) r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x23, &(0x7f0000000040), 0xcf) sendmsg$inet(r0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x2, 0x4e23, @remote}, 0x10, 0x0}, 0x80) 563.298542ms ago: executing program 4 (id=1190): socket$kcm(0xa, 0x1, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x1, 0x19, 0x0, 0x3b) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000711844000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x80, 0x0) (async) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000140)) (async) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000cc90db0bd01216f700000000100900", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x90}], 0x1}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10, 0x2000020000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffdbc, &(0x7f0000000080)=[{&(0x7f0000000040)="180000006a00f96b1324", 0x18}], 0x1}, 0x4080) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x12, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000050000000400000002"], 0x50) (async) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r5}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 544.110063ms ago: executing program 0 (id=1191): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000025c0)="d8000000240081064e81f882db44b9040a02080006000000e8fe0ba1f1ffffff0200142603600e120800080024000000a80009001100014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a94c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970179b1b36165fb55c82148d29e", 0xd8}], 0x1}, 0x0) 438.28796ms ago: executing program 5 (id=1192): openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = socket$kcm(0x2, 0x922000000001, 0x106) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x25, &(0x7f00000002c0)=r1, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000600000000001800000018400000020000000000000000000013040000000000000000000009010000000000d386ab3e670ae797d3dca48853"], 0x0, 0x32, 0x0, 0x2}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba, 0x0, 0x64317119, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r3}, &(0x7f00000007c0), &(0x7f0000000640)=r2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r3, &(0x7f0000000300), &(0x7f0000000400)=""/154}, 0x20) 363.339176ms ago: executing program 4 (id=1193): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b70300000000008085000000c0000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1b, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="180000000000000000000000000000001802"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="c1dfb061cd21d3084d94d35486dd", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001e40)={0x0, 0x2, 0x4}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)=@generic={0x0, 0x0, 0x14}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0), 0x4) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYRES16=r3, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x42}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x203f}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0xc, 0x7}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xffef, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000001e80)={&(0x7f0000000040)="75797854504a17ea8b9d37b655e257f52a52806f6986e91e05f499b511d4d8bae829e31c0a8896709523e99205f4daf413aafbd7b103b057c2da88", &(0x7f0000000dc0)=""/4096, &(0x7f0000001dc0)="d6475600bb5b9b56a67c17a8e705c6612c08b2c3342b24f0ef468a617098084a62c099478a", &(0x7f0000001e00)="cad2a8a90605446589dac94b345177e732317164cd3b", 0x0, r1, 0x4}, 0x38) 328.239278ms ago: executing program 2 (id=1194): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r0, 0x18000000000002a0, 0x204, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 316.163589ms ago: executing program 0 (id=1195): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003010000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x18000000000002a0, 0x28, 0x0, &(0x7f0000000000)="b9ff03076003008cb89e08f086dddcb3eaa0d36d6b33428d203648143a5a9f6f04b03c307143bd47", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x3, 0x2, 0x3, 0x0, 0xffffffffffffffff, 0x3}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000001000000ff0f000007"], 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x11, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000002000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000025000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000090000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x61800, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3, r2}, 0xc) r4 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r4, 0x29, 0x1f, 0x0, 0x0) 261.436772ms ago: executing program 5 (id=1196): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="0e00000004000000040000000c"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000200)=ANY=[@ANYRES8=r0, @ANYRESOCT=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000005800000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 147.76065ms ago: executing program 4 (id=1197): socketpair(0x1d, 0x2, 0x2, &(0x7f0000000300)={0x0, 0x0}) (fail_nth: 14) 139.340601ms ago: executing program 3 (id=1198): perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5e6f8a6df01f948e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x1a49, 0xf2f3}, 0x42, 0xc8, 0x0, 0x1, 0x65, 0x0, 0x211, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0x4, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="8fedcb7907031175f37538e486dd630080fc00000000db5b686158bbcfe8875a060300001123000000000000000000000000ac1414aa89"], 0xfdef) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@ifindex, 0x26, 0x0, 0x2, &(0x7f0000000000)=[0x0], 0x1, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)={@map=r2, r2, 0x4, 0x2020, 0x0, @void, @void, @value=0xffffffffffffffff, @void, r3}, 0x20) 78.576055ms ago: executing program 0 (id=1199): r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, 0x0, 0x0, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x32, 0x4410}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x38}, 0x4040) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001600)="5c00000003006b03000000d86e6c1d0002840900000400000000822be3f58e76ff0165f450e71b0075e3002500028d459e37000f0000000000bfd367b47e51f60a64d9f4d4938037e784f869526f9aff94890f4c4a6a639086a6d0bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffff7d, 0xffffffffffffffff, 0x1) r2 = socket$kcm(0xa, 0x2, 0x3a) write$cgroup_subtree(r2, 0x0, 0x1e) 3.42798ms ago: executing program 5 (id=1200): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) (async) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=@framed={{}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x2d}}, @exit]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x53, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) r3 = socket$kcm(0xa, 0x1, 0x106) r4 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$kcm(0x10, 0x2, 0x0) (async) r5 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb0100180000000000000030000000300000000c0000000400000001000084020000000a0000000300000000000001010000000000000700000000000000000000000b0200000084006100302e61306161616100"], 0x0, 0x54}, 0x28) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)="d80000001c0081044e81f782db44b904021d080201000000120000a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) (async) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)="d80000001c0081044e81f782db44b904021d080201000000120000a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x18000000000002a0, 0x28, 0x0, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb080600017f020001be3e7d2a182f", 0x0, 0x104, 0x6000000000000000, 0xc1, 0x0, &(0x7f0000000400)="9209558f0c5fb25cd57f98113135c3171b8b331fbc04f0e6955a796ff8e3aae3cac46cec3030dfc999058aea01f0e6dcf2f9d480d328655aca003927bd50ed49d4843c8a0a2a4b26ceb747947200bd644c85e7a8a7d7cfce840c02a7d69c9e0bca410f64d43290abbbf3131e1fa8bd0900000000000000d4c1a0fe47de9eebaf073ac3da6256bdb681d18fbd607c9b0d710442bcf78bc36fd3c035812bde582a262bff0e4d6181c818fccf542868c6e602d97bea23a101955dc76bcc984142ab30", 0x0}, 0x50) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e120500210000000401a8001600a400014020000300036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x4, 0x0, 0x1000, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x4, 0x0, 0x1000, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="5c00000014006b030231a6080c000af32c00000000f800250502000f00e5aa000017d34460bc24eab556bd05251e6182949a2756f475ce36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700e6657594f1817d", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg(r3, &(0x7f00000012c0)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}, 0x10120) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r8, &(0x7f0000000140), 0x2, 0x0) (async) r9 = openat$cgroup_subtree(r8, &(0x7f0000000140), 0x2, 0x0) syz_clone(0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_subtree(r9, &(0x7f0000000300)=ANY=[@ANYBLOB='+pids'], 0x6) 0s ago: executing program 2 (id=1201): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x16, 0x2, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, @perf_bp={0x0, 0x6}, 0x100000, 0xca, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1000001}, 0x11000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000001000)='ns/pid_for_children\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/pid\x00') perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x63, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000500), 0x2}, 0x0, 0xfffffffffffffffe, 0x5, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0xd6, 0x0, 0x0, &(0x7f00000002c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x98}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x80) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x26e1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) kernel console output (not intermixed with test programs): ready exists on: batadv_slave_0 [ 241.053827][ T6468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.063926][ T6468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.074737][ T6468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.085374][ T6468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.097258][ T6468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.109987][ T6468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.120817][ T6468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.131535][ T6468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.142139][ T6468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.153818][ T6468] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 241.178523][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 241.202627][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 241.222010][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 241.247430][ T6468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.275875][ T6468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.311030][ T6468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.324602][ T6468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.342491][ T6468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.353678][ T6468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.371316][ T6468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.390465][ T6468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.401010][ T6468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.412980][ T6468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.423216][ T6468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.434998][ T6468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.445224][ T6468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.457424][ T6468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.474431][ T6468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.498334][ T6468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.515770][ T6468] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 241.539188][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 241.566953][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 241.602852][ T6468] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.613013][ T6468] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.622211][ T6468] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.631142][ T6468] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.644698][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 241.653004][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 241.664983][ T6593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 241.775565][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 241.786103][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 241.822433][ T6608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.876839][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 241.901794][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 241.952618][ T6608] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.959574][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 241.967775][ T4397] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.977370][ T4397] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.986272][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 242.006093][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 242.014399][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 242.034200][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 242.044750][ T6593] device veth0_vlan entered promiscuous mode [ 242.086317][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 242.116936][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 242.143650][ T4587] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.150962][ T4587] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.159905][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 242.169465][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 242.178514][ T4587] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.185717][ T4587] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.194680][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 242.216863][ T6593] device veth1_vlan entered promiscuous mode [ 242.253337][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 242.267192][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 242.288847][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 242.338266][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 242.349432][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 242.363878][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 242.382129][ T4397] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.390085][ T4397] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.408627][ T6593] device veth0_macvtap entered promiscuous mode [ 242.432842][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 242.448269][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 242.457663][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 242.467278][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 242.476197][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 242.486045][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 242.496000][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 242.508878][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 242.534715][ T6593] device veth1_macvtap entered promiscuous mode [ 242.559369][ T6608] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 242.585693][ T6608] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 242.612979][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 242.627950][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 242.644073][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 242.683371][ T6593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.710478][ T6593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.730684][ T6593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.761137][ T6593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.795486][ T6593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.853665][ T6593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.882828][ T6593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.903895][ T6593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.924627][ T6593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.950585][ T6593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.970667][ T6593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.050485][ T6593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.080440][ T6593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.113159][ T6593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.166985][ T6593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.191413][ T6593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.206163][ T6593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.238881][ T6593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.269499][ T6593] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 243.283335][ T5465] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 243.312059][ T5465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 243.374274][ T6593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.397847][ T6593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.420651][ T6593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.441536][ T6593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.481810][ T6593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.500544][ T6593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.522195][ T6593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.532801][ T6593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.544375][ T6593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.557562][ T6593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.575938][ T6593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.597606][ T6593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.608530][ T6593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.619439][ T6593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.629463][ T6593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.639995][ T6593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.652235][ T6593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.664258][ T6593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.675917][ T6593] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 243.692059][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 243.703982][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 243.734386][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 243.751617][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 243.784503][ T6608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.812930][ T6593] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.848149][ T6593] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.897166][ T6593] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.907045][ T6593] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.011255][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 244.042673][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 244.140217][ T5465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 244.177736][ T5465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 244.218497][ T5465] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 244.258451][ T5465] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 244.336117][ T6788] netlink: 8 bytes leftover after parsing attributes in process `syz.4.521'. [ 244.370717][ T6788] netlink: 4 bytes leftover after parsing attributes in process `syz.4.521'. [ 244.418052][ T6788] netlink: 33 bytes leftover after parsing attributes in process `syz.4.521'. [ 244.500608][ T6788] netlink: 4 bytes leftover after parsing attributes in process `syz.4.521'. [ 244.530726][ T6788] netlink: 33 bytes leftover after parsing attributes in process `syz.4.521'. [ 244.560934][ T6788] netlink: 4 bytes leftover after parsing attributes in process `syz.4.521'. [ 244.617606][ T6788] netlink: 33 bytes leftover after parsing attributes in process `syz.4.521'. [ 244.665592][ T6608] device veth0_vlan entered promiscuous mode [ 244.691064][ T5465] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.701419][ T5465] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.750741][ T5465] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 244.780650][ T6608] device veth1_vlan entered promiscuous mode [ 244.892896][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.900559][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 244.909633][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 244.922375][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.951592][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 244.977277][ T6608] device veth0_macvtap entered promiscuous mode [ 245.017126][ T6608] device veth1_macvtap entered promiscuous mode [ 245.063650][ T6608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.074353][ T6608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.093966][ T6608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.105734][ T6608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.132768][ T6608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.152440][ T6608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.171082][ T6608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.198442][ T6608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.208746][ T6608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.219626][ T6608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.237932][ T6608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.256808][ T6608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.275184][ T6608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.293967][ T6608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.305627][ T6608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.334021][ T6608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.345603][ T6608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.364261][ T6608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.382424][ T6608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.393436][ T6608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.414558][ T6608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 245.442678][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 245.453036][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 245.483236][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 245.501501][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 245.527817][ T6608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.549333][ T6608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.580506][ T6608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.608570][ T6608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.619491][ T6608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.630338][ T6608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.641569][ T6608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.660449][ T6608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.680560][ T6608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.691605][ T6608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.701872][ T6608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.715238][ T6608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.736130][ T6608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.757430][ T6608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.777991][ T6608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.799215][ T6608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.840430][ T6608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.866048][ T6608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.891466][ T6608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.930589][ T6608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.962190][ T6608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.130166][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 246.168240][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 246.238538][ T6608] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.288661][ T6608] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.306703][ T6608] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.336283][ T6608] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.330769][ T4295] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.343953][ T4295] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.406974][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 247.675730][ T4397] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.706171][ T4397] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.789907][ T6816] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.522'. [ 247.856666][ T6837] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 247.891542][ T6837] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 247.949686][ T6837] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 248.030880][ T6837] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 248.289446][ T6851] netlink: 'syz.2.527': attribute type 3 has an invalid length. [ 248.340691][ T6851] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.527'. [ 248.401166][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 249.475123][ T6861] netlink: 156 bytes leftover after parsing attributes in process `syz.0.530'. [ 249.663832][ T6868] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.533'. [ 249.686487][ T4284] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 249.698052][ T4284] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 249.706539][ T4284] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 249.714718][ T4284] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 249.724647][ T4284] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 249.732619][ T4284] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 250.104775][ T6875] netlink: 8 bytes leftover after parsing attributes in process `syz.2.534'. [ 250.151749][ T6875] netlink: 4 bytes leftover after parsing attributes in process `syz.2.534'. [ 250.172322][ T6875] netlink: 33 bytes leftover after parsing attributes in process `syz.2.534'. [ 250.221822][ T6875] netlink: 4 bytes leftover after parsing attributes in process `syz.2.534'. [ 250.248683][ T6875] netlink: 33 bytes leftover after parsing attributes in process `syz.2.534'. [ 250.305144][ T6875] netlink: 4 bytes leftover after parsing attributes in process `syz.2.534'. [ 250.368512][ T6875] netlink: 33 bytes leftover after parsing attributes in process `syz.2.534'. [ 251.124097][ T6900] netlink: 830 bytes leftover after parsing attributes in process `syz.2.537'. [ 251.165351][ T6904] device bridge_slave_1 left promiscuous mode [ 251.199839][ T6904] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.312597][ T6904] device bridge_slave_0 left promiscuous mode [ 251.323359][ T6904] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.628848][ T6884] device syzkaller0 entered promiscuous mode [ 251.801558][ T4284] Bluetooth: hci3: command 0x0409 tx timeout [ 252.173802][ T11] device hsr_slave_0 left promiscuous mode [ 252.242893][ T11] device hsr_slave_1 left promiscuous mode [ 252.252740][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 252.312878][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 252.341948][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 252.352913][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 252.401564][ T11] device bridge_slave_1 left promiscuous mode [ 252.408117][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.481587][ T11] device bridge_slave_0 left promiscuous mode [ 252.487984][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.592125][ T6921] netlink: 'syz.3.541': attribute type 3 has an invalid length. [ 252.621913][ T11] device veth1_macvtap left promiscuous mode [ 252.628035][ T11] device veth0_macvtap left promiscuous mode [ 252.644261][ T11] device veth1_vlan left promiscuous mode [ 252.661299][ T11] device veth0_vlan left promiscuous mode [ 253.888804][ T4284] Bluetooth: hci3: command 0x041b tx timeout [ 254.052313][ T11] team0 (unregistering): Port device team_slave_1 removed [ 254.228413][ T11] team0 (unregistering): Port device team_slave_0 removed [ 254.333144][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 254.402405][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 254.676954][ T6935] netlink: 'syz.0.545': attribute type 29 has an invalid length. [ 254.835065][ T11] bond0 (unregistering): Released all slaves [ 254.960000][ T6922] netlink: 'syz.2.543': attribute type 6 has an invalid length. [ 254.980707][ T6922] __nla_validate_parse: 2 callbacks suppressed [ 254.980722][ T6922] netlink: 164 bytes leftover after parsing attributes in process `syz.2.543'. [ 255.047365][ T6935] netlink: 'syz.0.545': attribute type 29 has an invalid length. [ 255.132661][ T6869] chnl_net:caif_netlink_parms(): no params data found [ 255.148973][ T6936] netlink: 'syz.0.545': attribute type 29 has an invalid length. [ 255.215381][ T6937] netlink: 'syz.0.545': attribute type 29 has an invalid length. [ 255.264772][ T6938] netlink: 'syz.0.545': attribute type 29 has an invalid length. [ 255.300312][ T6944] netlink: 'syz.0.545': attribute type 29 has an invalid length. [ 255.436684][ T6869] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.461500][ T6869] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.481019][ T6869] device bridge_slave_0 entered promiscuous mode [ 255.494618][ T6869] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.511363][ T6869] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.531930][ T6869] device bridge_slave_1 entered promiscuous mode [ 255.606639][ T6869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 255.633303][ T6869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 255.723105][ T6869] team0: Port device team_slave_0 added [ 255.773504][ T6869] team0: Port device team_slave_1 added [ 255.803547][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.810027][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.908798][ T6869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 255.918948][ T6869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.960688][ T4284] Bluetooth: hci3: command 0x040f tx timeout [ 256.070468][ T6869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 256.152902][ T6953] device syzkaller0 entered promiscuous mode [ 256.228772][ T6869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 256.250548][ T6869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.320618][ T6869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 256.390293][ T6966] netlink: 156 bytes leftover after parsing attributes in process `syz.2.550'. [ 256.605111][ T6869] device hsr_slave_0 entered promiscuous mode [ 256.655388][ T6869] device hsr_slave_1 entered promiscuous mode [ 256.692212][ T6869] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 256.732384][ T6869] Cannot create hsr debugfs directory [ 256.961818][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.978395][ T6972] netlink: 830 bytes leftover after parsing attributes in process `syz.4.551'. [ 257.093885][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.586722][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.613833][ T6998] netlink: 164 bytes leftover after parsing attributes in process `syz.4.559'. [ 258.040871][ T4284] Bluetooth: hci3: command 0x0419 tx timeout [ 258.151458][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.393835][ T7002] netlink: 10 bytes leftover after parsing attributes in process `syz.0.560'. [ 258.794233][ T6869] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 258.953841][ T6869] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 258.996949][ T6869] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 259.043134][ T6869] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 260.365843][ T7043] netlink: 'syz.3.568': attribute type 3 has an invalid length. [ 260.400505][ T7043] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.568'. [ 260.472254][ T7050] netlink: 'syz.3.568': attribute type 3 has an invalid length. [ 260.479961][ T7050] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.568'. [ 260.743502][ T6869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 260.854907][ T7033] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 260.900623][ T7033] device syzkaller0 entered promiscuous mode [ 261.489203][ T7066] netlink: 830 bytes leftover after parsing attributes in process `syz.0.572'. [ 261.535550][ T6869] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.544669][ T7068] device bridge_slave_1 left promiscuous mode [ 261.565913][ T7068] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.652618][ T7068] device bridge_slave_0 left promiscuous mode [ 261.684456][ T7068] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.150769][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 262.187468][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 262.261450][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 262.292520][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 262.331449][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.338658][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.379418][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 262.453256][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 262.501245][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.508620][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.581155][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 262.614441][ T6894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 262.662454][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 262.734250][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 262.774147][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 262.805568][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 262.852773][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 262.883064][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 262.923667][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 262.955312][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 262.989827][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 263.033270][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 263.059781][ T6869] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 263.246302][ T7089] netlink: 'syz.0.577': attribute type 1 has an invalid length. [ 263.367799][ T7089] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.577'. [ 264.571866][ T5465] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 264.581035][ T5465] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 264.627602][ T6869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.373242][ T7125] netlink: 164 bytes leftover after parsing attributes in process `syz.4.582'. [ 267.082179][ T7138] netlink: 'syz.4.584': attribute type 21 has an invalid length. [ 267.227985][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 267.257903][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 267.721794][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 267.741590][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 267.772773][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 267.794727][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 267.817830][ T6869] device veth0_vlan entered promiscuous mode [ 267.884187][ T7159] netlink: 14 bytes leftover after parsing attributes in process `syz.3.589'. [ 267.916532][ T6869] device veth1_vlan entered promiscuous mode [ 267.929353][ T11] device hsr_slave_0 left promiscuous mode [ 267.950262][ T7158] delete_channel: no stack [ 267.962035][ T11] device hsr_slave_1 left promiscuous mode [ 267.981032][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 267.988550][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 268.014596][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 268.022290][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 268.042047][ T11] device bridge_slave_1 left promiscuous mode [ 268.048467][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.074368][ T11] device bridge_slave_0 left promiscuous mode [ 268.099737][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.132213][ T11] device hsr_slave_0 left promiscuous mode [ 268.155384][ T11] device hsr_slave_1 left promiscuous mode [ 268.164565][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 268.173157][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 268.185369][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 268.200173][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 268.212659][ T11] device bridge_slave_1 left promiscuous mode [ 268.219185][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.228989][ T11] device bridge_slave_0 left promiscuous mode [ 268.239257][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.255473][ T7165] netlink: 'syz.3.590': attribute type 29 has an invalid length. [ 268.294411][ T11] device veth1_macvtap left promiscuous mode [ 268.301108][ T11] device veth0_macvtap left promiscuous mode [ 268.307325][ T11] device veth1_vlan left promiscuous mode [ 268.313624][ T11] device veth0_vlan left promiscuous mode [ 268.322307][ T11] device veth1_macvtap left promiscuous mode [ 268.328758][ T11] device veth0_macvtap left promiscuous mode [ 268.336041][ T11] device veth1_vlan left promiscuous mode [ 268.342350][ T11] device veth0_vlan left promiscuous mode [ 269.055299][ T11] team0 (unregistering): Port device team_slave_1 removed [ 269.100204][ T11] team0 (unregistering): Port device team_slave_0 removed [ 269.144007][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 269.454504][ T11] bond0 (unregistering): Released all slaves [ 269.994722][ T11] team0 (unregistering): Port device team_slave_1 removed [ 270.040177][ T11] team0 (unregistering): Port device team_slave_0 removed [ 270.088266][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 270.133388][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 270.453186][ T11] bond0 (unregistering): Released all slaves [ 270.592811][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 270.604076][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 270.613685][ T7165] netlink: 'syz.3.590': attribute type 29 has an invalid length. [ 270.622522][ T7164] netlink: 'syz.3.590': attribute type 29 has an invalid length. [ 270.661302][ T7166] netlink: 'syz.3.590': attribute type 29 has an invalid length. [ 270.709813][ T6869] device veth0_macvtap entered promiscuous mode [ 270.750571][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 270.779025][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 270.811721][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 270.872526][ T6869] device veth1_macvtap entered promiscuous mode [ 270.941475][ T6869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.960541][ T6869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.994919][ T6869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.021537][ T6869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.038342][ T6869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.061102][ T6869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.090031][ T6869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.112457][ T6869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.126008][ T6869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.138411][ T6869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.148984][ T6869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.160220][ T6869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.181956][ T6869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.216224][ T6869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.242217][ T6869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 271.361518][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 271.374641][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 271.421947][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 271.472780][ T7184] FAULT_INJECTION: forcing a failure. [ 271.472780][ T7184] name failslab, interval 1, probability 0, space 0, times 0 [ 271.512498][ T7184] CPU: 0 PID: 7184 Comm: syz.0.595 Not tainted syzkaller #0 [ 271.519939][ T7184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 271.530231][ T7184] Call Trace: [ 271.533535][ T7184] [ 271.536489][ T7184] dump_stack_lvl+0x188/0x24e [ 271.541216][ T7184] ? show_regs_print_info+0x12/0x12 [ 271.546464][ T7184] ? load_image+0x400/0x400 [ 271.551016][ T7184] ? __might_sleep+0xd0/0xd0 [ 271.555658][ T7184] ? __lock_acquire+0x7d10/0x7d10 [ 271.560806][ T7184] ? __might_sleep+0xd0/0xd0 [ 271.565434][ T7184] should_fail_ex+0x399/0x4d0 [ 271.570150][ T7184] should_failslab+0x5/0x20 [ 271.574813][ T7184] slab_pre_alloc_hook+0x59/0x310 [ 271.580145][ T7184] kmem_cache_alloc_lru+0x49/0x2e0 [ 271.585379][ T7184] ? sock_alloc_inode+0x24/0xc0 [ 271.590262][ T7184] sock_alloc_inode+0x24/0xc0 [ 271.595051][ T7184] ? sockfs_init_fs_context+0xa0/0xa0 [ 271.600463][ T7184] new_inode_pseudo+0x5f/0x1c0 [ 271.605396][ T7184] __sock_create+0x129/0x940 [ 271.610021][ T7184] __sys_socketpair+0x232/0x540 [ 271.614911][ T7184] __x64_sys_socketpair+0x97/0xb0 [ 271.620081][ T7184] do_syscall_64+0x4c/0xa0 [ 271.624534][ T7184] ? clear_bhb_loop+0x60/0xb0 [ 271.629370][ T7184] ? clear_bhb_loop+0x60/0xb0 [ 271.634158][ T7184] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 271.640344][ T7184] RIP: 0033:0x7f275cd9c819 [ 271.644782][ T7184] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 271.664623][ T7184] RSP: 002b:00007f275db6e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 271.673119][ T7184] RAX: ffffffffffffffda RBX: 00007f275d015fa0 RCX: 00007f275cd9c819 [ 271.681181][ T7184] RDX: 0000000000000002 RSI: 0000000000000002 RDI: 000000000000001d [ 271.689301][ T7184] RBP: 00007f275db6e090 R08: 0000000000000000 R09: 0000000000000000 [ 271.697333][ T7184] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000002 [ 271.705474][ T7184] R13: 00007f275d016038 R14: 00007f275d015fa0 R15: 00007ffde61fdab8 [ 271.713478][ T7184] [ 271.841125][ T7184] socket: no more sockets [ 271.861000][ T7187] netlink: 4 bytes leftover after parsing attributes in process `syz.3.596'. [ 271.938891][ T6869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.960796][ T6869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.992096][ T6869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.010498][ T6869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.041485][ T6869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.070608][ T6869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.090470][ T6869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.120521][ T6869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.140525][ T6869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.152705][ T6869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.163076][ T6869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.173965][ T6869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.184123][ T6869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.195251][ T6869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.208271][ T6869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 272.259870][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 272.271483][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 272.294264][ T6869] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.306295][ T6869] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.330168][ T6869] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.355753][ T6869] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.559264][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.581871][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.613049][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 272.657583][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.671876][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.709067][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 273.510269][ T7212] netlink: 'syz.4.598': attribute type 1 has an invalid length. [ 273.537525][ T7212] netlink: 181400 bytes leftover after parsing attributes in process `syz.4.598'. [ 273.703707][ T7225] netlink: 10 bytes leftover after parsing attributes in process `syz.5.600'. [ 274.143816][ T7237] netlink: 'syz.3.602': attribute type 28 has an invalid length. [ 274.189110][ T7237] netlink: 'syz.3.602': attribute type 4 has an invalid length. [ 274.225605][ T7237] netlink: 136 bytes leftover after parsing attributes in process `syz.3.602'. [ 274.492406][ T7252] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.609'. [ 274.639604][ T7255] netlink: 'syz.3.608': attribute type 29 has an invalid length. [ 274.774820][ T7255] netlink: 'syz.3.608': attribute type 29 has an invalid length. [ 274.877036][ T7257] netlink: 'syz.3.608': attribute type 29 has an invalid length. [ 274.978361][ T7265] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.611'. [ 275.671113][ T7279] netlink: 164 bytes leftover after parsing attributes in process `syz.5.615'. [ 275.864244][ T7283] netlink: 'syz.2.616': attribute type 1 has an invalid length. [ 275.935515][ T7283] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.616'. [ 276.565778][ T7286] netlink: 4 bytes leftover after parsing attributes in process `syz.4.617'. [ 276.667282][ T7290] pimreg: tun_chr_ioctl cmd 1074812118 [ 277.308394][ T7308] netlink: 'syz.3.622': attribute type 1 has an invalid length. [ 277.346074][ T7308] netlink: 5 bytes leftover after parsing attributes in process `syz.3.622'. [ 277.468206][ T7312] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.623'. [ 277.937359][ T7312] netlink: 'syz.2.623': attribute type 10 has an invalid length. [ 277.982667][ T7312] device geneve0 entered promiscuous mode [ 278.001016][ T7328] delete_channel: no stack [ 278.199912][ T7312] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 278.329769][ T7334] FAULT_INJECTION: forcing a failure. [ 278.329769][ T7334] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 278.360987][ T4281] Bluetooth: hci4: command 0x0406 tx timeout [ 278.377448][ T7334] CPU: 1 PID: 7334 Comm: syz.3.628 Not tainted syzkaller #0 [ 278.384864][ T7334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 278.394934][ T7334] Call Trace: [ 278.398416][ T7334] [ 278.401586][ T7334] dump_stack_lvl+0x188/0x24e [ 278.406394][ T7334] ? show_regs_print_info+0x12/0x12 [ 278.412220][ T7334] ? load_image+0x400/0x400 [ 278.416965][ T7334] ? __lock_acquire+0x7d10/0x7d10 [ 278.422132][ T7334] ? slab_free_freelist_hook+0x131/0x1a0 [ 278.428009][ T7334] ? tomoyo_path_number_perm+0x4fb/0x650 [ 278.433777][ T7334] ? security_file_ioctl+0x6c/0xa0 [ 278.439133][ T7334] ? __se_sys_ioctl+0x48/0x170 [ 278.444158][ T7334] should_fail_ex+0x399/0x4d0 [ 278.448986][ T7334] _copy_from_user+0x2c/0x170 [ 278.454078][ T7334] arp_ioctl+0x155/0x530 [ 278.458344][ T7334] ? ct_nmi_exit+0x145/0x1c0 [ 278.463035][ T7334] ? neigh_release+0x80/0x80 [ 278.467764][ T7334] ? do_vfs_ioctl+0x1be7/0x1d40 [ 278.472741][ T7334] inet_ioctl+0x378/0x460 [ 278.477383][ T7334] ? inet_shutdown+0x370/0x370 [ 278.482189][ T7334] ? slab_free_freelist_hook+0x131/0x1a0 [ 278.487870][ T7334] ? tomoyo_path_number_perm+0x4fb/0x650 [ 278.493639][ T7334] ? __kmem_cache_free+0xb6/0x1f0 [ 278.498731][ T7334] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 278.504224][ T7334] ? packet_ioctl+0x11e/0x240 [ 278.509138][ T7334] sock_do_ioctl+0xfb/0x320 [ 278.513835][ T7334] ? sock_show_fdinfo+0xb0/0xb0 [ 278.518819][ T7334] sock_ioctl+0x4d2/0x710 [ 278.523206][ T7334] ? sock_poll+0x410/0x410 [ 278.527662][ T7334] ? bpf_lsm_file_ioctl+0x5/0x10 [ 278.532626][ T7334] ? security_file_ioctl+0x7c/0xa0 [ 278.537768][ T7334] ? sock_poll+0x410/0x410 [ 278.542236][ T7334] __se_sys_ioctl+0xfa/0x170 [ 278.547020][ T7334] do_syscall_64+0x4c/0xa0 [ 278.551478][ T7334] ? clear_bhb_loop+0x60/0xb0 [ 278.556306][ T7334] ? clear_bhb_loop+0x60/0xb0 [ 278.561018][ T7334] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 278.566935][ T7334] RIP: 0033:0x7fca2839c819 [ 278.571581][ T7334] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 278.591596][ T7334] RSP: 002b:00007fca2918b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 278.600568][ T7334] RAX: ffffffffffffffda RBX: 00007fca28615fa0 RCX: 00007fca2839c819 [ 278.608924][ T7334] RDX: 0000200000000040 RSI: 0000000000008954 RDI: 0000000000000003 [ 278.616907][ T7334] RBP: 00007fca2918b090 R08: 0000000000000000 R09: 0000000000000000 [ 278.624884][ T7334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 278.632857][ T7334] R13: 00007fca28616038 R14: 00007fca28615fa0 R15: 00007ffee96f3448 [ 278.640857][ T7334] [ 279.053496][ T7344] netlink: 164 bytes leftover after parsing attributes in process `syz.4.630'. [ 280.586774][ T7369] netlink: 'syz.2.639': attribute type 29 has an invalid length. [ 280.641523][ T7369] netlink: 'syz.2.639': attribute type 29 has an invalid length. [ 281.029094][ T7387] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.643'. [ 281.059528][ T7387] netlink: 'syz.0.643': attribute type 10 has an invalid length. [ 281.094566][ T7387] device geneve0 entered promiscuous mode [ 281.217868][ T7387] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 281.258659][ T7395] TCP: TCP_TX_DELAY enabled [ 281.535733][ T11] device hsr_slave_0 left promiscuous mode [ 281.543065][ T7401] netlink: 164 bytes leftover after parsing attributes in process `syz.3.646'. [ 281.554377][ T11] device hsr_slave_1 left promiscuous mode [ 281.574046][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 281.600628][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 281.932680][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 281.994839][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 282.005659][ T11] device bridge_slave_1 left promiscuous mode [ 282.024930][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.038593][ T11] device bridge_slave_0 left promiscuous mode [ 282.057797][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.091097][ T11] device hsr_slave_0 left promiscuous mode [ 282.101923][ T11] device hsr_slave_1 left promiscuous mode [ 282.125475][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 282.172766][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 282.194846][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 282.223884][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 282.256756][ T11] device bridge_slave_1 left promiscuous mode [ 282.286994][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.146712][ T7415] delete_channel: no stack [ 283.147471][ T11] device bridge_slave_0 left promiscuous mode [ 283.158346][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.171193][ T11] device hsr_slave_0 left promiscuous mode [ 283.177461][ T11] device hsr_slave_1 left promiscuous mode [ 283.185151][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 283.192799][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 283.201186][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 283.208746][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 283.216655][ T11] device bridge_slave_1 left promiscuous mode [ 283.223062][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.239954][ T11] device bridge_slave_0 left promiscuous mode [ 283.246726][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.294721][ T11] device veth1_macvtap left promiscuous mode [ 283.301040][ T11] device veth0_macvtap left promiscuous mode [ 283.307237][ T11] device veth1_vlan left promiscuous mode [ 283.313244][ T11] device veth0_vlan left promiscuous mode [ 283.320116][ T11] device veth1_macvtap left promiscuous mode [ 283.326809][ T11] device veth0_macvtap left promiscuous mode [ 283.333127][ T11] device veth1_vlan left promiscuous mode [ 283.339007][ T11] device veth0_vlan left promiscuous mode [ 283.346757][ T11] device veth1_macvtap left promiscuous mode [ 283.353942][ T11] device veth0_macvtap left promiscuous mode [ 283.360146][ T11] device veth1_vlan left promiscuous mode [ 283.367171][ T11] device veth0_vlan left promiscuous mode [ 284.037423][ T11] team0 (unregistering): Port device team_slave_1 removed [ 284.084689][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 284.138265][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 284.431672][ T11] bond0 (unregistering): Released all slaves [ 284.943378][ T11] team0 (unregistering): Port device team_slave_1 removed [ 284.984666][ T11] team0 (unregistering): Port device team_slave_0 removed [ 285.026287][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 285.072454][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 285.418786][ T11] bond0 (unregistering): Released all slaves [ 285.914746][ T11] team0 (unregistering): Port device team_slave_1 removed [ 285.959165][ T11] team0 (unregistering): Port device team_slave_0 removed [ 286.008773][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 286.053295][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 286.340563][ T11] bond0 (unregistering): Released all slaves [ 286.490693][ T7419] netlink: 830 bytes leftover after parsing attributes in process `syz.2.650'. [ 286.810555][ T7432] delete_channel: no stack [ 287.171584][ T7439] netlink: 'syz.0.657': attribute type 3 has an invalid length. [ 287.200737][ T7439] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.657'. [ 287.412181][ T7448] netlink: 1041 bytes leftover after parsing attributes in process `syz.5.660'. [ 287.432546][ T7447] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.659'. [ 287.473276][ T7448] netlink: 'syz.5.660': attribute type 10 has an invalid length. [ 287.539575][ T7448] device geneve0 entered promiscuous mode [ 287.686619][ T7456] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.661'. [ 287.881361][ T7448] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 288.574872][ T7482] netlink: 164 bytes leftover after parsing attributes in process `syz.5.667'. [ 289.061069][ T4281] Bluetooth: hci1: unexpected event 0x30 length: 151 > 3 [ 289.062176][ T7491] netlink: 'syz.2.669': attribute type 17 has an invalid length. [ 289.107194][ T7491] netlink: 152 bytes leftover after parsing attributes in process `syz.2.669'. [ 289.138813][ T7491] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 289.234602][ T7483] netlink: 'syz.4.666': attribute type 6 has an invalid length. [ 289.251990][ T7483] netlink: 140 bytes leftover after parsing attributes in process `syz.4.666'. [ 289.664587][ T7506] netlink: 156 bytes leftover after parsing attributes in process `syz.2.673'. [ 290.310413][ T7515] netlink: 'syz.4.677': attribute type 3 has an invalid length. [ 290.392739][ T7515] netlink: 132 bytes leftover after parsing attributes in process `syz.4.677'. [ 291.673545][ T7556] __nla_validate_parse: 1 callbacks suppressed [ 291.673561][ T7556] netlink: 830 bytes leftover after parsing attributes in process `syz.0.688'. [ 292.094287][ T7568] netlink: 132 bytes leftover after parsing attributes in process `syz.2.691'. [ 292.702057][ T7581] netlink: 'syz.5.695': attribute type 21 has an invalid length. [ 292.717095][ T7581] IPv6: NLM_F_CREATE should be specified when creating new route [ 292.868141][ T7583] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 292.876479][ T7583] IPv6: NLM_F_CREATE should be set when creating new route [ 292.884295][ T7583] IPv6: NLM_F_CREATE should be set when creating new route [ 292.892231][ T7583] IPv6: NLM_F_CREATE should be set when creating new route [ 293.035852][ T7590] netlink: 164 bytes leftover after parsing attributes in process `syz.4.699'. [ 293.262543][ T7593] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 293.285882][ T7593] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 293.558250][ T7593] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 293.635674][ T7593] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 294.177850][ T7607] FAULT_INJECTION: forcing a failure. [ 294.177850][ T7607] name failslab, interval 1, probability 0, space 0, times 0 [ 294.292493][ T7607] CPU: 0 PID: 7607 Comm: syz.0.702 Not tainted syzkaller #0 [ 294.299887][ T7607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 294.310234][ T7607] Call Trace: [ 294.313551][ T7607] [ 294.316518][ T7607] dump_stack_lvl+0x188/0x24e [ 294.321251][ T7607] ? show_regs_print_info+0x12/0x12 [ 294.326772][ T7607] ? load_image+0x400/0x400 [ 294.331359][ T7607] ? perf_trace_lock+0xf8/0x390 [ 294.336247][ T7607] ? verify_lock_unused+0x140/0x140 [ 294.341516][ T7607] ? perf_trace_lock+0xf8/0x390 [ 294.346872][ T7607] should_fail_ex+0x399/0x4d0 [ 294.351675][ T7607] should_failslab+0x5/0x20 [ 294.356733][ T7607] slab_pre_alloc_hook+0x59/0x310 [ 294.361816][ T7607] kmem_cache_alloc+0x56/0x2f0 [ 294.366965][ T7607] ? skb_clone+0x1e7/0x370 [ 294.372129][ T7607] skb_clone+0x1e7/0x370 [ 294.376430][ T7607] __netlink_deliver_tap+0x3ed/0x800 [ 294.381840][ T7607] ? netlink_deliver_tap+0x2e/0x1b0 [ 294.387310][ T7607] netlink_deliver_tap+0x19c/0x1b0 [ 294.392585][ T7607] __netlink_sendskb+0x4b/0x90 [ 294.398188][ T7607] netlink_dump+0x957/0xd00 [ 294.402817][ T7607] ? netlink_lookup+0x200/0x200 [ 294.407716][ T7607] ? __inet_diag_dump_start+0x805/0x970 [ 294.413800][ T7607] __netlink_dump_start+0x537/0x6f0 [ 294.419287][ T7607] inet_diag_rcv_msg_compat+0x207/0x420 [ 294.424851][ T7607] ? __inet_diag_dump+0x380/0x380 [ 294.430177][ T7607] ? sock_diag_rcv_msg+0x142/0x5f0 [ 294.435294][ T7607] ? inet_diag_rcv_msg_compat+0x420/0x420 [ 294.441184][ T7607] ? inet_diag_dump_start_compat+0x20/0x20 [ 294.446993][ T7607] ? inet_diag_dump+0x50/0x50 [ 294.451698][ T7607] ? __inet_diag_dump+0x380/0x380 [ 294.456919][ T7607] sock_diag_rcv_msg+0x3cc/0x5f0 [ 294.461964][ T7607] netlink_rcv_skb+0x1fb/0x450 [ 294.466844][ T7607] ? sock_diag_bind+0xa0/0xa0 [ 294.471611][ T7607] ? netlink_ack+0x1170/0x1170 [ 294.476474][ T7607] ? netlink_deliver_tap+0x2e/0x1b0 [ 294.481956][ T7607] sock_diag_rcv+0x26/0x40 [ 294.486367][ T7607] netlink_unicast+0x74d/0x8d0 [ 294.491184][ T7607] netlink_sendmsg+0x8ad/0xbd0 [ 294.496007][ T7607] ? netlink_getsockopt+0x550/0x550 [ 294.501326][ T7607] ? aa_sock_msg_perm+0x94/0x150 [ 294.506422][ T7607] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 294.511722][ T7607] ? security_socket_sendmsg+0x7c/0xa0 [ 294.517635][ T7607] ? netlink_getsockopt+0x550/0x550 [ 294.522942][ T7607] ____sys_sendmsg+0x5be/0x970 [ 294.527794][ T7607] ? __sys_sendmsg_sock+0x30/0x30 [ 294.532940][ T7607] ? __import_iovec+0x315/0x500 [ 294.537991][ T7607] ? import_iovec+0x6f/0xa0 [ 294.542590][ T7607] ___sys_sendmsg+0x2a2/0x360 [ 294.547305][ T7607] ? __sys_sendmsg+0x290/0x290 [ 294.552382][ T7607] ? __lock_acquire+0x7d10/0x7d10 [ 294.557551][ T7607] __se_sys_sendmsg+0x1bb/0x2a0 [ 294.562497][ T7607] ? ct_nmi_exit+0x145/0x1c0 [ 294.567171][ T7607] ? __x64_sys_sendmsg+0x80/0x80 [ 294.572117][ T7607] ? lockdep_hardirqs_on+0x94/0x140 [ 294.577760][ T7607] do_syscall_64+0x4c/0xa0 [ 294.582180][ T7607] ? clear_bhb_loop+0x60/0xb0 [ 294.586951][ T7607] ? clear_bhb_loop+0x60/0xb0 [ 294.592138][ T7607] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 294.598222][ T7607] RIP: 0033:0x7f275cd9c819 [ 294.602883][ T7607] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 294.623211][ T7607] RSP: 002b:00007f275db6e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 294.631989][ T7607] RAX: ffffffffffffffda RBX: 00007f275d015fa0 RCX: 00007f275cd9c819 [ 294.640264][ T7607] RDX: 0000000020040842 RSI: 00002000000001c0 RDI: 0000000000000003 [ 294.648262][ T7607] RBP: 00007f275db6e090 R08: 0000000000000000 R09: 0000000000000000 [ 294.656627][ T7607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 294.664736][ T7607] R13: 00007f275d016038 R14: 00007f275d015fa0 R15: 00007ffde61fdab8 [ 294.672830][ T7607] [ 294.756112][ T7599] netlink: 'syz.3.697': attribute type 21 has an invalid length. [ 294.766422][ T7599] netlink: 'syz.3.697': attribute type 6 has an invalid length. [ 294.784121][ T7599] netlink: 132 bytes leftover after parsing attributes in process `syz.3.697'. [ 294.958072][ T7616] netlink: 'syz.0.704': attribute type 3 has an invalid length. [ 294.998985][ T7616] netlink: 132 bytes leftover after parsing attributes in process `syz.0.704'. [ 295.226152][ T7631] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 295.233407][ T7631] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 295.558525][ T7641] netlink: 164 bytes leftover after parsing attributes in process `syz.2.710'. [ 295.591987][ T7639] netlink: 164 bytes leftover after parsing attributes in process `syz.3.711'. [ 296.147102][ T7662] netlink: 156 bytes leftover after parsing attributes in process `syz.5.716'. [ 296.376379][ T7669] netlink: 164 bytes leftover after parsing attributes in process `syz.2.717'. [ 296.657846][ T7678] netlink: 'syz.3.720': attribute type 27 has an invalid length. [ 297.073195][ T7678] bond0: (slave bond_slave_0): Releasing backup interface [ 297.457408][ T7688] netlink: 'syz.4.722': attribute type 10 has an invalid length. [ 297.477282][ T7688] device hsr0 entered promiscuous mode [ 297.555841][ T7688] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 297.581008][ T7688] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 297.615682][ T7688] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 297.640668][ T7688] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 297.663332][ T7702] netlink: 132 bytes leftover after parsing attributes in process `syz.5.725'. [ 297.804428][ T7710] netlink: 'syz.3.727': attribute type 27 has an invalid length. [ 297.846109][ T7709] netlink: 164 bytes leftover after parsing attributes in process `syz.2.728'. [ 297.923632][ T7714] netlink: 156 bytes leftover after parsing attributes in process `syz.0.729'. [ 298.412275][ T7728] netlink: 164 bytes leftover after parsing attributes in process `syz.0.746'. [ 298.436773][ T7730] FAULT_INJECTION: forcing a failure. [ 298.436773][ T7730] name failslab, interval 1, probability 0, space 0, times 0 [ 298.506734][ T7730] CPU: 0 PID: 7730 Comm: syz.3.735 Not tainted syzkaller #0 [ 298.514120][ T7730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 298.524216][ T7730] Call Trace: [ 298.527510][ T7730] [ 298.530460][ T7730] dump_stack_lvl+0x188/0x24e [ 298.535440][ T7730] ? show_regs_print_info+0x12/0x12 [ 298.540767][ T7730] ? load_image+0x400/0x400 [ 298.545305][ T7730] ? __might_sleep+0xd0/0xd0 [ 298.549923][ T7730] ? __lock_acquire+0x7d10/0x7d10 [ 298.555166][ T7730] should_fail_ex+0x399/0x4d0 [ 298.559994][ T7730] should_failslab+0x5/0x20 [ 298.564787][ T7730] slab_pre_alloc_hook+0x59/0x310 [ 298.569855][ T7730] kmem_cache_alloc_node+0x5a/0x320 [ 298.575103][ T7730] ? __alloc_skb+0xfc/0x7e0 [ 298.579750][ T7730] __alloc_skb+0xfc/0x7e0 [ 298.584206][ T7730] ? netlink_autobind+0xda/0x300 [ 298.589190][ T7730] netlink_sendmsg+0x654/0xbd0 [ 298.594037][ T7730] ? netlink_getsockopt+0x550/0x550 [ 298.599876][ T7730] ? aa_sock_msg_perm+0x94/0x150 [ 298.605216][ T7730] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 298.610617][ T7730] ? security_socket_sendmsg+0x7c/0xa0 [ 298.616205][ T7730] ? netlink_getsockopt+0x550/0x550 [ 298.621437][ T7730] ____sys_sendmsg+0x5be/0x970 [ 298.626264][ T7730] ? __sys_sendmsg_sock+0x30/0x30 [ 298.631323][ T7730] ? __import_iovec+0x315/0x500 [ 298.636206][ T7730] ? import_iovec+0x6f/0xa0 [ 298.640733][ T7730] ___sys_sendmsg+0x2a2/0x360 [ 298.645483][ T7730] ? __sys_sendmsg+0x290/0x290 [ 298.650308][ T7730] ? __lock_acquire+0x7d10/0x7d10 [ 298.655401][ T7730] __se_sys_sendmsg+0x1bb/0x2a0 [ 298.660389][ T7730] ? __x64_sys_sendmsg+0x80/0x80 [ 298.665373][ T7730] ? lockdep_hardirqs_on+0x94/0x140 [ 298.670822][ T7730] do_syscall_64+0x4c/0xa0 [ 298.675460][ T7730] ? clear_bhb_loop+0x60/0xb0 [ 298.680350][ T7730] ? clear_bhb_loop+0x60/0xb0 [ 298.685245][ T7730] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 298.691358][ T7730] RIP: 0033:0x7fca2839c819 [ 298.696114][ T7730] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 298.716098][ T7730] RSP: 002b:00007fca2918b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 298.724555][ T7730] RAX: ffffffffffffffda RBX: 00007fca28615fa0 RCX: 00007fca2839c819 [ 298.732645][ T7730] RDX: ff0f000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 298.740651][ T7730] RBP: 00007fca2918b090 R08: 0000000000000000 R09: 0000000000000000 [ 298.748644][ T7730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 298.756734][ T7730] R13: 00007fca28616038 R14: 00007fca28615fa0 R15: 00007ffee96f3448 [ 298.764757][ T7730] [ 298.974265][ T7736] netlink: 'syz.5.737': attribute type 3 has an invalid length. [ 299.033658][ T7736] netlink: 132 bytes leftover after parsing attributes in process `syz.5.737'. [ 299.582896][ T7753] netlink: 'syz.3.741': attribute type 10 has an invalid length. [ 299.626498][ T7753] device hsr0 entered promiscuous mode [ 299.807159][ T7753] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 299.892565][ T7753] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 299.916225][ T7753] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 299.948649][ T7753] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 299.958125][ T7758] netlink: 'syz.4.742': attribute type 3 has an invalid length. [ 299.969515][ T7758] netlink: 16066 bytes leftover after parsing attributes in process `syz.4.742'. [ 299.996822][ T7757] netlink: 156 bytes leftover after parsing attributes in process `syz.5.743'. [ 300.038419][ T7762] netlink: 'syz.2.740': attribute type 21 has an invalid length. [ 300.067621][ T7762] netlink: 'syz.2.740': attribute type 6 has an invalid length. [ 300.126523][ T7762] netlink: 132 bytes leftover after parsing attributes in process `syz.2.740'. [ 300.315461][ T7779] FAULT_INJECTION: forcing a failure. [ 300.315461][ T7779] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 300.358350][ T7779] CPU: 1 PID: 7779 Comm: syz.4.747 Not tainted syzkaller #0 [ 300.365746][ T7779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 300.375915][ T7779] Call Trace: [ 300.379273][ T7779] [ 300.382234][ T7779] dump_stack_lvl+0x188/0x24e [ 300.386944][ T7779] ? show_regs_print_info+0x12/0x12 [ 300.392176][ T7779] ? load_image+0x400/0x400 [ 300.397150][ T7779] ? __lock_acquire+0x7d10/0x7d10 [ 300.402336][ T7779] ? snprintf+0xe5/0x140 [ 300.406642][ T7779] should_fail_ex+0x399/0x4d0 [ 300.411748][ T7779] _copy_to_user+0x2c/0x130 [ 300.416555][ T7779] simple_read_from_buffer+0xe3/0x150 [ 300.422064][ T7779] proc_fail_nth_read+0x1a6/0x220 [ 300.427114][ T7779] ? proc_fault_inject_write+0x310/0x310 [ 300.433229][ T7779] ? fsnotify_perm+0x248/0x550 [ 300.438323][ T7779] ? proc_fault_inject_write+0x310/0x310 [ 300.444103][ T7779] vfs_read+0x2de/0xa00 [ 300.448320][ T7779] ? kernel_read+0x1e0/0x1e0 [ 300.452954][ T7779] ? __fget_files+0x28/0x4b0 [ 300.457921][ T7779] ? __fget_files+0x28/0x4b0 [ 300.462535][ T7779] ? __fget_files+0x43d/0x4b0 [ 300.467290][ T7779] ? __fdget_pos+0x2ae/0x360 [ 300.471902][ T7779] ? ksys_read+0x71/0x250 [ 300.476305][ T7779] ksys_read+0x14c/0x250 [ 300.480591][ T7779] ? vfs_write+0xa30/0xa30 [ 300.485115][ T7779] ? lockdep_hardirqs_on+0x94/0x140 [ 300.490601][ T7779] do_syscall_64+0x4c/0xa0 [ 300.495035][ T7779] ? clear_bhb_loop+0x60/0xb0 [ 300.499724][ T7779] ? clear_bhb_loop+0x60/0xb0 [ 300.504607][ T7779] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 300.510521][ T7779] RIP: 0033:0x7f6f13d5d04e [ 300.515161][ T7779] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 300.535403][ T7779] RSP: 002b:00007f6f14bc0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 300.544056][ T7779] RAX: ffffffffffffffda RBX: 00007f6f14bc16c0 RCX: 00007f6f13d5d04e [ 300.552417][ T7779] RDX: 000000000000000f RSI: 00007f6f14bc10a0 RDI: 0000000000000006 [ 300.560416][ T7779] RBP: 00007f6f14bc1090 R08: 0000000000000000 R09: 0000000000000000 [ 300.568904][ T7779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 300.576897][ T7779] R13: 00007f6f14016128 R14: 00007f6f14016090 R15: 00007ffd25557648 [ 300.585148][ T7779] [ 300.700042][ T7787] netlink: 132 bytes leftover after parsing attributes in process `syz.3.749'. [ 300.942998][ T7786] mac80211_hwsim hwsim36 ªªªªªª: renamed from wlan0 [ 301.880017][ T7821] netlink: 164 bytes leftover after parsing attributes in process `syz.2.756'. [ 303.147044][ T4281] Bluetooth: hci2: Malformed HCI Event: 0x22 [ 303.222694][ T7851] __nla_validate_parse: 1 callbacks suppressed [ 303.222711][ T7851] netlink: 8 bytes leftover after parsing attributes in process `syz.4.764'. [ 303.317370][ T7851] netlink: 4 bytes leftover after parsing attributes in process `syz.4.764'. [ 303.371946][ T7851] netlink: 33 bytes leftover after parsing attributes in process `syz.4.764'. [ 303.401687][ T7851] netlink: 4 bytes leftover after parsing attributes in process `syz.4.764'. [ 303.462964][ T7851] netlink: 33 bytes leftover after parsing attributes in process `syz.4.764'. [ 303.487118][ T7851] netlink: 4 bytes leftover after parsing attributes in process `syz.4.764'. [ 303.518075][ T7851] netlink: 33 bytes leftover after parsing attributes in process `syz.4.764'. [ 303.538427][ T7856] netlink: 'syz.2.760': attribute type 10 has an invalid length. [ 303.562571][ T7856] device hsr0 entered promiscuous mode [ 303.603547][ T7872] FAULT_INJECTION: forcing a failure. [ 303.603547][ T7872] name failslab, interval 1, probability 0, space 0, times 0 [ 303.625082][ T7872] CPU: 0 PID: 7872 Comm: syz.5.767 Not tainted syzkaller #0 [ 303.632530][ T7872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 303.637793][ T7856] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 303.642876][ T7872] Call Trace: [ 303.642893][ T7872] [ 303.642901][ T7872] dump_stack_lvl+0x188/0x24e [ 303.642934][ T7872] ? show_regs_print_info+0x12/0x12 [ 303.642957][ T7872] ? load_image+0x400/0x400 [ 303.642980][ T7872] ? __might_sleep+0xd0/0xd0 [ 303.642998][ T7872] ? __lock_acquire+0x7d10/0x7d10 [ 303.643025][ T7872] should_fail_ex+0x399/0x4d0 [ 303.643049][ T7872] should_failslab+0x5/0x20 [ 303.643065][ T7872] slab_pre_alloc_hook+0x59/0x310 [ 303.643092][ T7872] kmem_cache_alloc_node+0x5a/0x320 [ 303.643112][ T7872] ? __alloc_skb+0xfc/0x7e0 [ 303.643139][ T7872] __alloc_skb+0xfc/0x7e0 [ 303.660954][ T7856] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 303.661950][ T7872] ? netlink_autobind+0xda/0x300 [ 303.661989][ T7872] netlink_sendmsg+0x654/0xbd0 [ 303.662023][ T7872] ? netlink_getsockopt+0x550/0x550 [ 303.662052][ T7872] ? aa_sock_msg_perm+0x94/0x150 [ 303.669323][ T7856] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 303.672087][ T7872] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 303.672117][ T7872] ? security_socket_sendmsg+0x7c/0xa0 [ 303.672143][ T7872] ? netlink_getsockopt+0x550/0x550 [ 303.672166][ T7872] ____sys_sendmsg+0x5be/0x970 [ 303.672201][ T7872] ? __sys_sendmsg_sock+0x30/0x30 [ 303.672224][ T7872] ? __import_iovec+0x315/0x500 [ 303.672252][ T7872] ? import_iovec+0x6f/0xa0 [ 303.672274][ T7872] ___sys_sendmsg+0x2a2/0x360 [ 303.672304][ T7872] ? __sys_sendmsg+0x290/0x290 [ 303.672344][ T7872] ? trace_call_bpf+0xbf/0x6b0 [ 303.680320][ T7856] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 303.686485][ T7872] __se_sys_sendmsg+0x1bb/0x2a0 [ 303.686527][ T7872] ? __x64_sys_sendmsg+0x80/0x80 [ 303.686569][ T7872] ? lockdep_hardirqs_on+0x94/0x140 [ 303.686594][ T7872] do_syscall_64+0x4c/0xa0 [ 303.686624][ T7872] ? clear_bhb_loop+0x60/0xb0 [ 303.837668][ T7872] ? clear_bhb_loop+0x60/0xb0 [ 303.842449][ T7872] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 303.848403][ T7872] RIP: 0033:0x7f5a36d9c819 [ 303.852857][ T7872] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 303.873163][ T7872] RSP: 002b:00007f5a37c63028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 303.881850][ T7872] RAX: ffffffffffffffda RBX: 00007f5a37015fa0 RCX: 00007f5a36d9c819 [ 303.889868][ T7872] RDX: 0000000004000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 303.898037][ T7872] RBP: 00007f5a37c63090 R08: 0000000000000000 R09: 0000000000000000 [ 303.906210][ T7872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 303.914187][ T7872] R13: 00007f5a37016038 R14: 00007f5a37015fa0 R15: 00007ffc1a334f08 [ 303.922631][ T7872] [ 304.231731][ T7885] FAULT_INJECTION: forcing a failure. [ 304.231731][ T7885] name failslab, interval 1, probability 0, space 0, times 0 [ 304.262127][ T7885] CPU: 0 PID: 7885 Comm: syz.4.771 Not tainted syzkaller #0 [ 304.269651][ T7885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 304.279821][ T7885] Call Trace: [ 304.283284][ T7885] [ 304.286228][ T7885] dump_stack_lvl+0x188/0x24e [ 304.290925][ T7885] ? show_regs_print_info+0x12/0x12 [ 304.296150][ T7885] ? load_image+0x400/0x400 [ 304.300795][ T7885] ? verify_lock_unused+0x140/0x140 [ 304.306045][ T7885] should_fail_ex+0x399/0x4d0 [ 304.310756][ T7885] should_failslab+0x5/0x20 [ 304.315275][ T7885] slab_pre_alloc_hook+0x59/0x310 [ 304.320500][ T7885] kmem_cache_alloc+0x56/0x2f0 [ 304.325467][ T7885] ? skb_clone+0x1e7/0x370 [ 304.330202][ T7885] skb_clone+0x1e7/0x370 [ 304.334577][ T7885] __netlink_deliver_tap+0x3ed/0x800 [ 304.339907][ T7885] ? netlink_deliver_tap+0x2e/0x1b0 [ 304.345212][ T7885] netlink_deliver_tap+0x19c/0x1b0 [ 304.350341][ T7885] netlink_unicast+0x728/0x8d0 [ 304.355154][ T7885] netlink_sendmsg+0x8ad/0xbd0 [ 304.359958][ T7885] ? netlink_getsockopt+0x550/0x550 [ 304.365357][ T7885] ? aa_sock_msg_perm+0x94/0x150 [ 304.370558][ T7885] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 304.375886][ T7885] ? security_socket_sendmsg+0x7c/0xa0 [ 304.381381][ T7885] ? netlink_getsockopt+0x550/0x550 [ 304.386779][ T7885] ____sys_sendmsg+0x5be/0x970 [ 304.391655][ T7885] ? __sys_sendmsg_sock+0x30/0x30 [ 304.396866][ T7885] ? __import_iovec+0x315/0x500 [ 304.401835][ T7885] ? import_iovec+0x6f/0xa0 [ 304.406464][ T7885] ___sys_sendmsg+0x2a2/0x360 [ 304.411327][ T7885] ? __sys_sendmsg+0x290/0x290 [ 304.416240][ T7885] ? __lock_acquire+0x7d10/0x7d10 [ 304.421404][ T7885] __se_sys_sendmsg+0x1bb/0x2a0 [ 304.426523][ T7885] ? __x64_sys_sendmsg+0x80/0x80 [ 304.431492][ T7885] ? lockdep_hardirqs_on+0x94/0x140 [ 304.436803][ T7885] do_syscall_64+0x4c/0xa0 [ 304.441415][ T7885] ? clear_bhb_loop+0x60/0xb0 [ 304.446105][ T7885] ? clear_bhb_loop+0x60/0xb0 [ 304.450790][ T7885] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 304.456708][ T7885] RIP: 0033:0x7f6f13d9c819 [ 304.461137][ T7885] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 304.480847][ T7885] RSP: 002b:00007f6f14be2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 304.489359][ T7885] RAX: ffffffffffffffda RBX: 00007f6f14015fa0 RCX: 00007f6f13d9c819 [ 304.497425][ T7885] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 304.505413][ T7885] RBP: 00007f6f14be2090 R08: 0000000000000000 R09: 0000000000000000 [ 304.513436][ T7885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 304.521685][ T7885] R13: 00007f6f14016038 R14: 00007f6f14015fa0 R15: 00007ffd25557648 [ 304.529768][ T7885] [ 304.589041][ T7891] netlink: 156 bytes leftover after parsing attributes in process `syz.2.773'. [ 304.664655][ T7890] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.672292][ T7890] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.694150][ T7885] netlink: 132 bytes leftover after parsing attributes in process `syz.4.771'. [ 305.263875][ C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 305.284130][ T7915] netlink: 152 bytes leftover after parsing attributes in process `syz.3.779'. [ 306.703969][ T7956] FAULT_INJECTION: forcing a failure. [ 306.703969][ T7956] name failslab, interval 1, probability 0, space 0, times 0 [ 306.722599][ T7956] CPU: 0 PID: 7956 Comm: syz.3.786 Not tainted syzkaller #0 [ 306.730228][ T7956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 306.740399][ T7956] Call Trace: [ 306.743715][ T7956] [ 306.746666][ T7956] dump_stack_lvl+0x188/0x24e [ 306.751733][ T7956] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 306.757925][ T7956] ? show_regs_print_info+0x12/0x12 [ 306.763347][ T7956] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 306.769595][ T7956] ? dump_stack+0x5/0x12 [ 306.773971][ T7956] should_fail_ex+0x399/0x4d0 [ 306.778683][ T7956] should_failslab+0x5/0x20 [ 306.783211][ T7956] slab_pre_alloc_hook+0x59/0x310 [ 306.788303][ T7956] ? verify_lock_unused+0x140/0x140 [ 306.793714][ T7956] ? bpf_test_init+0x9f/0x140 [ 306.798421][ T7956] __kmem_cache_alloc_node+0x4f/0x260 [ 306.803881][ T7956] ? bpf_test_init+0x9f/0x140 [ 306.808639][ T7956] __kmalloc+0xa0/0x240 [ 306.812846][ T7956] bpf_test_init+0x9f/0x140 [ 306.817477][ T7956] bpf_prog_test_run_xdp+0x484/0xf10 [ 306.822802][ T7956] ? dev_put+0x80/0x80 [ 306.826922][ T7956] ? dev_put+0x80/0x80 [ 306.831106][ T7956] bpf_prog_test_run+0x31e/0x390 [ 306.836081][ T7956] __sys_bpf+0x62b/0x780 [ 306.840365][ T7956] ? bpf_link_show_fdinfo+0x380/0x380 [ 306.845784][ T7956] ? lock_chain_count+0x20/0x20 [ 306.850661][ T7956] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 306.856681][ T7956] __x64_sys_bpf+0x78/0x90 [ 306.861308][ T7956] do_syscall_64+0x4c/0xa0 [ 306.865800][ T7956] ? clear_bhb_loop+0x60/0xb0 [ 306.870518][ T7956] ? clear_bhb_loop+0x60/0xb0 [ 306.875327][ T7956] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 306.881262][ T7956] RIP: 0033:0x7fca2839c819 [ 306.885747][ T7956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 306.905729][ T7956] RSP: 002b:00007fca265f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 306.914256][ T7956] RAX: ffffffffffffffda RBX: 00007fca28616090 RCX: 00007fca2839c819 [ 306.922274][ T7956] RDX: 0000000000000050 RSI: 0000200000000b80 RDI: 000000000000000a [ 306.930332][ T7956] RBP: 00007fca265f6090 R08: 0000000000000000 R09: 0000000000000000 [ 306.938736][ T7956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 306.946897][ T7956] R13: 00007fca28616128 R14: 00007fca28616090 R15: 00007ffee96f3448 [ 306.954895][ T7956] [ 313.175641][ T8072] __nla_validate_parse: 3 callbacks suppressed [ 313.175702][ T8072] netlink: 164 bytes leftover after parsing attributes in process `syz.5.821'. [ 314.431117][ T8110] FAULT_INJECTION: forcing a failure. [ 314.431117][ T8110] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 314.449834][ T8110] CPU: 1 PID: 8110 Comm: syz.0.818 Not tainted syzkaller #0 [ 314.457181][ T8110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 314.467437][ T8110] Call Trace: [ 314.470821][ T8110] [ 314.473777][ T8110] dump_stack_lvl+0x188/0x24e [ 314.478581][ T8110] ? show_regs_print_info+0x12/0x12 [ 314.483824][ T8110] ? load_image+0x400/0x400 [ 314.488351][ T8110] ? __lock_acquire+0x7d10/0x7d10 [ 314.493402][ T8110] should_fail_ex+0x399/0x4d0 [ 314.498286][ T8110] _copy_from_user+0x2c/0x170 [ 314.503037][ T8110] vmemdup_user+0xa8/0x1d0 [ 314.507505][ T8110] map_get_next_key+0x225/0x620 [ 314.512387][ T8110] ? __might_fault+0xa6/0x120 [ 314.517090][ T8110] ? bpf_lsm_bpf+0x5/0x10 [ 314.521451][ T8110] __sys_bpf+0x466/0x780 [ 314.525729][ T8110] ? bpf_link_show_fdinfo+0x380/0x380 [ 314.531158][ T8110] ? lock_chain_count+0x20/0x20 [ 314.536264][ T8110] __x64_sys_bpf+0x78/0x90 [ 314.540738][ T8110] do_syscall_64+0x4c/0xa0 [ 314.545196][ T8110] ? clear_bhb_loop+0x60/0xb0 [ 314.549901][ T8110] ? clear_bhb_loop+0x60/0xb0 [ 314.554607][ T8110] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 314.560718][ T8110] RIP: 0033:0x7f275cd9c819 [ 314.565160][ T8110] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 314.584967][ T8110] RSP: 002b:00007f275db6e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 314.593494][ T8110] RAX: ffffffffffffffda RBX: 00007f275d015fa0 RCX: 00007f275cd9c819 [ 314.601502][ T8110] RDX: 0000000000000020 RSI: 0000200000000b40 RDI: 0000000000000004 [ 314.609498][ T8110] RBP: 00007f275db6e090 R08: 0000000000000000 R09: 0000000000000000 [ 314.617505][ T8110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 314.625529][ T8110] R13: 00007f275d016038 R14: 00007f275d015fa0 R15: 00007ffde61fdab8 [ 314.633981][ T8110] [ 315.640994][ T8108] netlink: 'syz.5.817': attribute type 10 has an invalid length. [ 315.649784][ T8108] netlink: 40 bytes leftover after parsing attributes in process `syz.5.817'. [ 315.736820][ T8108] batman_adv: batadv0: Adding interface: veth0_vlan [ 315.784562][ T8108] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.821016][ T8108] batman_adv: batadv0: Interface activated: veth0_vlan [ 315.846872][ T8118] netlink: 156 bytes leftover after parsing attributes in process `syz.0.820'. [ 315.867784][ T8123] netlink: 164 bytes leftover after parsing attributes in process `syz.4.825'. [ 315.993138][ T4327] device hsr_slave_0 left promiscuous mode [ 316.067610][ T4327] device hsr_slave_1 left promiscuous mode [ 316.100105][ T4327] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 316.180593][ T4327] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 316.198315][ T4327] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 316.238622][ T4327] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 316.285435][ T4327] device bridge_slave_1 left promiscuous mode [ 316.318022][ T8133] sock: sock_set_timeout: `syz.3.827' (pid 8133) tries to set negative timeout [ 316.337253][ T8135] netlink: 164 bytes leftover after parsing attributes in process `syz.4.830'. [ 316.342556][ T4327] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.412288][ T4327] device bridge_slave_0 left promiscuous mode [ 316.425004][ T4327] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.245460][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.252013][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.688693][ T4327] device veth1_macvtap left promiscuous mode [ 317.705559][ T4327] device veth0_macvtap left promiscuous mode [ 317.730867][ T4327] device veth1_vlan left promiscuous mode [ 317.737995][ T4327] device veth0_vlan left promiscuous mode [ 318.640275][ T4327] team0 (unregistering): Port device team_slave_1 removed [ 318.686068][ T4327] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 318.731624][ T4327] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 319.027398][ T4327] bond0 (unregistering): Released all slaves [ 320.293239][ T8193] netlink: 'syz.2.848': attribute type 17 has an invalid length. [ 320.330467][ T8193] netlink: 152 bytes leftover after parsing attributes in process `syz.2.848'. [ 320.366106][ T8193] delete_channel: no stack [ 320.379472][ T8193] delete_channel: no stack [ 321.539621][ T8208] netlink: 'syz.0.853': attribute type 9 has an invalid length. [ 321.580113][ T8208] netlink: 391 bytes leftover after parsing attributes in process `syz.0.853'. [ 322.188903][ T8229] netlink: 'syz.5.859': attribute type 2 has an invalid length. [ 322.198104][ T8229] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.859'. [ 322.212555][ T8231] netlink: 'syz.2.860': attribute type 5 has an invalid length. [ 322.220264][ T8231] netlink: 'syz.2.860': attribute type 9 has an invalid length. [ 323.059487][ T8243] netlink: 164 bytes leftover after parsing attributes in process `syz.3.866'. [ 324.456618][ T8258] FAULT_INJECTION: forcing a failure. [ 324.456618][ T8258] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 324.576842][ T8258] CPU: 0 PID: 8258 Comm: syz.3.868 Not tainted syzkaller #0 [ 324.584204][ T8258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 324.594281][ T8258] Call Trace: [ 324.597682][ T8258] [ 324.600638][ T8258] dump_stack_lvl+0x188/0x24e [ 324.605370][ T8258] ? show_regs_print_info+0x12/0x12 [ 324.610714][ T8258] ? load_image+0x400/0x400 [ 324.615489][ T8258] ? __lock_acquire+0x7d10/0x7d10 [ 324.620639][ T8258] ? lockdep_hardirqs_on+0x94/0x140 [ 324.625959][ T8258] should_fail_ex+0x399/0x4d0 [ 324.630793][ T8258] _copy_from_user+0x2c/0x170 [ 324.635512][ T8258] ___sys_sendmsg+0x1c3/0x360 [ 324.640325][ T8258] ? __sys_sendmsg+0x290/0x290 [ 324.645410][ T8258] ? perf_trace_preemptirq_template+0xa8/0x320 [ 324.651790][ T8258] ? irqentry_enter+0x33/0x50 [ 324.656565][ T8258] __se_sys_sendmsg+0x1bb/0x2a0 [ 324.661650][ T8258] ? __x64_sys_sendmsg+0x80/0x80 [ 324.666728][ T8258] ? lockdep_hardirqs_on+0x94/0x140 [ 324.672204][ T8258] do_syscall_64+0x4c/0xa0 [ 324.676664][ T8258] ? clear_bhb_loop+0x60/0xb0 [ 324.681437][ T8258] ? clear_bhb_loop+0x60/0xb0 [ 324.686146][ T8258] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 324.692071][ T8258] RIP: 0033:0x7fca2839c819 [ 324.696607][ T8258] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 324.716266][ T8258] RSP: 002b:00007fca265f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 324.725171][ T8258] RAX: ffffffffffffffda RBX: 00007fca28616090 RCX: 00007fca2839c819 [ 324.733395][ T8258] RDX: 00000000000012cd RSI: 0000200000000040 RDI: 0000000000000005 [ 324.741580][ T8258] RBP: 00007fca265f6090 R08: 0000000000000000 R09: 0000000000000000 [ 324.749591][ T8258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 324.757606][ T8258] R13: 00007fca28616128 R14: 00007fca28616090 R15: 00007ffee96f3448 [ 324.765885][ T8258] [ 325.251574][ T8279] netlink: 'syz.4.875': attribute type 41 has an invalid length. [ 325.411202][ T8281] sock: sock_timestamping_bind_phc: sock not bind to device [ 325.897564][ T8292] netlink: 164 bytes leftover after parsing attributes in process `syz.0.879'. [ 327.312865][ T8306] netlink: 'syz.3.885': attribute type 29 has an invalid length. [ 327.403647][ T8306] netlink: 'syz.3.885': attribute type 29 has an invalid length. [ 327.432998][ T8309] netlink: 'syz.3.885': attribute type 29 has an invalid length. [ 328.354061][ T8339] netlink: 156 bytes leftover after parsing attributes in process `syz.5.894'. [ 328.354312][ T8335] netlink: 60 bytes leftover after parsing attributes in process `syz.3.903'. [ 328.769279][ T8335] netlink: 176 bytes leftover after parsing attributes in process `syz.3.903'. [ 329.008787][ T8351] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.898'. [ 329.100402][ T8357] netlink: 830 bytes leftover after parsing attributes in process `syz.5.900'. [ 329.504541][ T8369] netlink: 'syz.4.905': attribute type 9 has an invalid length. [ 329.528370][ T8369] netlink: 391 bytes leftover after parsing attributes in process `syz.4.905'. [ 329.997362][ T8378] netlink: 156 bytes leftover after parsing attributes in process `syz.4.907'. [ 330.038637][ T8380] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.908'. [ 331.277958][ T8405] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.916'. [ 333.844326][ T8420] netlink: 830 bytes leftover after parsing attributes in process `syz.2.920'. [ 333.884377][ T8426] netlink: 156 bytes leftover after parsing attributes in process `syz.4.922'. [ 334.104869][ T8437] netlink: 164 bytes leftover after parsing attributes in process `syz.2.926'. [ 335.107197][ T8456] FAULT_INJECTION: forcing a failure. [ 335.107197][ T8456] name failslab, interval 1, probability 0, space 0, times 0 [ 335.140590][ T8456] CPU: 1 PID: 8456 Comm: syz.3.931 Not tainted syzkaller #0 [ 335.148326][ T8456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 335.158935][ T8456] Call Trace: [ 335.162239][ T8456] [ 335.165285][ T8456] dump_stack_lvl+0x188/0x24e [ 335.170094][ T8456] ? show_regs_print_info+0x12/0x12 [ 335.175331][ T8456] ? load_image+0x400/0x400 [ 335.180048][ T8456] ? __might_sleep+0xd0/0xd0 [ 335.184674][ T8456] ? __lock_acquire+0x7d10/0x7d10 [ 335.189738][ T8456] should_fail_ex+0x399/0x4d0 [ 335.194676][ T8456] should_failslab+0x5/0x20 [ 335.199651][ T8456] slab_pre_alloc_hook+0x59/0x310 [ 335.204887][ T8456] kmem_cache_alloc_node+0x5a/0x320 [ 335.210127][ T8456] ? dup_task_struct+0x57/0x6b0 [ 335.215115][ T8456] dup_task_struct+0x57/0x6b0 [ 335.219827][ T8456] ? lockdep_hardirqs_on+0x94/0x140 [ 335.225171][ T8456] copy_process+0x5fa/0x4030 [ 335.229806][ T8456] ? __rwlock_init+0x140/0x140 [ 335.234610][ T8456] ? debug_object_activate+0x4f0/0x4f0 [ 335.240118][ T8456] ? idle_dummy+0x10/0x10 [ 335.244501][ T8456] ? __lock_acquire+0x7d10/0x7d10 [ 335.249665][ T8456] kernel_clone+0x24b/0x900 [ 335.254196][ T8456] ? ktime_get+0x7b/0x270 [ 335.258561][ T8456] ? ktime_get+0x7b/0x270 [ 335.262941][ T8456] ? create_io_thread+0x170/0x170 [ 335.268004][ T8456] __x64_sys_clone+0x1a7/0x220 [ 335.272789][ T8456] ? clockevents_program_event+0x22c/0x310 [ 335.278625][ T8456] ? __ia32_sys_vfork+0x140/0x140 [ 335.283693][ T8456] ? lock_chain_count+0x20/0x20 [ 335.288844][ T8456] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 335.294880][ T8456] ? lockdep_hardirqs_on+0x94/0x140 [ 335.300120][ T8456] do_syscall_64+0x4c/0xa0 [ 335.304764][ T8456] ? clear_bhb_loop+0x60/0xb0 [ 335.309557][ T8456] ? clear_bhb_loop+0x60/0xb0 [ 335.314702][ T8456] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 335.320804][ T8456] RIP: 0033:0x7fca2839c819 [ 335.325254][ T8456] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 335.345326][ T8456] RSP: 002b:00007fca265f5fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 335.353871][ T8456] RAX: ffffffffffffffda RBX: 00007fca28616090 RCX: 00007fca2839c819 [ 335.362049][ T8456] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000630c0600 [ 335.370130][ T8456] RBP: 00007fca265f6090 R08: 0000000000000000 R09: 0000000000000000 [ 335.378226][ T8456] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 335.386321][ T8456] R13: 00007fca28616128 R14: 00007fca28616090 R15: 00007ffee96f3448 [ 335.394353][ T8456] [ 337.384033][ T8461] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.932'. [ 337.437634][ T8459] netlink: 'syz.4.933': attribute type 4 has an invalid length. [ 337.450929][ T8459] netlink: 152 bytes leftover after parsing attributes in process `syz.4.933'. [ 337.503683][ T8459] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 337.520758][ T8464] FAULT_INJECTION: forcing a failure. [ 337.520758][ T8464] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 337.554706][ T8464] CPU: 1 PID: 8464 Comm: syz.5.934 Not tainted syzkaller #0 [ 337.562249][ T8464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 337.572548][ T8464] Call Trace: [ 337.575828][ T8464] [ 337.578788][ T8464] dump_stack_lvl+0x188/0x24e [ 337.583491][ T8464] ? show_regs_print_info+0x12/0x12 [ 337.588748][ T8464] ? load_image+0x400/0x400 [ 337.593518][ T8464] ? __lock_acquire+0x7d10/0x7d10 [ 337.598663][ T8464] ? snprintf+0xe5/0x140 [ 337.603101][ T8464] should_fail_ex+0x399/0x4d0 [ 337.607789][ T8464] _copy_to_user+0x2c/0x130 [ 337.612296][ T8464] simple_read_from_buffer+0xe3/0x150 [ 337.617755][ T8464] proc_fail_nth_read+0x1a6/0x220 [ 337.623056][ T8464] ? proc_fault_inject_write+0x310/0x310 [ 337.628691][ T8464] ? fsnotify_perm+0x248/0x550 [ 337.633591][ T8464] ? proc_fault_inject_write+0x310/0x310 [ 337.639405][ T8464] vfs_read+0x2de/0xa00 [ 337.643578][ T8464] ? kernel_read+0x1e0/0x1e0 [ 337.648210][ T8464] ? __fget_files+0x28/0x4b0 [ 337.652834][ T8464] ? __fget_files+0x28/0x4b0 [ 337.657556][ T8464] ? __fget_files+0x43d/0x4b0 [ 337.662410][ T8464] ? __fdget_pos+0x2ae/0x360 [ 337.667211][ T8464] ? ksys_read+0x71/0x250 [ 337.671574][ T8464] ksys_read+0x14c/0x250 [ 337.675881][ T8464] ? vfs_write+0xa30/0xa30 [ 337.680927][ T8464] ? lockdep_hardirqs_on+0x94/0x140 [ 337.686228][ T8464] do_syscall_64+0x4c/0xa0 [ 337.690671][ T8464] ? clear_bhb_loop+0x60/0xb0 [ 337.695362][ T8464] ? clear_bhb_loop+0x60/0xb0 [ 337.700220][ T8464] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 337.706205][ T8464] RIP: 0033:0x7f5a36d5d04e [ 337.711025][ T8464] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 337.730858][ T8464] RSP: 002b:00007f5a37c62fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 337.739784][ T8464] RAX: ffffffffffffffda RBX: 00007f5a37c636c0 RCX: 00007f5a36d5d04e [ 337.747767][ T8464] RDX: 000000000000000f RSI: 00007f5a37c630a0 RDI: 0000000000000003 [ 337.755748][ T8464] RBP: 00007f5a37c63090 R08: 0000000000000000 R09: 0000000000000000 [ 337.764418][ T8464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 337.772807][ T8464] R13: 00007f5a37016038 R14: 00007f5a37015fa0 R15: 00007ffc1a334f08 [ 337.780892][ T8464] [ 338.062419][ T8473] netlink: 156 bytes leftover after parsing attributes in process `syz.4.938'. [ 338.168912][ T8475] netlink: 44 bytes leftover after parsing attributes in process `syz.3.937'. [ 338.431704][ T8484] netlink: 'syz.0.941': attribute type 5 has an invalid length. [ 339.001388][ T8496] netlink: 164 bytes leftover after parsing attributes in process `syz.5.947'. [ 339.197096][ T8500] device syzkaller0 entered promiscuous mode [ 341.899102][ T8518] netlink: 'syz.0.952': attribute type 12 has an invalid length. [ 341.910519][ T8518] netlink: 132 bytes leftover after parsing attributes in process `syz.0.952'. [ 341.926960][ T8521] netlink: 156 bytes leftover after parsing attributes in process `syz.5.953'. [ 342.123481][ T8529] netlink: 60 bytes leftover after parsing attributes in process `syz.3.956'. [ 342.380103][ T8540] FAULT_INJECTION: forcing a failure. [ 342.380103][ T8540] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 342.460584][ T8540] CPU: 1 PID: 8540 Comm: syz.2.960 Not tainted syzkaller #0 [ 342.468026][ T8540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 342.478378][ T8540] Call Trace: [ 342.481708][ T8540] [ 342.484760][ T8540] dump_stack_lvl+0x188/0x24e [ 342.489798][ T8540] ? show_regs_print_info+0x12/0x12 [ 342.495048][ T8540] ? load_image+0x400/0x400 [ 342.499590][ T8540] ? __lock_acquire+0x7d10/0x7d10 [ 342.504737][ T8540] should_fail_ex+0x399/0x4d0 [ 342.509448][ T8540] _copy_from_user+0x2c/0x170 [ 342.514212][ T8540] iovec_from_user+0x143/0x360 [ 342.519199][ T8540] __import_iovec+0x6d/0x500 [ 342.523839][ T8540] import_iovec+0x6f/0xa0 [ 342.528311][ T8540] ___sys_sendmsg+0x252/0x360 [ 342.533119][ T8540] ? __sys_sendmsg+0x290/0x290 [ 342.537963][ T8540] ? __lock_acquire+0x7d10/0x7d10 [ 342.543302][ T8540] __se_sys_sendmsg+0x1bb/0x2a0 [ 342.548196][ T8540] ? __x64_sys_sendmsg+0x80/0x80 [ 342.553915][ T8540] ? lockdep_hardirqs_on+0x94/0x140 [ 342.559252][ T8540] do_syscall_64+0x4c/0xa0 [ 342.563710][ T8540] ? clear_bhb_loop+0x60/0xb0 [ 342.568451][ T8540] ? clear_bhb_loop+0x60/0xb0 [ 342.573238][ T8540] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 342.579251][ T8540] RIP: 0033:0x7f879a39c819 [ 342.583857][ T8540] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 342.603495][ T8540] RSP: 002b:00007f879b26b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 342.612184][ T8540] RAX: ffffffffffffffda RBX: 00007f879a615fa0 RCX: 00007f879a39c819 [ 342.620980][ T8540] RDX: 0000000020000020 RSI: 0000200000000000 RDI: 0000000000000005 [ 342.629042][ T8540] RBP: 00007f879b26b090 R08: 0000000000000000 R09: 0000000000000000 [ 342.637476][ T8540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 342.646345][ T8540] R13: 00007f879a616038 R14: 00007f879a615fa0 R15: 00007ffda0af7698 [ 342.654669][ T8540] [ 342.674429][ T8544] netlink: 2639 bytes leftover after parsing attributes in process `syz.3.961'. [ 343.247692][ T8560] netlink: 16399 bytes leftover after parsing attributes in process `syz.4.965'. [ 343.366649][ T8563] netlink: 156 bytes leftover after parsing attributes in process `syz.2.967'. [ 343.755827][ T8573] device syzkaller0 entered promiscuous mode [ 343.766088][ T8576] netlink: 'syz.5.971': attribute type 1 has an invalid length. [ 343.796098][ T8576] netlink: 105120 bytes leftover after parsing attributes in process `syz.5.971'. [ 344.153374][ T8591] FAULT_INJECTION: forcing a failure. [ 344.153374][ T8591] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 344.177705][ T8591] CPU: 1 PID: 8591 Comm: syz.2.976 Not tainted syzkaller #0 [ 344.185064][ T8591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 344.196004][ T8591] Call Trace: [ 344.199304][ T8591] [ 344.202257][ T8591] dump_stack_lvl+0x188/0x24e [ 344.206982][ T8591] ? show_regs_print_info+0x12/0x12 [ 344.212216][ T8591] ? load_image+0x400/0x400 [ 344.216849][ T8591] ? __lock_acquire+0x7d10/0x7d10 [ 344.222434][ T8591] should_fail_ex+0x399/0x4d0 [ 344.227281][ T8591] _copy_from_user+0x2c/0x170 [ 344.232523][ T8591] __copy_msghdr+0x3b7/0x580 [ 344.237708][ T8591] ___sys_sendmsg+0x210/0x360 [ 344.243234][ T8591] ? __sys_sendmsg+0x290/0x290 [ 344.248265][ T8591] ? ktime_get_real_ts64+0x440/0x440 [ 344.253743][ T8591] __se_sys_sendmsg+0x1bb/0x2a0 [ 344.258851][ T8591] ? __x64_sys_sendmsg+0x80/0x80 [ 344.263963][ T8591] ? lockdep_hardirqs_on+0x94/0x140 [ 344.269206][ T8591] do_syscall_64+0x4c/0xa0 [ 344.274015][ T8591] ? clear_bhb_loop+0x60/0xb0 [ 344.278806][ T8591] ? clear_bhb_loop+0x60/0xb0 [ 344.283530][ T8591] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 344.289630][ T8591] RIP: 0033:0x7f879a39c819 [ 344.294073][ T8591] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 344.314755][ T8591] RSP: 002b:00007f879b26b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 344.323658][ T8591] RAX: ffffffffffffffda RBX: 00007f879a615fa0 RCX: 00007f879a39c819 [ 344.331999][ T8591] RDX: 0000000000040000 RSI: 00002000000000c0 RDI: 000000000000000d [ 344.340195][ T8591] RBP: 00007f879b26b090 R08: 0000000000000000 R09: 0000000000000000 [ 344.348522][ T8591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 344.356500][ T8591] R13: 00007f879a616038 R14: 00007f879a615fa0 R15: 00007ffda0af7698 [ 344.365225][ T8591] [ 347.687347][ T8615] netlink: 164 bytes leftover after parsing attributes in process `syz.5.984'. [ 348.075889][ T8626] netlink: 'syz.3.989': attribute type 19 has an invalid length. [ 348.120745][ T8626] netlink: 172 bytes leftover after parsing attributes in process `syz.3.989'. [ 348.262081][ T8626] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.989'. [ 348.494648][ T8632] netlink: 'syz.4.991': attribute type 1 has an invalid length. [ 348.510926][ T8632] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.991'. [ 348.575066][ T8637] netlink: 830 bytes leftover after parsing attributes in process `syz.3.992'. [ 350.040692][ T4284] Bluetooth: hci0: command 0x0406 tx timeout [ 350.046998][ T4284] Bluetooth: hci1: command 0x0406 tx timeout [ 350.054536][ T4281] Bluetooth: hci2: command 0x0406 tx timeout [ 350.112346][ T8655] netlink: 16399 bytes leftover after parsing attributes in process `syz.5.998'. [ 351.278635][ T8680] netlink: 'syz.4.1007': attribute type 10 has an invalid length. [ 351.289319][ T8680] netlink: 55 bytes leftover after parsing attributes in process `syz.4.1007'. [ 351.346528][ T8681] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1007'. [ 351.919728][ T8693] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1011'. [ 352.030818][ T8694] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1010'. [ 352.270348][ T8700] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 352.915820][ T8708] __nla_validate_parse: 1 callbacks suppressed [ 352.915838][ T8708] netlink: 16399 bytes leftover after parsing attributes in process `syz.0.1015'. [ 353.355358][ T8710] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1016'. [ 353.367809][ T8714] FAULT_INJECTION: forcing a failure. [ 353.367809][ T8714] name failslab, interval 1, probability 0, space 0, times 0 [ 353.383435][ T8710] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1016'. [ 353.411567][ T8714] CPU: 1 PID: 8714 Comm: syz.2.1018 Not tainted syzkaller #0 [ 353.419819][ T8714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 353.430169][ T8714] Call Trace: [ 353.434192][ T8714] [ 353.437768][ T8714] dump_stack_lvl+0x188/0x24e [ 353.442941][ T8714] ? show_regs_print_info+0x12/0x12 [ 353.448923][ T8714] ? load_image+0x400/0x400 [ 353.453756][ T8714] ? __might_sleep+0xd0/0xd0 [ 353.458596][ T8714] ? __lock_acquire+0x7d10/0x7d10 [ 353.463681][ T8714] should_fail_ex+0x399/0x4d0 [ 353.468454][ T8714] should_failslab+0x5/0x20 [ 353.473216][ T8714] slab_pre_alloc_hook+0x59/0x310 [ 353.478283][ T8714] kmem_cache_alloc_node+0x5a/0x320 [ 353.483550][ T8714] ? __alloc_skb+0xfc/0x7e0 [ 353.488092][ T8714] __alloc_skb+0xfc/0x7e0 [ 353.492765][ T8714] ? netlink_autobind+0xda/0x300 [ 353.498010][ T8714] netlink_sendmsg+0x654/0xbd0 [ 353.502856][ T8714] ? netlink_getsockopt+0x550/0x550 [ 353.508277][ T8714] ? aa_sock_msg_perm+0x94/0x150 [ 353.513612][ T8714] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 353.519960][ T8714] ? security_socket_sendmsg+0x7c/0xa0 [ 353.526613][ T8714] ? netlink_getsockopt+0x550/0x550 [ 353.531952][ T8714] ____sys_sendmsg+0x5be/0x970 [ 353.536768][ T8714] ? __sys_sendmsg_sock+0x30/0x30 [ 353.541848][ T8714] ? __import_iovec+0x315/0x500 [ 353.547274][ T8714] ? import_iovec+0x6f/0xa0 [ 353.552278][ T8714] ___sys_sendmsg+0x2a2/0x360 [ 353.557797][ T8714] ? __sys_sendmsg+0x290/0x290 [ 353.562830][ T8714] ? __lock_acquire+0x7d10/0x7d10 [ 353.568046][ T8714] __se_sys_sendmsg+0x1bb/0x2a0 [ 353.573125][ T8714] ? __x64_sys_sendmsg+0x80/0x80 [ 353.578234][ T8714] ? lockdep_hardirqs_on+0x94/0x140 [ 353.583763][ T8714] do_syscall_64+0x4c/0xa0 [ 353.588457][ T8714] ? clear_bhb_loop+0x60/0xb0 [ 353.593946][ T8714] ? clear_bhb_loop+0x60/0xb0 [ 353.598784][ T8714] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 353.604852][ T8714] RIP: 0033:0x7f879a39c819 [ 353.609299][ T8714] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 353.630452][ T8714] RSP: 002b:00007f879b26b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 353.639097][ T8714] RAX: ffffffffffffffda RBX: 00007f879a615fa0 RCX: 00007f879a39c819 [ 353.647972][ T8714] RDX: 0000000020004000 RSI: 0000200000000000 RDI: 0000000000000003 [ 353.657216][ T8714] RBP: 00007f879b26b090 R08: 0000000000000000 R09: 0000000000000000 [ 353.668138][ T8714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 353.680748][ T8714] R13: 00007f879a616038 R14: 00007f879a615fa0 R15: 00007ffda0af7698 [ 353.692906][ T8714] [ 354.543968][ T8729] netlink: 'syz.2.1023': attribute type 10 has an invalid length. [ 354.582128][ T8729] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1023'. [ 354.638839][ T8730] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1023'. [ 354.756254][ T8741] netlink: 830 bytes leftover after parsing attributes in process `syz.5.1027'. [ 354.928132][ T8750] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1029'. [ 354.991326][ T8749] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1028'. [ 355.276169][ T8759] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1032'. [ 355.528408][ T8763] netlink: 'syz.2.1033': attribute type 2 has an invalid length. [ 355.542679][ T8763] netlink: 'syz.2.1033': attribute type 8 has an invalid length. [ 355.557199][ T8763] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1033'. [ 355.604870][ T8763] netlink: 'syz.2.1033': attribute type 19 has an invalid length. [ 356.340712][ T8785] netlink: 'syz.3.1040': attribute type 10 has an invalid length. [ 358.047548][ T8801] __nla_validate_parse: 5 callbacks suppressed [ 358.047584][ T8801] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1046'. [ 358.070706][ T8804] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1047'. [ 358.283112][ T8818] netlink: 9286 bytes leftover after parsing attributes in process `syz.5.1049'. [ 358.288695][ T8822] device vlan1 entered promiscuous mode [ 361.815904][ T8870] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1074'. [ 362.921452][ T8882] FAULT_INJECTION: forcing a failure. [ 362.921452][ T8882] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 363.054157][ T8882] CPU: 0 PID: 8882 Comm: syz.5.1069 Not tainted syzkaller #0 [ 363.061684][ T8882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 363.071949][ T8882] Call Trace: [ 363.075440][ T8882] [ 363.078749][ T8882] dump_stack_lvl+0x188/0x24e [ 363.083553][ T8882] ? show_regs_print_info+0x12/0x12 [ 363.088890][ T8882] ? load_image+0x400/0x400 [ 363.093606][ T8882] ? __might_fault+0xa6/0x120 [ 363.098326][ T8882] should_fail_ex+0x399/0x4d0 [ 363.103316][ T8882] copyin+0x1b/0x120 [ 363.107248][ T8882] _copy_from_iter+0x447/0x1130 [ 363.112428][ T8882] ? copyout_mc+0x110/0x110 [ 363.117287][ T8882] ? __virt_addr_valid+0x188/0x540 [ 363.122439][ T8882] ? __virt_addr_valid+0x188/0x540 [ 363.127592][ T8882] ? __virt_addr_valid+0x465/0x540 [ 363.132911][ T8882] ? __check_object_size+0x500/0xa40 [ 363.138586][ T8882] pfkey_sendmsg+0x1ff/0x1090 [ 363.143392][ T8882] ? __might_sleep+0xd0/0xd0 [ 363.148035][ T8882] ? pfkey_release+0x310/0x310 [ 363.153028][ T8882] ? aa_sk_perm+0x81f/0x950 [ 363.157569][ T8882] ? __might_fault+0xa6/0x120 [ 363.162533][ T8882] ? aa_af_perm+0x340/0x340 [ 363.167273][ T8882] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 363.173818][ T8882] ? aa_sock_msg_perm+0x94/0x150 [ 363.179143][ T8882] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 363.184550][ T8882] ? security_socket_sendmsg+0x7c/0xa0 [ 363.190099][ T8882] ? pfkey_release+0x310/0x310 [ 363.194917][ T8882] ____sys_sendmsg+0x5be/0x970 [ 363.199729][ T8882] ? __sys_sendmsg_sock+0x30/0x30 [ 363.205218][ T8882] ? __import_iovec+0x315/0x500 [ 363.210288][ T8882] ? import_iovec+0x6f/0xa0 [ 363.214830][ T8882] ___sys_sendmsg+0x2a2/0x360 [ 363.219703][ T8882] ? __sys_sendmsg+0x290/0x290 [ 363.224506][ T8882] ? __lock_acquire+0x7d10/0x7d10 [ 363.229562][ T8882] __se_sys_sendmsg+0x1bb/0x2a0 [ 363.234562][ T8882] ? __x64_sys_sendmsg+0x80/0x80 [ 363.239638][ T8882] ? lockdep_hardirqs_on+0x94/0x140 [ 363.244875][ T8882] do_syscall_64+0x4c/0xa0 [ 363.249318][ T8882] ? clear_bhb_loop+0x60/0xb0 [ 363.254102][ T8882] ? clear_bhb_loop+0x60/0xb0 [ 363.258974][ T8882] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 363.265140][ T8882] RIP: 0033:0x7f5a36d9c819 [ 363.269653][ T8882] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 363.290152][ T8882] RSP: 002b:00007f5a37c63028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 363.300364][ T8882] RAX: ffffffffffffffda RBX: 00007f5a37015fa0 RCX: 00007f5a36d9c819 [ 363.309322][ T8882] RDX: 0000000000000000 RSI: 0000200000003780 RDI: 0000000000000003 [ 363.317698][ T8882] RBP: 00007f5a37c63090 R08: 0000000000000000 R09: 0000000000000000 [ 363.328435][ T8882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 363.339700][ T8882] R13: 00007f5a37016038 R14: 00007f5a37015fa0 R15: 00007ffc1a334f08 [ 363.350220][ T8882] [ 363.645801][ T8888] netlink: 'syz.2.1071': attribute type 3 has an invalid length. [ 363.711627][ T8888] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1071'. [ 364.321401][ T8900] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1073'. [ 365.041033][ T8907] netlink: 'syz.0.1076': attribute type 10 has an invalid length. [ 365.381010][ T8907] team0 (unregistering): Port device team_slave_0 removed [ 365.456659][ T8914] netlink: 164 bytes leftover after parsing attributes in process `syz.5.1080'. [ 365.488440][ T8907] team0 (unregistering): Port device team_slave_1 removed [ 366.589057][ T8931] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.1083'. [ 367.066559][ T8947] netlink: 830 bytes leftover after parsing attributes in process `syz.5.1089'. [ 367.080007][ T8930] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1084'. [ 367.100547][ T8930] ksmbd: Unknown IPC event: 10, ignore. [ 367.695632][ T8958] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1091'. [ 367.760153][ T8962] netlink: 'syz.5.1092': attribute type 21 has an invalid length. [ 367.786889][ T8962] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1092'. [ 368.029710][ T8970] netlink: 55 bytes leftover after parsing attributes in process `syz.5.1095'. [ 369.094125][ T8982] FAULT_INJECTION: forcing a failure. [ 369.094125][ T8982] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 369.111548][ T8982] CPU: 1 PID: 8982 Comm: syz.5.1099 Not tainted syzkaller #0 [ 369.119527][ T8982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 369.130131][ T8982] Call Trace: [ 369.133686][ T8982] [ 369.136686][ T8982] dump_stack_lvl+0x188/0x24e [ 369.141409][ T8982] ? show_regs_print_info+0x12/0x12 [ 369.146750][ T8982] ? load_image+0x400/0x400 [ 369.151778][ T8982] ? __lock_acquire+0x7d10/0x7d10 [ 369.156942][ T8982] should_fail_ex+0x399/0x4d0 [ 369.161744][ T8982] _copy_from_user+0x2c/0x170 [ 369.166467][ T8982] strndup_user+0xb3/0x150 [ 369.170968][ T8982] perf_uprobe_init+0x5d/0x190 [ 369.175767][ T8982] perf_uprobe_event_init+0xe2/0x170 [ 369.181088][ T8982] perf_try_init_event+0x12b/0x3d0 [ 369.186227][ T8982] perf_event_alloc+0xf5c/0x21b0 [ 369.191198][ T8982] ? perf_event_alloc+0xbe2/0x21b0 [ 369.196888][ T8982] __se_sys_perf_event_open+0x5db/0x1ec0 [ 369.202633][ T8982] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 369.208301][ T8982] ? lockdep_hardirqs_on+0x94/0x140 [ 369.213606][ T8982] ? __x64_sys_perf_event_open+0x1c/0xc0 [ 369.219373][ T8982] do_syscall_64+0x4c/0xa0 [ 369.223814][ T8982] ? clear_bhb_loop+0x60/0xb0 [ 369.228847][ T8982] ? clear_bhb_loop+0x60/0xb0 [ 369.233535][ T8982] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 369.239429][ T8982] RIP: 0033:0x7f5a36d9c819 [ 369.243838][ T8982] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 369.263792][ T8982] RSP: 002b:00007f5a37c63028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 369.272305][ T8982] RAX: ffffffffffffffda RBX: 00007f5a37015fa0 RCX: 00007f5a36d9c819 [ 369.280453][ T8982] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000200000000000 [ 369.288516][ T8982] RBP: 00007f5a37c63090 R08: 0000000000000000 R09: 0000000000000000 [ 369.296502][ T8982] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 369.305099][ T8982] R13: 00007f5a37016038 R14: 00007f5a37015fa0 R15: 00007ffc1a334f08 [ 369.313801][ T8982] [ 369.325843][ T8976] netlink: 'syz.2.1096': attribute type 10 has an invalid length. [ 369.363872][ T8987] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1098'. [ 369.935778][ T8976] team0 (unregistering): Port device team_slave_0 removed [ 369.966824][ T8976] team0 (unregistering): Port device team_slave_1 removed [ 370.345977][ T9008] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1105'. [ 373.047459][ T9034] netlink: 'syz.5.1114': attribute type 10 has an invalid length. [ 373.950316][ T9034] team0 (unregistering): Port device team_slave_0 removed [ 374.032101][ T9034] team0 (unregistering): Port device team_slave_1 removed [ 374.108569][ T9048] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1118'. [ 374.124006][ T9048] ksmbd: Unknown IPC event: 10, ignore. [ 374.832697][ T9064] netlink: 164 bytes leftover after parsing attributes in process `syz.5.1124'. [ 375.640524][ T4281] Bluetooth: hci3: command 0x0406 tx timeout [ 375.814090][ T9074] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1125'. [ 376.273294][ T9086] netlink: 'syz.4.1130': attribute type 10 has an invalid length. [ 376.833292][ T9086] team0 (unregistering): Port device team_slave_1 removed [ 376.914502][ T9092] netlink: 'syz.0.1132': attribute type 6 has an invalid length. [ 376.934373][ T9092] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1132'. [ 377.062388][ T9102] netlink: 188 bytes leftover after parsing attributes in process `syz.5.1134'. [ 377.073722][ T9102] ksmbd: Unknown IPC event: 10, ignore. [ 377.265994][ T9094] netlink: 11518 bytes leftover after parsing attributes in process `syz.2.1131'. [ 377.276590][ T9096] netlink: 11518 bytes leftover after parsing attributes in process `syz.2.1131'. [ 377.440109][ T9114] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1138'. [ 377.476351][ T9112] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1137'. [ 378.933817][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.940708][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.263264][ T9159] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1152'. [ 381.426200][ T9159] ksmbd: Unknown IPC event: 10, ignore. [ 381.599440][ T9165] netlink: 'syz.2.1156': attribute type 2 has an invalid length. [ 381.667514][ T9165] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1156'. [ 382.103992][ T9179] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1158'. [ 383.850203][ T9194] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1160'. [ 384.027628][ T9212] FAULT_INJECTION: forcing a failure. [ 384.027628][ T9212] name failslab, interval 1, probability 0, space 0, times 0 [ 384.099248][ T9212] CPU: 1 PID: 9212 Comm: syz.4.1166 Not tainted syzkaller #0 [ 384.106880][ T9212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 384.117418][ T9212] Call Trace: [ 384.120913][ T9212] [ 384.123967][ T9212] dump_stack_lvl+0x188/0x24e [ 384.128703][ T9212] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 384.136869][ T9212] ? show_regs_print_info+0x12/0x12 [ 384.143242][ T9212] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 384.150170][ T9212] should_fail_ex+0x399/0x4d0 [ 384.155436][ T9212] should_failslab+0x5/0x20 [ 384.160370][ T9212] slab_pre_alloc_hook+0x59/0x310 [ 384.165787][ T9212] ? perf_trace_preemptirq_template+0x268/0x320 [ 384.167927][ T9213] netlink: 188 bytes leftover after parsing attributes in process `syz.5.1167'. [ 384.172683][ T9212] kmem_cache_alloc_node+0x5a/0x320 [ 384.172718][ T9212] ? __alloc_skb+0xfc/0x7e0 [ 384.172742][ T9212] __alloc_skb+0xfc/0x7e0 [ 384.172767][ T9212] alloc_skb_with_frags+0xa7/0x710 [ 384.172786][ T9212] ? lockdep_hardirqs_on+0x94/0x140 [ 384.172806][ T9212] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 384.172831][ T9212] sock_alloc_send_pskb+0x87f/0x9a0 [ 384.172863][ T9212] ? sock_kzfree_s+0x50/0x50 [ 384.172888][ T9212] ? dev_get_by_index+0x1e/0x2d0 [ 384.172911][ T9212] ? dev_get_by_index+0x1e/0x2d0 [ 384.172939][ T9212] packet_sendmsg+0x32b0/0x4e60 [ 384.172976][ T9212] ? __might_sleep+0xd0/0xd0 [ 384.172997][ T9212] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 384.173031][ T9212] ? aa_sk_perm+0x81f/0x950 [ 384.173056][ T9212] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 384.173081][ T9212] ? packet_getsockopt+0x9a0/0x9a0 [ 384.173105][ T9212] ? aa_sock_msg_perm+0x94/0x150 [ 384.173125][ T9212] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 384.173142][ T9212] ? security_socket_sendmsg+0x7c/0xa0 [ 384.173170][ T9212] ? packet_getsockopt+0x9a0/0x9a0 [ 384.173187][ T9212] ____sys_sendmsg+0x5be/0x970 [ 384.294678][ T9212] ? __sys_sendmsg_sock+0x30/0x30 [ 384.299719][ T9212] ? import_iovec+0x6f/0xa0 [ 384.304688][ T9212] ___sys_sendmsg+0x2a2/0x360 [ 384.309472][ T9212] ? __sys_sendmsg+0x290/0x290 [ 384.314372][ T9212] ? ktime_get_real_ts64+0x440/0x440 [ 384.320269][ T9212] __se_sys_sendmsg+0x1bb/0x2a0 [ 384.325162][ T9212] ? __x64_sys_sendmsg+0x80/0x80 [ 384.330751][ T9212] ? lockdep_hardirqs_on+0x94/0x140 [ 384.336630][ T9212] do_syscall_64+0x4c/0xa0 [ 384.341605][ T9212] ? clear_bhb_loop+0x60/0xb0 [ 384.346301][ T9212] ? clear_bhb_loop+0x60/0xb0 [ 384.351130][ T9212] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 384.357212][ T9212] RIP: 0033:0x7f6f13d9c819 [ 384.362426][ T9212] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 384.383235][ T9212] RSP: 002b:00007f6f14be2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 384.391944][ T9212] RAX: ffffffffffffffda RBX: 00007f6f14015fa0 RCX: 00007f6f13d9c819 [ 384.400340][ T9212] RDX: 0000000024000008 RSI: 00002000000000c0 RDI: 0000000000000008 [ 384.409137][ T9212] RBP: 00007f6f14be2090 R08: 0000000000000000 R09: 0000000000000000 [ 384.417666][ T9212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 384.426279][ T9212] R13: 00007f6f14016038 R14: 00007f6f14015fa0 R15: 00007ffd25557648 [ 384.434693][ T9212] [ 384.450763][ T9213] ksmbd: Unknown IPC event: 10, ignore. [ 385.409103][ T9221] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1171'. [ 387.062481][ T9237] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1186'. [ 387.080653][ T9237] ksmbd: Unknown IPC event: 10, ignore. [ 387.235773][ T9239] netlink: 11518 bytes leftover after parsing attributes in process `syz.4.1175'. [ 387.397931][ T9247] netlink: 11518 bytes leftover after parsing attributes in process `syz.4.1175'. [ 387.980177][ T9255] FAULT_INJECTION: forcing a failure. [ 387.980177][ T9255] name failslab, interval 1, probability 0, space 0, times 0 [ 387.994555][ T9255] CPU: 0 PID: 9255 Comm: syz.0.1182 Not tainted syzkaller #0 [ 388.002227][ T9255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 388.012500][ T9255] Call Trace: [ 388.016095][ T9255] [ 388.019036][ T9255] dump_stack_lvl+0x188/0x24e [ 388.023933][ T9255] ? lock_chain_count+0x20/0x20 [ 388.028818][ T9255] ? show_regs_print_info+0x12/0x12 [ 388.034056][ T9255] ? load_image+0x400/0x400 [ 388.038597][ T9255] should_fail_ex+0x399/0x4d0 [ 388.043415][ T9255] should_failslab+0x5/0x20 [ 388.047948][ T9255] slab_pre_alloc_hook+0x59/0x310 [ 388.053110][ T9255] kmem_cache_alloc+0x56/0x2f0 [ 388.057988][ T9255] ? __inet_hash_connect+0x832/0x18e0 [ 388.063881][ T9255] __inet_hash_connect+0x832/0x18e0 [ 388.069134][ T9255] ? inet_hash_connect+0x130/0x130 [ 388.074295][ T9255] ? inet_bhash2_reset_saddr+0x80/0x80 [ 388.079875][ T9255] ? rcu_is_watching+0x11/0xa0 [ 388.084771][ T9255] tcp_v4_connect+0xc96/0x18e0 [ 388.089733][ T9255] ? preempt_count_add+0x8d/0x190 [ 388.094807][ T9255] ? tcp_twsk_unique+0x990/0x990 [ 388.099786][ T9255] ? stack_trace_save+0xf0/0xf0 [ 388.104691][ T9255] ? tcp_v6_connect+0x6c6/0x18c0 [ 388.109810][ T9255] tcp_v6_connect+0xb0c/0x18c0 [ 388.114623][ T9255] ? tcp_v6_pre_connect+0xf0/0xf0 [ 388.120089][ T9255] ? __se_sys_sendmsg+0x1bb/0x2a0 [ 388.125152][ T9255] ? do_syscall_64+0x4c/0xa0 [ 388.129787][ T9255] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 388.135924][ T9255] __inet_stream_connect+0x242/0xe10 [ 388.141527][ T9255] ? inet_dgram_connect+0x360/0x360 [ 388.146949][ T9255] tcp_sendmsg_fastopen+0x38f/0x600 [ 388.152199][ T9255] tcp_sendmsg_locked+0x3616/0x3a90 [ 388.157543][ T9255] ? verify_lock_unused+0x140/0x140 [ 388.162973][ T9255] ? __might_sleep+0xd0/0xd0 [ 388.167856][ T9255] ? mark_lock+0x94/0x320 [ 388.172215][ T9255] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 388.178218][ T9255] ? lock_chain_count+0x20/0x20 [ 388.183085][ T9255] ? tcp_sendmsg+0x1d/0x40 [ 388.187706][ T9255] ? tcp_set_state+0x520/0x520 [ 388.192781][ T9255] tcp_sendmsg+0x2b/0x40 [ 388.197146][ T9255] ? inet6_compat_ioctl+0x3c0/0x3c0 [ 388.202457][ T9255] ____sys_sendmsg+0x5be/0x970 [ 388.207350][ T9255] ? __sys_sendmsg_sock+0x30/0x30 [ 388.212409][ T9255] ? __import_iovec+0x315/0x500 [ 388.217485][ T9255] ? import_iovec+0x6f/0xa0 [ 388.222375][ T9255] ___sys_sendmsg+0x2a2/0x360 [ 388.227805][ T9255] ? __sys_sendmsg+0x290/0x290 [ 388.232724][ T9255] ? __lock_acquire+0x7d10/0x7d10 [ 388.237886][ T9255] __se_sys_sendmsg+0x1bb/0x2a0 [ 388.242777][ T9255] ? __x64_sys_sendmsg+0x80/0x80 [ 388.247843][ T9255] ? lockdep_hardirqs_on+0x94/0x140 [ 388.253186][ T9255] do_syscall_64+0x4c/0xa0 [ 388.257721][ T9255] ? clear_bhb_loop+0x60/0xb0 [ 388.262439][ T9255] ? clear_bhb_loop+0x60/0xb0 [ 388.267156][ T9255] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 388.273077][ T9255] RIP: 0033:0x7f275cd9c819 [ 388.277510][ T9255] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 388.297242][ T9255] RSP: 002b:00007f275db6e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 388.306407][ T9255] RAX: ffffffffffffffda RBX: 00007f275d015fa0 RCX: 00007f275cd9c819 [ 388.314632][ T9255] RDX: 0000000024044051 RSI: 0000200000000000 RDI: 0000000000000003 [ 388.323055][ T9255] RBP: 00007f275db6e090 R08: 0000000000000000 R09: 0000000000000000 [ 388.331439][ T9255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 388.340526][ T9255] R13: 00007f275d016038 R14: 00007f275d015fa0 R15: 00007ffde61fdab8 [ 388.349223][ T9255] [ 389.532059][ T9281] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1191'. [ 389.569105][ T9281] ksmbd: Unknown IPC event: 10, ignore. [ 389.867347][ T9294] FAULT_INJECTION: forcing a failure. [ 389.867347][ T9294] name failslab, interval 1, probability 0, space 0, times 0 [ 389.921555][ T9294] CPU: 0 PID: 9294 Comm: syz.4.1197 Not tainted syzkaller #0 [ 389.929522][ T9294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 389.940968][ T9294] Call Trace: [ 389.944372][ T9294] [ 389.947422][ T9294] dump_stack_lvl+0x188/0x24e [ 389.952811][ T9294] ? show_regs_print_info+0x12/0x12 [ 389.958699][ T9294] ? load_image+0x400/0x400 [ 389.963509][ T9294] ? __lock_acquire+0x7d10/0x7d10 [ 389.968802][ T9294] ? memset+0x1e/0x40 [ 389.972867][ T9294] should_fail_ex+0x399/0x4d0 [ 389.977696][ T9294] should_failslab+0x5/0x20 [ 389.982258][ T9294] slab_pre_alloc_hook+0x59/0x310 [ 389.987315][ T9294] kmem_cache_alloc+0x56/0x2f0 [ 389.992268][ T9294] ? security_inode_alloc+0x30/0x110 [ 389.997599][ T9294] security_inode_alloc+0x30/0x110 [ 390.002818][ T9294] inode_init_always+0x8f8/0xc90 [ 390.007781][ T9294] new_inode_pseudo+0x91/0x1c0 [ 390.012923][ T9294] __sock_create+0x129/0x940 [ 390.017680][ T9294] __sys_socketpair+0x232/0x540 [ 390.023808][ T9294] __x64_sys_socketpair+0x97/0xb0 [ 390.029154][ T9294] do_syscall_64+0x4c/0xa0 [ 390.034498][ T9294] ? clear_bhb_loop+0x60/0xb0 [ 390.039674][ T9294] ? clear_bhb_loop+0x60/0xb0 [ 390.044545][ T9294] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 390.050552][ T9294] RIP: 0033:0x7f6f13d9c819 [ 390.055015][ T9294] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 390.076553][ T9294] RSP: 002b:00007f6f14be2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 390.085348][ T9294] RAX: ffffffffffffffda RBX: 00007f6f14015fa0 RCX: 00007f6f13d9c819 [ 390.093711][ T9294] RDX: 0000000000000002 RSI: 0000000000000002 RDI: 000000000000001d [ 390.101794][ T9294] RBP: 00007f6f14be2090 R08: 0000000000000000 R09: 0000000000000000 [ 390.110268][ T9294] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000002 [ 390.118584][ T9294] R13: 00007f6f14016038 R14: 00007f6f14015fa0 R15: 00007ffd25557648 [ 390.126752][ T9294] [ 390.177675][ T9294] socket: no more sockets [ 390.200698][ T27] INFO: task syz.1.514:6661 blocked for more than 143 seconds. [ 390.212137][ T9300] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1200'. [ 390.222481][ T27] Not tainted syzkaller #0 [ 390.228006][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 390.238859][ T27] task:syz.1.514 state:D stack:23832 pid:6661 ppid:6325 flags:0x00004002 [ 390.259458][ T27] Call Trace: [ 390.268980][ T27] [ 390.274762][ T27] __schedule+0x11d1/0x40e0 [ 390.279484][ T27] ? __mutex_lock+0x1ab/0xaf0 [ 390.285658][ T27] ? __sched_text_start+0x8/0x8 [ 390.293488][ T27] ? task_work_cancel+0xa1/0x220 [ 390.304415][ T27] ? task_work_cancel_func+0x210/0x210 [ 390.309997][ T27] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 390.316188][ T27] ? _free_event+0xfd/0x10a0 [ 390.321879][ T27] schedule+0xb9/0x180 [ 390.326401][ T27] _free_event+0x171/0x10a0 [ 390.332691][ T27] ? perf_mmap+0x13d0/0x13d0 [ 390.337959][ T27] ? perf_mmap+0x13d0/0x13d0 [ 390.343533][ T27] perf_event_release_kernel+0x83e/0x8d0 [ 390.349208][ T27] ? __might_sleep+0xd0/0xd0 [ 390.354590][ T27] ? calc_timer_values+0x410/0x410 [ 390.361176][ T27] ? perf_mmap+0x13d0/0x13d0 [ 390.366132][ T27] perf_release+0x37/0x40 [ 390.370992][ T27] __fput+0x22c/0x920 [ 390.375238][ T27] task_work_run+0x1d0/0x260 [ 390.380037][ T27] ? task_work_cancel+0x220/0x220 [ 390.385472][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 390.391023][ T27] do_exit+0x982/0x2480 [ 390.395615][ T27] ? put_task_struct+0x80/0x80 [ 390.400540][ T27] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 390.406746][ T27] ? lock_chain_count+0x20/0x20 [ 390.411865][ T27] ? _raw_spin_lock_irq+0xb7/0xf0 [ 390.416919][ T27] do_group_exit+0x217/0x2d0 [ 390.421710][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 390.426950][ T27] get_signal+0x1272/0x1350 [ 390.431829][ T27] arch_do_signal_or_restart+0xc4/0x1350 [ 390.437760][ T27] ? kasan_quarantine_put+0xd4/0x220 [ 390.444271][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 390.449525][ T27] ? slab_free_freelist_hook+0x131/0x1a0 [ 390.455374][ T27] ? do_sys_openat2+0x20c/0x4b0 [ 390.460561][ T27] ? get_sigframe_size+0x10/0x10 [ 390.465731][ T27] ? do_sys_openat2+0x20c/0x4b0 [ 390.470762][ T27] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 390.476789][ T27] ? exit_to_user_mode_loop+0x3b/0x110 [ 390.482402][ T27] exit_to_user_mode_loop+0x70/0x110 [ 390.487733][ T27] exit_to_user_mode_prepare+0xee/0x180 [ 390.493589][ T27] syscall_exit_to_user_mode+0x16/0x40 [ 390.499933][ T27] do_syscall_64+0x58/0xa0 [ 390.505276][ T27] ? clear_bhb_loop+0x60/0xb0 [ 390.510440][ T27] ? clear_bhb_loop+0x60/0xb0 [ 390.515337][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 390.521760][ T27] RIP: 0033:0x7f9c6bf9c819 [ 390.527010][ T27] RSP: 002b:00007f9c6ce7f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 390.535913][ T27] RAX: 0000000000000006 RBX: 00007f9c6c215fa0 RCX: 00007f9c6bf9c819 [ 390.544052][ T27] RDX: 0000000000200002 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 390.552772][ T27] RBP: 00007f9c6c032c91 R08: 0000000000000000 R09: 0000000000000000 [ 390.560971][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 390.569338][ T27] R13: 00007f9c6c216038 R14: 00007f9c6c215fa0 R15: 00007ffcf83b1878 [ 390.578131][ T27] [ 390.588122][ T27] [ 390.588122][ T27] Showing all locks held in the system: [ 390.596570][ T27] 1 lock held by rcu_tasks_kthre/12: [ 390.611540][ T27] #0: ffffffff8cb2df30 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 390.622698][ T27] 1 lock held by rcu_tasks_trace/13: [ 390.628174][ T27] #0: ffffffff8cb2e750 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 390.640153][ T27] 2 locks held by kworker/1:0/22: [ 390.645550][ T27] #0: ffff888017472138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 390.657721][ T27] #1: ffffc900001c7d00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 390.698455][ T27] 1 lock held by khungtaskd/27: [ 390.710577][ T27] #0: ffffffff8cb2d5a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 390.727198][ T27] 5 locks held by kworker/u4:3/46: [ 390.732493][ T27] #0: ffff888017616938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 390.743165][ T27] #1: ffffc90000b77d00 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 390.753321][ T27] #2: ffffffff8dd39fd0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x148/0xba0 [ 390.763336][ T27] #3: ffffffff8dd46ea8 (rtnl_mutex){+.+.}-{3:3}, at: ip6_tnl_exit_batch_net+0xc8/0x620 [ 390.773780][ T27] #4: ffffffff8cb33278 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x2ec/0x890 [ 390.785364][ T27] 2 locks held by getty/4028: [ 390.790067][ T27] #0: ffff88814db35098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 390.799988][ T27] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x429/0x1390 [ 390.810416][ T27] 7 locks held by kworker/u4:6/4327: [ 390.816341][ T27] #0: ffff8880b8e3ab18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140 [ 390.828104][ T27] #1: ffffffff8cb2d5a0 (rcu_read_lock){....}-{1:2}, at: ___perf_sw_event+0x180/0x6e0 [ 390.838140][ T27] #2: ffffffff8c9c9e70 (cpu_hotplug_lock){++++}-{0:0}, at: static_key_enable+0xe/0x20 [ 390.848367][ T27] #3: ffffffff8cbc9608 (jump_label_mutex){+.+.}-{3:3}, at: static_key_enable_cpuslocked+0xc2/0x240 [ 390.859822][ T27] #4: ffffffff8c9df208 (text_mutex){+.+.}-{3:3}, at: arch_jump_label_transform_apply+0xe/0x20 [ 390.870720][ T27] #5: ffff8880b8e3ab18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140 [ 390.880972][ T27] #6: ffffffff8cb2d5a0 (rcu_read_lock){....}-{1:2}, at: ___perf_sw_event+0x180/0x6e0 [ 390.891083][ T27] 1 lock held by syz.5.1200/9300: [ 390.896409][ T27] #0: ffffffff8dd46ea8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x824/0xfc0 [ 390.905966][ T27] 1 lock held by syz.5.1200/9302: [ 390.911758][ T27] #0: ffffffff8dd46ea8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x824/0xfc0 [ 390.921530][ T27] 1 lock held by syz.2.1201/9310: [ 390.926585][ T27] #0: ffffffff8dd46ea8 (rtnl_mutex){+.+.}-{3:3}, at: dev_ethtool+0x1de/0x12f0 [ 390.936218][ T9302] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1200'. [ 390.939535][ T27] [ 390.948765][ T27] ============================================= [ 390.948765][ T27] [ 390.961376][ T27] NMI backtrace for cpu 0 [ 390.966115][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 390.973412][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 390.983597][ T27] Call Trace: [ 390.986886][ T27] [ 390.990034][ T27] dump_stack_lvl+0x188/0x24e [ 390.994737][ T27] ? ct_irq_enter_irqson+0x170/0x170 [ 391.000208][ T27] ? show_regs_print_info+0x12/0x12 [ 391.005636][ T27] ? load_image+0x400/0x400 [ 391.010160][ T27] ? vprintk_emit+0x59f/0x6a0 [ 391.015118][ T27] ? nmi_cpu_backtrace+0x1cb/0x460 [ 391.020589][ T27] nmi_cpu_backtrace+0x3e6/0x460 [ 391.026435][ T27] ? nmi_trigger_cpumask_backtrace+0x450/0x450 [ 391.032605][ T27] ? _printk+0xda/0x130 [ 391.036790][ T27] ? load_image+0x400/0x400 [ 391.041481][ T27] ? load_image+0x400/0x400 [ 391.046175][ T27] ? nmi_trigger_cpumask_backtrace+0xf3/0x450 [ 391.052267][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 391.058349][ T27] nmi_trigger_cpumask_backtrace+0x1d4/0x450 [ 391.064356][ T27] watchdog+0xeee/0xf30 [ 391.068557][ T27] ? watchdog+0x1ed/0xf30 [ 391.072892][ T27] kthread+0x29d/0x330 [ 391.077041][ T27] ? hungtask_pm_notify+0x40/0x40 [ 391.082063][ T27] ? kthread_blkcg+0xd0/0xd0 [ 391.086736][ T27] ret_from_fork+0x1f/0x30 [ 391.091172][ T27] [ 391.094982][ T27] Sending NMI from CPU 0 to CPUs 1: [ 391.100453][ C1] NMI backtrace for cpu 1 [ 391.100464][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 [ 391.100480][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 391.100488][ C1] RIP: 0010:trace_hardirqs_on+0x12/0x40 [ 391.100513][ C1] Code: c7 f0 e0 1f 8e e8 0e a2 4a 00 e9 55 ff ff ff 66 0f 1f 84 00 00 00 00 00 65 8b 05 d1 58 7a 7e 85 c0 74 24 65 8b 05 96 91 79 7e 00 00 f0 00 75 0b 48 8b 3c 24 31 f6 e8 1c 00 00 00 65 c7 05 a9 [ 391.100526][ C1] RSP: 0018:ffffc900001e0a38 EFLAGS: 00000002 [ 391.100540][ C1] RAX: 0000000080000102 RBX: 0000000000000a02 RCX: 0000000000000001 [ 391.100551][ C1] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff8880b8f28440 [ 391.100561][ C1] RBP: ffffc900001e0ad0 R08: ffff8880b8f28443 R09: 1ffff110171e5088 [ 391.100572][ C1] R10: dffffc0000000000 R11: ffffed10171e5089 R12: dffffc0000000000 [ 391.100584][ C1] R13: dffffc0000000000 R14: ffff8880b8f28440 R15: 1ffff9200003c148 [ 391.100595][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 391.100609][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 391.100620][ C1] CR2: 00007f275cfe92f8 CR3: 000000007a2ad000 CR4: 00000000003506e0 [ 391.100635][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 391.100644][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 391.100654][ C1] Call Trace: [ 391.100660][ C1] [ 391.100665][ C1] _raw_spin_unlock_irqrestore+0x82/0x120 [ 391.100686][ C1] ? _raw_spin_unlock+0x40/0x40 [ 391.100700][ C1] ? rcu_is_watching+0x11/0xa0 [ 391.100723][ C1] ? enqueue_timer+0x23f/0x5c0 [ 391.100741][ C1] __mod_timer+0x91e/0xd00 [ 391.100760][ C1] call_timer_fn+0x1ac/0x670 [ 391.100774][ C1] ? garp_init_applicant+0x440/0x440 [ 391.100791][ C1] ? call_timer_fn+0xcf/0x670 [ 391.100811][ C1] ? __run_timers+0x800/0x800 [ 391.100830][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 391.100845][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 391.100859][ C1] ? garp_init_applicant+0x440/0x440 [ 391.100876][ C1] __run_timers+0x53e/0x800 [ 391.100895][ C1] ? detach_timer+0x350/0x350 [ 391.100912][ C1] ? lock_chain_count+0x20/0x20 [ 391.100934][ C1] run_timer_softirq+0x63/0xf0 [ 391.100948][ C1] handle_softirqs+0x2a1/0x930 [ 391.100966][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 391.100982][ C1] ? do_softirq+0x210/0x210 [ 391.100997][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 391.101013][ C1] __irq_exit_rcu+0x13b/0x230 [ 391.101026][ C1] ? irq_exit_rcu+0x20/0x20 [ 391.101044][ C1] irq_exit_rcu+0x5/0x20 [ 391.101057][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 391.101072][ C1] [ 391.101076][ C1] [ 391.101082][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 391.101100][ C1] RIP: 0010:default_idle+0xb/0x10 [ 391.101114][ C1] Code: 48 89 df e8 47 c2 9b f7 e9 44 ff ff ff e8 3d 07 f6 ff 00 00 cc cc 00 00 cc cc 00 00 cc cc 00 66 90 0f 00 2d 57 eb 4e 00 fb f4 0f 1f 40 00 41 57 41 56 53 49 be 00 00 00 00 00 fc ff df 65 48 [ 391.101126][ C1] RSP: 0018:ffffc90000177de8 EFLAGS: 000002c6 [ 391.101138][ C1] RAX: 56b9f06b82583100 RBX: ffffffff8a37c257 RCX: 56b9f06b82583100 [ 391.101149][ C1] RDX: 0000000000000001 RSI: ffffffff8a8c10a0 RDI: ffffffff8adf0d20 [ 391.101160][ C1] RBP: ffffc90000177f20 R08: ffff8880b8f3580b R09: 1ffff110171e6b01 [ 391.101171][ C1] R10: dffffc0000000000 R11: ffffed10171e6b02 R12: 0000000000000000 [ 391.101181][ C1] R13: dffffc0000000000 R14: ffff88813fed9dc0 R15: 1ffff9200002efc8 [ 391.101194][ C1] ? default_idle_call+0x77/0xc0 [ 391.101213][ C1] default_idle_call+0x84/0xc0 [ 391.101227][ C1] do_idle+0x3a2/0x680 [ 391.101249][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 391.101268][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 391.101288][ C1] ? schedule_idle+0x57/0x90 [ 391.101308][ C1] cpu_startup_entry+0x3f/0x60 [ 391.101327][ C1] start_secondary+0xe4/0xf0 [ 391.101344][ C1] secondary_startup_64_no_verify+0xcf/0xdb [ 391.101369][ C1] [ 391.103005][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 391.103018][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 391.103035][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 391.103044][ T27] Call Trace: [ 391.103049][ T27] [ 391.103056][ T27] dump_stack_lvl+0x188/0x24e [ 391.103082][ T27] ? memcpy+0x3c/0x60 [ 391.103099][ T27] ? show_regs_print_info+0x12/0x12 [ 391.103122][ T27] ? load_image+0x400/0x400 [ 391.103149][ T27] panic+0x2e5/0x730 [ 391.103165][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 391.103190][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 391.103207][ T27] ? __irq_work_queue_local+0x12c/0x190 [ 391.103242][ T27] ? nmi_trigger_cpumask_backtrace+0x35b/0x450 [ 391.103271][ T27] ? nmi_trigger_cpumask_backtrace+0x360/0x450 [ 391.103295][ T27] watchdog+0xf2d/0xf30 [ 391.103319][ T27] ? watchdog+0x1ed/0xf30 [ 391.103341][ T27] kthread+0x29d/0x330 [ 391.103355][ T27] ? hungtask_pm_notify+0x40/0x40 [ 391.103373][ T27] ? kthread_blkcg+0xd0/0xd0 [ 391.103389][ T27] ret_from_fork+0x1f/0x30 [ 391.103420][ T27] [ 391.107636][ T27] Kernel Offset: disabled [ 391.621247][ T27] Rebooting in 86400 seconds..