last executing test programs: 4.557848068s ago: executing program 1 (id=630): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1f, 0x1d, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000001000000b708"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x20, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe88f5d9965ff4a44, @perf_bp={0x0, 0x7}, 0x10000, 0xca, 0x0, 0x0, 0x0, 0x8, 0x7, 0x0, 0x0, 0x0, 0x400100}, 0xffffffffffffffff, 0x11, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x801, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000000000000000000000000000007110aa000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[], 0x48) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7f}, 0x100904, 0x3, 0xfffffffc}, 0x0, 0xffffffffffffffff, r4, 0x0) r5 = socket$kcm(0x2, 0x3, 0x2) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) sendmsg$inet(r5, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1}}}, @ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x7, 0x7, '\t\x00A\x00\x00'}]}}}], 0x38}, 0x20002800) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000003940)=[{&(0x7f0000000500)=""/4086, 0xff6}], 0x1}, 0x0) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90124fc601006034002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) close(r1) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xffffffbe}, 0x0) write$cgroup_subtree(r8, &(0x7f0000000180)=ANY=[@ANYRES8=r1, @ANYBLOB="3e971d"], 0x9a) 4.185852248s ago: executing program 1 (id=634): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x80000000009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={&(0x7f0000000040)}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x10101, 0x4, 0x2000000, 0x1, 0x2, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000020000000000c70dcfa0fb8325e4d1aea3c2aed100000000"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xf, &(0x7f0000001540)=ANY=[@ANYBLOB="180300004000000000000000ff00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400ffafb5020000140000008500000083000000bc0900000000000055090100000009007b00000000000000bf91000000000000b7020000000000008500000000000024b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.throttle.io_service_bytes\x00', 0x26e1, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000980)={r1, 0x58, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c00)={0x0, 0xf, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000001000000000000000300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf910000000000cdb7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000740)='GPL\x00', 0x44ec, 0xb3, &(0x7f0000000840)=""/179, 0x41100, 0x1b, '\x00', r2, 0x0, r1, 0x8, &(0x7f0000000a00)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x2, 0xd, 0xc, 0xf3b}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000a80)=[r1, r0, r0, r1, r0], &(0x7f0000000ac0)=[{0x0, 0x1, 0x3, 0x3}, {0x5, 0x12, 0xf, 0x6}, {0x0, 0x4, 0xc, 0x7}, {0x0, 0x1, 0x9}, {0x4, 0x102, 0xf, 0x9}, {0x5, 0x3, 0xf, 0x6}], 0x10, 0x800}, 0x94) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) ioctl$SIOCSIFHWADDR(r1, 0x8b0f, &(0x7f0000000000)={'wlan1\x00', @random="1f00"}) 3.979249234s ago: executing program 1 (id=635): close(0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xfffffffffffffff8, 0x3fff8002}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x20, 0x5, &(0x7f0000000180)=ANY=[@ANYRESOCT], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0}, 0x28) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000d40)="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", 0x1ca}], 0x1}, 0x0) sendmsg$tipc(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24004810}, 0x8041) r3 = socket$kcm(0x2, 0xe, 0x84) setsockopt$sock_attach_bpf(r3, 0x84, 0x22, 0x0, 0x0) socket$kcm(0x10, 0xb, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb0100180000008777a83ddfecc9010f2b7d00000000240000002400000006000000040000000000000700000000000000000000000b05000000030000000000000a03000000003000006100"], &(0x7f0000000340)=""/142, 0x42, 0x8e, 0x1}, 0x28) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x494, 0x8}, 0x5488, 0xb47, 0x0, 0x0, 0x9, 0x10000a, 0x0, 0x0, 0x2, 0x0, 0xc}, 0x0, 0x6, 0xffffffffffffffff, 0x9) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)="d80000001e0081054e81f782db4cb9040a1d080006007c095dd2086518000a800d00000003600e1208000f0000000406a80016c0080009", 0x37}], 0x1}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x432483, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48283, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETOFFLOAD(r4, 0x400454c9, 0xb) ioctl$TUNSETLINK(r4, 0x400454cd, 0x10e) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000cc0)={r1, 0x0, 0x7f, 0xc9, &(0x7f00000001c0)="fa43741cbfa90457255ebc809e96d3878aeeae37735fbba00e292177e32911c1444db40daddde3b709185a0ad6dca798883302983637ee2488b48cf4f292737a403dc25d624df83e0c5bb7527f0778903084ab5fdfeecac9028e4692cb18081374670f14f0836fcdaabba3a11cb5627886cbc2f6adc0e144f19bde34bb3dc7", &(0x7f0000000800)=""/201, 0x7, 0x0, 0xcc, 0x65, &(0x7f0000000900)="2d84131498dda988da09348cf0881bddff25a928106ceb106a4b34c3e19d6d39ae67d20058fd34927c6588dc0e7dadda056df3cbaaaaf48a2d67d8005d92c8fe186bdfd8f0e9c32a3632fb6a99c65236cae8d9673475d3a9383e614645485db096907099c6b8cf3db6179491d3a056c9c5c18a43b855628da4688aa8aeac9ba945b5243df449edc45cd5715c1e228800fb14294a5bcd6609ee244a92af96889a27153b062f9029dcb26fcb380856d95b3aa83aa14a2f1feadd07f441f63e1ebcba3aebfdfd4fb3aecf7ef116", &(0x7f0000000c40)="4c648aee839936909db5f55d3ea6e07e8286e8f8eb738ca3e0a1870781f336316aa1e0ae2e66eec25b3a4347e46c52b17e5134ffb47e2f961091c06151ed558e9937316b6981e45e2caf47160003a1682989d5220010550fdee0cd414cb0b5d947f2e86a32", 0x2, 0x0, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x94) socket$kcm(0x10, 0x2, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000080)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x13) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="02000000040000000800", @ANYRES32=0x1, @ANYBLOB="80000000ddff0f000000233a881f1fea3ead42b40a0000000000000400000019a0d1a75f2a7758c1ccb7ad0dcd54f5861ace30df93d7bdb7fb062c2af1efd00aa4e7dacbb2e5864dd520bb68e5550655807ed4148cca127051efda", @ANYRES32=0x0, @ANYBLOB], 0x48) 3.978781704s ago: executing program 3 (id=636): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x400000002, 0x0) r3 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) r4 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x8918, &(0x7f0000000000)) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000005c0)=r3, 0x12) syz_open_procfs$namespace(r3, &(0x7f0000000240)='ns/pid\x00') sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="68cabf2dfb58fc0a01008888ffff0200", 0x10}], 0x1}, 0x4000000) recvmsg(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2000) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000800)=0xffffffffffffffff, 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0xffdd) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x49, 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0x1}, &(0x7f0000000140), &(0x7f00000001c0)=r5}, 0x20) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e1f, @multicast2=0xe0000001}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000040)="00446916ab", 0xffe3}], 0x1, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xe}, @multicast2}}}], 0x20}, 0x7000000) 3.567026675s ago: executing program 1 (id=639): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001380)="600000004e007f049e", 0x9}, {&(0x7f00000008c0)="78cabf2dfb73fc0a7d0a0080f2dcb9fe06892544001100b8f9e6aaeb1ae2f6e8bcb5ee52dc06249798093c5102a1bca0b646a7ce904f6e6b788b3219c233e60ddc36024a99a63e729f9b06f96137c89d03234f008c5681", 0x57}], 0x2}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd75, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={&(0x7f00000005c0), 0x2}, 0x200, 0x4, 0x101, 0x7, 0x0, 0x0, 0x0, 0x0, 0xffffd412, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={r0, 0x0, 0x0}, 0x10) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x2, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000200000000000000000000007d360598bb17863048e0b90e13891e19ca2e0fdc393ea5390e21bd890123b66ca097af3453b3f2f9f3213ac85528cd1231fcf5e3096411db1fa0ab1574f57f376246cc17f623124283cd6b37226f6bf69a4a97868e43b5"], &(0x7f0000000640)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x28, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x84}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b904021d08020e0000008100e0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r3 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x6, &(0x7f0000000040), 0x4) sendmsg$kcm(r3, &(0x7f0000000740)={&(0x7f00000000c0)=@in6={0xa, 0x4e23, 0x2, @remote, 0x17}, 0x80, 0x0}, 0x6000084) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x0, 0x4a}, 0x28) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x5, 0x81, 0x9, 0x6, 0x0, 0x8, 0x108, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000001040), 0x8}, 0x2080, 0x4, 0xe9be, 0x1, 0x9, 0x39d7, 0xa, 0x0, 0x10, 0x0, 0x4}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x6, 0xffffffffffffffff, 0x4}, 0x38) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x4, 0x0, 0x0, 0x13509, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000680), 0x9}, 0x100b24, 0x8000081, 0x8, 0x2, 0x100000001, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xb, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_ext={0x1c, 0x11, &(0x7f00000000c0)=ANY=[@ANYRES8=r1], &(0x7f0000000180)='GPL\x00', 0xd, 0x64, &(0x7f00000001c0)=""/100, 0x41000, 0x8, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000280)={0x3, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x5, 0x6, 0xc66a, 0x25bc}, 0x10, 0x27750, 0xffffffffffffffff, 0x5, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000380)=[{0x3, 0x1, 0x0, 0x4}, {0x4, 0x2, 0x6, 0x3}, {0x2, 0x4, 0x3}, {0x1, 0x1, 0x7, 0x8}, {0x5, 0x1, 0xa, 0x8}], 0x10, 0x80000001}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="090000000400"], 0x50) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb9200a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x0) r6 = socket$kcm(0xa, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r6}, 0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x58, &(0x7f0000000240)}, 0x10) socket$kcm(0xa, 0x3, 0x73) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) 3.537872526s ago: executing program 2 (id=640): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="8fedcb7907000075f3052ee4f7e34c867f6317ce6203c23c00fe80000100000000875a65969ff57b00030000000000000000000000ac14142c0000000000000000"], 0xfdef) r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x890d, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x101000, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0xc}, 0x10cc76, 0xc78}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, 0x0, 0x240048c1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) close(r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="160000000000000061b1000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r4, 0x0, 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, 0x0, &(0x7f0000001540)=""/155}, 0x20) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000140)={r2, 0x0, &(0x7f00000002c0)=""/4095}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x3, &(0x7f0000000040)=ANY=[], 0x0, 0x8, 0x0, 0x0, 0x41000}, 0x94) socket$kcm(0x10, 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f00000009c0)=ANY=[@ANYBLOB="2539000020000306f107f62aa6172f7881"], 0x33fe0) close(r5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000feffffff85000000c50000009500000000cfac9c4ed192c51fc48cdf871f0000000000"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x11}, 0x94) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x40107447, &(0x7f0000000180)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000070000008908630b4d7d11"], 0x18, 0x5}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events\x00', 0x0, 0x0) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)="14000000210081044e81f782db44b9040200", 0x12}, {&(0x7f0000004200)="3d8c5ddb30a3718cef4f5210732f747226e8d7f41c83b136ac097b9a3c24c45639c2d70ee16c4b00790aca819a43b054bd01626eb0402783358806f064ef1fd963ab9b3f56cd18c60b0906d39e860184856b478f1ba6888cc780673762b0ee290d2b7d", 0x63}], 0x2}, 0x0) 3.346214721s ago: executing program 1 (id=641): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000180)={&(0x7f0000000100)=@hci={0x1f, 0x30, 0x4}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="27031c00590414001200002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000840)="63f805d7649496db72959832930469edc7b7d050139bf7ada300c9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2c236205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0xfec2}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000540)="6fe4dd9eeb85271de1b87ef9440284", 0xf}], 0x4}, 0x200400c4) 2.965804981s ago: executing program 1 (id=642): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000090000000800000000000000", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000003c67bbbede00"/33], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r4, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0}, 0x40, 0x10000, 0x1009e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x1, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000f8000000000000000000850000008700000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB="2f0000000000000001000000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x18000000000002a0, 0x24, 0x4a, &(0x7f0000000680)="b9ff03076804268c989e14f088a847e089021416e0885a0400000000000081009fa79900", 0x0, 0x400, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x3d) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x20083500, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x2800, 0x0, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140)) bpf$TOKEN_CREATE(0x24, &(0x7f0000002380)={0x0, r1}, 0x8) 2.888143923s ago: executing program 3 (id=643): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x80000000009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={&(0x7f0000000040)}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x10101, 0x4, 0x2000000, 0x1, 0x2, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000020000000000c70dcfa0fb8325e4d1aea3c2aed100000000"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xf, &(0x7f0000001540)=ANY=[@ANYBLOB="180300004000000000000000ff00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400ffafb5020000140000008500000083000000bc0900000000000055090100000009007b00000000000000bf91000000000000b7020000000000008500000000000024b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.throttle.io_service_bytes\x00', 0x26e1, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000980)={r1, 0x58, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c00)={0x0, 0xf, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000001000000000000000300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf910000000000cdb7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000740)='GPL\x00', 0x44ec, 0xb3, &(0x7f0000000840)=""/179, 0x41100, 0x1b, '\x00', r2, 0x0, r1, 0x8, &(0x7f0000000a00)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x2, 0xd, 0xc, 0xf3b}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000a80)=[r1, r0, r0, r1, r0], &(0x7f0000000ac0)=[{0x0, 0x1, 0x3, 0x3}, {0x5, 0x12, 0xf, 0x6}, {0x0, 0x4, 0xc, 0x7}, {0x0, 0x1, 0x9}, {0x4, 0x102, 0xf, 0x9}, {0x5, 0x3, 0xf, 0x6}], 0x10, 0x800}, 0x94) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) ioctl$SIOCSIFHWADDR(r1, 0x8b0f, &(0x7f0000000000)={'wlan1\x00', @random="1f00"}) 2.876534883s ago: executing program 2 (id=644): r0 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x644b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x2}, 0x8004, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0xff, 0x0, 0xffffffffffffffff, 0x8010, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0xf50a43945a8ef38c}, 0xce6b9b20411c70f4, 0x800000000000ca, 0x0, 0x9, 0xffffffbffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) recvmsg$unix(r1, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x1c0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x9a) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x31) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18f80000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000a8c5000000a50000001801000020206405000000000004000f7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70400000000000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00000010", 0x5}], 0x1}, 0x40) 2.755776186s ago: executing program 0 (id=645): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7a, 0x9c}, [@call={0x25, 0x0, 0x0, 0x98000000}], {0x95, 0x0, 0xd00}}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x8, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x8000000, 0x10, 0x0, 0xffffffffffffff6c}, 0x3f) (async) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7a, 0x9c}, [@call={0x25, 0x0, 0x0, 0x98000000}], {0x95, 0x0, 0xd00}}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x8, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x8000000, 0x10, 0x0, 0xffffffffffffff6c}, 0x3f) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x3d, 0x7, 0x0, 0x0, 0x28040, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x180a2, 0x7ff, 0x6, 0x0, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="180300000000000000000000000000008510000006000000180000002000000000000000000000007f00000000000000180000000000002000000000000000009500000000000000540300000400000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x45}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="180300000000000000000000000000008510000006000000180000002000000000000000000000007f00000000000000180000000000002000000000000000009500000000000000540300000400000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x45}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000691226000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{0x2}, {}, {0xffff, 0x0, 0x6}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0x420008}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d0000000a000000040000000100"], 0x48) r0 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) (async) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x2, 0x0, 0xfffffffffffffcfb}, 0x30040805) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) socket$kcm(0xa, 0x1, 0x0) (async) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)="b11ffead30", 0x5}], 0x1, &(0x7f0000000500)=[@timestamping={{0x14, 0x1, 0x25, 0x100}}], 0x18}, 0x10) (async) sendmsg$sock(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)="b11ffead30", 0x5}], 0x1, &(0x7f0000000500)=[@timestamping={{0x14, 0x1, 0x25, 0x100}}], 0x18}, 0x10) 2.581816291s ago: executing program 3 (id=646): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x1c, 0xc, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x80}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa6}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3f}, 0x94) 2.501963004s ago: executing program 2 (id=647): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000800000000000000000000001801000000646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000900)=""/248, 0xf8}], 0x1, 0x0, 0x0, 0x200000}, 0x1f02) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000000000008500000059"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x28}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff56a, 0x100000000}, 0x250a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e00000004000000040013000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x4) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000400000008000000"], 0x50) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)=@generic={&(0x7f00000001c0)='./file0\x00', r5}, 0x18) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x11, 0x0, &(0x7f0000000200)='GPL\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$inet(r4, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}, 0x3e8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140), 0x4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'erspan0\x00', 0x100}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8922, &(0x7f0000000080)) r7 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) syz_clone(0xae12e400, 0x0, 0x0, 0x0, 0x0, 0x0) 2.310711618s ago: executing program 3 (id=648): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001180), 0x48) close(0xffffffffffffffff) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff7) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="bc00"], 0x50) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x40047451, &(0x7f0000000180)) close(0xffffffffffffffff) 2.203005101s ago: executing program 0 (id=649): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001380)="600000004e007f049e", 0x9}, {&(0x7f00000008c0)="78cabf2dfb73fc0a7d0a0080f2dcb9fe06892544001100b8f9e6aaeb1ae2f6e8bcb5ee52dc06249798093c5102a1bca0b646a7ce904f6e6b788b3219c233e60ddc36024a99a63e729f9b06f96137c89d03234f008c5681", 0x57}], 0x2}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd75, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={&(0x7f00000005c0), 0x2}, 0x200, 0x4, 0x101, 0x7, 0x0, 0x0, 0x0, 0x0, 0xffffd412, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={r0, 0x0, 0x0}, 0x10) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x2, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000200000000000000000000007d360598bb17863048e0b90e13891e19ca2e0fdc393ea5390e21bd890123b66ca097af3453b3f2f9f3213ac85528cd1231fcf5e3096411db1fa0ab1574f57f376246cc17f623124283cd6b37226f6bf69a4a97868e43b5"], &(0x7f0000000640)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x28, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x84}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b904021d08020e0000008100e0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r3 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x6, &(0x7f0000000040), 0x4) sendmsg$kcm(r3, &(0x7f0000000740)={&(0x7f00000000c0)=@in6={0xa, 0x4e23, 0x2, @remote, 0x17}, 0x80, 0x0}, 0x6000084) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x0, 0x4a}, 0x28) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x5, 0x81, 0x9, 0x6, 0x0, 0x8, 0x108, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000001040), 0x8}, 0x2080, 0x4, 0xe9be, 0x1, 0x9, 0x39d7, 0xa, 0x0, 0x10, 0x0, 0x4}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x6, 0xffffffffffffffff, 0x4}, 0x38) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x4, 0x0, 0x0, 0x13509, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000680), 0x9}, 0x100b24, 0x8000081, 0x8, 0x2, 0x100000001, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xb, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_ext={0x1c, 0x11, &(0x7f00000000c0)=ANY=[@ANYRES8=r1], &(0x7f0000000180)='GPL\x00', 0xd, 0x64, &(0x7f00000001c0)=""/100, 0x41000, 0x8, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000280)={0x3, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x5, 0x6, 0xc66a, 0x25bc}, 0x10, 0x27750, 0xffffffffffffffff, 0x5, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000380)=[{0x3, 0x1, 0x0, 0x4}, {0x4, 0x2, 0x6, 0x3}, {0x2, 0x4, 0x3}, {0x1, 0x1, 0x7, 0x8}, {0x5, 0x1, 0xa, 0x8}], 0x10, 0x80000001}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="090000000400"], 0x50) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb9200a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e068000000110000000000000000dbc790ad000000fc000000000000001400000000000000000000000100000004000000000000001c000000000000000000000008"], 0x68}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140), 0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x58, &(0x7f0000000240)}, 0x10) socket$kcm(0xa, 0x3, 0x73) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) 1.937933218s ago: executing program 3 (id=650): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x400000002, 0x0) r3 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000069104b000000000085100000020000004002000000000000"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) r5 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x8918, &(0x7f0000000000)) r6 = openat$cgroup_procs(r4, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000005c0)=r3, 0x12) syz_open_procfs$namespace(r3, &(0x7f0000000240)='ns/pid\x00') sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f00000002c0)="68cabf2dfb58fc0a01", 0x9}], 0x2}, 0x4000000) recvmsg(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2000) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000800)=0xffffffffffffffff, 0x4) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r7, &(0x7f0000000080)=ANY=[@ANYBLOB="2d840009aa5ab9"], 0xffdd) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r9 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r9, 0x29, 0x49, 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) r10 = socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0x1}, &(0x7f0000000140), &(0x7f00000001c0)=r8}, 0x20) sendmsg$inet(r10, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e1f, @multicast2=0xe0000001}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000040)="00446916ab", 0xffe3}], 0x1, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xe}, @multicast2}}}], 0x20}, 0x7000000) 1.428376802s ago: executing program 2 (id=651): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x400000002, 0x0) r3 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) r4 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x8918, &(0x7f0000000000)) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000005c0)=r3, 0x12) syz_open_procfs$namespace(r3, &(0x7f0000000240)='ns/pid\x00') sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="68cabf2dfb58fc0a01008888ffff0200", 0x10}], 0x1}, 0x4000000) recvmsg(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2000) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000800)=0xffffffffffffffff, 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2d840009"], 0xffdd) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x49, 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0x1}, &(0x7f0000000140), &(0x7f00000001c0)=r5}, 0x20) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e1f, @multicast2=0xe0000001}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000040)="00446916ab", 0xffe3}], 0x1, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xe}, @multicast2}}}], 0x20}, 0x7000000) 1.357386114s ago: executing program 0 (id=652): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="cd", 0x1}], 0x1, 0x0, 0x0, 0xf00}, 0x240448c4) 934.030515ms ago: executing program 0 (id=653): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000070000008908630b4d7d11"], 0x18, 0x5}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f0000000040)=0x700, 0x0}, 0x20) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x8d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x3b, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 248.686443ms ago: executing program 0 (id=654): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x80000000009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={&(0x7f0000000040)}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x10101, 0x4, 0x2000000, 0x1, 0x2, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000020000000000c70dcfa0fb8325e4d1aea3c2aed100000000"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xf, &(0x7f0000001540)=ANY=[@ANYBLOB="180300004000000000000000ff00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400ffafb5020000140000008500000083000000bc0900000000000055090100000009007b00000000000000bf91000000000000b7020000000000008500000000000024b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.throttle.io_service_bytes\x00', 0x26e1, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000980)={r1, 0x58, &(0x7f0000000900)}, 0x10) close(r1) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) ioctl$SIOCSIFHWADDR(r1, 0x8b0f, &(0x7f0000000000)={'wlan1\x00', @random="1f00"}) 164.450426ms ago: executing program 2 (id=655): perf_event_open(&(0x7f0000000b00)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5d31, 0x1202, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x8280, 0x0, 0x6, 0x0, 0x4, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000680)={0x0, 0x80, 0x94, 0x80, 0x2, 0x3, 0x0, 0x7ff, 0x0, 0x6, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={&(0x7f00000003c0), 0x5}, 0x82, 0x169d, 0x1, 0x7, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x5, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={0x0, 0x0}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000600)={0x0, r2}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x5, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4}, [@map_idx={0x18, 0xb, 0x5, 0x0, 0xb}]}, &(0x7f0000000040)='GPL\x00', 0x6, 0x9f, &(0x7f00000001c0)=""/159, 0x0, 0x0, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0x7, &(0x7f0000000700)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x500000}, @alu={0x0, 0x1, 0x0, 0x0, 0x9, 0xc, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x174f}], &(0x7f0000000740)='GPL\x00', 0x6, 0x27, &(0x7f0000000780)=""/39, 0x41100, 0x50, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000800)={0x1, 0x8, 0x9, 0xc}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000840)=[0x1, 0x1], 0x0, 0x10, 0x5}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2010000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000002c0)={r5, 0x0, &(0x7f0000000540)=""/153}, 0x20) r6 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r6, 0x29, 0x46, &(0x7f0000000100), 0x120) sendmsg(r6, &(0x7f0000000440)={&(0x7f0000000040)=@in6={0xa, 0x4e21, 0x5, @mcast2, 0x9}, 0x80, 0x0}, 0x20000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x66, 0xc, 0x0, 0x0, 0x0, 0x9, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x1, @perf_config_ext={0xff, 0xff}, 0x1c000, 0x20000003, 0x43a1bd76, 0x7, 0x9, 0x658, 0x8, 0x0, 0x0, 0x0, 0x400000000200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r7 = socket$kcm(0x2, 0xa, 0x2) write$cgroup_pid(r7, 0x0, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r8, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r9}, 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0feffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000801000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r10, 0x2f08, 0xe, 0x0, &(0x7f00000004c0)="a162cef0563a20f5177241ee8f52", 0x0, 0xf000000, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=@base={0x15, 0x401, 0x4, 0x0, 0x600, r5, 0x0, '\x00', r3, 0xffffffffffffffff, 0x1}, 0x50) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000200)={0xffffffffffffffff}, 0x4) 77.149588ms ago: executing program 0 (id=656): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x8000, 0x10000, 0x9e4, 0x4, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0xffffffffffffffff, 0x0, r0, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000100)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x80) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f91624fc60100c214002000003050582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0xff, 0x40, 0x0, 0x0, 0x2, 0x40063, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0, 0x8}, 0x8400, 0xc764, 0x6, 0x2, 0xfffffffffffffffa, 0xffffffff, 0x10, 0x0, 0xd, 0x0, 0x100000001}, 0x0, 0x4, 0xffffffffffffffff, 0x2) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r3, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="9a036864e000"}) close(r1) 54.052278ms ago: executing program 3 (id=657): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014003000000035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f877573", 0x83}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x69, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f00000009c0)=""/249, 0xf9}, {&(0x7f0000000240)=""/205, 0xcd}, {&(0x7f0000000380)=""/210, 0xd2}, {&(0x7f00000006c0)=""/188, 0xbc}, {&(0x7f0000000f40)=""/213, 0xd5}, {&(0x7f0000002100)=""/4077, 0xfed}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f0000000b00)=""/231, 0xe7}, {&(0x7f0000000480)=""/176, 0xb0}, {&(0x7f0000000c00)=""/208, 0xd0}], 0xa}, 0x40012100) recvmsg$kcm(r2, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x1f, 0xc, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x80}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa6}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3f}, 0x94) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040), 0x4) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4, 0xffffffffffffffff}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000680)="76389e6a65585578f830e9000000", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@ifindex, 0x1e, 0x1, 0x6, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180), 0x0}, 0x40) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1, 0x5, 0x8, 0x8, 0x40, 0xffffffffffffffff, 0x20}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r8}, &(0x7f0000000080), &(0x7f0000000280)='%pK \x00'}, 0x20) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="d800000018008111e00212ba0d8105040a020000030f000b067c55a1bc000900b8000699030000000500050002008178a8001500030001400200000901ac0400", 0x40}], 0x1}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="1200000000000000", @ANYRES32=r6, @ANYBLOB="94029641513009ef0c14beef72392ffe01a016330f85d7e8c74fb19a", @ANYRES32=r6, @ANYBLOB, @ANYRES64=r7], 0x20) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r3, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, &(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x16, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x7b, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) 0s ago: executing program 2 (id=658): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @fwd={0x2}, @struct={0x0, 0x0, 0x0, 0x9, 0x0, 0x2}]}, {0x0, [0x0, 0x51]}}, 0x0, 0x40, 0x0, 0x1}, 0x28) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x40009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0xff, 0x43a1bd76, 0x7, 0x7, 0x51, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7c, 0x4, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1d, 0x2, 0x6, &(0x7f0000000300)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) ioctl$TUNSETDEBUG(r1, 0x400454c9, 0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000001600)={'vlan1\x00', @multicast}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.189' (ED25519) to the list of known hosts. [ 83.429877][ T5760] cgroup: Unknown subsys name 'net' [ 83.595921][ T5760] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.429986][ T5760] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.545449][ T5779] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.553884][ T5779] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.562556][ T5779] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.570284][ T5779] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.570601][ T5782] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.579387][ T5779] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.592695][ T5782] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.592838][ T5779] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.608107][ T5782] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.611054][ T5785] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.619043][ T5782] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.627456][ T5785] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 87.636989][ T5785] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.666839][ T5782] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 87.679387][ T5778] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.696484][ T5778] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.706832][ T5778] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.716014][ T5778] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.716837][ T5783] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.732070][ T5783] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.739316][ T5085] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 87.747413][ T5783] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.756042][ T5778] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 87.764360][ T5783] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.340346][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 88.447744][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 88.459986][ T5784] chnl_net:caif_netlink_parms(): no params data found [ 88.557610][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.565524][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.574660][ T5772] bridge_slave_0: entered allmulticast mode [ 88.582039][ T5772] bridge_slave_0: entered promiscuous mode [ 88.624565][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.632025][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.639641][ T5772] bridge_slave_1: entered allmulticast mode [ 88.646732][ T5772] bridge_slave_1: entered promiscuous mode [ 88.703418][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 88.745290][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.752602][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.760301][ T5780] bridge_slave_0: entered allmulticast mode [ 88.768820][ T5780] bridge_slave_0: entered promiscuous mode [ 88.782740][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.790006][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.797641][ T5784] bridge_slave_0: entered allmulticast mode [ 88.804821][ T5784] bridge_slave_0: entered promiscuous mode [ 88.813620][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.822555][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.830411][ T5784] bridge_slave_1: entered allmulticast mode [ 88.837653][ T5784] bridge_slave_1: entered promiscuous mode [ 88.847756][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.869451][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.876753][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.883981][ T5780] bridge_slave_1: entered allmulticast mode [ 88.892117][ T5780] bridge_slave_1: entered promiscuous mode [ 88.924047][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.987143][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.000550][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.030206][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.044894][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.063219][ T5772] team0: Port device team_slave_0 added [ 89.073721][ T5772] team0: Port device team_slave_1 added [ 89.142140][ T5784] team0: Port device team_slave_0 added [ 89.163556][ T5780] team0: Port device team_slave_0 added [ 89.182822][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.189974][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.216200][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.231405][ T5784] team0: Port device team_slave_1 added [ 89.249112][ T5780] team0: Port device team_slave_1 added [ 89.264822][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.272042][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.298079][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.331582][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.339064][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.346317][ T5771] bridge_slave_0: entered allmulticast mode [ 89.353840][ T5771] bridge_slave_0: entered promiscuous mode [ 89.380158][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.390967][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.417246][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.440812][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.449112][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.456767][ T5771] bridge_slave_1: entered allmulticast mode [ 89.464236][ T5771] bridge_slave_1: entered promiscuous mode [ 89.485224][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.495849][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.522534][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.542598][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.551307][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.578103][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.629129][ T5772] hsr_slave_0: entered promiscuous mode [ 89.635935][ T5772] hsr_slave_1: entered promiscuous mode [ 89.645719][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.653055][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.682455][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.696410][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.707527][ T5782] Bluetooth: hci2: command tx timeout [ 89.713640][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.782119][ T5771] team0: Port device team_slave_0 added [ 89.788546][ T5782] Bluetooth: hci1: command tx timeout [ 89.796744][ T5782] Bluetooth: hci0: command tx timeout [ 89.816391][ T5784] hsr_slave_0: entered promiscuous mode [ 89.825130][ T5784] hsr_slave_1: entered promiscuous mode [ 89.832392][ T5784] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.840922][ T5784] Cannot create hsr debugfs directory [ 89.850949][ T5771] team0: Port device team_slave_1 added [ 89.866840][ T5782] Bluetooth: hci3: command tx timeout [ 89.968154][ T5780] hsr_slave_0: entered promiscuous mode [ 89.974958][ T5780] hsr_slave_1: entered promiscuous mode [ 89.981777][ T5780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.989468][ T5780] Cannot create hsr debugfs directory [ 89.995712][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.005376][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.034437][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.077494][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.084515][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.113849][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.324063][ T5771] hsr_slave_0: entered promiscuous mode [ 90.330753][ T5771] hsr_slave_1: entered promiscuous mode [ 90.337332][ T5771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.344958][ T5771] Cannot create hsr debugfs directory [ 90.502533][ T5772] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.533059][ T5772] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.560312][ T5772] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.571696][ T5772] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.699154][ T5784] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.711005][ T5784] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.737164][ T5784] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.756411][ T5784] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.825354][ T5780] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.844594][ T5780] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.867710][ T5780] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.883766][ T5780] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.967488][ T5771] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.979212][ T5771] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.990471][ T5771] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.018602][ T5771] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.125706][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.168654][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.222297][ T2957] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.229768][ T2957] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.245103][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.252344][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.273366][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.325177][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.365444][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.383044][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.390231][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.432856][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.440108][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.493868][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.513701][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.580568][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.603694][ T1139] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.610986][ T1139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.642847][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.650085][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.685392][ T1139] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.692706][ T1139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.721124][ T5784] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.769516][ T1139] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.776791][ T1139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.793190][ T5782] Bluetooth: hci2: command tx timeout [ 91.867192][ T5783] Bluetooth: hci1: command tx timeout [ 91.872765][ T5782] Bluetooth: hci0: command tx timeout [ 91.933587][ T5771] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.947643][ T5782] Bluetooth: hci3: command tx timeout [ 92.003926][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.195318][ T174] cfg80211: failed to load regulatory.db [ 92.201551][ T5772] veth0_vlan: entered promiscuous mode [ 92.233138][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.286449][ T5772] veth1_vlan: entered promiscuous mode [ 92.409151][ T5772] veth0_macvtap: entered promiscuous mode [ 92.453397][ T5772] veth1_macvtap: entered promiscuous mode [ 92.519501][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.548799][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.556627][ T5784] veth0_vlan: entered promiscuous mode [ 92.566478][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.592023][ T5772] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.610651][ T5772] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.621688][ T5772] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.630535][ T5772] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.657756][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.675393][ T5784] veth1_vlan: entered promiscuous mode [ 92.771918][ T5780] veth0_vlan: entered promiscuous mode [ 92.820629][ T5780] veth1_vlan: entered promiscuous mode [ 92.859803][ T5784] veth0_macvtap: entered promiscuous mode [ 92.871797][ T5771] veth0_vlan: entered promiscuous mode [ 92.913018][ T5784] veth1_macvtap: entered promiscuous mode [ 92.920209][ T1139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.935837][ T1139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.967393][ T5771] veth1_vlan: entered promiscuous mode [ 93.006449][ T1083] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.021538][ T1083] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.058532][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.075165][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.087419][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.102445][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.113147][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.126374][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.142496][ T5784] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.153133][ T5784] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.167094][ T5784] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.175853][ T5784] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.191805][ T5780] veth0_macvtap: entered promiscuous mode [ 93.227439][ T5780] veth1_macvtap: entered promiscuous mode [ 93.277844][ T5771] veth0_macvtap: entered promiscuous mode [ 93.309456][ T5771] veth1_macvtap: entered promiscuous mode [ 93.414583][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.428205][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.434503][ C0] hrtimer: interrupt took 138312 ns [ 93.441143][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.454218][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.469826][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.483438][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.494437][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.505420][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.519069][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.529536][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.541302][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.568401][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.589900][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.602574][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.618508][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.640721][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.655197][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.680006][ T5780] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.694867][ T5780] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.705737][ T5780] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.722011][ T5780] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.744486][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.756479][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.779787][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.792874][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.802969][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.822597][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.834851][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.867144][ T5782] Bluetooth: hci2: command tx timeout [ 93.887800][ T1083] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.895725][ T1083] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.946804][ T5782] Bluetooth: hci0: command tx timeout [ 93.952292][ T5783] Bluetooth: hci1: command tx timeout [ 93.984621][ T5771] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.995236][ T5771] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.004104][ T5771] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.014596][ T5771] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.027368][ T5783] Bluetooth: hci3: command tx timeout [ 94.082374][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.092454][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.225003][ T1083] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.283123][ T1083] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.319983][ T5848] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2'. [ 94.432144][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.441618][ T5848] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2'. [ 94.442798][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.559833][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.572303][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.803155][ T5854] tap0: tun_chr_ioctl cmd 2147767511 [ 94.874448][ T5848] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2'. [ 94.935035][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.950597][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.947876][ T5783] Bluetooth: hci2: command tx timeout [ 96.047207][ T5783] Bluetooth: hci1: command tx timeout [ 96.052719][ T5783] Bluetooth: hci0: command tx timeout [ 96.109294][ T5783] Bluetooth: hci3: command tx timeout [ 102.618151][ T5954] syz.3.35 (5954) used greatest stack depth: 19752 bytes left [ 104.023495][ T5982] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.44'. [ 107.520440][ T6021] syz.2.57 (6021) used greatest stack depth: 19240 bytes left [ 108.527833][ T6050] syz.0.65 uses obsolete (PF_INET,SOCK_PACKET) [ 109.169128][ T6059] warning: `syz.1.70' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 109.253601][ T5783] Bluetooth: hci0: unexpected event 0x05 length: 151 > 4 [ 109.837683][ T6066] sit0: entered promiscuous mode [ 109.877477][ T6066] sit0: entered allmulticast mode [ 111.428834][ T6093] netlink: 'syz.3.78': attribute type 1 has an invalid length. [ 111.436810][ T6093] netlink: 154788 bytes leftover after parsing attributes in process `syz.3.78'. [ 111.987138][ T6112] Zero length message leads to an empty skb [ 112.920026][ T6124] sctp: [Deprecated]: syz.1.90 (pid 6124) Use of int in maxseg socket option. [ 112.920026][ T6124] Use struct sctp_assoc_value instead [ 113.216252][ T6128] sctp: [Deprecated]: syz.0.92 (pid 6128) Use of int in maxseg socket option. [ 113.216252][ T6128] Use struct sctp_assoc_value instead [ 113.527117][ T6140] FAULT_INJECTION: forcing a failure. [ 113.527117][ T6140] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 113.543341][ T6140] CPU: 0 PID: 6140 Comm: syz.3.96 Not tainted syzkaller #0 [ 113.550625][ T6140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 113.560751][ T6140] Call Trace: [ 113.564083][ T6140] [ 113.567054][ T6140] dump_stack_lvl+0x18c/0x250 [ 113.571797][ T6140] ? show_regs_print_info+0x20/0x20 [ 113.577060][ T6140] ? load_image+0x420/0x420 [ 113.581630][ T6140] ? __might_fault+0xaa/0x120 [ 113.586369][ T6140] ? __lock_acquire+0x7d80/0x7d80 [ 113.591475][ T6140] should_fail_ex+0x394/0x4c0 [ 113.596229][ T6140] _copy_from_user+0x2f/0xe0 [ 113.600877][ T6140] ___sys_recvmsg+0x174/0x590 [ 113.605620][ T6140] ? __sys_recvmsg+0x2a0/0x2a0 [ 113.610425][ T6140] ? ksys_write+0x1d2/0x260 [ 113.614971][ T6140] ? __fget_files+0x3fc/0x460 [ 113.619694][ T6140] __x64_sys_recvmsg+0x21e/0x2f0 [ 113.624702][ T6140] ? ___sys_recvmsg+0x590/0x590 [ 113.629626][ T6140] ? lockdep_hardirqs_on+0x98/0x150 [ 113.634860][ T6140] do_syscall_64+0x55/0xb0 [ 113.639309][ T6140] ? clear_bhb_loop+0x40/0x90 [ 113.644018][ T6140] ? clear_bhb_loop+0x40/0x90 [ 113.648734][ T6140] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 113.654655][ T6140] RIP: 0033:0x7f17f719e0d9 [ 113.659133][ T6140] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.678768][ T6140] RSP: 002b:00007f17f7fbd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 113.687214][ T6140] RAX: ffffffffffffffda RBX: 00007f17f7426090 RCX: 00007f17f719e0d9 [ 113.695215][ T6140] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000006 [ 113.703214][ T6140] RBP: 00007f17f7fbd090 R08: 0000000000000000 R09: 0000000000000000 [ 113.711212][ T6140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.719208][ T6140] R13: 00007f17f7426128 R14: 00007f17f7426090 R15: 00007fff2e63d0c8 [ 113.727220][ T6140] [ 114.028058][ T6138] syzkaller0: entered promiscuous mode [ 114.033856][ T6138] syzkaller0: entered allmulticast mode [ 114.312194][ T5783] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4 [ 115.899689][ T6154] sit0: entered promiscuous mode [ 115.912002][ T6154] sit0: entered allmulticast mode [ 116.573289][ T5783] Bluetooth: hci0: unexpected event 0x0f length: 15 > 4 [ 119.966533][ T6204] netlink: 60 bytes leftover after parsing attributes in process `syz.2.114'. [ 120.221432][ T6209] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 120.306273][ T6203] sit0: entered promiscuous mode [ 120.312026][ T6203] sit0: entered allmulticast mode [ 120.321049][ T6204] netlink: 60 bytes leftover after parsing attributes in process `syz.2.114'. [ 120.454330][ T6208] netlink: 60 bytes leftover after parsing attributes in process `syz.2.114'. [ 120.545826][ T6212] Driver unsupported XDP return value 0 on prog (id 56) dev N/A, expect packet loss! [ 121.125954][ T5783] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4 [ 122.404167][ T6243] netlink: 196540 bytes leftover after parsing attributes in process `syz.3.126'. [ 123.551936][ T5783] Bluetooth: hci3: unexpected event 0x05 length: 15 > 4 [ 127.287735][ T6321] FAULT_INJECTION: forcing a failure. [ 127.287735][ T6321] name failslab, interval 1, probability 0, space 0, times 1 [ 127.363663][ T6321] CPU: 1 PID: 6321 Comm: syz.2.147 Not tainted syzkaller #0 [ 127.371052][ T6321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 127.381173][ T6321] Call Trace: [ 127.384497][ T6321] [ 127.387464][ T6321] dump_stack_lvl+0x18c/0x250 [ 127.392188][ T6321] ? show_regs_print_info+0x20/0x20 [ 127.397416][ T6321] ? load_image+0x420/0x420 [ 127.401955][ T6321] ? __might_sleep+0xe0/0xe0 [ 127.406580][ T6321] ? __lock_acquire+0x7d80/0x7d80 [ 127.411670][ T6321] should_fail_ex+0x394/0x4c0 [ 127.416426][ T6321] should_failslab+0x9/0x20 [ 127.420977][ T6321] slab_pre_alloc_hook+0x59/0x300 [ 127.426061][ T6321] ? sock_kmalloc+0x96/0xf0 [ 127.430617][ T6321] ? sock_kmalloc+0x96/0xf0 [ 127.435156][ T6321] __kmem_cache_alloc_node+0x53/0x250 [ 127.440572][ T6321] ? sock_kmalloc+0x96/0xf0 [ 127.445109][ T6321] __kmalloc+0xa7/0x240 [ 127.449331][ T6321] sock_kmalloc+0x96/0xf0 [ 127.453695][ T6321] ____sys_sendmsg+0x1d4/0x980 [ 127.458491][ T6321] ? __asan_memset+0x22/0x40 [ 127.463130][ T6321] ? __sys_sendmsg_sock+0x30/0x30 [ 127.468181][ T6321] ? __import_iovec+0x3fa/0x850 [ 127.473081][ T6321] ? import_iovec+0x73/0xa0 [ 127.477652][ T6321] ___sys_sendmsg+0x2a6/0x360 [ 127.482362][ T6321] ? get_pid_task+0x20/0x1e0 [ 127.486997][ T6321] ? __sys_sendmsg+0x2b0/0x2b0 [ 127.491805][ T6321] ? __lock_acquire+0x7d80/0x7d80 [ 127.496875][ T6321] __se_sys_sendmsg+0x1d0/0x2c0 [ 127.501757][ T6321] ? __x64_sys_sendmsg+0x80/0x80 [ 127.506745][ T6321] ? lockdep_hardirqs_on+0x98/0x150 [ 127.511992][ T6321] do_syscall_64+0x55/0xb0 [ 127.516439][ T6321] ? clear_bhb_loop+0x40/0x90 [ 127.521149][ T6321] ? clear_bhb_loop+0x40/0x90 [ 127.525886][ T6321] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 127.531836][ T6321] RIP: 0033:0x7fb98219e0d9 [ 127.536284][ T6321] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.555917][ T6321] RSP: 002b:00007fb983062028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 127.564378][ T6321] RAX: ffffffffffffffda RBX: 00007fb982425fa0 RCX: 00007fb98219e0d9 [ 127.572388][ T6321] RDX: 0000000000000001 RSI: 0000200000003a80 RDI: 0000000000000003 [ 127.580395][ T6321] RBP: 00007fb983062090 R08: 0000000000000000 R09: 0000000000000000 [ 127.588420][ T6321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.596417][ T6321] R13: 00007fb982426038 R14: 00007fb982425fa0 R15: 00007ffffc80a488 [ 127.604426][ T6321] [ 129.044659][ T6348] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.155'. [ 129.133353][ T6348] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 129.171284][ T6348] CPU: 1 PID: 6348 Comm: syz.3.155 Not tainted syzkaller #0 [ 129.178682][ T6348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 129.188794][ T6348] Call Trace: [ 129.192124][ T6348] [ 129.195150][ T6348] dump_stack_lvl+0x18c/0x250 [ 129.199888][ T6348] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 129.206114][ T6348] ? show_regs_print_info+0x20/0x20 [ 129.211381][ T6348] ? load_image+0x420/0x420 [ 129.215954][ T6348] ? sysfs_warn_dup+0x65/0xa0 [ 129.220699][ T6348] sysfs_warn_dup+0x8e/0xa0 [ 129.225260][ T6348] sysfs_do_create_link_sd+0xc0/0x110 [ 129.230687][ T6348] device_add_class_symlinks+0x1cf/0x240 [ 129.236421][ T6348] device_add+0x4f9/0xc40 [ 129.240814][ T6348] wiphy_register+0x1d99/0x2ac0 [ 129.245738][ T6348] ? cfg80211_event_work+0x40/0x40 [ 129.250888][ T6348] ? minstrel_ht_alloc+0x88a/0x990 [ 129.256049][ T6348] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 129.262159][ T6348] ieee80211_register_hw+0x2dd8/0x3b30 [ 129.267673][ T6348] ? ieee80211_register_hw+0xfb1/0x3b30 [ 129.273272][ T6348] ? ieee80211_tasklet_handler+0x20/0x20 [ 129.278934][ T6348] ? lockdep_hardirqs_on+0x98/0x150 [ 129.284198][ T6348] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 129.290405][ T6348] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 129.296195][ T6348] ? mac80211_hwsim_free+0x220/0x220 [ 129.301509][ T6348] ? rcu_is_watching+0x15/0xb0 [ 129.306321][ T6348] ? kstrndup+0xbd/0x140 [ 129.310615][ T6348] hwsim_new_radio_nl+0xdad/0x1a70 [ 129.315764][ T6348] ? __nla_validate+0x50/0x50 [ 129.320494][ T6348] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 129.326888][ T6348] ? __nla_parse+0x40/0x50 [ 129.331362][ T6348] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 129.337734][ T6348] genl_family_rcv_msg_doit+0x21a/0x310 [ 129.343326][ T6348] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 129.349267][ T6348] ? bpf_lsm_capable+0x9/0x10 [ 129.353996][ T6348] ? security_capable+0x89/0xb0 [ 129.358890][ T6348] genl_rcv_msg+0x611/0x7a0 [ 129.363441][ T6348] ? genl_bind+0x360/0x360 [ 129.367893][ T6348] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 129.374290][ T6348] netlink_rcv_skb+0x235/0x4c0 [ 129.379090][ T6348] ? genl_bind+0x360/0x360 [ 129.383538][ T6348] ? netlink_ack+0x1160/0x1160 [ 129.388347][ T6348] ? __lock_acquire+0x7d80/0x7d80 [ 129.393416][ T6348] ? down_read+0x1ac/0x2e0 [ 129.397869][ T6348] genl_rcv+0x28/0x40 [ 129.401882][ T6348] netlink_unicast+0x7b1/0x930 [ 129.406725][ T6348] netlink_sendmsg+0x8d0/0xbf0 [ 129.411521][ T6348] ? lockdep_hardirqs_on+0x98/0x150 [ 129.416770][ T6348] ? netlink_getsockopt+0x590/0x590 [ 129.422014][ T6348] ? security_socket_sendmsg+0x7b/0xa0 [ 129.427507][ T6348] ? security_socket_sendmsg+0x80/0xa0 [ 129.433000][ T6348] ? netlink_getsockopt+0x590/0x590 [ 129.438248][ T6348] ____sys_sendmsg+0x61b/0x980 [ 129.443053][ T6348] ? __asan_memset+0x22/0x40 [ 129.447686][ T6348] ? __sys_sendmsg_sock+0x30/0x30 [ 129.452744][ T6348] ? __import_iovec+0x5f2/0x850 [ 129.457646][ T6348] ? import_iovec+0x73/0xa0 [ 129.462188][ T6348] ___sys_sendmsg+0x2a6/0x360 [ 129.466906][ T6348] ? __fget_files+0x28/0x460 [ 129.471546][ T6348] ? __sys_sendmsg+0x2b0/0x2b0 [ 129.476390][ T6348] __se_sys_sendmsg+0x1d0/0x2c0 [ 129.481274][ T6348] ? __x64_sys_sendmsg+0x80/0x80 [ 129.486257][ T6348] ? syscall_enter_from_user_mode+0x2e/0x80 [ 129.492199][ T6348] do_syscall_64+0x55/0xb0 [ 129.496645][ T6348] ? clear_bhb_loop+0x40/0x90 [ 129.501357][ T6348] ? clear_bhb_loop+0x40/0x90 [ 129.506077][ T6348] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 129.512006][ T6348] RIP: 0033:0x7f17f719e0d9 [ 129.516557][ T6348] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.536238][ T6348] RSP: 002b:00007f17f7fde028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 129.544699][ T6348] RAX: ffffffffffffffda RBX: 00007f17f7425fa0 RCX: 00007f17f719e0d9 [ 129.552709][ T6348] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 129.560715][ T6348] RBP: 00007f17f7235024 R08: 0000000000000000 R09: 0000000000000000 [ 129.568717][ T6348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 129.576739][ T6348] R13: 00007f17f7426038 R14: 00007f17f7425fa0 R15: 00007fff2e63d0c8 [ 129.584758][ T6348] [ 129.800114][ T6355] netlink: 'syz.0.156': attribute type 10 has an invalid length. [ 130.025199][ T6365] FAULT_INJECTION: forcing a failure. [ 130.025199][ T6365] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 130.052813][ T6365] CPU: 0 PID: 6365 Comm: syz.0.159 Not tainted syzkaller #0 [ 130.060237][ T6365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 130.070377][ T6365] Call Trace: [ 130.073700][ T6365] [ 130.076680][ T6365] dump_stack_lvl+0x18c/0x250 [ 130.081422][ T6365] ? show_regs_print_info+0x20/0x20 [ 130.086669][ T6365] ? load_image+0x420/0x420 [ 130.091235][ T6365] ? __might_fault+0xaa/0x120 [ 130.095966][ T6365] ? __lock_acquire+0x7d80/0x7d80 [ 130.101044][ T6365] ? __virt_addr_valid+0x10c/0x380 [ 130.106213][ T6365] should_fail_ex+0x394/0x4c0 [ 130.111000][ T6365] _copy_from_user+0x2f/0xe0 [ 130.115654][ T6365] generic_map_update_batch+0x53e/0x800 [ 130.121257][ T6365] ? rcu_read_unlock+0xa0/0xa0 [ 130.126070][ T6365] ? __fdget+0x180/0x210 [ 130.130368][ T6365] ? rcu_read_unlock+0xa0/0xa0 [ 130.135195][ T6365] bpf_map_do_batch+0x3f2/0x600 [ 130.140096][ T6365] ? bpf_lsm_xfrm_policy_delete_security+0x10/0x10 [ 130.146658][ T6365] __sys_bpf+0x381/0x890 [ 130.150952][ T6365] ? bpf_link_show_fdinfo+0x390/0x390 [ 130.156395][ T6365] ? lock_chain_count+0x20/0x20 [ 130.161300][ T6365] __x64_sys_bpf+0x7c/0x90 [ 130.165767][ T6365] do_syscall_64+0x55/0xb0 [ 130.170236][ T6365] ? clear_bhb_loop+0x40/0x90 [ 130.174962][ T6365] ? clear_bhb_loop+0x40/0x90 [ 130.179684][ T6365] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 130.185617][ T6365] RIP: 0033:0x7f7d7ad9e0d9 [ 130.190085][ T6365] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.209735][ T6365] RSP: 002b:00007f7d7bd40028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 130.218192][ T6365] RAX: ffffffffffffffda RBX: 00007f7d7b025fa0 RCX: 00007f7d7ad9e0d9 [ 130.226209][ T6365] RDX: 0000000000000038 RSI: 0000200000000400 RDI: 000000000000001a [ 130.234220][ T6365] RBP: 00007f7d7bd40090 R08: 0000000000000000 R09: 0000000000000000 [ 130.242224][ T6365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 130.250228][ T6365] R13: 00007f7d7b026038 R14: 00007f7d7b025fa0 R15: 00007ffddc2ef838 [ 130.258258][ T6365] [ 130.447726][ T6374] FAULT_INJECTION: forcing a failure. [ 130.447726][ T6374] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 130.477960][ T6374] CPU: 0 PID: 6374 Comm: syz.3.161 Not tainted syzkaller #0 [ 130.485346][ T6374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 130.495492][ T6374] Call Trace: [ 130.498823][ T6374] [ 130.501791][ T6374] dump_stack_lvl+0x18c/0x250 [ 130.506524][ T6374] ? show_regs_print_info+0x20/0x20 [ 130.511779][ T6374] ? load_image+0x420/0x420 [ 130.516356][ T6374] ? __lock_acquire+0x7d80/0x7d80 [ 130.521440][ T6374] ? snprintf+0xe9/0x140 [ 130.525748][ T6374] should_fail_ex+0x394/0x4c0 [ 130.530526][ T6374] _copy_to_user+0x2f/0xa0 [ 130.535007][ T6374] simple_read_from_buffer+0xe7/0x150 [ 130.540460][ T6374] proc_fail_nth_read+0x1e8/0x260 [ 130.545576][ T6374] ? proc_fault_inject_write+0x360/0x360 [ 130.551280][ T6374] ? fsnotify_perm+0x271/0x5e0 [ 130.556108][ T6374] ? proc_fault_inject_write+0x360/0x360 [ 130.561812][ T6374] vfs_read+0x298/0x990 [ 130.566043][ T6374] ? kernel_read+0x1e0/0x1e0 [ 130.570695][ T6374] ? __fget_files+0x28/0x460 [ 130.575342][ T6374] ? __fget_files+0x3fc/0x460 [ 130.580062][ T6374] ? __fdget_pos+0x2a3/0x330 [ 130.584690][ T6374] ? ksys_read+0x74/0x260 [ 130.589059][ T6374] ksys_read+0x151/0x260 [ 130.593339][ T6374] ? vfs_write+0x9a0/0x9a0 [ 130.597843][ T6374] ? lockdep_hardirqs_on+0x98/0x150 [ 130.603085][ T6374] do_syscall_64+0x55/0xb0 [ 130.607530][ T6374] ? clear_bhb_loop+0x40/0x90 [ 130.612239][ T6374] ? clear_bhb_loop+0x40/0x90 [ 130.616952][ T6374] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 130.622881][ T6374] RIP: 0033:0x7f17f715e90e [ 130.627323][ T6374] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 130.646971][ T6374] RSP: 002b:00007f17f7fddfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 130.655414][ T6374] RAX: ffffffffffffffda RBX: 00007f17f7fde6c0 RCX: 00007f17f715e90e [ 130.663417][ T6374] RDX: 000000000000000f RSI: 00007f17f7fde0a0 RDI: 0000000000000009 [ 130.671415][ T6374] RBP: 00007f17f7fde090 R08: 0000000000000000 R09: 0000000000000000 [ 130.679419][ T6374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.687418][ T6374] R13: 00007f17f7426038 R14: 00007f17f7425fa0 R15: 00007fff2e63d0c8 [ 130.695429][ T6374] [ 131.922039][ T6396] sctp: [Deprecated]: syz.3.170 (pid 6396) Use of int in maxseg socket option. [ 131.922039][ T6396] Use struct sctp_assoc_value instead [ 132.069081][ T6398] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.169'. [ 132.790261][ T6398] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 132.964177][ T6403] netlink: 'syz.2.171': attribute type 19 has an invalid length. [ 133.007556][ T6402] delete_channel: no stack [ 133.163275][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.176651][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.349595][ T6428] FAULT_INJECTION: forcing a failure. [ 134.349595][ T6428] name failslab, interval 1, probability 0, space 0, times 0 [ 134.451705][ T6428] CPU: 0 PID: 6428 Comm: syz.1.178 Not tainted syzkaller #0 [ 134.459124][ T6428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 134.469260][ T6428] Call Trace: [ 134.472613][ T6428] [ 134.475614][ T6428] dump_stack_lvl+0x18c/0x250 [ 134.480393][ T6428] ? show_regs_print_info+0x20/0x20 [ 134.485681][ T6428] ? load_image+0x420/0x420 [ 134.490328][ T6428] should_fail_ex+0x394/0x4c0 [ 134.495129][ T6428] should_failslab+0x9/0x20 [ 134.499720][ T6428] slab_pre_alloc_hook+0x59/0x300 [ 134.504837][ T6428] ? nf_hook_slow+0x1b2/0x200 [ 134.509621][ T6428] kmem_cache_alloc+0x5a/0x2c0 [ 134.514474][ T6428] ? dst_alloc+0x105/0x170 [ 134.518993][ T6428] dst_alloc+0x105/0x170 [ 134.523339][ T6428] rt_dst_clone+0x58/0x680 [ 134.527828][ T6428] ip_mc_finish_output+0xea/0x260 [ 134.532930][ T6428] ? skb_clone+0x21f/0x370 [ 134.537440][ T6428] ip_mc_output+0x254/0x570 [ 134.542031][ T6428] ip_send_skb+0x12f/0x1d0 [ 134.546557][ T6428] udp_send_skb+0xa7d/0x1440 [ 134.551314][ T6428] udp_sendmsg+0x77d/0x23d0 [ 134.555941][ T6428] ? trace_call_bpf+0x5e9/0x6c0 [ 134.560874][ T6428] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 134.565817][ T6428] ? udp_cmsg_send+0x350/0x350 [ 134.570727][ T6428] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 134.576663][ T6428] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 134.583195][ T6428] ? aa_sock_msg_perm+0x94/0x150 [ 134.588213][ T6428] ? sock_rps_record_flow+0x19/0x3f0 [ 134.593619][ T6428] ? inet_sendmsg+0x7e/0x2a0 [ 134.598322][ T6428] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 134.603694][ T6428] ? inet_send_prepare+0x250/0x250 [ 134.608903][ T6428] ____sys_sendmsg+0x61b/0x980 [ 134.613778][ T6428] ? __asan_memset+0x22/0x40 [ 134.618457][ T6428] ? __sys_sendmsg_sock+0x30/0x30 [ 134.623571][ T6428] ? __import_iovec+0x3fa/0x850 [ 134.628546][ T6428] ? import_iovec+0x73/0xa0 [ 134.633167][ T6428] ___sys_sendmsg+0x2a6/0x360 [ 134.637944][ T6428] ? __sys_sendmsg+0x2b0/0x2b0 [ 134.642877][ T6428] ? __lock_acquire+0x7d80/0x7d80 [ 134.648079][ T6428] __se_sys_sendmsg+0x1d0/0x2c0 [ 134.653004][ T6428] ? perf_trace_preemptirq_template+0x269/0x330 [ 134.659341][ T6428] ? __x64_sys_sendmsg+0x80/0x80 [ 134.664438][ T6428] ? lockdep_hardirqs_on+0x98/0x150 [ 134.669744][ T6428] do_syscall_64+0x55/0xb0 [ 134.674235][ T6428] ? clear_bhb_loop+0x40/0x90 [ 134.679002][ T6428] ? clear_bhb_loop+0x40/0x90 [ 134.683766][ T6428] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 134.689729][ T6428] RIP: 0033:0x7f90d999e0d9 [ 134.694214][ T6428] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.713897][ T6428] RSP: 002b:00007f90da8e0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 134.722398][ T6428] RAX: ffffffffffffffda RBX: 00007f90d9c25fa0 RCX: 00007f90d999e0d9 [ 134.730444][ T6428] RDX: 0000000000044000 RSI: 00002000000007c0 RDI: 000000000000000c [ 134.738527][ T6428] RBP: 00007f90da8e0090 R08: 0000000000000000 R09: 0000000000000000 [ 134.746579][ T6428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.754620][ T6428] R13: 00007f90d9c26038 R14: 00007f90d9c25fa0 R15: 00007ffd9c253dc8 [ 134.762747][ T6428] [ 135.260955][ T6433] netlink: 176 bytes leftover after parsing attributes in process `syz.0.180'. [ 135.387984][ T6435] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 135.743041][ T6441] netlink: 132 bytes leftover after parsing attributes in process `syz.2.182'. [ 136.229116][ T6444] netlink: 'syz.0.185': attribute type 8 has an invalid length. [ 136.278717][ T6444] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.185'. [ 136.311769][ T5783] Bluetooth: hci2: unexpected event 0x0f length: 15 > 4 [ 139.414398][ T6467] netlink: 176 bytes leftover after parsing attributes in process `syz.1.193'. [ 139.581307][ T6472] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 141.167194][ T6482] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 141.191230][ T6482] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 142.341678][ T6494] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 142.500833][ T6490] can: request_module (can-proto-0) failed. [ 142.744509][ T6498] netlink: 176 bytes leftover after parsing attributes in process `syz.3.203'. [ 142.867603][ T6498] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 142.998654][ T6499] sctp: [Deprecated]: syz.2.202 (pid 6499) Use of int in maxseg socket option. [ 142.998654][ T6499] Use struct sctp_assoc_value instead [ 143.798730][ T6506] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.205'. [ 146.212429][ T3455] wlan1: Trigger new scan to find an IBSS to join [ 147.150469][ T6538] netlink: 'syz.0.214': attribute type 33 has an invalid length. [ 147.202932][ T6538] netlink: 152 bytes leftover after parsing attributes in process `syz.0.214'. [ 147.228423][ T6538] `: renamed from ip6tnl0 (while UP) [ 147.300445][ T6538] A link change request failed with some changes committed already. Interface ` may have been left with an inconsistent configuration, please check. [ 149.051986][ T6561] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.222'. [ 149.277104][ T6561] netlink: 'syz.1.222': attribute type 10 has an invalid length. [ 149.493953][ T6561] team0: Device nlmon0 is of different type [ 151.236970][ T3455] wlan1: Trigger new scan to find an IBSS to join [ 152.625921][ T1083] wlan1: Creating new IBSS network, BSSID 16:59:73:0f:9f:f2 [ 157.272111][ T6604] FAULT_INJECTION: forcing a failure. [ 157.272111][ T6604] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 157.318293][ T6604] CPU: 0 PID: 6604 Comm: syz.0.236 Not tainted syzkaller #0 [ 157.325828][ T6604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 157.335990][ T6604] Call Trace: [ 157.339373][ T6604] [ 157.342417][ T6604] dump_stack_lvl+0x18c/0x250 [ 157.347252][ T6604] ? show_regs_print_info+0x20/0x20 [ 157.352569][ T6604] ? load_image+0x420/0x420 [ 157.357242][ T6604] ? __might_fault+0xaa/0x120 [ 157.362068][ T6604] ? __lock_acquire+0x7d80/0x7d80 [ 157.367273][ T6604] should_fail_ex+0x394/0x4c0 [ 157.372121][ T6604] _copy_to_iter+0x1ce/0x1110 [ 157.376937][ T6604] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 157.383062][ T6604] ? lock_chain_count+0x20/0x20 [ 157.388051][ T6604] ? iov_iter_init+0x1e0/0x1e0 [ 157.392946][ T6604] ? __local_bh_enable_ip+0x13a/0x1c0 [ 157.398428][ T6604] ? lockdep_hardirqs_on+0x98/0x150 [ 157.403791][ T6604] ? page_copy_sane+0x16a/0x270 [ 157.408799][ T6604] copy_page_to_iter+0xa7/0x150 [ 157.413784][ T6604] __sk_msg_recvmsg+0x32b/0xde0 [ 157.418834][ T6604] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 157.424941][ T6604] unix_bpf_recvmsg+0x5b0/0xdd0 [ 157.430067][ T6604] ? unix_stream_bpf_update_proto+0x310/0x310 [ 157.436274][ T6604] ? wait_woken+0x180/0x180 [ 157.440931][ T6604] ? aa_sock_msg_perm+0x94/0x150 [ 157.445997][ T6604] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 157.451388][ T6604] ? security_socket_recvmsg+0x89/0xb0 [ 157.456948][ T6604] ? unix_dgram_recvmsg+0x71/0xd0 [ 157.462088][ T6604] ? unix_dgram_sendmsg+0x16e0/0x16e0 [ 157.467597][ T6604] ____sys_recvmsg+0x2bd/0x5d0 [ 157.472568][ T6604] ? __sys_recvmsg_sock+0x50/0x50 [ 157.477823][ T6604] ? import_iovec+0x73/0xa0 [ 157.482529][ T6604] ___sys_recvmsg+0x214/0x590 [ 157.487379][ T6604] ? __sys_recvmsg+0x2a0/0x2a0 [ 157.492305][ T6604] ? ksys_write+0x1d2/0x260 [ 157.497020][ T6604] ? __fget_files+0x3fc/0x460 [ 157.501932][ T6604] __x64_sys_recvmsg+0x21e/0x2f0 [ 157.507020][ T6604] ? ___sys_recvmsg+0x590/0x590 [ 157.512086][ T6604] ? lockdep_hardirqs_on+0x98/0x150 [ 157.517433][ T6604] do_syscall_64+0x55/0xb0 [ 157.521954][ T6604] ? clear_bhb_loop+0x40/0x90 [ 157.526760][ T6604] ? clear_bhb_loop+0x40/0x90 [ 157.531576][ T6604] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 157.537580][ T6604] RIP: 0033:0x7f7d7ad9e0d9 [ 157.542123][ T6604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.561849][ T6604] RSP: 002b:00007f7d7bd40028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 157.570401][ T6604] RAX: ffffffffffffffda RBX: 00007f7d7b025fa0 RCX: 00007f7d7ad9e0d9 [ 157.578483][ T6604] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000005 [ 157.586716][ T6604] RBP: 00007f7d7bd40090 R08: 0000000000000000 R09: 0000000000000000 [ 157.594823][ T6604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.602904][ T6604] R13: 00007f7d7b026038 R14: 00007f7d7b025fa0 R15: 00007ffddc2ef838 [ 157.611100][ T6604] [ 158.530504][ T6612] netlink: 'syz.0.239': attribute type 19 has an invalid length. [ 158.648170][ T6612] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.239'. [ 158.758418][ T6616] netlink: 164 bytes leftover after parsing attributes in process `syz.2.240'. [ 158.865805][ T6623] netlink: 60 bytes leftover after parsing attributes in process `syz.3.243'. [ 159.861788][ T6623] netlink: 60 bytes leftover after parsing attributes in process `syz.3.243'. [ 160.322873][ T6637] netlink: 'syz.2.247': attribute type 6 has an invalid length. [ 160.367235][ T6637] netlink: 212824 bytes leftover after parsing attributes in process `syz.2.247'. [ 160.403436][ T6635] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.246'. [ 160.416639][ T6635] netlink: 21068 bytes leftover after parsing attributes in process `syz.3.246'. [ 160.428787][ T6635] tipc: Started in network mode [ 160.433739][ T6635] tipc: Node identity b, cluster identity 57 [ 160.443299][ T6635] tipc: Node number set to 11 [ 161.779565][ T6664] pimreg1: tun_chr_ioctl cmd 2147767517 [ 161.796215][ T6664] netlink: 'syz.3.254': attribute type 10 has an invalid length. [ 161.821028][ T6665] FAULT_INJECTION: forcing a failure. [ 161.821028][ T6665] name failslab, interval 1, probability 0, space 0, times 0 [ 161.834478][ T6665] CPU: 1 PID: 6665 Comm: syz.1.255 Not tainted syzkaller #0 [ 161.841829][ T6665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 161.851937][ T6665] Call Trace: [ 161.855269][ T6665] [ 161.858246][ T6665] dump_stack_lvl+0x18c/0x250 [ 161.862984][ T6665] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 161.869203][ T6665] ? show_regs_print_info+0x20/0x20 [ 161.874457][ T6665] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 161.880675][ T6665] ? dump_stack+0x9/0x20 [ 161.884994][ T6665] should_fail_ex+0x394/0x4c0 [ 161.889739][ T6665] should_failslab+0x9/0x20 [ 161.894305][ T6665] slab_pre_alloc_hook+0x59/0x300 [ 161.899394][ T6665] ? lockdep_hardirqs_on+0x98/0x150 [ 161.904655][ T6665] kmem_cache_alloc+0x5a/0x2c0 [ 161.909483][ T6665] ? dst_alloc+0x105/0x170 [ 161.913966][ T6665] ? ipv6_sysctl_rtcache_flush+0xf0/0xf0 [ 161.919661][ T6665] dst_alloc+0x105/0x170 [ 161.923970][ T6665] ip6_pol_route+0x94f/0x1230 [ 161.928706][ T6665] ? ip6_pol_route+0x171/0x1230 [ 161.933616][ T6665] ? trace_fib6_table_lookup+0x1b0/0x1b0 [ 161.939329][ T6665] fib6_rule_lookup+0x35d/0x580 [ 161.944240][ T6665] ? skb_header_pointer+0x120/0x120 [ 161.949505][ T6665] ? fib6_lookup+0x2d0/0x2d0 [ 161.954165][ T6665] ? read_lock_is_recursive+0x20/0x20 [ 161.959626][ T6665] ? dev_get_by_index_rcu+0xee/0x110 [ 161.964983][ T6665] ip6_route_output_flags+0x364/0x5d0 [ 161.970425][ T6665] ? ip6_route_output_flags+0x2e/0x5d0 [ 161.975949][ T6665] ip6_dst_lookup_tail+0x1a5/0x1660 [ 161.981216][ T6665] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 161.987260][ T6665] ? ip6_dst_lookup+0x60/0x60 [ 161.992000][ T6665] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 161.998212][ T6665] ? lockdep_hardirqs_on+0x98/0x150 [ 162.003467][ T6665] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 162.009683][ T6665] ip6_dst_lookup_flow+0x48/0xe0 [ 162.014687][ T6665] tcp_v6_connect+0xc4b/0x1900 [ 162.019524][ T6665] ? tcp_v6_pre_connect+0xf0/0xf0 [ 162.024602][ T6665] ? __local_bh_enable_ip+0x13a/0x1c0 [ 162.030027][ T6665] ? lockdep_hardirqs_on+0x98/0x150 [ 162.035302][ T6665] ? do_raw_spin_unlock+0x121/0x230 [ 162.040567][ T6665] ? mptcp_token_new_connect+0x421/0x620 [ 162.046265][ T6665] ? mptcp_token_new_connect+0x4b9/0x620 [ 162.051973][ T6665] mptcp_connect+0x403/0x5e0 [ 162.056634][ T6665] __inet_stream_connect+0x254/0xdf0 [ 162.061991][ T6665] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 162.068217][ T6665] ? inet_dgram_connect+0x340/0x340 [ 162.073487][ T6665] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 162.079716][ T6665] ? tcp_sendmsg_fastopen+0x27f/0x5f0 [ 162.085166][ T6665] tcp_sendmsg_fastopen+0x3af/0x5f0 [ 162.090444][ T6665] mptcp_sendmsg_fastopen+0x121/0x4c0 [ 162.095891][ T6665] mptcp_sendmsg+0x144c/0x1670 [ 162.100714][ T6665] ? aa_sk_perm+0x83c/0x970 [ 162.105287][ T6665] ? aa_sk_perm+0x83c/0x970 [ 162.109863][ T6665] ? aa_af_perm+0x330/0x330 [ 162.114432][ T6665] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 162.120925][ T6665] ? mptcp_shutdown+0x80/0x80 [ 162.125675][ T6665] ? inet_send_prepare+0xb2/0x250 [ 162.130765][ T6665] ? inet6_sendmsg+0x5f/0xd0 [ 162.135417][ T6665] ? inet6_compat_ioctl+0x3c0/0x3c0 [ 162.140681][ T6665] ____sys_sendmsg+0x61b/0x980 [ 162.145508][ T6665] ? __asan_memset+0x22/0x40 [ 162.150163][ T6665] ? __sys_sendmsg_sock+0x30/0x30 [ 162.155247][ T6665] ? __import_iovec+0x3fa/0x850 [ 162.160176][ T6665] ? import_iovec+0x73/0xa0 [ 162.164747][ T6665] ___sys_sendmsg+0x2a6/0x360 [ 162.169491][ T6665] ? __sys_sendmsg+0x2b0/0x2b0 [ 162.174344][ T6665] ? ktime_get+0x7f/0x280 [ 162.178761][ T6665] __se_sys_sendmsg+0x1d0/0x2c0 [ 162.183677][ T6665] ? __x64_sys_sendmsg+0x80/0x80 [ 162.188688][ T6665] ? lockdep_hardirqs_on+0x98/0x150 [ 162.193961][ T6665] do_syscall_64+0x55/0xb0 [ 162.198432][ T6665] ? clear_bhb_loop+0x40/0x90 [ 162.203164][ T6665] ? clear_bhb_loop+0x40/0x90 [ 162.207895][ T6665] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 162.213846][ T6665] RIP: 0033:0x7f90d999e0d9 [ 162.218314][ T6665] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.237981][ T6665] RSP: 002b:00007f90da8e0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 162.246453][ T6665] RAX: ffffffffffffffda RBX: 00007f90d9c25fa0 RCX: 00007f90d999e0d9 [ 162.254477][ T6665] RDX: 0000000020040010 RSI: 00002000000019c0 RDI: 0000000000000005 [ 162.262500][ T6665] RBP: 00007f90da8e0090 R08: 0000000000000000 R09: 0000000000000000 [ 162.270529][ T6665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.278551][ T6665] R13: 00007f90d9c26038 R14: 00007f90d9c25fa0 R15: 00007ffd9c253dc8 [ 162.286591][ T6665] [ 162.648042][ T6672] netlink: 164 bytes leftover after parsing attributes in process `syz.0.256'. [ 162.718799][ T6675] netlink: 64 bytes leftover after parsing attributes in process `syz.2.257'. [ 163.055541][ T6681] netlink: 'syz.3.260': attribute type 1 has an invalid length. [ 163.077777][ T6681] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.260'. [ 163.858538][ T6681] syz.3.260 (6681) used greatest stack depth: 18920 bytes left [ 164.090697][ T6700] netlink: 'syz.0.266': attribute type 2 has an invalid length. [ 164.103382][ T6700] netlink: 'syz.0.266': attribute type 1 has an invalid length. [ 164.121105][ T6700] netlink: 'syz.0.266': attribute type 8 has an invalid length. [ 164.145662][ T6700] netlink: 44 bytes leftover after parsing attributes in process `syz.0.266'. [ 164.405449][ T6705] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.268'. [ 165.024291][ T6712] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.270'. [ 165.920021][ T6719] netlink: 164 bytes leftover after parsing attributes in process `syz.1.272'. [ 167.399954][ T6754] FAULT_INJECTION: forcing a failure. [ 167.399954][ T6754] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 167.428428][ T6756] netlink: 'syz.3.284': attribute type 12 has an invalid length. [ 167.438650][ T6756] netlink: 112 bytes leftover after parsing attributes in process `syz.3.284'. [ 167.447074][ T6754] CPU: 1 PID: 6754 Comm: syz.0.286 Not tainted syzkaller #0 [ 167.454989][ T6754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 167.465104][ T6754] Call Trace: [ 167.468439][ T6754] [ 167.471411][ T6754] dump_stack_lvl+0x18c/0x250 [ 167.476136][ T6754] ? show_regs_print_info+0x20/0x20 [ 167.481374][ T6754] ? load_image+0x420/0x420 [ 167.485933][ T6754] ? __lock_acquire+0x7d80/0x7d80 [ 167.491037][ T6754] ? snprintf+0xe9/0x140 [ 167.495327][ T6754] should_fail_ex+0x394/0x4c0 [ 167.500057][ T6754] _copy_to_user+0x2f/0xa0 [ 167.504518][ T6754] simple_read_from_buffer+0xe7/0x150 [ 167.509930][ T6754] proc_fail_nth_read+0x1e8/0x260 [ 167.514996][ T6754] ? proc_fault_inject_write+0x360/0x360 [ 167.520702][ T6754] ? fsnotify_perm+0x271/0x5e0 [ 167.525515][ T6754] ? proc_fault_inject_write+0x360/0x360 [ 167.531194][ T6754] vfs_read+0x298/0x990 [ 167.535396][ T6754] ? kernel_read+0x1e0/0x1e0 [ 167.540028][ T6754] ? __fget_files+0x28/0x460 [ 167.544658][ T6754] ? __fget_files+0x3fc/0x460 [ 167.549388][ T6754] ? __fdget_pos+0x2a3/0x330 [ 167.554025][ T6754] ? ksys_read+0x74/0x260 [ 167.558403][ T6754] ksys_read+0x151/0x260 [ 167.562694][ T6754] ? vfs_write+0x9a0/0x9a0 [ 167.567156][ T6754] ? lockdep_hardirqs_on+0x98/0x150 [ 167.572399][ T6754] do_syscall_64+0x55/0xb0 [ 167.576862][ T6754] ? clear_bhb_loop+0x40/0x90 [ 167.581576][ T6754] ? clear_bhb_loop+0x40/0x90 [ 167.586295][ T6754] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 167.592237][ T6754] RIP: 0033:0x7f7d7ad5e90e [ 167.596694][ T6754] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 167.616374][ T6754] RSP: 002b:00007f7d7bd3ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 167.624821][ T6754] RAX: ffffffffffffffda RBX: 00007f7d7bd406c0 RCX: 00007f7d7ad5e90e [ 167.632825][ T6754] RDX: 000000000000000f RSI: 00007f7d7bd400a0 RDI: 0000000000000004 [ 167.640834][ T6754] RBP: 00007f7d7bd40090 R08: 0000000000000000 R09: 0000000000000000 [ 167.648842][ T6754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.656866][ T6754] R13: 00007f7d7b026038 R14: 00007f7d7b025fa0 R15: 00007ffddc2ef838 [ 167.664887][ T6754] [ 169.421586][ T6803] netlink: 'syz.1.300': attribute type 21 has an invalid length. [ 169.477124][ T6803] netlink: 132 bytes leftover after parsing attributes in process `syz.1.300'. [ 169.721742][ T6812] netlink: 'syz.2.302': attribute type 25 has an invalid length. [ 169.730118][ T6812] netlink: 'syz.2.302': attribute type 9 has an invalid length. [ 169.738355][ T6812] netlink: 40 bytes leftover after parsing attributes in process `syz.2.302'. [ 169.752890][ T6814] netlink: 'syz.1.303': attribute type 2 has an invalid length. [ 169.765661][ T6814] netlink: 'syz.1.303': attribute type 1 has an invalid length. [ 169.781315][ T6814] netlink: 'syz.1.303': attribute type 8 has an invalid length. [ 169.807937][ T6814] netlink: 44 bytes leftover after parsing attributes in process `syz.1.303'. [ 170.149751][ C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 170.293438][ T6824] netlink: 'syz.0.307': attribute type 39 has an invalid length. [ 173.164658][ T6862] netlink: 'syz.2.319': attribute type 2 has an invalid length. [ 173.196852][ T6862] netlink: 'syz.2.319': attribute type 1 has an invalid length. [ 173.215066][ T6862] netlink: 'syz.2.319': attribute type 8 has an invalid length. [ 173.224756][ T6862] netlink: 44 bytes leftover after parsing attributes in process `syz.2.319'. [ 173.562988][ T6873] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.322'. [ 173.584365][ T6873] netlink: 16520 bytes leftover after parsing attributes in process `syz.1.322'. [ 174.128667][ T6883] netlink: 197324 bytes leftover after parsing attributes in process `syz.0.326'. [ 175.068654][ T6885] veth1_macvtap: left promiscuous mode [ 175.080092][ T6885] macsec0: entered allmulticast mode [ 175.544143][ T6891] sctp: [Deprecated]: syz.3.330 (pid 6891) Use of int in maxseg socket option. [ 175.544143][ T6891] Use struct sctp_assoc_value instead [ 177.327613][ T6916] netlink: 128 bytes leftover after parsing attributes in process `syz.1.339'. [ 177.358633][ T6916] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 177.410948][ T6922] veth1_macvtap: left promiscuous mode [ 177.417103][ T6922] macsec0: entered allmulticast mode [ 177.462913][ T6916] pimreg1: tun_chr_ioctl cmd 2147767517 [ 177.783394][ T6927] netlink: 148 bytes leftover after parsing attributes in process `syz.0.349'. [ 177.885443][ T6926] validate_nla: 2 callbacks suppressed [ 177.885512][ T6926] netlink: 'syz.2.341': attribute type 39 has an invalid length. [ 178.407686][ T6941] netlink: 10 bytes leftover after parsing attributes in process `syz.0.352'. [ 178.430358][ T6939] netlink: 10 bytes leftover after parsing attributes in process `syz.0.352'. [ 178.948390][ T6955] netlink: 'syz.0.348': attribute type 2 has an invalid length. [ 178.966184][ T6955] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.348'. [ 179.204004][ T6962] netlink: 'syz.3.351': attribute type 10 has an invalid length. [ 179.256720][ T6962] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.266107][ T6962] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.301539][ T6962] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.309043][ T6962] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.317361][ T6962] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.324589][ T6962] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.475071][ T6962] team0: Port device bridge0 added [ 179.498755][ T6971] FAULT_INJECTION: forcing a failure. [ 179.498755][ T6971] name failslab, interval 1, probability 0, space 0, times 0 [ 179.538153][ T6971] CPU: 1 PID: 6971 Comm: syz.1.356 Not tainted syzkaller #0 [ 179.545527][ T6971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 179.555626][ T6971] Call Trace: [ 179.558941][ T6971] [ 179.561913][ T6971] dump_stack_lvl+0x18c/0x250 [ 179.566679][ T6971] ? show_regs_print_info+0x20/0x20 [ 179.571925][ T6971] ? load_image+0x420/0x420 [ 179.576484][ T6971] ? __lock_acquire+0x7d80/0x7d80 [ 179.581559][ T6971] ? trace_raw_output_contention_end+0xd0/0xd0 [ 179.587756][ T6971] ? __lock_acquire+0x1262/0x7d80 [ 179.592838][ T6971] should_fail_ex+0x394/0x4c0 [ 179.597577][ T6971] should_failslab+0x9/0x20 [ 179.602133][ T6971] slab_pre_alloc_hook+0x59/0x300 [ 179.607217][ T6971] ? __inet_diag_dump_start+0x8b/0x9f0 [ 179.612720][ T6971] __kmem_cache_alloc_node+0x53/0x250 [ 179.618155][ T6971] ? __inet_diag_dump_start+0x8b/0x9f0 [ 179.623658][ T6971] kmalloc_trace+0x2a/0xe0 [ 179.628141][ T6971] __inet_diag_dump_start+0x8b/0x9f0 [ 179.633469][ T6971] ? netlink_lookup+0x30/0x200 [ 179.638282][ T6971] ? netlink_lookup+0x30/0x200 [ 179.643094][ T6971] __netlink_dump_start+0x43c/0x7a0 [ 179.648353][ T6971] inet_diag_rcv_msg_compat+0x215/0x440 [ 179.653949][ T6971] ? __inet_diag_dump+0x380/0x380 [ 179.659029][ T6971] ? sock_diag_rcv_msg+0xcd/0x5f0 [ 179.664110][ T6971] ? inet_diag_rcv_msg_compat+0x440/0x440 [ 179.669889][ T6971] ? inet_diag_dump_start_compat+0x20/0x20 [ 179.675738][ T6971] ? inet_diag_dump+0x50/0x50 [ 179.680490][ T6971] ? __inet_diag_dump+0x380/0x380 [ 179.685563][ T6971] sock_diag_rcv_msg+0x3d3/0x5f0 [ 179.690589][ T6971] netlink_rcv_skb+0x235/0x4c0 [ 179.695395][ T6971] ? sock_diag_bind+0xb0/0xb0 [ 179.700122][ T6971] ? netlink_ack+0x1160/0x1160 [ 179.704957][ T6971] ? __lock_acquire+0x7d80/0x7d80 [ 179.710029][ T6971] ? net_generic+0x1e/0x240 [ 179.714587][ T6971] ? netlink_deliver_tap+0x2e/0x1b0 [ 179.719842][ T6971] sock_diag_rcv+0x2a/0x40 [ 179.724313][ T6971] netlink_unicast+0x7b1/0x930 [ 179.729203][ T6971] netlink_sendmsg+0x8d0/0xbf0 [ 179.734047][ T6971] ? netlink_getsockopt+0x590/0x590 [ 179.739298][ T6971] ? apparmor_socket_sendmsg+0x8e/0x330 [ 179.744892][ T6971] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 179.750228][ T6971] ? security_socket_sendmsg+0x80/0xa0 [ 179.755731][ T6971] ? netlink_getsockopt+0x590/0x590 [ 179.760978][ T6971] ____sys_sendmsg+0x61b/0x980 [ 179.765812][ T6971] ? __asan_memset+0x22/0x40 [ 179.770471][ T6971] ? __sys_sendmsg_sock+0x30/0x30 [ 179.775553][ T6971] ? __import_iovec+0x3fa/0x850 [ 179.780474][ T6971] ? import_iovec+0x73/0xa0 [ 179.785042][ T6971] ___sys_sendmsg+0x2a6/0x360 [ 179.789778][ T6971] ? get_pid_task+0x20/0x1e0 [ 179.794429][ T6971] ? __sys_sendmsg+0x2b0/0x2b0 [ 179.799272][ T6971] ? __lock_acquire+0x7d80/0x7d80 [ 179.804381][ T6971] __se_sys_sendmsg+0x1d0/0x2c0 [ 179.809293][ T6971] ? __x64_sys_sendmsg+0x80/0x80 [ 179.814297][ T6971] ? lockdep_hardirqs_on+0x98/0x150 [ 179.819550][ T6971] do_syscall_64+0x55/0xb0 [ 179.824024][ T6971] ? clear_bhb_loop+0x40/0x90 [ 179.828764][ T6971] ? clear_bhb_loop+0x40/0x90 [ 179.833487][ T6971] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 179.839422][ T6971] RIP: 0033:0x7f90d999e0d9 [ 179.843887][ T6971] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.863555][ T6971] RSP: 002b:00007f90da8e0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 179.872025][ T6971] RAX: ffffffffffffffda RBX: 00007f90d9c25fa0 RCX: 00007f90d999e0d9 [ 179.880055][ T6971] RDX: 0000000004008084 RSI: 0000200000000000 RDI: 0000000000000003 [ 179.888083][ T6971] RBP: 00007f90da8e0090 R08: 0000000000000000 R09: 0000000000000000 [ 179.896098][ T6971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.904145][ T6971] R13: 00007f90d9c26038 R14: 00007f90d9c25fa0 R15: 00007ffd9c253dc8 [ 179.912177][ T6971] [ 180.728533][ T6981] netlink: 14 bytes leftover after parsing attributes in process `syz.1.360'. [ 180.768892][ T6981] netlink: get zone limit has 4 unknown bytes [ 182.103920][ T6989] FAULT_INJECTION: forcing a failure. [ 182.103920][ T6989] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 182.160559][ T6989] CPU: 1 PID: 6989 Comm: syz.1.363 Not tainted syzkaller #0 [ 182.167981][ T6989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 182.178082][ T6989] Call Trace: [ 182.181404][ T6989] [ 182.184390][ T6989] dump_stack_lvl+0x18c/0x250 [ 182.189128][ T6989] ? show_regs_print_info+0x20/0x20 [ 182.194378][ T6989] ? load_image+0x420/0x420 [ 182.198936][ T6989] ? __lock_acquire+0x7d80/0x7d80 [ 182.204013][ T6989] should_fail_ex+0x394/0x4c0 [ 182.208756][ T6989] prepare_alloc_pages+0x1e1/0x5b0 [ 182.213924][ T6989] __alloc_pages+0x134/0x460 [ 182.218583][ T6989] ? zone_statistics+0x170/0x170 [ 182.223574][ T6989] ? alloc_pages+0x4e1/0x740 [ 182.228208][ T6989] ? do_raw_spin_unlock+0x121/0x230 [ 182.233465][ T6989] __get_free_pages+0xc/0x30 [ 182.238097][ T6989] kasan_populate_vmalloc_pte+0x35/0x100 [ 182.243789][ T6989] __apply_to_page_range+0x860/0xdd0 [ 182.249155][ T6989] ? kasan_populate_vmalloc+0x70/0x70 [ 182.254590][ T6989] ? apply_to_page_range+0x50/0x50 [ 182.259753][ T6989] ? do_raw_spin_unlock+0x121/0x230 [ 182.265011][ T6989] alloc_vmap_area+0x1d26/0x1e50 [ 182.270026][ T6989] ? vm_map_ram+0xcf0/0xcf0 [ 182.274677][ T6989] ? rcu_is_watching+0x15/0xb0 [ 182.279501][ T6989] __get_vm_area_node+0x162/0x370 [ 182.284607][ T6989] __vmalloc_node_range+0x36f/0x1320 [ 182.289949][ T6989] ? reuseport_array_alloc+0x98/0x120 [ 182.295387][ T6989] ? aa_get_newest_label+0xfd/0x5c0 [ 182.300637][ T6989] ? end_current_label_crit_section+0x170/0x170 [ 182.306941][ T6989] ? free_vm_area+0x50/0x50 [ 182.311521][ T6989] ? apparmor_capable+0x137/0x1a0 [ 182.316631][ T6989] bpf_map_area_alloc+0xf1/0x110 [ 182.321628][ T6989] ? reuseport_array_alloc+0x98/0x120 [ 182.327051][ T6989] reuseport_array_alloc+0x98/0x120 [ 182.332334][ T6989] map_create+0x877/0x12f0 [ 182.336805][ T6989] __sys_bpf+0x651/0x890 [ 182.341110][ T6989] ? bpf_link_show_fdinfo+0x390/0x390 [ 182.346550][ T6989] ? lock_chain_count+0x20/0x20 [ 182.351499][ T6989] __x64_sys_bpf+0x7c/0x90 [ 182.355969][ T6989] do_syscall_64+0x55/0xb0 [ 182.360433][ T6989] ? clear_bhb_loop+0x40/0x90 [ 182.365165][ T6989] ? clear_bhb_loop+0x40/0x90 [ 182.369893][ T6989] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 182.375849][ T6989] RIP: 0033:0x7f90d999e0d9 [ 182.380332][ T6989] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.400006][ T6989] RSP: 002b:00007f90da8e0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 182.408472][ T6989] RAX: ffffffffffffffda RBX: 00007f90d9c25fa0 RCX: 00007f90d999e0d9 [ 182.416487][ T6989] RDX: 0000000000000050 RSI: 0000200000000300 RDI: 0000000000000000 [ 182.424518][ T6989] RBP: 00007f90da8e0090 R08: 0000000000000000 R09: 0000000000000000 [ 182.432543][ T6989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.440572][ T6989] R13: 00007f90d9c26038 R14: 00007f90d9c25fa0 R15: 00007ffd9c253dc8 [ 182.448627][ T6989] [ 182.674290][ T33] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 182.943394][ T7001] netlink: 'syz.0.367': attribute type 2 has an invalid length. [ 182.972530][ T7001] netlink: 'syz.0.367': attribute type 8 has an invalid length. [ 182.990523][ T7001] netlink: 132 bytes leftover after parsing attributes in process `syz.0.367'. [ 183.047258][ T7003] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.368'. [ 183.067362][ T7003] bridge_slave_1: default FDB implementation only supports local addresses [ 183.090138][ T7004] netlink: 'syz.0.367': attribute type 2 has an invalid length. [ 183.105928][ T7004] netlink: 'syz.0.367': attribute type 8 has an invalid length. [ 183.115097][ T7004] netlink: 132 bytes leftover after parsing attributes in process `syz.0.367'. [ 183.131018][ T7006] netlink: 763 bytes leftover after parsing attributes in process `syz.1.369'. [ 183.145946][ T7006] netlink: 10 bytes leftover after parsing attributes in process `syz.1.369'. [ 184.164005][ T7029] netlink: 128 bytes leftover after parsing attributes in process `syz.3.376'. [ 184.209861][ T7029] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 184.541874][ T7041] IPv6: Can't replace route, no match found [ 184.599205][ T7041] netlink: 'syz.3.381': attribute type 9 has an invalid length. [ 184.632265][ T7041] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.381'. [ 184.698845][ T7045] netlink: 'syz.1.382': attribute type 2 has an invalid length. [ 184.719668][ T7045] netlink: 'syz.1.382': attribute type 8 has an invalid length. [ 184.736763][ T7045] netlink: 132 bytes leftover after parsing attributes in process `syz.1.382'. [ 184.775057][ T7046] netlink: 'syz.1.382': attribute type 2 has an invalid length. [ 184.791659][ T7046] netlink: 'syz.1.382': attribute type 8 has an invalid length. [ 184.802756][ T7046] netlink: 132 bytes leftover after parsing attributes in process `syz.1.382'. [ 185.981679][ T7066] netlink: 6 bytes leftover after parsing attributes in process `syz.3.388'. [ 186.045793][ T7066] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 186.109483][ T7068] netlink: 'syz.0.389': attribute type 25 has an invalid length. [ 186.479468][ T7076] FAULT_INJECTION: forcing a failure. [ 186.479468][ T7076] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 186.496918][ T7076] CPU: 1 PID: 7076 Comm: syz.0.392 Not tainted syzkaller #0 [ 186.504309][ T7076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 186.514437][ T7076] Call Trace: [ 186.517784][ T7076] [ 186.520792][ T7076] dump_stack_lvl+0x18c/0x250 [ 186.525565][ T7076] ? show_regs_print_info+0x20/0x20 [ 186.530858][ T7076] ? load_image+0x420/0x420 [ 186.535477][ T7076] ? __might_fault+0xaa/0x120 [ 186.540261][ T7076] ? __lock_acquire+0x7d80/0x7d80 [ 186.545397][ T7076] should_fail_ex+0x394/0x4c0 [ 186.550181][ T7076] strncpy_from_user+0x36/0x2f0 [ 186.555149][ T7076] getname_flags+0xf6/0x500 [ 186.559759][ T7076] do_sys_openat2+0xda/0x1d0 [ 186.564454][ T7076] ? do_sys_open+0xe0/0xe0 [ 186.568964][ T7076] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 186.575027][ T7076] ? srcu_init_notifier_head+0x90/0x90 [ 186.580572][ T7076] ? lock_chain_count+0x20/0x20 [ 186.585518][ T7076] __x64_sys_openat+0x139/0x160 [ 186.590471][ T7076] do_syscall_64+0x55/0xb0 [ 186.594974][ T7076] ? clear_bhb_loop+0x40/0x90 [ 186.599736][ T7076] ? clear_bhb_loop+0x40/0x90 [ 186.604490][ T7076] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 186.610430][ T7076] RIP: 0033:0x7f7d7ad5e90e [ 186.614901][ T7076] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 186.634555][ T7076] RSP: 002b:00007f7d7bd3fec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 186.643024][ T7076] RAX: ffffffffffffffda RBX: 00007f7d7bd406c0 RCX: 00007f7d7ad5e90e [ 186.651042][ T7076] RDX: 0000000000000000 RSI: 00007f7d7bd3ff90 RDI: ffffffffffffff9c [ 186.659064][ T7076] RBP: 00007f7d7bd40090 R08: 0000000000000000 R09: 0000000000000000 [ 186.667083][ T7076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 186.675109][ T7076] R13: 00007f7d7b026038 R14: 00007f7d7b025fa0 R15: 00007ffddc2ef838 [ 186.683173][ T7076] [ 186.958369][ T7081] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.965954][ T7081] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 187.010326][ T7081] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.040439][ T7081] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.291737][ T7114] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.418755][ T7103] validate_nla: 8 callbacks suppressed [ 188.418773][ T7103] netlink: 'syz.3.402': attribute type 2 has an invalid length. [ 188.698795][ T7123] __nla_validate_parse: 6 callbacks suppressed [ 188.698836][ T7123] netlink: 60 bytes leftover after parsing attributes in process `syz.2.408'. [ 188.777282][ T7123] netlink: 60 bytes leftover after parsing attributes in process `syz.2.408'. [ 188.801129][ T7123] netlink: 60 bytes leftover after parsing attributes in process `syz.2.408'. [ 188.832585][ T7123] netlink: 60 bytes leftover after parsing attributes in process `syz.2.408'. [ 189.005623][ T7128] netlink: 'syz.0.409': attribute type 39 has an invalid length. [ 189.073328][ T7130] netlink: 76 bytes leftover after parsing attributes in process `syz.2.411'. [ 189.104710][ T7130] netlink: 132 bytes leftover after parsing attributes in process `syz.2.411'. [ 189.133085][ T7130] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.148748][ T7130] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.162945][ T7130] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.578383][ T7141] sctp: [Deprecated]: syz.1.415 (pid 7141) Use of struct sctp_assoc_value in delayed_ack socket option. [ 189.578383][ T7141] Use struct sctp_sack_info instead [ 190.469913][ T7151] FAULT_INJECTION: forcing a failure. [ 190.469913][ T7151] name failslab, interval 1, probability 0, space 0, times 0 [ 190.516215][ T7151] CPU: 1 PID: 7151 Comm: syz.1.418 Not tainted syzkaller #0 [ 190.523590][ T7151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 190.533681][ T7151] Call Trace: [ 190.537004][ T7151] [ 190.539969][ T7151] dump_stack_lvl+0x18c/0x250 [ 190.544699][ T7151] ? show_regs_print_info+0x20/0x20 [ 190.549943][ T7151] ? load_image+0x420/0x420 [ 190.554510][ T7151] ? __might_sleep+0xe0/0xe0 [ 190.559154][ T7151] ? __lock_acquire+0x7d80/0x7d80 [ 190.564247][ T7151] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 190.570298][ T7151] should_fail_ex+0x394/0x4c0 [ 190.575042][ T7151] should_failslab+0x9/0x20 [ 190.579608][ T7151] slab_pre_alloc_hook+0x59/0x300 [ 190.584683][ T7151] ? lockdep_hardirqs_on+0x98/0x150 [ 190.589938][ T7151] ? fib6_info_alloc+0x30/0xf0 [ 190.594746][ T7151] ? fib6_info_alloc+0x30/0xf0 [ 190.599560][ T7151] __kmem_cache_alloc_node+0x53/0x250 [ 190.605039][ T7151] ? fib6_info_alloc+0x30/0xf0 [ 190.609854][ T7151] __kmalloc+0xa7/0x240 [ 190.614063][ T7151] ? __sanitizer_cov_trace_pc+0x8/0x60 [ 190.619577][ T7151] fib6_info_alloc+0x30/0xf0 [ 190.624224][ T7151] ip6_route_info_create+0x455/0x1260 [ 190.629660][ T7151] ? nla_find+0x138/0x150 [ 190.634028][ T7151] inet6_rtm_newroute+0x5bc/0x1d00 [ 190.639184][ T7151] ? __bpf_trace_bpf_trace_printk+0x100/0x100 [ 190.645284][ T7151] ? ipv6_route_sysctl_table_size+0x50/0x50 [ 190.651229][ T7151] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 190.657274][ T7151] ? rtnetlink_rcv_msg+0x831/0xf90 [ 190.662415][ T7151] ? ipv6_route_sysctl_table_size+0x50/0x50 [ 190.668352][ T7151] rtnetlink_rcv_msg+0x843/0xf90 [ 190.673335][ T7151] ? rtnetlink_rcv_msg+0x220/0xf90 [ 190.678484][ T7151] ? rtnetlink_bind+0x80/0x80 [ 190.683185][ T7151] ? mark_lock+0x94/0x320 [ 190.687566][ T7151] ? trace_call_bpf+0xc3/0x6c0 [ 190.692355][ T7151] ? trace_call_bpf+0xc3/0x6c0 [ 190.697151][ T7151] ? trace_call_bpf+0x5e9/0x6c0 [ 190.702025][ T7151] ? trace_call_bpf+0xc3/0x6c0 [ 190.706807][ T7151] ? mark_lock+0x94/0x320 [ 190.711181][ T7151] ? __bpf_trace_bpf_trace_printk+0x100/0x100 [ 190.717271][ T7151] ? __lock_acquire+0x1262/0x7d80 [ 190.722328][ T7151] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 190.728164][ T7151] ? perf_trace_preemptirq_template+0x269/0x330 [ 190.734439][ T7151] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 190.740443][ T7151] ? __bpf_trace_bpf_trace_printk+0x100/0x100 [ 190.746571][ T7151] ? lock_chain_count+0x20/0x20 [ 190.751464][ T7151] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 190.757644][ T7151] ? lockdep_hardirqs_on+0x98/0x150 [ 190.762882][ T7151] netlink_rcv_skb+0x235/0x4c0 [ 190.767671][ T7151] ? rtnetlink_bind+0x80/0x80 [ 190.772379][ T7151] ? netlink_ack+0x1160/0x1160 [ 190.777174][ T7151] ? __lock_acquire+0x7d80/0x7d80 [ 190.782222][ T7151] ? net_generic+0x1e/0x240 [ 190.786765][ T7151] ? netlink_deliver_tap+0x2e/0x1b0 [ 190.792004][ T7151] netlink_unicast+0x7b1/0x930 [ 190.796812][ T7151] netlink_sendmsg+0x8d0/0xbf0 [ 190.801604][ T7151] ? netlink_getsockopt+0x590/0x590 [ 190.806829][ T7151] ? apparmor_socket_sendmsg+0x8e/0x330 [ 190.812409][ T7151] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 190.817736][ T7151] ? security_socket_sendmsg+0x80/0xa0 [ 190.823214][ T7151] ? netlink_getsockopt+0x590/0x590 [ 190.828438][ T7151] ____sys_sendmsg+0x61b/0x980 [ 190.833235][ T7151] ? __asan_memset+0x22/0x40 [ 190.837854][ T7151] ? __sys_sendmsg_sock+0x30/0x30 [ 190.842909][ T7151] ? __import_iovec+0x3fa/0x850 [ 190.847817][ T7151] ? import_iovec+0x73/0xa0 [ 190.852354][ T7151] ___sys_sendmsg+0x2a6/0x360 [ 190.857090][ T7151] ? __sys_sendmsg+0x2b0/0x2b0 [ 190.861895][ T7151] ? ktime_get+0x7f/0x280 [ 190.866274][ T7151] ? trace_call_bpf+0xc3/0x6c0 [ 190.871082][ T7151] __se_sys_sendmsg+0x1d0/0x2c0 [ 190.875963][ T7151] ? perf_trace_preemptirq_template+0x269/0x330 [ 190.882232][ T7151] ? __x64_sys_sendmsg+0x80/0x80 [ 190.887213][ T7151] ? lockdep_hardirqs_on+0x98/0x150 [ 190.892446][ T7151] do_syscall_64+0x55/0xb0 [ 190.896984][ T7151] ? clear_bhb_loop+0x40/0x90 [ 190.901694][ T7151] ? clear_bhb_loop+0x40/0x90 [ 190.906396][ T7151] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 190.912397][ T7151] RIP: 0033:0x7f90d999e0d9 [ 190.916840][ T7151] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 190.936481][ T7151] RSP: 002b:00007f90da8e0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 190.944931][ T7151] RAX: ffffffffffffffda RBX: 00007f90d9c25fa0 RCX: 00007f90d999e0d9 [ 190.952962][ T7151] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 190.960967][ T7151] RBP: 00007f90da8e0090 R08: 0000000000000000 R09: 0000000000000000 [ 190.968967][ T7151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.977007][ T7151] R13: 00007f90d9c26038 R14: 00007f90d9c25fa0 R15: 00007ffd9c253dc8 [ 190.985028][ T7151] [ 191.139446][ T7155] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 191.147342][ T7155] IPv6: NLM_F_CREATE should be set when creating new route [ 191.155410][ T7155] IPv6: NLM_F_CREATE should be set when creating new route [ 191.163259][ T7155] IPv6: NLM_F_CREATE should be set when creating new route [ 191.248100][ T7158] netlink: 'syz.3.421': attribute type 10 has an invalid length. [ 191.260353][ T7158] syz_tun: entered promiscuous mode [ 191.274018][ T7158] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 191.675274][ T7170] netlink: 76 bytes leftover after parsing attributes in process `syz.1.426'. [ 191.747649][ T7170] netlink: 132 bytes leftover after parsing attributes in process `syz.1.426'. [ 191.781999][ T7170] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 191.800380][ T7170] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 191.818434][ T7170] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 191.836276][ T7170] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 192.699655][ T7179] netlink: 'syz.2.423': attribute type 2 has an invalid length. [ 194.768777][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.775455][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.667934][ T7196] netlink: 'syz.0.433': attribute type 10 has an invalid length. [ 196.740428][ T7196] FAULT_INJECTION: forcing a failure. [ 196.740428][ T7196] name failslab, interval 1, probability 0, space 0, times 0 [ 196.813826][ T7196] CPU: 1 PID: 7196 Comm: syz.0.433 Not tainted syzkaller #0 [ 196.821217][ T7196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 196.831312][ T7196] Call Trace: [ 196.834638][ T7196] [ 196.837608][ T7196] dump_stack_lvl+0x18c/0x250 [ 196.842384][ T7196] ? show_regs_print_info+0x20/0x20 [ 196.847639][ T7196] ? load_image+0x420/0x420 [ 196.852186][ T7196] ? perf_trace_lock+0xfc/0x3b0 [ 196.857084][ T7196] ? verify_lock_unused+0x140/0x140 [ 196.862368][ T7196] ? perf_trace_lock+0xfc/0x3b0 [ 196.867442][ T7196] should_fail_ex+0x394/0x4c0 [ 196.872197][ T7196] should_failslab+0x9/0x20 [ 196.876751][ T7196] slab_pre_alloc_hook+0x59/0x300 [ 196.881832][ T7196] kmem_cache_alloc+0x5a/0x2c0 [ 196.886751][ T7196] ? skb_clone+0x1eb/0x370 [ 196.891225][ T7196] skb_clone+0x1eb/0x370 [ 196.895514][ T7196] __netlink_deliver_tap+0x411/0x7f0 [ 196.900943][ T7196] ? netlink_deliver_tap+0x2e/0x1b0 [ 196.906192][ T7196] netlink_deliver_tap+0x19c/0x1b0 [ 196.911358][ T7196] netlink_unicast+0x77b/0x930 [ 196.916189][ T7196] netlink_sendmsg+0x8d0/0xbf0 [ 196.921019][ T7196] ? netlink_getsockopt+0x590/0x590 [ 196.926263][ T7196] ? apparmor_socket_sendmsg+0x8e/0x330 [ 196.931859][ T7196] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 196.937200][ T7196] ? security_socket_sendmsg+0x80/0xa0 [ 196.942706][ T7196] ? netlink_getsockopt+0x590/0x590 [ 196.947959][ T7196] ____sys_sendmsg+0x61b/0x980 [ 196.952786][ T7196] ? __asan_memset+0x22/0x40 [ 196.957441][ T7196] ? __sys_sendmsg_sock+0x30/0x30 [ 196.962545][ T7196] ? __import_iovec+0x3fa/0x850 [ 196.967472][ T7196] ? import_iovec+0x73/0xa0 [ 196.972033][ T7196] ___sys_sendmsg+0x2a6/0x360 [ 196.976757][ T7196] ? __sys_sendmsg+0x2b0/0x2b0 [ 196.981593][ T7196] ? trace_call_bpf+0xc3/0x6c0 [ 196.986430][ T7196] __se_sys_sendmsg+0x1d0/0x2c0 [ 196.991343][ T7196] ? __x64_sys_sendmsg+0x80/0x80 [ 196.996355][ T7196] ? lockdep_hardirqs_on+0x98/0x150 [ 197.001705][ T7196] do_syscall_64+0x55/0xb0 [ 197.006217][ T7196] ? clear_bhb_loop+0x40/0x90 [ 197.010941][ T7196] ? clear_bhb_loop+0x40/0x90 [ 197.015668][ T7196] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 197.021614][ T7196] RIP: 0033:0x7f7d7ad9e0d9 [ 197.026078][ T7196] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 197.045734][ T7196] RSP: 002b:00007f7d7bd40028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 197.054210][ T7196] RAX: ffffffffffffffda RBX: 00007f7d7b025fa0 RCX: 00007f7d7ad9e0d9 [ 197.062236][ T7196] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 197.070260][ T7196] RBP: 00007f7d7bd40090 R08: 0000000000000000 R09: 0000000000000000 [ 197.078281][ T7196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.086297][ T7196] R13: 00007f7d7b026038 R14: 00007f7d7b025fa0 R15: 00007ffddc2ef838 [ 197.094344][ T7196] [ 197.168734][ T7196] netlink: 'syz.0.433': attribute type 10 has an invalid length. [ 197.232681][ T7196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.260666][ T7196] team0: Port device bond0 added [ 197.665523][ T7209] netlink: 76 bytes leftover after parsing attributes in process `syz.1.439'. [ 197.682232][ T7209] netlink: 132 bytes leftover after parsing attributes in process `syz.1.439'. [ 198.649569][ T7227] netlink: 60 bytes leftover after parsing attributes in process `syz.3.446'. [ 198.693178][ T7227] netlink: 60 bytes leftover after parsing attributes in process `syz.3.446'. [ 198.722135][ T7227] netlink: 60 bytes leftover after parsing attributes in process `syz.3.446'. [ 198.752611][ T7227] netlink: 60 bytes leftover after parsing attributes in process `syz.3.446'. [ 199.406212][ T7233] netlink: 'syz.0.445': attribute type 2 has an invalid length. [ 199.821822][ T7241] netlink: 14 bytes leftover after parsing attributes in process `syz.3.451'. [ 199.856657][ T7241] netlink: get zone limit has 4 unknown bytes [ 200.315093][ T7246] netlink: 'syz.3.453': attribute type 29 has an invalid length. [ 200.343305][ T7250] netlink: 'syz.2.455': attribute type 13 has an invalid length. [ 200.370420][ T7250] netlink: 24859 bytes leftover after parsing attributes in process `syz.2.455'. [ 200.392487][ T7246] netlink: 'syz.3.453': attribute type 29 has an invalid length. [ 200.410464][ T7251] netlink: 'syz.3.453': attribute type 29 has an invalid length. [ 200.533809][ T7255] mac80211_hwsim hwsim3 .3ãc¤±: renamed from wlan1 (while UP) [ 200.653888][ T7248] netlink: 'syz.1.454': attribute type 10 has an invalid length. [ 200.676822][ T7248] netlink: 40 bytes leftover after parsing attributes in process `syz.1.454'. [ 200.729592][ T7248] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 201.399900][ T7275] FAULT_INJECTION: forcing a failure. [ 201.399900][ T7275] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 201.417144][ T7275] CPU: 1 PID: 7275 Comm: syz.1.463 Not tainted syzkaller #0 [ 201.424497][ T7275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 201.434599][ T7275] Call Trace: [ 201.437932][ T7275] [ 201.440935][ T7275] dump_stack_lvl+0x18c/0x250 [ 201.445667][ T7275] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 201.451867][ T7275] ? show_regs_print_info+0x20/0x20 [ 201.457122][ T7275] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 201.463317][ T7275] should_fail_ex+0x394/0x4c0 [ 201.468032][ T7275] _copy_from_user+0x2f/0xe0 [ 201.472666][ T7275] dev_ethtool+0xc6/0x18d0 [ 201.477124][ T7275] ? ethtool_get_module_eeprom_call+0x170/0x170 [ 201.483438][ T7275] ? __lock_acquire+0x7d80/0x7d80 [ 201.488493][ T7275] ? __might_fault+0xaa/0x120 [ 201.493200][ T7275] ? full_name_hash+0x92/0xe0 [ 201.497933][ T7275] ? dev_load+0x21/0x1f0 [ 201.502210][ T7275] dev_ioctl+0x392/0x1140 [ 201.506575][ T7275] sock_do_ioctl+0x239/0x310 [ 201.511211][ T7275] ? sock_show_fdinfo+0xb0/0xb0 [ 201.516114][ T7275] sock_ioctl+0x5be/0x7e0 [ 201.520516][ T7275] ? sock_poll+0x3e0/0x3e0 [ 201.524976][ T7275] ? bpf_lsm_file_ioctl+0x9/0x10 [ 201.529950][ T7275] ? security_file_ioctl+0x80/0xa0 [ 201.535096][ T7275] ? sock_poll+0x3e0/0x3e0 [ 201.539549][ T7275] __se_sys_ioctl+0xfd/0x170 [ 201.544182][ T7275] do_syscall_64+0x55/0xb0 [ 201.548622][ T7275] ? clear_bhb_loop+0x40/0x90 [ 201.553323][ T7275] ? clear_bhb_loop+0x40/0x90 [ 201.558028][ T7275] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 201.563977][ T7275] RIP: 0033:0x7f90d999e0d9 [ 201.568416][ T7275] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 201.588054][ T7275] RSP: 002b:00007f90da8e0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 201.596527][ T7275] RAX: ffffffffffffffda RBX: 00007f90d9c25fa0 RCX: 00007f90d999e0d9 [ 201.604512][ T7275] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000006 [ 201.612505][ T7275] RBP: 00007f90da8e0090 R08: 0000000000000000 R09: 0000000000000000 [ 201.620492][ T7275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 201.628484][ T7275] R13: 00007f90d9c26038 R14: 00007f90d9c25fa0 R15: 00007ffd9c253dc8 [ 201.636498][ T7275] [ 202.005616][ T7291] netlink: 'syz.0.473': attribute type 3 has an invalid length. [ 202.070861][ T7291] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.473'. [ 202.641785][ T7297] sit0: left promiscuous mode [ 202.686156][ T7299] netlink: 'syz.1.465': attribute type 2 has an invalid length. [ 202.727053][ T7301] sit0: entered promiscuous mode [ 202.796318][ T7302] netlink: 'syz.2.469': attribute type 10 has an invalid length. [ 203.343943][ T7302] team0 (unregistering): Port device team_slave_0 removed [ 203.551816][ T7302] team0 (unregistering): Port device team_slave_1 removed [ 204.240144][ T7323] netlink: 'syz.0.475': attribute type 10 has an invalid length. [ 207.233602][ T7323] team0: Device nlmon0 is of different type [ 207.640581][ T7335] netlink: 'syz.0.479': attribute type 10 has an invalid length. [ 207.663586][ T7335] netlink: 40 bytes leftover after parsing attributes in process `syz.0.479'. [ 207.692195][ T7335] batman_adv: batadv0: Adding interface: virt_wifi0 [ 207.838844][ T7335] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.889511][ T7335] batman_adv: batadv0: Interface activated: virt_wifi0 [ 208.498403][ T7352] netlink: 'syz.0.486': attribute type 3 has an invalid length. [ 208.900027][ T7365] FAULT_INJECTION: forcing a failure. [ 208.900027][ T7365] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 208.924011][ T7365] CPU: 1 PID: 7365 Comm: syz.0.488 Not tainted syzkaller #0 [ 208.931377][ T7365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 208.941446][ T7365] Call Trace: [ 208.944735][ T7365] [ 208.947676][ T7365] dump_stack_lvl+0x18c/0x250 [ 208.952383][ T7365] ? show_regs_print_info+0x20/0x20 [ 208.957592][ T7365] ? load_image+0x420/0x420 [ 208.962108][ T7365] ? __might_fault+0xaa/0x120 [ 208.966801][ T7365] ? __lock_acquire+0x7d80/0x7d80 [ 208.971880][ T7365] should_fail_ex+0x394/0x4c0 [ 208.976610][ T7365] _copy_from_user+0x2f/0xe0 [ 208.981253][ T7365] __sys_bpf+0x23e/0x890 [ 208.985541][ T7365] ? bpf_link_show_fdinfo+0x390/0x390 [ 208.990967][ T7365] ? lock_chain_count+0x20/0x20 [ 208.995832][ T7365] __x64_sys_bpf+0x7c/0x90 [ 209.000269][ T7365] do_syscall_64+0x55/0xb0 [ 209.004710][ T7365] ? clear_bhb_loop+0x40/0x90 [ 209.009399][ T7365] ? clear_bhb_loop+0x40/0x90 [ 209.014120][ T7365] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 209.020057][ T7365] RIP: 0033:0x7f7d7ad9e0d9 [ 209.024501][ T7365] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 209.044132][ T7365] RSP: 002b:00007f7d7bd40028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 209.052608][ T7365] RAX: ffffffffffffffda RBX: 00007f7d7b025fa0 RCX: 00007f7d7ad9e0d9 [ 209.060641][ T7365] RDX: 0000000000000094 RSI: 0000200000000680 RDI: 0000000000000005 [ 209.068637][ T7365] RBP: 00007f7d7bd40090 R08: 0000000000000000 R09: 0000000000000000 [ 209.076631][ T7365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 209.084631][ T7365] R13: 00007f7d7b026038 R14: 00007f7d7b025fa0 R15: 00007ffddc2ef838 [ 209.092671][ T7365] [ 209.212690][ T7367] netlink: 'syz.3.489': attribute type 9 has an invalid length. [ 209.230249][ T7367] netlink: 201636 bytes leftover after parsing attributes in process `syz.3.489'. [ 209.326681][ T7372] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.491'. [ 209.340813][ T7372] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 209.612053][ T7382] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.493'. [ 210.261367][ T7390] netlink: 'syz.3.496': attribute type 39 has an invalid length. [ 210.338272][ T7392] netlink: 'syz.3.496': attribute type 9 has an invalid length. [ 210.383681][ T7392] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.496'. [ 210.565494][ T7398] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.573467][ T7398] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.586213][ T7398] bridge0: entered allmulticast mode [ 210.795478][ T7398] bridge_slave_1: left allmulticast mode [ 210.821141][ T7398] bridge_slave_1: left promiscuous mode [ 210.828941][ T7398] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.886835][ T7398] bridge_slave_0: left allmulticast mode [ 210.897838][ T7398] bridge_slave_0: left promiscuous mode [ 210.908373][ T7398] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.050338][ T7394] netlink: 'syz.3.496': attribute type 9 has an invalid length. [ 211.067037][ T7394] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.496'. [ 211.318324][ T7403] netlink: 'syz.1.499': attribute type 40 has an invalid length. [ 212.029865][ T5785] Bluetooth: hci1: command 0x0406 tx timeout [ 212.032124][ T5085] Bluetooth: hci2: command 0x0406 tx timeout [ 212.036162][ T5785] Bluetooth: hci3: command 0x0406 tx timeout [ 212.042198][ T5085] Bluetooth: hci0: command 0x0406 tx timeout [ 212.997217][ T7433] FAULT_INJECTION: forcing a failure. [ 212.997217][ T7433] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 213.011588][ T7433] CPU: 1 PID: 7433 Comm: syz.0.508 Not tainted syzkaller #0 [ 213.018940][ T7433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 213.029040][ T7433] Call Trace: [ 213.032370][ T7433] [ 213.035339][ T7433] dump_stack_lvl+0x18c/0x250 [ 213.040082][ T7433] ? show_regs_print_info+0x20/0x20 [ 213.045321][ T7433] ? load_image+0x420/0x420 [ 213.049891][ T7433] should_fail_ex+0x394/0x4c0 [ 213.054627][ T7433] _copy_from_user+0x2f/0xe0 [ 213.059277][ T7433] bpf_ctx_init+0x127/0x190 [ 213.063872][ T7433] bpf_prog_test_run_sk_lookup+0x298/0xba0 [ 213.069737][ T7433] ? __fget_files+0x28/0x460 [ 213.074390][ T7433] ? __lock_acquire+0x7d80/0x7d80 [ 213.079458][ T7433] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 213.085493][ T7433] ? lock_chain_count+0x20/0x20 [ 213.090490][ T7433] ? bpf_test_timer_leave+0x150/0x150 [ 213.095931][ T7433] ? bpf_test_timer_leave+0x150/0x150 [ 213.101353][ T7433] bpf_prog_test_run+0x31f/0x390 [ 213.106337][ T7433] __sys_bpf+0x49d/0x890 [ 213.110626][ T7433] ? bpf_link_show_fdinfo+0x390/0x390 [ 213.116071][ T7433] ? lock_chain_count+0x20/0x20 [ 213.120982][ T7433] __x64_sys_bpf+0x7c/0x90 [ 213.125481][ T7433] do_syscall_64+0x55/0xb0 [ 213.129942][ T7433] ? clear_bhb_loop+0x40/0x90 [ 213.134670][ T7433] ? clear_bhb_loop+0x40/0x90 [ 213.139400][ T7433] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 213.145424][ T7433] RIP: 0033:0x7f7d7ad9e0d9 [ 213.149886][ T7433] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 213.169549][ T7433] RSP: 002b:00007f7d7bd40028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 213.178026][ T7433] RAX: ffffffffffffffda RBX: 00007f7d7b025fa0 RCX: 00007f7d7ad9e0d9 [ 213.186137][ T7433] RDX: 0000000000000048 RSI: 0000200000000440 RDI: 000000000000000a [ 213.194162][ T7433] RBP: 00007f7d7bd40090 R08: 0000000000000000 R09: 0000000000000000 [ 213.202174][ T7433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.210192][ T7433] R13: 00007f7d7b026038 R14: 00007f7d7b025fa0 R15: 00007ffddc2ef838 [ 213.218239][ T7433] [ 213.416241][ T7440] netlink: 'syz.0.511': attribute type 22 has an invalid length. [ 213.435714][ T7440] netlink: 4 bytes leftover after parsing attributes in process `syz.0.511'. [ 213.464288][ T7440] netlink: 'syz.0.511': attribute type 10 has an invalid length. [ 213.491865][ T7440] netlink: 40 bytes leftover after parsing attributes in process `syz.0.511'. [ 213.521936][ T7440] netlink: 'syz.0.511': attribute type 10 has an invalid length. [ 213.532005][ T7440] netlink: 40 bytes leftover after parsing attributes in process `syz.0.511'. [ 213.824546][ T59] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 213.951024][ T7451] netlink: 'syz.0.515': attribute type 9 has an invalid length. [ 213.959872][ T7451] netlink: 201636 bytes leftover after parsing attributes in process `syz.0.515'. [ 215.104601][ T7471] FAULT_INJECTION: forcing a failure. [ 215.104601][ T7471] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 215.146853][ T7471] CPU: 1 PID: 7471 Comm: syz.0.522 Not tainted syzkaller #0 [ 215.154255][ T7471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 215.164378][ T7471] Call Trace: [ 215.167716][ T7471] [ 215.170698][ T7471] dump_stack_lvl+0x18c/0x250 [ 215.175449][ T7471] ? show_regs_print_info+0x20/0x20 [ 215.180723][ T7471] ? load_image+0x420/0x420 [ 215.185304][ T7471] ? __lock_acquire+0x7d80/0x7d80 [ 215.190408][ T7471] should_fail_ex+0x394/0x4c0 [ 215.195172][ T7471] _copy_from_user+0x2f/0xe0 [ 215.199827][ T7471] __copy_msghdr+0x388/0x560 [ 215.204486][ T7471] ___sys_sendmsg+0x214/0x360 [ 215.209242][ T7471] ? __sys_sendmsg+0x2b0/0x2b0 [ 215.214119][ T7471] ? __lock_acquire+0x7d80/0x7d80 [ 215.219267][ T7471] __se_sys_sendmsg+0x1d0/0x2c0 [ 215.224199][ T7471] ? __x64_sys_sendmsg+0x80/0x80 [ 215.229238][ T7471] ? lockdep_hardirqs_on+0x98/0x150 [ 215.234518][ T7471] do_syscall_64+0x55/0xb0 [ 215.238994][ T7471] ? clear_bhb_loop+0x40/0x90 [ 215.243735][ T7471] ? clear_bhb_loop+0x40/0x90 [ 215.248484][ T7471] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 215.254441][ T7471] RIP: 0033:0x7f7d7ad9e0d9 [ 215.258930][ T7471] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 215.278694][ T7471] RSP: 002b:00007f7d7bd40028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 215.287181][ T7471] RAX: ffffffffffffffda RBX: 00007f7d7b025fa0 RCX: 00007f7d7ad9e0d9 [ 215.295201][ T7471] RDX: 000000000000ff00 RSI: 0000200000001180 RDI: 0000000000000004 [ 215.303307][ T7471] RBP: 00007f7d7bd40090 R08: 0000000000000000 R09: 0000000000000000 [ 215.311313][ T7471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.319316][ T7471] R13: 00007f7d7b026038 R14: 00007f7d7b025fa0 R15: 00007ffddc2ef838 [ 215.327358][ T7471] [ 215.930326][ T7483] FAULT_INJECTION: forcing a failure. [ 215.930326][ T7483] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 215.944937][ T7483] CPU: 1 PID: 7483 Comm: syz.1.525 Not tainted syzkaller #0 [ 215.952281][ T7483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 215.962389][ T7483] Call Trace: [ 215.965707][ T7483] [ 215.968673][ T7483] dump_stack_lvl+0x18c/0x250 [ 215.973423][ T7483] ? show_regs_print_info+0x20/0x20 [ 215.978691][ T7483] ? load_image+0x420/0x420 [ 215.983259][ T7483] ? __lock_acquire+0x7d80/0x7d80 [ 215.988324][ T7483] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 215.994350][ T7483] should_fail_ex+0x394/0x4c0 [ 215.999084][ T7483] prepare_alloc_pages+0x1e1/0x5b0 [ 216.004258][ T7483] __alloc_pages+0x134/0x460 [ 216.008899][ T7483] ? zone_statistics+0x170/0x170 [ 216.013884][ T7483] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 216.020081][ T7483] ? lockdep_hardirqs_on+0x98/0x150 [ 216.025323][ T7483] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 216.031549][ T7483] __folio_alloc+0x10/0x20 [ 216.036031][ T7483] vma_alloc_folio+0x474/0x8f0 [ 216.040841][ T7483] ? mpol_shared_policy_lookup+0x14b/0x1e0 [ 216.046688][ T7483] shmem_alloc_folio+0x1a9/0x2a0 [ 216.051668][ T7483] ? percpu_counter_add_batch+0x252/0x2a0 [ 216.057427][ T7483] ? folio_put+0xd0/0xd0 [ 216.061710][ T7483] ? percpu_counter_add_batch+0x25c/0x2a0 [ 216.067500][ T7483] ? __vm_enough_memory+0x11a/0x370 [ 216.072749][ T7483] ? shmem_inode_acct_block+0x35e/0x460 [ 216.078336][ T7483] shmem_alloc_and_acct_folio+0x1cb/0x6c0 [ 216.084115][ T7483] ? put_swap_device+0x230/0x230 [ 216.089102][ T7483] ? filemap_get_entry+0xce/0x3f0 [ 216.094166][ T7483] ? xas_load+0x11d/0x140 [ 216.098526][ T7483] ? filemap_get_entry+0xce/0x3f0 [ 216.103593][ T7483] ? filemap_get_entry+0xce/0x3f0 [ 216.108648][ T7483] ? filemap_get_entry+0x375/0x3f0 [ 216.113791][ T7483] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 216.119670][ T7483] ? page_cache_prev_miss+0x390/0x390 [ 216.125111][ T7483] ? mark_lock+0x94/0x320 [ 216.129485][ T7483] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 216.135509][ T7483] shmem_get_folio_gfp+0xe1d/0x2b40 [ 216.140777][ T7483] shmem_write_begin+0xf2/0x430 [ 216.145674][ T7483] generic_perform_write+0x2fe/0x5c0 [ 216.151018][ T7483] ? generic_file_direct_write+0x3e0/0x3e0 [ 216.156896][ T7483] ? file_update_time+0x192/0x1a0 [ 216.161972][ T7483] shmem_file_write_iter+0xfb/0x120 [ 216.167227][ T7483] vfs_write+0x474/0x9a0 [ 216.171522][ T7483] ? file_end_write+0x250/0x250 [ 216.176426][ T7483] ? __fget_files+0x3fc/0x460 [ 216.181183][ T7483] ? __fdget_pos+0x2a3/0x330 [ 216.185825][ T7483] ? ksys_write+0x74/0x260 [ 216.190294][ T7483] ksys_write+0x151/0x260 [ 216.194669][ T7483] ? __ia32_sys_read+0x90/0x90 [ 216.199489][ T7483] ? syscall_enter_from_user_mode+0x2e/0x80 [ 216.205437][ T7483] do_syscall_64+0x55/0xb0 [ 216.209910][ T7483] ? clear_bhb_loop+0x40/0x90 [ 216.214625][ T7483] ? clear_bhb_loop+0x40/0x90 [ 216.219346][ T7483] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 216.225274][ T7483] RIP: 0033:0x7f90d999e0d9 [ 216.229723][ T7483] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.249362][ T7483] RSP: 002b:00007f90da8e0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 216.257816][ T7483] RAX: ffffffffffffffda RBX: 00007f90d9c25fa0 RCX: 00007f90d999e0d9 [ 216.266775][ T7483] RDX: 0000000013bb711e RSI: 0000200000000180 RDI: 000000000000000f [ 216.274803][ T7483] RBP: 00007f90da8e0090 R08: 0000000000000000 R09: 0000000000000000 [ 216.282808][ T7483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.290814][ T7483] R13: 00007f90d9c26038 R14: 00007f90d9c25fa0 R15: 00007ffd9c253dc8 [ 216.298857][ T7483] [ 216.800931][ T7492] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.527'. [ 216.812133][ T7492] netlink: 21068 bytes leftover after parsing attributes in process `syz.1.527'. [ 216.823671][ T7492] tipc: Started in network mode [ 216.920392][ T7492] tipc: Node identity b, cluster identity 57 [ 216.936741][ T7492] tipc: Node number set to 11 [ 217.496197][ T7501] netlink: 'syz.1.530': attribute type 9 has an invalid length. [ 217.525814][ T7501] netlink: 201636 bytes leftover after parsing attributes in process `syz.1.530'. [ 218.321192][ T7526] FAULT_INJECTION: forcing a failure. [ 218.321192][ T7526] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 218.448906][ T7526] CPU: 1 PID: 7526 Comm: syz.3.540 Not tainted syzkaller #0 [ 218.456380][ T7526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 218.466475][ T7526] Call Trace: [ 218.469798][ T7526] [ 218.472776][ T7526] dump_stack_lvl+0x18c/0x250 [ 218.477504][ T7526] ? show_regs_print_info+0x20/0x20 [ 218.482747][ T7526] ? load_image+0x420/0x420 [ 218.487314][ T7526] ? __might_fault+0xaa/0x120 [ 218.492053][ T7526] ? __lock_acquire+0x7d80/0x7d80 [ 218.497117][ T7526] ? __virt_addr_valid+0x10c/0x380 [ 218.502276][ T7526] should_fail_ex+0x394/0x4c0 [ 218.507016][ T7526] _copy_to_user+0x2f/0xa0 [ 218.511489][ T7526] bpf_obj_get_info_by_fd+0x18e0/0x3120 [ 218.517105][ T7526] ? bpf_map_get_fd_by_id+0x330/0x330 [ 218.522563][ T7526] ? file_end_write+0x159/0x250 [ 218.527480][ T7526] ? __might_fault+0xaa/0x120 [ 218.532201][ T7526] ? __might_fault+0xc6/0x120 [ 218.536920][ T7526] ? __might_fault+0xaa/0x120 [ 218.541650][ T7526] ? bpf_lsm_bpf+0x9/0x10 [ 218.546033][ T7526] ? security_bpf+0x7e/0xa0 [ 218.550594][ T7526] __sys_bpf+0x7eb/0x890 [ 218.554888][ T7526] ? bpf_link_show_fdinfo+0x390/0x390 [ 218.560325][ T7526] ? lock_chain_count+0x20/0x20 [ 218.565239][ T7526] __x64_sys_bpf+0x7c/0x90 [ 218.569712][ T7526] do_syscall_64+0x55/0xb0 [ 218.574173][ T7526] ? clear_bhb_loop+0x40/0x90 [ 218.578891][ T7526] ? clear_bhb_loop+0x40/0x90 [ 218.583608][ T7526] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 218.589541][ T7526] RIP: 0033:0x7f17f719e0d9 [ 218.593991][ T7526] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 218.613639][ T7526] RSP: 002b:00007f17f7fde028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 218.622094][ T7526] RAX: ffffffffffffffda RBX: 00007f17f7425fa0 RCX: 00007f17f719e0d9 [ 218.630097][ T7526] RDX: 0000000000000010 RSI: 0000200000000640 RDI: 000000000000000f [ 218.638095][ T7526] RBP: 00007f17f7fde090 R08: 0000000000000000 R09: 0000000000000000 [ 218.646101][ T7526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 218.654104][ T7526] R13: 00007f17f7426038 R14: 00007f17f7425fa0 R15: 00007fff2e63d0c8 [ 218.662136][ T7526] [ 218.753552][ T7526] netlink: 'syz.3.540': attribute type 29 has an invalid length. [ 218.764382][ T7526] netlink: 'syz.3.540': attribute type 29 has an invalid length. [ 218.774463][ T7526] netlink: 'syz.3.540': attribute type 29 has an invalid length. [ 219.224764][ T7537] netlink: 'syz.2.544': attribute type 29 has an invalid length. [ 219.240520][ T7537] netlink: 'syz.2.544': attribute type 29 has an invalid length. [ 219.273141][ T7542] netlink: 'syz.2.544': attribute type 29 has an invalid length. [ 220.077214][ T7560] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 220.084255][ T7560] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 220.737452][ T7560] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 220.744136][ T7560] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 222.040945][ T7602] netlink: 76 bytes leftover after parsing attributes in process `syz.3.563'. [ 222.066302][ T7602] netlink: 132 bytes leftover after parsing attributes in process `syz.3.563'. [ 223.110508][ T7620] netlink: 60 bytes leftover after parsing attributes in process `syz.1.572'. [ 223.440948][ T7620] netlink: 60 bytes leftover after parsing attributes in process `syz.1.572'. [ 223.489433][ T7624] netlink: 60 bytes leftover after parsing attributes in process `syz.1.572'. [ 223.501697][ T7627] netlink: 60 bytes leftover after parsing attributes in process `syz.1.572'. [ 223.627787][ T7631] netlink: 76 bytes leftover after parsing attributes in process `syz.3.574'. [ 223.659807][ T7631] netlink: 132 bytes leftover after parsing attributes in process `syz.3.574'. [ 223.826804][ T7637] netlink: 'syz.1.577': attribute type 10 has an invalid length. [ 223.931199][ T7637] team0: Port device geneve1 added [ 223.948541][ T7639] netlink: 'syz.3.578': attribute type 10 has an invalid length. [ 223.980142][ T7639] netlink: 55 bytes leftover after parsing attributes in process `syz.3.578'. [ 224.328948][ T7645] veth1_to_bond: entered allmulticast mode [ 224.678848][ T7658] netlink: 76 bytes leftover after parsing attributes in process `syz.3.586'. [ 225.481840][ T7682] netlink: 'syz.1.595': attribute type 10 has an invalid length. [ 226.284304][ T7706] tap0: tun_chr_ioctl cmd 1074025677 [ 226.300735][ T7706] tap0: linktype set to 270 [ 226.431888][ T7712] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 226.440735][ T7712] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 226.453192][ T7712] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 226.460951][ T7712] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.469956][ T7712] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 226.477362][ T7712] batman_adv: batadv0: Removing interface: virt_wifi0 [ 226.651135][ T7720] netlink: 'syz.3.608': attribute type 3 has an invalid length. [ 226.816019][ T7724] netlink: 'syz.0.609': attribute type 10 has an invalid length. [ 227.218916][ T7732] netlink: 'syz.2.614': attribute type 3 has an invalid length. [ 227.255058][ T7732] netlink: 'syz.2.614': attribute type 1 has an invalid length. [ 227.276666][ T7732] __nla_validate_parse: 10 callbacks suppressed [ 227.276713][ T7732] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.614'. [ 227.405058][ T7735] syzkaller0: entered promiscuous mode [ 227.411589][ T7735] syzkaller0: entered allmulticast mode [ 227.422471][ T7739] netlink: 76 bytes leftover after parsing attributes in process `syz.1.617'. [ 227.439107][ T7742] C: renamed from team_slave_0 (while UP) [ 227.451558][ T7742] netlink: 'syz.3.618': attribute type 2 has an invalid length. [ 227.466643][ T7742] netlink: 116 bytes leftover after parsing attributes in process `syz.3.618'. [ 227.475674][ T7742] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 227.509658][ T7739] netlink: 132 bytes leftover after parsing attributes in process `syz.1.617'. [ 227.569769][ T7742] netlink: 'syz.3.618': attribute type 2 has an invalid length. [ 227.585261][ T7742] netlink: 116 bytes leftover after parsing attributes in process `syz.3.618'. [ 227.594778][ T7742] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 229.829054][ T7776] netlink: 76 bytes leftover after parsing attributes in process `syz.0.629'. [ 229.942289][ T7776] netlink: 132 bytes leftover after parsing attributes in process `syz.0.629'. [ 229.964364][ T7780] netlink: 'syz.1.630': attribute type 3 has an invalid length. [ 229.973211][ T7780] netlink: 'syz.1.630': attribute type 4 has an invalid length. [ 229.990720][ T7780] netlink: 'syz.1.630': attribute type 7 has an invalid length. [ 230.000207][ T7780] netlink: 'syz.1.630': attribute type 8 has an invalid length. [ 230.010882][ T7780] netlink: 'syz.1.630': attribute type 7 has an invalid length. [ 230.020250][ T7780] netlink: 198048 bytes leftover after parsing attributes in process `syz.1.630'. [ 230.089167][ T7784] netlink: 40 bytes leftover after parsing attributes in process `syz.0.631'. [ 230.106432][ T7784] netlink: 40 bytes leftover after parsing attributes in process `syz.0.631'. [ 230.632572][ T7796] tap0: tun_chr_ioctl cmd 1074025677 [ 230.657439][ T7796] tap0: linktype set to 270 [ 232.511283][ T7837] __nla_validate_parse: 4 callbacks suppressed [ 232.511303][ T7837] netlink: 76 bytes leftover after parsing attributes in process `syz.0.649'. [ 232.656592][ T7837] netlink: 132 bytes leftover after parsing attributes in process `syz.0.649'. [ 234.387085][ T7860] netlink: 'syz.3.657': attribute type 29 has an invalid length. [ 234.433133][ T7859] netlink: 'syz.0.656': attribute type 33 has an invalid length. [ 234.443419][ T7860] netlink: 'syz.3.657': attribute type 29 has an invalid length. [ 234.451663][ T7859] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.656'. [ 234.461696][ T7861] netlink: 'syz.3.657': attribute type 29 has an invalid length. [ 234.474530][ T7860] netlink: 'syz.3.657': attribute type 29 has an invalid length. [ 234.512485][ C1] [ 234.512494][ C1] ================================ [ 234.512499][ C1] WARNING: inconsistent lock state [ 234.512515][ C1] syzkaller #0 Not tainted [ 234.512524][ C1] -------------------------------- [ 234.512528][ C1] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 234.512536][ C1] syz.3.657/7860 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 234.512556][ C1] ffff88805c443218 (&htab->lockdep_key){....}-{2:2}, at: htab_lock_bucket+0x17d/0x300 [ 234.512610][ C1] {INITIAL USE} state was registered at: [ 234.512616][ C1] lock_acquire+0x19e/0x420 [ 234.512637][ C1] _raw_spin_lock+0x2e/0x40 [ 234.512663][ C1] htab_lock_bucket+0x17d/0x300 [ 234.512682][ C1] htab_map_update_elem+0x237/0x1270 [ 234.512700][ C1] bpf_map_update_value+0x64b/0x710 [ 234.512717][ C1] map_update_elem+0x586/0x710 [ 234.512735][ C1] __sys_bpf+0x6b5/0x890 [ 234.512751][ C1] __x64_sys_bpf+0x7c/0x90 [ 234.512767][ C1] do_syscall_64+0x55/0xb0 [ 234.512784][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 234.512808][ C1] irq event stamp: 2766 [ 234.512814][ C1] hardirqs last enabled at (2765): [] exc_debug+0xf5/0x140 [ 234.512839][ C1] hardirqs last disabled at (2766): [] exc_debug+0x73/0x140 [ 234.512867][ C1] softirqs last enabled at (2456): [] __dev_queue_xmit+0x275/0x3630 [ 234.512897][ C1] softirqs last disabled at (2450): [] __dev_queue_xmit+0x275/0x3630 [ 234.512926][ C1] [ 234.512926][ C1] other info that might help us debug this: [ 234.512931][ C1] Possible unsafe locking scenario: [ 234.512931][ C1] [ 234.512935][ C1] CPU0 [ 234.512938][ C1] ---- [ 234.512941][ C1] lock(&htab->lockdep_key); [ 234.512953][ C1] [ 234.512956][ C1] lock(&htab->lockdep_key); [ 234.512967][ C1] [ 234.512967][ C1] *** DEADLOCK *** [ 234.512967][ C1] [ 234.512970][ C1] no locks held by syz.3.657/7860. [ 234.512977][ C1] [ 234.512977][ C1] stack backtrace: [ 234.512983][ C1] CPU: 1 PID: 7860 Comm: syz.3.657 Not tainted syzkaller #0 [ 234.513007][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 234.513020][ C1] Call Trace: [ 234.513026][ C1] <#DB> [ 234.513031][ C1] dump_stack_lvl+0x18c/0x250 [ 234.513046][ C1] ? show_regs_print_info+0x20/0x20 [ 234.513063][ C1] ? print_usage_bug+0x43d/0x6a0 [ 234.513078][ C1] ? verify_lock_unused+0x15/0x140 [ 234.513095][ C1] lock_acquire+0x2c2/0x420 [ 234.513111][ C1] ? htab_lock_bucket+0x17d/0x300 [ 234.513126][ C1] ? read_lock_is_recursive+0x20/0x20 [ 234.513147][ C1] _raw_spin_lock+0x2e/0x40 [ 234.513165][ C1] ? htab_lock_bucket+0x17d/0x300 [ 234.513179][ C1] htab_lock_bucket+0x17d/0x300 [ 234.513195][ C1] ? htab_lru_map_delete_node+0x770/0x770 [ 234.513210][ C1] ? look_up_lock_class+0x75/0x140 [ 234.513228][ C1] ? verify_lock_unused+0x15/0x140 [ 234.513243][ C1] ? jhash+0x3c3/0x740 [ 234.513258][ C1] htab_map_delete_elem+0x19f/0x640 [ 234.513274][ C1] ? htab_map_update_elem+0x1270/0x1270 [ 234.513288][ C1] ? perf_callchain+0x220/0x220 [ 234.513305][ C1] bpf_prog_2c29ac5cdc6b1842+0x42/0x46 [ 234.513319][ C1] bpf_overflow_handler+0x1fc/0x510 [ 234.513340][ C1] ? bpf_overflow_handler+0xde/0x510 [ 234.513359][ C1] ? tp_perf_event_destroy+0x20/0x20 [ 234.513381][ C1] ? __perf_event_account_interrupt+0x187/0x280 [ 234.513397][ C1] __perf_event_overflow+0x461/0x660 [ 234.513415][ C1] perf_swevent_overflow+0x274/0x340 [ 234.513435][ C1] ? perf_event_switch_output+0x790/0x790 [ 234.513458][ C1] perf_swevent_event+0x45c/0x570 [ 234.513475][ C1] ? perf_tp_event+0x1550/0x1550 [ 234.513494][ C1] perf_bp_event+0x319/0x430 [ 234.513514][ C1] ? perf_event_free_bpf_prog+0x120/0x120 [ 234.513542][ C1] ? lock_acquire+0x2c2/0x420 [ 234.513559][ C1] hw_breakpoint_exceptions_notify+0x23e/0x670 [ 234.513579][ C1] notifier_call_chain+0x18f/0x380 [ 234.513596][ C1] ? atomic_notifier_call_chain+0x26/0x180 [ 234.513614][ C1] atomic_notifier_call_chain+0xda/0x180 [ 234.513632][ C1] notify_die+0x145/0x1a0 [ 234.513649][ C1] ? srcu_init_notifier_head+0x90/0x90 [ 234.513669][ C1] ? rcu_is_watching+0x15/0xb0 [ 234.513688][ C1] notify_debug+0x2e/0x50 [ 234.513701][ C1] exc_debug+0xde/0x140 [ 234.513716][ C1] asm_exc_debug+0x1e/0x40 [ 234.513729][ C1] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 234.513746][ C1] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 234.513760][ C1] RSP: 0018:ffffc9000be9fa10 EFLAGS: 00050206 [ 234.513771][ C1] RAX: ffffffff84320801 RBX: 00000000000000e0 RCX: 00000000000000dd [ 234.513779][ C1] RDX: 0000000000000001 RSI: 0000200000000303 RDI: ffffc9000be9fbe3 [ 234.513788][ C1] RBP: ffffc9000be9fd70 R08: ffffc9000be9fcbf R09: 1ffff920017d3f97 [ 234.513815][ C1] R10: dffffc0000000000 R11: fffff520017d3f98 R12: 00002000000003e0 [ 234.513825][ C1] R13: 00000000000000e0 R14: ffffc9000be9fbe0 R15: 0000200000000300 [ 234.513837][ C1] ? rcuref_put_slowpath+0x101/0x150 [ 234.513856][ C1] [ 234.513860][ C1] [ 234.513863][ C1] _copy_from_user+0x8b/0xe0 [ 234.513878][ C1] bpf_obj_get_info_by_fd+0x477/0x3120 [ 234.513898][ C1] ? verify_lock_unused+0x140/0x140 [ 234.513915][ C1] ? bpf_map_get_fd_by_id+0x330/0x330 [ 234.513930][ C1] ? futex_wait_queue+0x27/0x1b0 [ 234.513944][ C1] ? futex_wait_queue+0x138/0x1b0 [ 234.513958][ C1] ? futex_unqueue+0xcb/0xf0 [ 234.513971][ C1] ? futex_wait+0x4a7/0x5c0 [ 234.514003][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 234.514021][ C1] ? __might_fault+0xaa/0x120 [ 234.514035][ C1] ? __might_fault+0xc6/0x120 [ 234.514047][ C1] ? __might_fault+0xaa/0x120 [ 234.514060][ C1] ? bpf_lsm_bpf+0x9/0x10 [ 234.514079][ C1] ? security_bpf+0x7e/0xa0 [ 234.514094][ C1] __sys_bpf+0x7eb/0x890 [ 234.514109][ C1] ? bpf_link_show_fdinfo+0x390/0x390 [ 234.514130][ C1] ? lock_chain_count+0x20/0x20 [ 234.514148][ C1] __x64_sys_bpf+0x7c/0x90 [ 234.514162][ C1] do_syscall_64+0x55/0xb0 [ 234.514175][ C1] ? clear_bhb_loop+0x40/0x90 [ 234.514189][ C1] ? clear_bhb_loop+0x40/0x90 [ 234.514204][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 234.514218][ C1] RIP: 0033:0x7f17f719e0d9 [ 234.514228][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 234.514238][ C1] RSP: 002b:00007f17f7fde028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 234.514250][ C1] RAX: ffffffffffffffda RBX: 00007f17f7425fa0 RCX: 00007f17f719e0d9 [ 234.514260][ C1] RDX: 0000000000000010 RSI: 0000200000000400 RDI: 000000000000000f [ 234.514267][ C1] RBP: 00007f17f7235024 R08: 0000000000000000 R09: 0000000000000000 [ 234.514275][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 234.514282][ C1] R13: 00007f17f7426038 R14: 00007f17f7425fa0 R15: 00007fff2e63d0c8 [ 234.514297][ C1]