last executing test programs: 33.289114672s ago: executing program 3 (id=2334): r0 = socket$kcm(0xa, 0x1, 0x106) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_type(r0, 0x0, 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000080), 0x9) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000980)=ANY=[@ANYBLOB="1800001800000000000000000000000000000095ac7843c4595dd4da77042cd6deaa6f3aa4ed626e1ed29b8190daa7856a9010a7b0a47090f89da2f1f4226cb3580ada5ecf110d224d5d1bd7de5b0f72e06f1f71c675384ba11e7a343aea6d50ca2e049ba247210dc44db0a4d92102556d49467cfabaf36596e34171795aaca5c7f17d979869fba6e9c442dff05dcc038983f31587a86c4beee0c248a5071f91d50dfa564a014a59e0208bd08ca7aff4696fd6599695144ec092b9df89128f7bb8048d8174f743de72b102ac0ab14f7a9aa5801a4ad1a2868e79e02823b679af31593e36de95a494d8dcb3abca342f99c74ce1491e1f6f9551"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) r4 = gettid() r5 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f00000002c0)='memory.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r5, &(0x7f0000000400)={'full', 0x20, 0x3ff, 0x20, 0xdb32}, 0x2f) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41f9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, 0x0}, 0x20) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x2, 0x2, 0x73) socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000005b80), 0xc) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)="1400000017000b63d25a80648c2594f934a3c92b", 0x14}], 0x1}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000100081044e81f782db44b904021d083911000000000000a1180015000600142603600e120900210000000401a80016000400144006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r9 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r9, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x3fff}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000180)="27031c00160014000000002f1eafacf706e105000000894f00010003ee0b80558ddbba9b37242d37a518fc9c5be50eaf07c3650596", 0x35}], 0x1}, 0x4) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xa, &(0x7f0000000580)=ANY=[@ANYBLOB="18260000", @ANYRES32=r2, @ANYBLOB="000000000400000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70200af7d82d5380000000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x2b, r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r11, 0x0, 0xe, 0x0, &(0x7f0000000040)="00003c00f5832e8a770000000000", 0x0, 0x57ab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x2f) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r12 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000700)="d800000019000100000212ba0d8105040a600000ff0f040b067c55a1bc8fa0c4fa04fd34bd382330db43bdee8ca709e3a8e96900000004000500fe808178a80035fd00d67f6f94007100a007a290457f0189b316277c01000000fc487d5d32bace8017cbec4c2ee5a7160ab2a10c11ce1b14d600741f795025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fec004c5d46a769b4d4ccd40dd6e4ed01ddcab5a2b5ac3290f9ea363788b97192309a08000e00"/216, 0xd8}], 0x1}, 0x0) 32.299072243s ago: executing program 3 (id=2338): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x404, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000006000000080000000800000040000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB], 0x50) socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000640)={0x0, &(0x7f0000000300), &(0x7f0000000500)="4ff9b9dbd4dbe4b100d4373d21e73ce61e351c92172c3ebc75c8afd858574d38c02df86ebce7f17e953f3d8f11bc9deb06b5181ad5940352cbec049c046c8f9c5892bee99104cc2d8c8ceb27b755f0733233698b1949218d", &(0x7f0000000600)="a08657ccaa92ef5cf1d34ce71834f14dcff3be3222fee515a4482b701ab4a55adfa7273840f86205c38f", 0xffffff4a, r0, 0x4}, 0x38) r1 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x29, 0x7, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x1a220, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)={0x1b, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0xc, '\x00', 0x0, r0, 0x5, 0x5}, 0x50) sendmsg$kcm(r1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000140)=ANY=[@ANYBLOB="180200"/14, @ANYRES32, @ANYBLOB="00000000000000006600ffffff80000018000000000000000000000000000000950000000000000018010000202070250000000000202020db1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b502000000000000850000000600"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0xfffff000, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x50) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = syz_clone(0x300000, &(0x7f0000000240), 0x0, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000440)="02cd069600d7d625acdd409441f7fc8ba8731e257b86222fc52de5ccad30b2edb1f183c798dbb550656b090879401bab96a8cd5f265d7c8aaec3cd4b6bd36fa52039e33c8dcc3fbc000c1df749f2467db6fa2fa3db7032d5bce9f5c7ebe68e5cb29f2e276f0db9e4892038145431d1e80de32c05e90ab39462da0dd1394fd55761be621ceb697550b7049dbfcf179c0fc8ac79c25a8a6212004d") perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x5, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x4, 0x101}, 0xa0d2, 0x7, 0x0, 0x6}, r3, 0xf, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, 0x0) sendmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2c}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000000)='Gb', 0x5dc}], 0x1}, 0x480c0) recvmsg$kcm(r2, &(0x7f0000000980)={&(0x7f0000000880)=@l2tp={0x2, 0x0, @dev}, 0x80, &(0x7f0000000900), 0x0, 0xfffffffffffffffc}, 0x2001) socketpair(0x3, 0x5, 0xf01, &(0x7f0000000180)) r4 = socket$kcm(0x2, 0x3, 0x84) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x890b, &(0x7f0000000100)) socket$kcm(0x29, 0x2, 0x0) 31.082937771s ago: executing program 3 (id=2343): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, [@map_idx={0x18, 0xa, 0x5, 0x0, 0xc}, @generic={0x81, 0x3, 0x4, 0xff7f, 0x1}, @alu={0x7, 0x0, 0xc, 0xc, 0x2, 0xfffffffffffffff8, 0xffffffffffffffe9}, @generic={0xab, 0x1, 0x2, 0x8, 0x7fffffff}]}, 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x5, 0xe, 0x3, 0x8}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0x100, 0x9, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r0}, 0x38) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x2, 0x11, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4e5}, {}, {}, [@exit, @jmp={0x5, 0x0, 0x7, 0x4, 0x0, 0xfffffffffffffff8, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0xed, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11e, 0x0, 0x0, 0xd, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x40305828, &(0x7f0000000340)={'lo\x00', @random="3f2f94c100"}) socket$kcm(0x10, 0x2, 0x4) r3 = socket$kcm(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x4, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x80044943, 0x0) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000b00)={0x0, 0xf22fff7f, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929b92a7f64e925bf0ef424c3ef29fcd5fd4721c547fde6abe4d47048b64511693624b0d786711abe4a66e250fcbfe95ac9037e58f331b26b6ed0d08e5c73ba4c49", 0xc00e}], 0x9, &(0x7f00000001c0)=[@ip_tos_int={{0x7ff4d4260000}}, @ip_ttl={{0x14}}, @ip_ttl={{0x14}}, @ip_tos_u8={{0x11}}, @ip_tos_u8={{0x11, 0x2}}, @ip_retopts={{0x0, 0x0, 0x7, {[@lsrr, @generic={0x0, 0x0, "96"}, @generic={0x0, 0x0, "206a77bdd1a004129054e7704a"}]}}}], 0xf}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803003a000b12d25a80648c2594f90324fc60100c03", 0x17}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000070000000200000007"], 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, r2}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r5, 0x58, &(0x7f0000000180)}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001880)="5c00000012006b1e003de3d86e6c1dff05137e0300000000000000b68675f80200000000a0e69eeab556a7e60f1e611ca66982949a36c23d3b48dfd8cdbf9367b4fa0a640800030006010000080003001100000000", 0x55}, {&(0x7f0000000080)="6a6203000000dd98c28394f369c6e6ed3dfc25ac256759360d5da3237c222d70354d19428b5b21b322820f64fb21e79939cc835f65e5903f6821cee73140507fa08a1b9e1bc20413ba0cab7409ac38e043cf5c354798aa5f935804b10200fdbf16354348769eff128782f74e79920cd490fe92c465aacf0e21923803dc0c274f2648642c88be5221d5eb6c37e429bd0a22e409335bd324b8d6cfc5e1730dde22b5bcf8c3ef1c", 0xa6}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x4040844) 30.422930242s ago: executing program 3 (id=2344): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x20a02, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{0x1}, &(0x7f0000000000), &(0x7f0000000040)='%+9llu \x00'}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000140)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x9d, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x6e, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b00)={0x1b, 0x0, 0x0, 0x5, 0x0, r2, 0x75, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x5}, 0x50) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)=""/161, 0xf0, 0xa1, 0x1, 0x4}, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x1a, 0x5, 0x7, 0x8, 0x4, r2, 0xb, '\x00', 0x0, r3, 0x0, 0x1, 0x2}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0x6, '\x00', r1, r3, 0x5, 0x5, 0x2}, 0x50) r5 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r5, &(0x7f00000037c0)=ANY=[@ANYBLOB="1c0000005f00071b189da80400008000000000af1f"], 0xfe33) ioctl$TUNSETLINK(r0, 0x400454cd, 0x0) 29.979407026s ago: executing program 3 (id=2347): close(0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@id, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="d5", 0xfffffdef}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41044, 0x8, 0x0, 0x0}}, 0x10) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x7, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10000, 0x0, 0x0, 0x4, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000540)={r1, &(0x7f0000000400)="14", &(0x7f0000000440)=""/236}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYRES64=r1], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0xb}, 0x94) r2 = socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xa, 0x640a9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x0, 0xbb3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open$cgroup(&(0x7f00000007c0)={0x5, 0x80, 0x1, 0x6, 0x9, 0xe, 0x0, 0x7fffffff, 0x804, 0xa, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xfffffff8, 0x1, @perf_config_ext={0x6d, 0x6}, 0x8084, 0x14, 0x3ff, 0x4, 0xb91, 0x2c6eb831, 0x8001, 0x0, 0x2, 0x0, 0x8000000000000000}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x28}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffe7c}, 0x48) sendmsg$kcm(r2, &(0x7f00000029c0)={&(0x7f0000000ac0)=@l2tp={0x2, 0x0, @rand_addr=0x64010102, 0x1}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000000c40)="3abe47b8729a2373d1765829f4aaa32137230ebdf78017e714d454197cfbb69644195f1f650a22425025ae6f380049a7a35b26f6661d27a2eee7269fd834def978ece97170c89438ce913e1a3bc6039b30e934ed93ece105c529f0dc49ef7d6417170ae24c7cfe8693f9080a83f954fd65f9c80a0ee25223d712538cc7f46d44e4bd2036dc33ec695eea0b08602c92e7f03559e5786af3cc473f4c7e1eb62814b54c9f32003654b3b65f9743add0567d090bdf0945aba6e94aa15002a44343044a03b2ff406661e8968b1b65192dd4e6f28c3fdebf099c908757bce60b57b0c3268faf70d836c0bc0c917a1ee8d1680e578edae8c4f27639", 0xf8}, {&(0x7f0000000d40)="ab544ffc2d4b35d98446a2664de6ac75fe90e98fc3de9a42d7ca664b9dc237dd7bee1ce39472ce13b5fb54bd54093d71df240286b181149c2feb4a511fc825c61094228a8bf19010bb7d316ebfcc2b12ca8ad0f84b5f7db78841c6fee4b8c14d71a862938ebb2e1067f524e65312c64b479079c31fbdb17fb78109c74131f4f11752fd0978110ea1a8e873f35373a5cde85d1c4ef083750485105680b23c1bc5648f8c1cef1ce4d6c0288801ff251e07", 0xb0}, {&(0x7f0000001280)}, {&(0x7f0000001300)="02930eb803ad75ec4661e33b6517b2964d3fa057472c67bde8e64ec41865683be62498454bf3783e5e549fbddb4f8ed91a82c99b9aaa77b43a1237c5a8d6f2c6cb2d6a6300989bcb69f8908366407430b0f7fc4abdab97e40257e0f20288efc8695bf1cbe700604c87c41d569944e1f52dbaa1656d0334937b85a455205832dfcf42b4ba3810", 0x86}], 0x4, &(0x7f0000001980)=[{0x1010, 0x103, 0x1, "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"}], 0x1010}, 0x8010) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000002c0)=r4, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000020000000000000000", @ANYRES32, @ANYBLOB="da0f000000", @ANYRES32], 0x50) 29.164889302s ago: executing program 3 (id=2351): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x404, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000006000000080000000800000040000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB], 0x50) socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000640)={0x0, &(0x7f0000000300), &(0x7f0000000500)="4ff9b9dbd4dbe4b100d4373d21e73ce61e351c92172c3ebc75c8afd858574d38c02df86ebce7f17e953f3d8f11bc9deb06b5181ad5940352cbec049c046c8f9c5892bee99104cc2d8c8ceb27b755f0733233698b1949218d", &(0x7f0000000600)="a08657ccaa92ef5cf1d34ce71834f14dcff3be3222fee515a4482b701ab4a55adfa7273840f86205c38f", 0xffffff4a, r0, 0x4}, 0x38) r1 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x29, 0x7, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x1a220, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)={0x1b, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0xc, '\x00', 0x0, r0, 0x5, 0x5}, 0x50) sendmsg$kcm(r1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000140)=ANY=[@ANYBLOB="180200"/14, @ANYRES32, @ANYBLOB="00000000000000006600ffffff80000018000000000000000000000000000000950000000000000018010000202070250000000000202020db1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b502000000000000850000000600"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0xfffff000, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x50) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = syz_clone(0x300000, &(0x7f0000000240), 0x0, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000440)="02cd069600d7d625acdd409441f7fc8ba8731e257b86222fc52de5ccad30b2edb1f183c798dbb550656b090879401bab96a8cd5f265d7c8aaec3cd4b6bd36fa52039e33c8dcc3fbc000c1df749f2467db6fa2fa3db7032d5bce9f5c7ebe68e5cb29f2e276f0db9e4892038145431d1e80de32c05e90ab39462da0dd1394fd55761be621ceb697550b7049dbfcf179c0fc8ac79c25a8a6212004d167bcb32f4") perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x5, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x4, 0x101}, 0xa0d2, 0x7, 0x0, 0x6}, r3, 0xf, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, 0x0) sendmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2c}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000000)='Gb', 0x5dc}], 0x1}, 0x480c0) recvmsg$kcm(r2, &(0x7f0000000980)={&(0x7f0000000880)=@l2tp={0x2, 0x0, @dev}, 0x80, &(0x7f0000000900), 0x0, 0xfffffffffffffffc}, 0x2001) socketpair(0x3, 0x5, 0xf01, &(0x7f0000000180)) r4 = socket$kcm(0x2, 0x3, 0x84) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x890b, &(0x7f0000000100)) socket$kcm(0x29, 0x2, 0x0) 22.789534852s ago: executing program 2 (id=2377): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x25, 0xc, 0x0, 0x0, 0x0, 0x9, 0x641a8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8400, 0x3, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x1e, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x20000000) 22.285077259s ago: executing program 0 (id=2378): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x200, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x3, 0x0, 0x0, 0x0, 0x2008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x94ea}, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x18, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000300)=[0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0], 0x0, 0xa9, &(0x7f00000003c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0x1, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0x230, '\x00', r1, r0, 0x2, 0x4}, 0x50) socket$kcm(0x2, 0x3, 0x73) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x7ff, 0x72}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x11, 0x200000000000002, 0x300) socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x400c080) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)=ANY=[], 0x50) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f00000005c0)) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r3, 0x0, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) 21.839249192s ago: executing program 1 (id=2379): close(0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@id, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="d5", 0xfffffdef}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41044, 0x8, 0x0, 0x0}}, 0x10) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x7, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10000, 0x0, 0x0, 0x4, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000540)={r1, &(0x7f0000000400)="14", &(0x7f0000000440)=""/236}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYRES64=r1], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0xb}, 0x94) r2 = socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xa, 0x640a9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x0, 0xbb3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open$cgroup(&(0x7f00000007c0)={0x5, 0x80, 0x1, 0x6, 0x9, 0xe, 0x0, 0x7fffffff, 0x804, 0xa, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xfffffff8, 0x1, @perf_config_ext={0x6d, 0x6}, 0x8084, 0x14, 0x3ff, 0x4, 0xb91, 0x2c6eb831, 0x8001, 0x0, 0x2, 0x0, 0x8000000000000000}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x28}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffe7c}, 0x48) sendmsg$kcm(r2, &(0x7f00000029c0)={&(0x7f0000000ac0)=@l2tp={0x2, 0x0, @rand_addr=0x64010102, 0x1}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000000c40)="3abe47b8729a2373d1765829f4aaa32137230ebdf78017e714d454197cfbb69644195f1f650a22425025ae6f380049a7a35b26f6661d27a2eee7269fd834def978ece97170c89438ce913e1a3bc6039b30e934ed93ece105c529f0dc49ef7d6417170ae24c7cfe8693f9080a83f954fd65f9c80a0ee25223d712538cc7f46d44e4bd2036dc33ec695eea0b08602c92e7f03559e5786af3cc473f4c7e1eb62814b54c9f32003654b3b65f9743add0567d090bdf0945aba6e94aa15002a44343044a03b2ff406661e8968b1b65192dd4e6f28c3fdebf099c908757bce60b57b0c3268faf70d836c0bc0c917a1ee8d1680e578edae8c4f27639", 0xf8}, {&(0x7f0000000d40)="ab544ffc2d4b35d98446a2664de6ac75fe90e98fc3de9a42d7ca664b9dc237dd7bee1ce39472ce13b5fb54bd54093d71df240286b181149c2feb4a511fc825c61094228a8bf19010bb7d316ebfcc2b12ca8ad0f84b5f7db78841c6fee4b8c14d71a862938ebb2e1067f524e65312c64b479079c31fbdb17fb78109c74131f4f11752fd0978110ea1a8e873f35373a5cde85d1c4ef083750485105680b23c1bc5648f8c1cef1ce4d6c0288801ff251e07", 0xb0}, {&(0x7f0000001280)}, {&(0x7f0000001300)="02930eb803ad75ec4661e33b6517b2964d3fa057472c67bde8e64ec41865683be62498454bf3783e5e549fbddb4f8ed91a82c99b9aaa77b43a1237c5a8d6f2c6cb2d6a6300989bcb69f8908366407430b0f7fc4abdab97e40257e0f20288efc8695bf1cbe700604c87c41d569944e1f52dbaa1656d0334937b85a455205832dfcf42b4ba3810", 0x86}], 0x4, &(0x7f0000001980)=[{0x1010, 0x103, 0x1, "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"}], 0x1010}, 0x8010) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000002c0)=r4, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfdef) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000020000000000000000", @ANYRES32, @ANYBLOB="da0f000000", @ANYRES32], 0x50) 21.543533722s ago: executing program 2 (id=2380): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_pid(r0, 0x0, 0x0) write$cgroup_pid(r0, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300), 0x8) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000400)=@generic={0x0, 0x0, 0x18}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x2, 0x0) socketpair(0x1a, 0x800, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) r2 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, &(0x7f0000000000), &(0x7f00000000c0)=r1}, 0x20) recvmsg$kcm(r2, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x40012100) 21.317806779s ago: executing program 0 (id=2381): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000", @ANYRES32], 0x0}, 0x94) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, 0x0, 0xfe33) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x3, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r4, 0x300, 0x0}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1}, 0x1090da, 0x0, 0x0, 0x0, 0x0, 0x4, 0x749}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x200088c0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000d40)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf2000000000000007000000080000002d0301000000000095000000000000007126000000000000bf670000000000005601000000ff07ad67060000020000006a0200000ee60000bf250000000000003d350000000000006507000002000000070700004c0000001f75000000000000bf54000000000000160400000400f9ffad3001000000000084000000000000004500000001f0ffff95000000000000006e8ad524a56601a5585b7351ca1136aef2e9407e5c2501d11900db85604036883647b1fb3f1403b816f511c8c56e56e40b01005505f8a89dae4293b10f3631b25fc9f189084c7fddccff01361d355f6cce8ec2abcdf1bc9040daef2cfa2046e2091e269f4734ffa55eb2d4e8de20b38c8808b365b46bd54c68cd30139a8c3827a7dd6d6e2b5fea3906f8456b0000000000ff07efffffff0047018ae79db613d2aec070f718ab629b4975320dd7a7da532281fd22c7b835005bf52715396669836db6000000005b4f0591ee7c8cd263dd172b28d01c4d8d4fee81e3cdd5daf2cdad3d1a74a2f078aa6402483856a6e494408d0b33047f06aec2cc590df28efc7dbec6857db922195a271af103f03e1155197e067b2ebf4e2dae060959c9639564f000fc3cdd05a1575c91cf5ba8b2db403681ee48f5287123a0d246c0c4c00fe979dbc09ed4db22d7172adc6ae8faa5f9ad188e07000000000000008d88a0b4684559d46cae41db1b914e93f1f8000000000000000000e33de432e488ad0e724c2d14a1e770e116984a5700afb8a1f3d47277ef0e33e7e00ec5f74e10937ba0e321346977b7d1b18013f509675b5b0f352e30dffda780e95c301f4fc7d5a76475ace6b128b02bfd71023daffdf748a6bd356fcba6ec96373d1101000736ac0bbcb5f4836bddfe8bf46308000000ade9e59fcf271bb98bd0b8b5216b858b414c31682f9f3db2e4d8e5898e445fe55ac56c0d642986f8bbc7340bc6393f774318c9fc9b05788de2c6e601b50777e8dff581de1d5ae3d801ead7eba31126e2172fa1eadf5f3bec81004d00000000c8e4692e051c731f9ac766b7fd66278d40f0760f23e8c7d1f47cd8e02504e85e152955ad8acd989c0b2eea71414f533f5685c3904bfe1d0011ffc1ba5398f3d6812467c1a4186edd036f15bf847c50f79e1a0ad3d2b5080ecb0148e2b86177869884ae62420c9f1b534e969fce97ffff070000000000dbbfe0ed7c5853a665c0805752dca0e571d75cac5a5d8e4f6e05055b6dec5a9a5696f053a92d81fd9e5f2b9dbbe24f38e745b5a95d45003d0600e413dc623f3e6b096c8b0ad7438c6631388892c55b06"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls}, 0x94) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)="d80000001c0081044e81f782db44b904021d080201000000400000a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x20000000) r5 = socket$kcm(0xa, 0x1, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={r6, 0x20, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x0}}, 0x10) setsockopt$sock_attach_bpf(r5, 0x6, 0x1d, &(0x7f00000000c0), 0xd8) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000df5d412bc46c", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r8, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f0000000300)=[0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xcd, &(0x7f0000000200)=[{}], 0xfffffffffffffea5, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0xf5, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000600)=r7, 0x4) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r11}, 0xc) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r9}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00', 0x2000000}, 0x20) 21.237022621s ago: executing program 1 (id=2382): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000200000000000000000000020200000000000000010000050000000000"], &(0x7f0000001f40)=""/4089, 0x3e, 0xff9, 0xa}, 0x28) 20.599138962s ago: executing program 0 (id=2383): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000", @ANYRES32], 0x0}, 0x94) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, 0x0, 0xfe33) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x3, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r4, 0x300, 0x0}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1}, 0x1090da, 0x0, 0x0, 0x0, 0x0, 0x4, 0x749}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x200088c0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls}, 0x94) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)="d80000001c0081044e81f782db44b904021d080201000000400000a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x20000000) r5 = socket$kcm(0xa, 0x1, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={r6, 0x20, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x0}}, 0x10) setsockopt$sock_attach_bpf(r5, 0x6, 0x1d, &(0x7f00000000c0), 0xd8) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000df5d412bc46c", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0xc, &(0x7f0000002000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000060000850000008200000095"], &(0x7f0000001fc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r9, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f0000000300)=[0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xcd, &(0x7f0000000200)=[{}], 0xfffffffffffffea5, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0xf5, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000600)=r7, 0x4) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r12}, 0xc) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r10}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00', 0x2000000}, 0x20) 20.598796652s ago: executing program 1 (id=2384): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x404, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000800000000000000000850000004100000095000000000000004be98911ed523cf4451d51e400cbd30efbb0a73ceb2b050a456c3a6cfd127868ad3fe3f9a9b946c97f9fc091e4c3f4b0a0d7ed298717a480c48868162ff933958cb6a5265519fee4cb1b8b93f0b164770fd40c7a8060ce72"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000640)={&(0x7f00000000c0)="615018cff8ddc4bd72a1e822fe169204286b5a0ba2d5e07d24510a045a4667b7ebfec91d956c370b19adf9e6426cb6f46d3d", &(0x7f0000000300), &(0x7f0000000500), &(0x7f0000000600)="a08657ccaa92ef5cf1d34ce71834f14dcff3be3222fee515a4482b701ab4a55adfa7273840f86205c38f1287", 0xffffff4a, 0xffffffffffffffff, 0x4}, 0x38) r1 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x29, 0x7, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000680), 0x0}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d80000002000811f4e81f782db44b90402000000e8fe55a1180015000600142603600e1209000a00000004a1a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8ef52b49816277ce06bba", 0x5e}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x2, 0xce, &(0x7f0000000340)=""/206}, 0x94) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = syz_clone(0x300000, &(0x7f0000000240)="509d9cde231074b6653fecc2a9eb3d5734845f01715c3e8c1c4f05f9b629f70217acdf04c4305216ba64f670892ef7a2336b6785c28d10ab369265088e217309e06b55b13e179992e8eab18e7aa4ab593fdb96a23121d573e9c3ac18b65b1228af0c5b0942e001664ef62dda081725cab4445152f120dae542f38ce6c410397aef33b5b068f7c297c65ce2e0f33d276dcb21ceecf35249960d44089571a974e27f086441e56ebb262c0976aeb03db32766c2", 0xb2, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000440)="02cd069600d7d625acdd409441f7fc8ba8731e257b86222fc52de5ccad30b2edb1f183c798dbb550656b090879401bab96a8cd5f265d7c8aaec3cd4b6bd36fa52039e33c8dcc3fbc") bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{r2}, &(0x7f00000007c0), &(0x7f0000000800)=r0}, 0x20) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x5, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x4, 0x101}, 0xa0d2, 0x7, 0x0, 0x6}, r4, 0xf, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, 0x0) sendmsg$kcm(r3, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2c}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000000)='Gb', 0x5dc}], 0x1}, 0x480c0) recvmsg$kcm(r3, &(0x7f0000000980)={&(0x7f0000000880)=@l2tp={0x2, 0x0, @dev}, 0x80, &(0x7f0000000900), 0x0, 0xfffffffffffffffc}, 0x2001) socketpair(0x3, 0x5, 0xf01, &(0x7f0000000180)) r5 = socket$kcm(0x2, 0x3, 0x84) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x890b, &(0x7f0000000100)) socket$kcm(0x29, 0x2, 0x0) 20.425019607s ago: executing program 2 (id=2385): r0 = perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f0000000000), 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = socket$kcm(0x1e, 0x4, 0x0) socket$kcm(0x10, 0x2, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(r3, 0x0, 0xfe33) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0xe, 0x0, 0x0, 0x0, 0x5, 0x200, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYRES16=r2, @ANYRES32], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000380), 0x0}, 0x20) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{0x0}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x21, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[], 0x0, 0x34}, 0x28) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e40)={0x18, 0x16, &(0x7f0000000f00)=ANY=[@ANYBLOB="1800000005000000000000001e06000018430000fdffffff00000000000000001832000002000000000000000000000018340000040000000000000000000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB="504597fa82875de1fe4f4691ac906412eca4fe5aac48a54e305d2d", @ANYBLOB="0000000000000000b70500000800000085000000a500000095de070000000000"], &(0x7f0000000700)='GPL\x00', 0x8, 0xeb, &(0x7f0000000840)=""/235, 0x40f00, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000d00)={0x5, 0x10, 0x11f, 0x8000}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000d40)=[r4, r4], &(0x7f0000000d80)=[{0x0, 0x3, 0x8, 0x4}, {0x3, 0x4, 0xb, 0x3}, {0x2, 0x3, 0x3}, {0x0, 0x3, 0x4, 0x2}, {0x3, 0x1, 0xc, 0x6}, {0x1, 0x3, 0x6, 0xb}, {0x2, 0x2, 0xf, 0x4a2a6c999befdd1b}, {0x0, 0x4, 0x8, 0x6}, {0x5, 0x1, 0x9, 0xa}], 0x10, 0x2890}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f"], 0x50) r10 = perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, 0xffffffffffffffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r9}, &(0x7f0000000a00), 0x0}, 0x20) syz_clone(0x22023500, 0x0, 0x20010, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x8, 0x92}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r11 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000480)="1400000016000b63d25a8064000000000124fc60", 0x14}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0, 0x8, 0x0, 0x0, 0x41000}, 0x94) 19.776750778s ago: executing program 1 (id=2386): r0 = perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f0000000000), 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = socket$kcm(0x1e, 0x4, 0x0) socket$kcm(0x10, 0x2, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(r3, 0x0, 0xfe33) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0xe, 0x0, 0x0, 0x0, 0x5, 0x200, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYRES16=r2, @ANYRES32], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000380), 0x0}, 0x20) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{0x0}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x21, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[], 0x0, 0x34}, 0x28) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e40)={0x18, 0x16, &(0x7f0000000f00)=ANY=[@ANYBLOB="1800000005000000000000001e06000018430000fdffffff00000000000000001832000002000000000000000000000018340000040000000000000000000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB="504597fa82875de1fe4f4691ac906412eca4fe5aac48a54e305d2d", @ANYBLOB="0000000000000000b70500000800000085000000a500000095de070000000000"], &(0x7f0000000700)='GPL\x00', 0x8, 0xeb, &(0x7f0000000840)=""/235, 0x40f00, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000d00)={0x5, 0x10, 0x11f, 0x8000}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000d40)=[r4, r4], &(0x7f0000000d80)=[{0x0, 0x3, 0x8, 0x4}, {0x3, 0x4, 0xb, 0x3}, {0x2, 0x3, 0x3}, {0x0, 0x3, 0x4, 0x2}, {0x3, 0x1, 0xc, 0x6}, {0x1, 0x3, 0x6, 0xb}, {0x2, 0x2, 0xf, 0x4a2a6c999befdd1b}, {0x3, 0x3, 0x4, 0x7}, {0x5, 0x1, 0x9, 0xa}], 0x10, 0x2890}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f"], 0x50) r10 = perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, 0xffffffffffffffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r9}, &(0x7f0000000a00), 0x0}, 0x20) syz_clone(0x22023500, 0x0, 0x20010, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x8, 0x92}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r11 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000480)="1400000016000b63d25a8064000000000124fc60", 0x14}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0, 0x8, 0x0, 0x0, 0x41000}, 0x94) 18.997331202s ago: executing program 0 (id=2387): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup=r0, r0, 0x2f}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r0, 0x2f, 0x0, 0x0, &(0x7f0000000000), 0x1, 0x0, 0x0, &(0x7f0000000180), 0x0}, 0x2a) 18.156855478s ago: executing program 2 (id=2388): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x404, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000800000000000000000850000004100000095000000000000004be98911ed523cf4451d51e400cbd30efbb0a73ceb2b050a456c3a6cfd127868ad3fe3f9a9b946c97f9fc091e4c3f4b0a0d7ed298717a480c48868162ff933958cb6a5265519fee4cb1b8b93f0b164770fd40c7a8060ce72beff7cda177e281ef0b7a1a97b2c8c5617bff8c9441a45fd951df19a9c6e"], 0x0, 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000006000000080000000800000040000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000003f55cc47f00000000000000000000000000000004000000000000000"], 0x50) socket$kcm(0xa, 0x5, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000640)={&(0x7f00000000c0)="615018cff8ddc4bd72a1e822fe169204286b5a0ba2d5e07d24510a045a4667b7ebfec91d956c370b19adf9e6426cb6f46d3d57d9a3da9ed50f50f1eda03e3d5b98ba", &(0x7f0000000300), &(0x7f0000000500)="4ff9b9dbd4dbe4b100d4373d21e73ce61e351c92172c3ebc75c8afd858574d38c02df86ebce7f17e953f3d8f11bc9deb06b5181ad5940352cbec049c046c8f9c5892bee99104cc2d8c8ceb27b755f0733233698b1949218d9f62437d2c7e49fb73b4504338e5bf85fe2c3928a9af7837ed58193b5f210c0d252c6dabc470c9ff8b0e8a32d5ad091f3a06f31f5ef02d0078ac5425e159d4e25223c62151f09341b78cb360ad9c26d4c8f3bc89fd9d6d2f15550caa06742f42d255c1c41f0dd39cf144d4f66aabd13e85384b571260", &(0x7f0000000600)="a08657ccaa92ef5cf1d34ce71834f14dcff3be3222fee515a4482b701ab4a55adf", 0xffffff4a, r1, 0x4}, 0x38) r3 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x29, 0x7, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x1a220, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r1, 0xffffffffffffffff}, &(0x7f0000000680), &(0x7f00000006c0)=r2}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)={0x1b, 0x0, 0x0, 0x9, 0x0, r4, 0xc, '\x00', 0x0, r1, 0x5, 0x5}, 0x50) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d80000002000811f4e81f782db44b90402000000e8fe55a1180015000600142603600e1209000a00000004a1a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970100040000", 0xd8}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000031d0851000000600000018040000", @ANYRES32, @ANYBLOB="00000000000000006600ffffff80000018000000000000000000000000000000950000000000000018010000202070250000000000202020db1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b502000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x3, &(0x7f0000000340)=""/206}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0xfffff000, 0xfe71, 0xffffffffffffff40, &(0x7f0000000080)="85d77444c5a569f1e21b08c0f264", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x3b) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = syz_clone(0x300000, &(0x7f0000000240)="509d9cde231074b6653fecc2a9eb3d5734845f01715c3e8c1c4f05f9b629f70217acdf04c4305216ba64f670892ef7a2336b6785c28d10ab369265088e217309e06b55b13e179992e8eab18e7aa4ab593fdb96a23121d573e9c3ac18b65b1228af0c5b0942e001664ef62dda081725cab4445152f120dae542f38ce6c410397aef33b5b068f7c297c65ce2e0f33d276dcb21ceecf35249960d44089571a974e27f086441e56ebb262c0976aeb03db32766c2", 0xb2, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000440)="02cd069600d7d625acdd409441f7fc8ba8731e257b86222fc52de5ccad30b2edb1f183c798dbb550656b090879401bab96a8cd5f265d7c8aaec3cd4b6bd36fa52039e33c8dcc3fbc000c1df749f2467db6fa2fa3db7032d5bce9f5c7ebe68e5cb29f2e276f0db9e4892038145431d1e80de32c05e90ab39462da0dd1394fd55761be621ceb697550b7049dbfcf179c0fc8ac79c25a8a6212004d167bcb32f4503baf8270") bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{r4}, &(0x7f00000007c0), &(0x7f0000000800)=r0}, 0x20) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x5, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x4, 0x101}, 0xa0d2, 0x7, 0x0, 0x6}, r6, 0xf, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, 0x0) sendmsg$kcm(r5, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2c}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000000)='Gb', 0x5dc}], 0x1}, 0x480c0) recvmsg$kcm(r5, &(0x7f0000000980)={&(0x7f0000000880)=@l2tp={0x2, 0x0, @dev}, 0x80, &(0x7f0000000900), 0x0, 0xfffffffffffffffc}, 0x2001) socketpair(0x3, 0x5, 0xf01, &(0x7f0000000180)) r7 = socket$kcm(0x2, 0x3, 0x84) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x890b, &(0x7f0000000100)) socket$kcm(0x29, 0x2, 0x0) 18.11962971s ago: executing program 1 (id=2389): close(0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@id, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="d5", 0xfffffdef}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41044, 0x8, 0x0, 0x0}}, 0x10) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x7, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10000, 0x0, 0x0, 0x4, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000540)={r1, &(0x7f0000000400)="14", &(0x7f0000000440)=""/236}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYRES64=r1], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0xb}, 0x94) r2 = socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xa, 0x640a9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x0, 0xbb3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open$cgroup(&(0x7f00000007c0)={0x5, 0x80, 0x1, 0x6, 0x9, 0xe, 0x0, 0x7fffffff, 0x804, 0xa, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xfffffff8, 0x1, @perf_config_ext={0x6d, 0x6}, 0x8084, 0x14, 0x3ff, 0x4, 0xb91, 0x2c6eb831, 0x8001, 0x0, 0x2, 0x0, 0x8000000000000000}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x28}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffe7c}, 0x48) sendmsg$kcm(r2, &(0x7f00000029c0)={&(0x7f0000000ac0)=@l2tp={0x2, 0x0, @rand_addr=0x64010102, 0x1}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000000c40)="3abe47b8729a2373d1765829f4aaa32137230ebdf78017e714d454197cfbb69644195f1f650a22425025ae6f380049a7a35b26f6661d27a2eee7269fd834def978ece97170c89438ce913e1a3bc6039b30e934ed93ece105c529f0dc49ef7d6417170ae24c7cfe8693f9080a83f954fd65f9c80a0ee25223d712538cc7f46d44e4bd2036dc33ec695eea0b08602c92e7f03559e5786af3cc473f4c7e1eb62814b54c9f32003654b3b65f9743add0567d090bdf0945aba6e94aa15002a44343044a03b2ff406661e8968b1b65192dd4e6f28c3fdebf099c908757bce60b57b0c3268faf70d836c0bc0c917a1ee8d1680e578edae8c4f27639", 0xf8}, {&(0x7f0000000d40)="ab544ffc2d4b35d98446a2664de6ac75fe90e98fc3de9a42d7ca664b9dc237dd7bee1ce39472ce13b5fb54bd54093d71df240286b181149c2feb4a511fc825c61094228a8bf19010bb7d316ebfcc2b12ca8ad0f84b5f7db78841c6fee4b8c14d71a862938ebb2e1067f524e65312c64b479079c31fbdb17fb78109c74131f4f11752fd0978110ea1a8e873f35373a5cde85d1c4ef083750485105680b23c1bc5648f8c1cef1ce4d6c0288801ff251e07", 0xb0}, {&(0x7f0000001280)}, {&(0x7f0000001300)="02930eb803ad75ec4661e33b6517b2964d3fa057472c67bde8e64ec41865683be62498454bf3783e5e549fbddb4f8ed91a82c99b9aaa77b43a1237c5a8d6f2c6cb2d6a6300989bcb69f8908366407430b0f7fc4abdab97e40257e0f20288efc8695bf1cbe700604c87c41d569944e1f52dbaa1656d0334937b85a455205832dfcf42b4ba3810", 0x86}], 0x4, &(0x7f0000001980)=[{0x1010, 0x103, 0x1, "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"}], 0x1010}, 0x8010) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000002c0)=r4, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfdef) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000020000000000000000", @ANYRES32, @ANYBLOB="da0f000000", @ANYRES32], 0x50) 17.962094164s ago: executing program 0 (id=2390): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000", @ANYRES32], 0x0}, 0x94) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, 0x0, 0xfe33) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x3, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r4, 0x300, 0x0}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1}, 0x1090da, 0x0, 0x0, 0x0, 0x0, 0x4, 0x749}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x200088c0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls}, 0x94) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)="d80000001c0081044e81f782db44b904021d080201000000400000a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x20000000) r5 = socket$kcm(0xa, 0x1, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={r6, 0x20, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x0}}, 0x10) setsockopt$sock_attach_bpf(r5, 0x6, 0x1d, &(0x7f00000000c0), 0xd8) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000df5d412bc46c", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r8, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f0000000300)=[0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xcd, &(0x7f0000000200)=[{}], 0xfffffffffffffea5, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0xf5, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000600)=r7, 0x4) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r11}, 0xc) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r9}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00', 0x2000000}, 0x20) 17.671669104s ago: executing program 1 (id=2391): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="00000e0000", @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0xb5, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1, 0x0, 0x8, 0xfffffffffffffffe, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000940)=ANY=[@ANYBLOB="18050000000000000000000000000000851000000600000018100000", @ANYRES32, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000a60a000000000000180000002020782500000000002020207b0af8ff00000000bd510000000000000701000000feffffb702000008000000b7030000000000008500000019000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xdd, &(0x7f0000000340)=""/221}, 0x94) syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r6, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000000)=r7, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c40)={0x6, 0x1f, &(0x7f0000000a00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x401}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, @jmp={0x5, 0x0, 0x7, 0x5, 0x4, 0x10, 0x10}, @jmp={0x5, 0x0, 0xb, 0x1, 0x7, 0x2, 0x10}, @map_fd, @map_fd={0x18, 0x9}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x2}, @exit], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000b00)='syzkaller\x00', 0x8, 0x22, &(0x7f0000000b40)=""/34, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000bc0)={0x2, 0x4, 0x5, 0xd}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000c00)=[r0, r7, r0], 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000d000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNGETVNETLE(r4, 0x8004745a, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) syz_clone(0x20083500, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000600000000000000000000030000000004000000020000000cfbffff002e61615000"], &(0x7f0000000500)=""/144, 0x36, 0x90, 0x1, 0x9, 0x10000}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)={0x1b, 0x0, 0x0, 0x10001, 0x0, r0, 0x4, '\x00', 0x0, r9, 0x1, 0x5, 0x4}, 0x50) 16.975248276s ago: executing program 2 (id=2392): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_pid(r0, 0x0, 0x0) write$cgroup_pid(r0, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300), 0x8) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000400)=@generic={0x0, 0x0, 0x18}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x2, 0x0) socketpair(0x1a, 0x800, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) r2 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, &(0x7f0000000000), &(0x7f00000000c0)=r1}, 0x20) recvmsg$kcm(r2, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x40012100) 16.719889074s ago: executing program 0 (id=2393): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x404, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000800000000000000000850000004100000095000000000000004be98911ed523cf4451d51e400cbd30efbb0a73ceb2b050a456c3a6cfd127868ad3fe3f9a9b946c97f9fc091e4c3f4b0a0d7ed298717a480c48868162ff933958cb6a5265519fee4cb1b8b93f0b164770fd40c7a8060ce72"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000640)={&(0x7f00000000c0)="615018cff8ddc4bd72a1e822fe169204286b5a0ba2d5e07d24510a045a4667b7ebfec91d956c370b19adf9e6426cb6f46d3d", &(0x7f0000000300), &(0x7f0000000500), &(0x7f0000000600)="a08657ccaa92ef5cf1d34ce71834f14dcff3be3222fee515a4482b701ab4a55adfa7273840f86205c38f1287", 0xffffff4a, 0xffffffffffffffff, 0x4}, 0x38) r1 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x29, 0x7, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000680), 0x0}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d80000002000811f4e81f782db44b90402000000e8fe55a1180015000600142603600e1209000a00000004a1a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8ef52b49816277ce06bba", 0x5e}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x2, 0xce, &(0x7f0000000340)=""/206}, 0x94) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = syz_clone(0x300000, &(0x7f0000000240)="509d9cde231074b6653fecc2a9eb3d5734845f01715c3e8c1c4f05f9b629f70217acdf04c4305216ba64f670892ef7a2336b6785c28d10ab369265088e217309e06b55b13e179992e8eab18e7aa4ab593fdb96a23121d573e9c3ac18b65b1228af0c5b0942e001664ef62dda081725cab4445152f120dae542f38ce6c410397aef33b5b068f7c297c65ce2e0f33d276dcb21ceecf35249960d44089571a974e27f086441e56ebb262c0976aeb03db32766c2", 0xb2, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000440)="02cd069600d7d625acdd409441f7fc8ba8731e257b86222fc52de5ccad30b2edb1f183c798dbb550656b090879401bab96a8cd5f265d7c8aaec3cd4b6bd36fa52039e33c8dcc3fbc") bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{r2}, &(0x7f00000007c0), &(0x7f0000000800)=r0}, 0x20) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x5, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x4, 0x101}, 0xa0d2, 0x7, 0x0, 0x6}, r4, 0xf, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, 0x0) sendmsg$kcm(r3, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2c}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000000)='Gb', 0x5dc}], 0x1}, 0x480c0) recvmsg$kcm(r3, &(0x7f0000000980)={&(0x7f0000000880)=@l2tp={0x2, 0x0, @dev}, 0x80, &(0x7f0000000900), 0x0, 0xfffffffffffffffc}, 0x2001) socketpair(0x3, 0x5, 0xf01, &(0x7f0000000180)) r5 = socket$kcm(0x2, 0x3, 0x84) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x890b, &(0x7f0000000100)) socket$kcm(0x29, 0x2, 0x0) 15.765016824s ago: executing program 2 (id=2394): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x404, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000800000000000000000850000004100000095000000000000004be98911ed523cf4451d51e400cbd30efbb0a73ceb2b050a456c3a6cfd127868ad3fe3f9a9b946c97f9fc091e4c3f4b0a0d7ed298717a480c48868162ff933958cb6a5265519fee4cb1b8b93f0b164770fd40c7a8060ce72beff7cda177e281ef0b7a1a97b2c8c5617bff8c9441a45fd951df19a9c6e"], 0x0, 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000006000000080000000800000040000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000003f55cc47f00000000000000000000000000000004000000000000000"], 0x50) socket$kcm(0xa, 0x5, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000640)={&(0x7f00000000c0)="615018cff8ddc4bd72a1e822fe169204286b5a0ba2d5e07d24510a045a4667b7ebfec91d956c370b19adf9e6426cb6f46d3d57d9a3da9ed50f50f1eda03e3d5b98ba", &(0x7f0000000300), &(0x7f0000000500)="4ff9b9dbd4dbe4b100d4373d21e73ce61e351c92172c3ebc75c8afd858574d38c02df86ebce7f17e953f3d8f11bc9deb06b5181ad5940352cbec049c046c8f9c5892bee99104cc2d8c8ceb27b755f0733233698b1949218d9f62437d2c7e49fb73b4504338e5bf85fe2c3928a9af7837ed58193b5f210c0d252c6dabc470c9ff8b0e8a32d5ad091f3a06f31f5ef02d0078ac5425e159d4e25223c62151f09341b78cb360ad9c26d4c8f3bc89fd9d6d2f15550caa06742f42d255c1c41f0dd39cf144d4f66aabd13e85384b571260", &(0x7f0000000600)="a08657ccaa92ef5cf1d34ce71834f14dcff3be3222fee515a4482b701ab4a55adf", 0xffffff4a, r1, 0x4}, 0x38) r3 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x29, 0x7, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x1a220, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r1, 0xffffffffffffffff}, &(0x7f0000000680), &(0x7f00000006c0)=r2}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)={0x1b, 0x0, 0x0, 0x9, 0x0, r4, 0xc, '\x00', 0x0, r1, 0x5, 0x5}, 0x50) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d80000002000811f4e81f782db44b90402000000e8fe55a1180015000600142603600e1209000a00000004a1a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970100040000", 0xd8}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000031d0851000000600000018040000", @ANYRES32, @ANYBLOB="00000000000000006600ffffff80000018000000000000000000000000000000950000000000000018010000202070250000000000202020db1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b502000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x3, &(0x7f0000000340)=""/206}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0xfffff000, 0xfe71, 0xffffffffffffff40, &(0x7f0000000080)="85d77444c5a569f1e21b08c0f264", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x3b) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = syz_clone(0x300000, &(0x7f0000000240)="509d9cde231074b6653fecc2a9eb3d5734845f01715c3e8c1c4f05f9b629f70217acdf04c4305216ba64f670892ef7a2336b6785c28d10ab369265088e217309e06b55b13e179992e8eab18e7aa4ab593fdb96a23121d573e9c3ac18b65b1228af0c5b0942e001664ef62dda081725cab4445152f120dae542f38ce6c410397aef33b5b068f7c297c65ce2e0f33d276dcb21ceecf35249960d44089571a974e27f086441e56ebb262c0976aeb03db32766c2", 0xb2, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000440)="02cd069600d7d625acdd409441f7fc8ba8731e257b86222fc52de5ccad30b2edb1f183c798dbb550656b090879401bab96a8cd5f265d7c8aaec3cd4b6bd36fa52039e33c8dcc3fbc000c1df749f2467db6fa2fa3db7032d5bce9f5c7ebe68e5cb29f2e276f0db9e4892038145431d1e80de32c05e90ab39462da0dd1394fd55761be621ceb697550b7049dbfcf179c0fc8ac79c25a8a6212004d167bcb32f4503baf8270") bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{r4}, &(0x7f00000007c0), &(0x7f0000000800)=r0}, 0x20) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x5, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x4, 0x101}, 0xa0d2, 0x7, 0x0, 0x6}, r6, 0xf, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, 0x0) sendmsg$kcm(r5, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2c}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000000)='Gb', 0x5dc}], 0x1}, 0x480c0) recvmsg$kcm(r5, &(0x7f0000000980)={&(0x7f0000000880)=@l2tp={0x2, 0x0, @dev}, 0x80, &(0x7f0000000900), 0x0, 0xfffffffffffffffc}, 0x2001) socketpair(0x3, 0x5, 0xf01, &(0x7f0000000180)) r7 = socket$kcm(0x2, 0x3, 0x84) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x890b, &(0x7f0000000100)) socket$kcm(0x29, 0x2, 0x0) 2.071475455s ago: executing program 32 (id=2391): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="00000e0000", @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0xb5, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1, 0x0, 0x8, 0xfffffffffffffffe, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000940)=ANY=[@ANYBLOB="18050000000000000000000000000000851000000600000018100000", @ANYRES32, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000a60a000000000000180000002020782500000000002020207b0af8ff00000000bd510000000000000701000000feffffb702000008000000b7030000000000008500000019000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xdd, &(0x7f0000000340)=""/221}, 0x94) syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r6, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000000)=r7, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c40)={0x6, 0x1f, &(0x7f0000000a00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x401}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, @jmp={0x5, 0x0, 0x7, 0x5, 0x4, 0x10, 0x10}, @jmp={0x5, 0x0, 0xb, 0x1, 0x7, 0x2, 0x10}, @map_fd, @map_fd={0x18, 0x9}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x2}, @exit], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000b00)='syzkaller\x00', 0x8, 0x22, &(0x7f0000000b40)=""/34, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000bc0)={0x2, 0x4, 0x5, 0xd}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000c00)=[r0, r7, r0], 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000d000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNGETVNETLE(r4, 0x8004745a, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) syz_clone(0x20083500, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000600000000000000000000030000000004000000020000000cfbffff002e61615000"], &(0x7f0000000500)=""/144, 0x36, 0x90, 0x1, 0x9, 0x10000}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)={0x1b, 0x0, 0x0, 0x10001, 0x0, r0, 0x4, '\x00', 0x0, r9, 0x1, 0x5, 0x4}, 0x50) 1.028196408s ago: executing program 33 (id=2393): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x404, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000800000000000000000850000004100000095000000000000004be98911ed523cf4451d51e400cbd30efbb0a73ceb2b050a456c3a6cfd127868ad3fe3f9a9b946c97f9fc091e4c3f4b0a0d7ed298717a480c48868162ff933958cb6a5265519fee4cb1b8b93f0b164770fd40c7a8060ce72"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000640)={&(0x7f00000000c0)="615018cff8ddc4bd72a1e822fe169204286b5a0ba2d5e07d24510a045a4667b7ebfec91d956c370b19adf9e6426cb6f46d3d", &(0x7f0000000300), &(0x7f0000000500), &(0x7f0000000600)="a08657ccaa92ef5cf1d34ce71834f14dcff3be3222fee515a4482b701ab4a55adfa7273840f86205c38f1287", 0xffffff4a, 0xffffffffffffffff, 0x4}, 0x38) r1 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x29, 0x7, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000680), 0x0}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d80000002000811f4e81f782db44b90402000000e8fe55a1180015000600142603600e1209000a00000004a1a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8ef52b49816277ce06bba", 0x5e}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x2, 0xce, &(0x7f0000000340)=""/206}, 0x94) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = syz_clone(0x300000, &(0x7f0000000240)="509d9cde231074b6653fecc2a9eb3d5734845f01715c3e8c1c4f05f9b629f70217acdf04c4305216ba64f670892ef7a2336b6785c28d10ab369265088e217309e06b55b13e179992e8eab18e7aa4ab593fdb96a23121d573e9c3ac18b65b1228af0c5b0942e001664ef62dda081725cab4445152f120dae542f38ce6c410397aef33b5b068f7c297c65ce2e0f33d276dcb21ceecf35249960d44089571a974e27f086441e56ebb262c0976aeb03db32766c2", 0xb2, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000440)="02cd069600d7d625acdd409441f7fc8ba8731e257b86222fc52de5ccad30b2edb1f183c798dbb550656b090879401bab96a8cd5f265d7c8aaec3cd4b6bd36fa52039e33c8dcc3fbc") bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{r2}, &(0x7f00000007c0), &(0x7f0000000800)=r0}, 0x20) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x5, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x4, 0x101}, 0xa0d2, 0x7, 0x0, 0x6}, r4, 0xf, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, 0x0) sendmsg$kcm(r3, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2c}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000000)='Gb', 0x5dc}], 0x1}, 0x480c0) recvmsg$kcm(r3, &(0x7f0000000980)={&(0x7f0000000880)=@l2tp={0x2, 0x0, @dev}, 0x80, &(0x7f0000000900), 0x0, 0xfffffffffffffffc}, 0x2001) socketpair(0x3, 0x5, 0xf01, &(0x7f0000000180)) r5 = socket$kcm(0x2, 0x3, 0x84) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x890b, &(0x7f0000000100)) socket$kcm(0x29, 0x2, 0x0) 0s ago: executing program 34 (id=2394): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x404, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000800000000000000000850000004100000095000000000000004be98911ed523cf4451d51e400cbd30efbb0a73ceb2b050a456c3a6cfd127868ad3fe3f9a9b946c97f9fc091e4c3f4b0a0d7ed298717a480c48868162ff933958cb6a5265519fee4cb1b8b93f0b164770fd40c7a8060ce72beff7cda177e281ef0b7a1a97b2c8c5617bff8c9441a45fd951df19a9c6e"], 0x0, 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000006000000080000000800000040000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000003f55cc47f00000000000000000000000000000004000000000000000"], 0x50) socket$kcm(0xa, 0x5, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000640)={&(0x7f00000000c0)="615018cff8ddc4bd72a1e822fe169204286b5a0ba2d5e07d24510a045a4667b7ebfec91d956c370b19adf9e6426cb6f46d3d57d9a3da9ed50f50f1eda03e3d5b98ba", &(0x7f0000000300), &(0x7f0000000500)="4ff9b9dbd4dbe4b100d4373d21e73ce61e351c92172c3ebc75c8afd858574d38c02df86ebce7f17e953f3d8f11bc9deb06b5181ad5940352cbec049c046c8f9c5892bee99104cc2d8c8ceb27b755f0733233698b1949218d9f62437d2c7e49fb73b4504338e5bf85fe2c3928a9af7837ed58193b5f210c0d252c6dabc470c9ff8b0e8a32d5ad091f3a06f31f5ef02d0078ac5425e159d4e25223c62151f09341b78cb360ad9c26d4c8f3bc89fd9d6d2f15550caa06742f42d255c1c41f0dd39cf144d4f66aabd13e85384b571260", &(0x7f0000000600)="a08657ccaa92ef5cf1d34ce71834f14dcff3be3222fee515a4482b701ab4a55adf", 0xffffff4a, r1, 0x4}, 0x38) r3 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x29, 0x7, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x1a220, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r1, 0xffffffffffffffff}, &(0x7f0000000680), &(0x7f00000006c0)=r2}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)={0x1b, 0x0, 0x0, 0x9, 0x0, r4, 0xc, '\x00', 0x0, r1, 0x5, 0x5}, 0x50) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d80000002000811f4e81f782db44b90402000000e8fe55a1180015000600142603600e1209000a00000004a1a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970100040000", 0xd8}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000031d0851000000600000018040000", @ANYRES32, @ANYBLOB="00000000000000006600ffffff80000018000000000000000000000000000000950000000000000018010000202070250000000000202020db1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b502000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x3, &(0x7f0000000340)=""/206}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0xfffff000, 0xfe71, 0xffffffffffffff40, &(0x7f0000000080)="85d77444c5a569f1e21b08c0f264", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x3b) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = syz_clone(0x300000, &(0x7f0000000240)="509d9cde231074b6653fecc2a9eb3d5734845f01715c3e8c1c4f05f9b629f70217acdf04c4305216ba64f670892ef7a2336b6785c28d10ab369265088e217309e06b55b13e179992e8eab18e7aa4ab593fdb96a23121d573e9c3ac18b65b1228af0c5b0942e001664ef62dda081725cab4445152f120dae542f38ce6c410397aef33b5b068f7c297c65ce2e0f33d276dcb21ceecf35249960d44089571a974e27f086441e56ebb262c0976aeb03db32766c2", 0xb2, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000440)="02cd069600d7d625acdd409441f7fc8ba8731e257b86222fc52de5ccad30b2edb1f183c798dbb550656b090879401bab96a8cd5f265d7c8aaec3cd4b6bd36fa52039e33c8dcc3fbc000c1df749f2467db6fa2fa3db7032d5bce9f5c7ebe68e5cb29f2e276f0db9e4892038145431d1e80de32c05e90ab39462da0dd1394fd55761be621ceb697550b7049dbfcf179c0fc8ac79c25a8a6212004d167bcb32f4503baf8270") bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{r4}, &(0x7f00000007c0), &(0x7f0000000800)=r0}, 0x20) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x5, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x4, 0x101}, 0xa0d2, 0x7, 0x0, 0x6}, r6, 0xf, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, 0x0) sendmsg$kcm(r5, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2c}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000000)='Gb', 0x5dc}], 0x1}, 0x480c0) recvmsg$kcm(r5, &(0x7f0000000980)={&(0x7f0000000880)=@l2tp={0x2, 0x0, @dev}, 0x80, &(0x7f0000000900), 0x0, 0xfffffffffffffffc}, 0x2001) socketpair(0x3, 0x5, 0xf01, &(0x7f0000000180)) r7 = socket$kcm(0x2, 0x3, 0x84) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x890b, &(0x7f0000000100)) socket$kcm(0x29, 0x2, 0x0) kernel console output (not intermixed with test programs): [ 559.487711][T10445] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.990561][T10472] netlink: 'syz.2.1435': attribute type 21 has an invalid length. [ 561.195324][T10472] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1435'. [ 561.428682][T10472] netlink: 'syz.2.1435': attribute type 4 has an invalid length. [ 561.822717][T10479] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1439'. [ 562.822256][T10479] team0: Port device team_slave_0 removed [ 563.299491][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.308414][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.544319][T10487] netlink: 'syz.2.1440': attribute type 10 has an invalid length. [ 563.613136][T10487] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1440'. [ 565.614071][T10512] Illegal XDP return value 4294967262 on prog (id 825) dev N/A, expect packet loss! [ 566.418677][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 566.421649][T10516] netlink: 209796 bytes leftover after parsing attributes in process `syz.0.1450'. [ 568.054359][T10541] FAULT_INJECTION: forcing a failure. [ 568.054359][T10541] name failslab, interval 1, probability 0, space 0, times 0 [ 568.134145][T10541] CPU: 1 PID: 10541 Comm: syz.3.1457 Not tainted syzkaller #0 [ 568.141774][T10541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 568.151878][T10541] Call Trace: [ 568.155190][T10541] [ 568.158153][T10541] dump_stack_lvl+0x18c/0x250 [ 568.162888][T10541] ? show_regs_print_info+0x20/0x20 [ 568.168124][T10541] ? load_image+0x420/0x420 [ 568.172680][T10541] ? __might_sleep+0xe0/0xe0 [ 568.177323][T10541] ? __lock_acquire+0x7d40/0x7d40 [ 568.182395][T10541] ? perf_trace_lock+0xfc/0x3b0 [ 568.187306][T10541] should_fail_ex+0x39d/0x4d0 [ 568.192038][T10541] should_failslab+0x9/0x20 [ 568.196563][T10541] slab_pre_alloc_hook+0x59/0x310 [ 568.201610][T10541] ? __get_vm_area_node+0x125/0x370 [ 568.206833][T10541] __kmem_cache_alloc_node+0x53/0x250 [ 568.212230][T10541] ? __get_vm_area_node+0x125/0x370 [ 568.217444][T10541] kmalloc_node_trace+0x26/0xe0 [ 568.222318][T10541] __get_vm_area_node+0x125/0x370 [ 568.227386][T10541] __vmalloc_node_range+0x36e/0x1330 [ 568.232705][T10541] ? netlink_sendmsg+0x602/0xbf0 [ 568.237675][T10541] ? netlink_insert+0x109f/0x13a0 [ 568.242748][T10541] ? netlink_data_ready+0x10/0x10 [ 568.247790][T10541] ? free_vm_area+0x50/0x50 [ 568.252323][T10541] ? netlink_sendmsg+0x602/0xbf0 [ 568.257277][T10541] vmalloc+0x79/0x90 [ 568.261185][T10541] ? netlink_sendmsg+0x602/0xbf0 [ 568.266142][T10541] netlink_sendmsg+0x602/0xbf0 [ 568.270933][T10541] ? netlink_getsockopt+0x590/0x590 [ 568.276151][T10541] ? aa_sock_msg_perm+0x94/0x150 [ 568.281108][T10541] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 568.286404][T10541] ? security_socket_sendmsg+0x80/0xa0 [ 568.291876][T10541] ? netlink_getsockopt+0x590/0x590 [ 568.297446][T10541] ____sys_sendmsg+0x5ba/0x960 [ 568.302238][T10541] ? __asan_memset+0x22/0x40 [ 568.306842][T10541] ? __sys_sendmsg_sock+0x30/0x30 [ 568.311876][T10541] ? __import_iovec+0x5f2/0x850 [ 568.316751][T10541] ? import_iovec+0x73/0xa0 [ 568.321266][T10541] ___sys_sendmsg+0x2a6/0x360 [ 568.325961][T10541] ? __sys_sendmsg+0x2a0/0x2a0 [ 568.330767][T10541] ? trace_call_bpf+0xc3/0x6c0 [ 568.335602][T10541] __se_sys_sendmsg+0x1c2/0x2b0 [ 568.340473][T10541] ? __x64_sys_sendmsg+0x80/0x80 [ 568.345443][T10541] ? lockdep_hardirqs_on+0x98/0x150 [ 568.350668][T10541] do_syscall_64+0x55/0xb0 [ 568.355098][T10541] ? clear_bhb_loop+0x40/0x90 [ 568.359794][T10541] ? clear_bhb_loop+0x40/0x90 [ 568.364487][T10541] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 568.370414][T10541] RIP: 0033:0x7fc95dd9ce59 [ 568.374872][T10541] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 568.394598][T10541] RSP: 002b:00007fc95ec33028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 568.403049][T10541] RAX: ffffffffffffffda RBX: 00007fc95e016090 RCX: 00007fc95dd9ce59 [ 568.411037][T10541] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 568.419018][T10541] RBP: 00007fc95ec33090 R08: 0000000000000000 R09: 0000000000000000 [ 568.427007][T10541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 568.434993][T10541] R13: 00007fc95e016128 R14: 00007fc95e016090 R15: 00007ffeb3073b88 [ 568.443000][T10541] [ 568.507407][T10541] syz.3.1457: vmalloc error: size 213312, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 568.529213][T10542] netlink: 'syz.2.1455': attribute type 10 has an invalid length. [ 568.548836][T10541] CPU: 0 PID: 10541 Comm: syz.3.1457 Not tainted syzkaller #0 [ 568.556378][T10541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 568.566481][T10541] Call Trace: [ 568.569798][T10541] [ 568.572760][T10541] dump_stack_lvl+0x18c/0x250 [ 568.577481][T10541] ? show_regs_print_info+0x20/0x20 [ 568.582731][T10541] ? load_image+0x420/0x420 [ 568.587288][T10541] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 568.593767][T10541] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 568.600322][T10541] warn_alloc+0x246/0x340 [ 568.604707][T10541] ? __get_vm_area_node+0x125/0x370 [ 568.609965][T10541] ? zone_watermark_ok_safe+0x230/0x230 [ 568.615561][T10541] ? rcu_is_watching+0x15/0xb0 [ 568.620307][T10542] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1455'. [ 568.629377][T10541] ? __get_vm_area_node+0x356/0x370 [ 568.629422][T10541] __vmalloc_node_range+0x393/0x1330 [ 568.629447][T10541] ? netlink_insert+0x109f/0x13a0 [ 568.629499][T10541] ? netlink_data_ready+0x10/0x10 [ 568.629529][T10541] ? free_vm_area+0x50/0x50 [ 568.629567][T10541] ? netlink_sendmsg+0x602/0xbf0 [ 568.659702][T10541] vmalloc+0x79/0x90 [ 568.663702][T10541] ? netlink_sendmsg+0x602/0xbf0 [ 568.668701][T10541] netlink_sendmsg+0x602/0xbf0 [ 568.673542][T10541] ? netlink_getsockopt+0x590/0x590 [ 568.678811][T10541] ? aa_sock_msg_perm+0x94/0x150 [ 568.683812][T10541] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 568.689146][T10541] ? security_socket_sendmsg+0x80/0xa0 [ 568.694645][T10541] ? netlink_getsockopt+0x590/0x590 [ 568.699902][T10541] ____sys_sendmsg+0x5ba/0x960 [ 568.704722][T10541] ? __asan_memset+0x22/0x40 [ 568.709434][T10541] ? __sys_sendmsg_sock+0x30/0x30 [ 568.714515][T10541] ? __import_iovec+0x5f2/0x850 [ 568.719439][T10541] ? import_iovec+0x73/0xa0 [ 568.724002][T10541] ___sys_sendmsg+0x2a6/0x360 [ 568.728829][T10541] ? __sys_sendmsg+0x2a0/0x2a0 [ 568.733779][T10541] ? trace_call_bpf+0xc3/0x6c0 [ 568.738763][T10541] __se_sys_sendmsg+0x1c2/0x2b0 [ 568.743773][T10541] ? __x64_sys_sendmsg+0x80/0x80 [ 568.748872][T10541] ? lockdep_hardirqs_on+0x98/0x150 [ 568.754134][T10541] do_syscall_64+0x55/0xb0 [ 568.758594][T10541] ? clear_bhb_loop+0x40/0x90 [ 568.763322][T10541] ? clear_bhb_loop+0x40/0x90 [ 568.768055][T10541] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 568.774620][T10541] RIP: 0033:0x7fc95dd9ce59 [ 568.779122][T10541] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 568.798784][T10541] RSP: 002b:00007fc95ec33028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 568.807256][T10541] RAX: ffffffffffffffda RBX: 00007fc95e016090 RCX: 00007fc95dd9ce59 [ 568.815278][T10541] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 568.823294][T10541] RBP: 00007fc95ec33090 R08: 0000000000000000 R09: 0000000000000000 [ 568.831325][T10541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 568.839338][T10541] R13: 00007fc95e016128 R14: 00007fc95e016090 R15: 00007ffeb3073b88 [ 568.847388][T10541] [ 568.888401][T10541] Mem-Info: [ 568.891600][T10541] active_anon:49692 inactive_anon:0 isolated_anon:0 [ 568.891600][T10541] active_file:18748 inactive_file:40134 isolated_file:0 [ 568.891600][T10541] unevictable:768 dirty:238 writeback:0 [ 568.891600][T10541] slab_reclaimable:10332 slab_unreclaimable:91182 [ 568.891600][T10541] mapped:37215 shmem:45723 pagetables:708 [ 568.891600][T10541] sec_pagetables:0 bounce:0 [ 568.891600][T10541] kernel_misc_reclaimable:0 [ 568.891600][T10541] free:1306785 free_pcp:10105 free_cma:0 [ 568.992129][T10541] Node 0 active_anon:199768kB inactive_anon:0kB active_file:74992kB inactive_file:160340kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:148860kB dirty:948kB writeback:0kB shmem:182256kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10184kB pagetables:2832kB sec_pagetables:0kB all_unreclaimable? no [ 569.056307][T10541] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 569.118187][T10541] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 569.145655][T10541] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 569.152155][T10541] Node 0 DMA32 free:1306812kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:202528kB inactive_anon:0kB active_file:74992kB inactive_file:159516kB unevictable:1536kB writepending:948kB present:3129332kB managed:2586944kB mlocked:0kB bounce:0kB free_pcp:24336kB local_pcp:6104kB free_cma:0kB [ 569.182887][T10541] lowmem_reserve[]: 0 0 0 0 0 [ 569.187673][T10541] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 569.214648][T10541] lowmem_reserve[]: 0 0 0 0 0 [ 569.219557][T10541] Node 1 Normal free:3903708kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:14080kB local_pcp:6464kB free_cma:0kB [ 569.249185][T10541] lowmem_reserve[]: 0 0 0 0 0 [ 569.254476][T10541] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 569.267341][T10541] Node 0 DMA32: 380*4kB (UM) 634*8kB (U) 621*16kB (U) 405*32kB (UME) 999*64kB (UME) 604*128kB (UME) 230*256kB (UME) 52*512kB (ME) 4*1024kB (M) 3*2048kB (UME) 254*4096kB (UM) = 1306864kB [ 569.285997][T10541] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 569.297632][T10541] Node 1 Normal: 231*4kB (UM) 56*8kB (UME) 42*16kB (UME) 141*32kB (UME) 41*64kB (UME) 10*128kB (UME) 4*256kB (UME) 2*512kB (UE) 0*1024kB 2*2048kB (UE) 949*4096kB (M) = 3903708kB [ 569.315614][T10541] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 569.325259][T10541] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 569.334679][T10541] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 569.378593][T10541] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 569.428459][T10541] 105920 total pagecache pages [ 569.433337][T10541] 0 pages in swap cache [ 569.437521][T10541] Free swap = 124996kB [ 569.441802][T10541] Total swap = 124996kB [ 569.445988][T10541] 2097051 pages RAM [ 569.449952][T10541] 0 pages HighMem/MovableOnly [ 569.454653][T10541] 416929 pages reserved [ 569.459443][T10541] 0 pages cma reserved [ 570.924394][T10556] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1460'. [ 571.005792][T10556] openvswitch: netlink: Tunnel attr 2548 out of range max 16 [ 571.235351][T10555] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 571.258965][T10558] netlink: 'syz.3.1462': attribute type 25 has an invalid length. [ 571.287865][T10558] netlink: 'syz.3.1462': attribute type 1 has an invalid length. [ 571.303803][T10558] bridge0: port 1(bridge_slave_0) entered forwarding state [ 572.669910][T10581] netlink: 'syz.3.1469': attribute type 10 has an invalid length. [ 572.698507][T10581] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1469'. [ 575.247763][T10611] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 575.683772][T10609] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1476'. [ 575.805817][T10609] openvswitch: netlink: Tunnel attr 2548 out of range max 16 [ 576.408978][T10624] FAULT_INJECTION: forcing a failure. [ 576.408978][T10624] name failslab, interval 1, probability 0, space 0, times 0 [ 576.498466][T10624] CPU: 0 PID: 10624 Comm: syz.1.1480 Not tainted syzkaller #0 [ 576.506013][T10624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 576.516111][T10624] Call Trace: [ 576.519424][T10624] [ 576.522390][T10624] dump_stack_lvl+0x18c/0x250 [ 576.527110][T10624] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 576.533345][T10624] ? show_regs_print_info+0x20/0x20 [ 576.538222][T10628] netlink: 'syz.3.1481': attribute type 10 has an invalid length. [ 576.538561][T10624] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 576.538609][T10624] should_fail_ex+0x39d/0x4d0 [ 576.538644][T10624] should_failslab+0x9/0x20 [ 576.561862][T10624] slab_pre_alloc_hook+0x59/0x310 [ 576.566930][T10624] ? apparmor_sk_alloc_security+0x77/0x100 [ 576.572775][T10624] __kmem_cache_alloc_node+0x53/0x250 [ 576.578191][T10624] ? apparmor_sk_alloc_security+0x77/0x100 [ 576.584037][T10624] kmalloc_trace+0x2a/0xe0 [ 576.587116][T10628] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1481'. [ 576.588476][T10624] apparmor_sk_alloc_security+0x77/0x100 [ 576.588508][T10624] security_sk_alloc+0x6e/0xa0 [ 576.588533][T10624] sk_prot_alloc+0x101/0x210 [ 576.588583][T10624] sk_alloc+0x3a/0x360 [ 576.588613][T10624] __smc_create+0xf7/0x260 [ 576.588709][T10624] __sock_create+0x4a6/0x940 [ 576.588776][T10624] __sys_socketpair+0x236/0x550 [ 576.588811][T10624] __x64_sys_socketpair+0x9b/0xb0 [ 576.588841][T10624] do_syscall_64+0x55/0xb0 [ 576.588859][T10624] ? clear_bhb_loop+0x40/0x90 [ 576.588882][T10624] ? clear_bhb_loop+0x40/0x90 [ 576.588907][T10624] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 576.588931][T10624] RIP: 0033:0x7ff5feb9ce59 [ 576.588950][T10624] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 576.588968][T10624] RSP: 002b:00007ff5ff9e0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 576.588992][T10624] RAX: ffffffffffffffda RBX: 00007ff5fee15fa0 RCX: 00007ff5feb9ce59 [ 576.589006][T10624] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000002b [ 576.589019][T10624] RBP: 00007ff5ff9e0090 R08: 0000000000000000 R09: 0000000000000000 [ 576.589030][T10624] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000002 [ 576.589043][T10624] R13: 00007ff5fee16038 R14: 00007ff5fee15fa0 R15: 00007fff6372e128 [ 576.728629][T10624] [ 578.189390][T10647] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.1486'. [ 578.933479][T10655] netlink: 'syz.0.1488': attribute type 10 has an invalid length. [ 579.001858][T10655] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1488'. [ 579.087769][T10655] hsr0: entered promiscuous mode [ 580.860329][T10674] netlink: 'syz.3.1494': attribute type 10 has an invalid length. [ 580.868255][T10674] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1494'. [ 581.580608][T10675] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1493'. [ 581.896833][T10675] openvswitch: netlink: Tunnel attr 2548 out of range max 16 [ 582.176124][T10673] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 587.098213][T10698] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.1499'. [ 587.667670][T10697] netlink: 'syz.0.1508': attribute type 1 has an invalid length. [ 587.748759][T10697] netlink: 112865 bytes leftover after parsing attributes in process `syz.0.1508'. [ 591.500060][T10723] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 591.535809][T10720] netlink: 'syz.3.1509': attribute type 10 has an invalid length. [ 591.644407][T10720] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1509'. [ 592.138906][ T5082] Bluetooth: hci1: ISO packet for unknown connection handle 22 [ 592.268864][T10715] delete_channel: no stack [ 592.848926][T10732] netlink: 'syz.2.1513': attribute type 1 has an invalid length. [ 592.869121][T10732] netlink: 112865 bytes leftover after parsing attributes in process `syz.2.1513'. [ 595.669325][T10760] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1520'. [ 596.264399][T10765] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1529'. [ 596.368048][T10764] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.1521'. [ 596.856600][T10771] netlink: 'syz.0.1522': attribute type 10 has an invalid length. [ 596.906978][T10771] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1522'. [ 598.069585][T10785] netlink: 'syz.0.1526': attribute type 1 has an invalid length. [ 598.131816][T10785] netlink: 112865 bytes leftover after parsing attributes in process `syz.0.1526'. [ 598.428693][ T3507] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 599.528906][T10803] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1531'. [ 601.623469][T10816] netlink: 'syz.2.1533': attribute type 10 has an invalid length. [ 601.668428][T10816] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1533'. [ 603.026838][T10830] netlink: 'syz.2.1539': attribute type 1 has an invalid length. [ 603.108558][T10830] netlink: 112865 bytes leftover after parsing attributes in process `syz.2.1539'. [ 603.482616][T10839] delete_channel: no stack [ 603.797342][T10843] netlink: 'syz.1.1542': attribute type 29 has an invalid length. [ 603.853318][T10843] netlink: 'syz.1.1542': attribute type 29 has an invalid length. [ 603.898228][T10844] netlink: 'syz.1.1542': attribute type 29 has an invalid length. [ 603.949497][T10843] netlink: 'syz.1.1542': attribute type 29 has an invalid length. [ 604.606257][T10851] netlink: 'syz.2.1543': attribute type 10 has an invalid length. [ 604.650971][T10851] team0: Device hsr_slave_0 failed to register rx_handler [ 604.860552][T10858] netlink: 'syz.2.1543': attribute type 9 has an invalid length. [ 604.895724][T10858] netlink: 184904 bytes leftover after parsing attributes in process `syz.2.1543'. [ 604.930172][T10861] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1546'. [ 605.049851][T10854] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1545'. [ 605.733826][T10868] netlink: 'syz.0.1548': attribute type 10 has an invalid length. [ 605.799089][T10868] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1548'. [ 607.361579][T10879] netlink: 'syz.3.1552': attribute type 1 has an invalid length. [ 607.377587][T10879] netlink: 112865 bytes leftover after parsing attributes in process `syz.3.1552'. [ 609.052649][T10900] netlink: 'syz.2.1558': attribute type 29 has an invalid length. [ 609.387206][T10900] netlink: 'syz.2.1558': attribute type 29 has an invalid length. [ 609.735575][T10901] netlink: 'syz.2.1558': attribute type 29 has an invalid length. [ 609.906306][T10906] netlink: 'syz.2.1558': attribute type 29 has an invalid length. [ 610.176835][T10913] netlink: 'syz.0.1562': attribute type 10 has an invalid length. [ 610.293719][T10913] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1562'. [ 610.549315][T10918] FAULT_INJECTION: forcing a failure. [ 610.549315][T10918] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 610.588557][T10918] CPU: 0 PID: 10918 Comm: syz.1.1563 Not tainted syzkaller #0 [ 610.596112][T10918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 610.606216][T10918] Call Trace: [ 610.609528][T10918] [ 610.612512][T10918] dump_stack_lvl+0x18c/0x250 [ 610.617242][T10918] ? show_regs_print_info+0x20/0x20 [ 610.622493][T10918] ? load_image+0x420/0x420 [ 610.627046][T10918] ? __might_fault+0xaa/0x120 [ 610.631776][T10918] ? __lock_acquire+0x7d40/0x7d40 [ 610.636850][T10918] should_fail_ex+0x39d/0x4d0 [ 610.641587][T10918] _copy_to_user+0x2f/0xa0 [ 610.646051][T10918] bpf_prog_test_run_raw_tp+0x4ca/0x660 [ 610.651656][T10918] ? trace_bpf_test_finish+0x1a0/0x1a0 [ 610.657168][T10918] ? trace_bpf_test_finish+0x1a0/0x1a0 [ 610.662668][T10918] bpf_prog_test_run+0x321/0x390 [ 610.667652][T10918] __sys_bpf+0x49d/0x890 [ 610.671937][T10918] ? bpf_link_show_fdinfo+0x390/0x390 [ 610.677366][T10918] ? lock_chain_count+0x20/0x20 [ 610.682277][T10918] __x64_sys_bpf+0x7c/0x90 [ 610.686735][T10918] do_syscall_64+0x55/0xb0 [ 610.691181][T10918] ? clear_bhb_loop+0x40/0x90 [ 610.695887][T10918] ? clear_bhb_loop+0x40/0x90 [ 610.700584][T10918] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 610.706490][T10918] RIP: 0033:0x7ff5feb9ce59 [ 610.710923][T10918] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 610.730548][T10918] RSP: 002b:00007ff5ff9e0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 610.738978][T10918] RAX: ffffffffffffffda RBX: 00007ff5fee15fa0 RCX: 00007ff5feb9ce59 [ 610.746960][T10918] RDX: 000000000000000c RSI: 0000200000000080 RDI: 000000000000000a [ 610.754938][T10918] RBP: 00007ff5ff9e0090 R08: 0000000000000000 R09: 0000000000000000 [ 610.762925][T10918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 610.770908][T10918] R13: 00007ff5fee16038 R14: 00007ff5fee15fa0 R15: 00007fff6372e128 [ 610.778906][T10918] [ 611.047703][T10920] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1564'. [ 612.946489][T10939] netlink: 'syz.2.1572': attribute type 21 has an invalid length. [ 613.213365][T10939] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1572'. [ 613.465636][T10947] netlink: 'syz.0.1574': attribute type 10 has an invalid length. [ 613.494178][T10947] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1574'. [ 614.595691][T10961] FAULT_INJECTION: forcing a failure. [ 614.595691][T10961] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 614.849501][T10961] CPU: 0 PID: 10961 Comm: syz.2.1577 Not tainted syzkaller #0 [ 614.857047][T10961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 614.867230][T10961] Call Trace: [ 614.870542][T10961] [ 614.873499][T10961] dump_stack_lvl+0x18c/0x250 [ 614.878215][T10961] ? show_regs_print_info+0x20/0x20 [ 614.883445][T10961] ? load_image+0x420/0x420 [ 614.888017][T10961] ? __might_fault+0xaa/0x120 [ 614.892722][T10961] ? __lock_acquire+0x7d40/0x7d40 [ 614.897783][T10961] should_fail_ex+0x39d/0x4d0 [ 614.902529][T10961] _copy_from_user+0x2f/0xe0 [ 614.907154][T10961] kstrtouint_from_user+0xde/0x170 [ 614.912303][T10961] ? kstrtol_from_user+0x190/0x190 [ 614.917467][T10961] proc_fail_nth_write+0x8f/0x250 [ 614.922531][T10961] ? proc_fail_nth_read+0x260/0x260 [ 614.927769][T10961] ? proc_fail_nth_read+0x260/0x260 [ 614.933023][T10961] vfs_write+0x296/0x990 [ 614.937319][T10961] ? file_end_write+0x250/0x250 [ 614.942198][T10961] ? __fget_files+0x28/0x4b0 [ 614.946828][T10961] ? __fget_files+0x28/0x4b0 [ 614.951439][T10961] ? __fget_files+0x43d/0x4b0 [ 614.956170][T10961] ? __fdget_pos+0x2a3/0x330 [ 614.960801][T10961] ? ksys_write+0x75/0x260 [ 614.965277][T10961] ksys_write+0x150/0x260 [ 614.969648][T10961] ? __ia32_sys_read+0x90/0x90 [ 614.974453][T10961] ? lockdep_hardirqs_on+0x98/0x150 [ 614.979691][T10961] do_syscall_64+0x55/0xb0 [ 614.984138][T10961] ? clear_bhb_loop+0x40/0x90 [ 614.988849][T10961] ? clear_bhb_loop+0x40/0x90 [ 614.993562][T10961] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 614.999498][T10961] RIP: 0033:0x7f812555d68e [ 615.003951][T10961] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 615.024646][T10961] RSP: 002b:00007f812647ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 615.033192][T10961] RAX: ffffffffffffffda RBX: 00007f81264806c0 RCX: 00007f812555d68e [ 615.041200][T10961] RDX: 0000000000000001 RSI: 00007f81264800a0 RDI: 0000000000000006 [ 615.049236][T10961] RBP: 00007f8126480090 R08: 0000000000000000 R09: 0000000000000000 [ 615.057348][T10961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 615.065364][T10961] R13: 00007f8125816128 R14: 00007f8125816090 R15: 00007ffcaaf43088 [ 615.073410][T10961] [ 616.251531][T10969] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1581'. [ 616.688157][T10980] netlink: 'syz.3.1585': attribute type 10 has an invalid length. [ 617.152547][T10980] team0 (unregistering): Port device team_slave_1 removed [ 617.307916][T10985] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1586'. [ 617.609614][T10989] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1587'. [ 618.686197][T10994] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1597'. [ 620.393864][T11016] netlink: 'syz.3.1595': attribute type 10 has an invalid length. [ 620.547273][T11016] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1595'. [ 621.381185][T11016] batman_adv: batadv0: Adding interface: veth1_vlan [ 621.478497][T11016] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 621.668528][T11016] batman_adv: batadv0: Interface activated: veth1_vlan [ 622.527339][T11036] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.1608'. [ 622.660104][T11037] netlink: 'syz.3.1600': attribute type 21 has an invalid length. [ 623.500710][T11048] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1603'. [ 624.284354][T11065] netlink: 'syz.1.1610': attribute type 21 has an invalid length. [ 624.285836][T11062] netlink: 'syz.2.1611': attribute type 29 has an invalid length. [ 624.322079][T11062] netlink: 'syz.2.1611': attribute type 29 has an invalid length. [ 624.370368][T11066] netlink: 'syz.2.1611': attribute type 29 has an invalid length. [ 624.425712][T11062] netlink: 'syz.2.1611': attribute type 29 has an invalid length. [ 624.662051][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.674134][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.776021][T11063] netlink: 'syz.0.1609': attribute type 10 has an invalid length. [ 624.891096][T11074] netlink: 'syz.1.1612': attribute type 29 has an invalid length. [ 624.951482][T11063] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1609'. [ 625.041827][T11063] batman_adv: batadv0: Adding interface: veth1_vlan [ 625.129098][T11063] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 625.308511][T11063] batman_adv: batadv0: Interface activated: veth1_vlan [ 625.408601][T11074] netlink: 'syz.1.1612': attribute type 29 has an invalid length. [ 625.689570][T11082] netlink: 'syz.2.1615': attribute type 29 has an invalid length. [ 625.859402][T11090] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1618'. [ 627.043959][T11111] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1626'. [ 627.143805][T11111] batman_adv: batadv0: Adding interface: veth1_vlan [ 627.180103][T11111] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 627.245993][T11111] batman_adv: batadv0: Interface activated: veth1_vlan [ 628.027976][T11118] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1629'. [ 628.424957][T11130] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1632'. [ 629.857873][T11161] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1641'. [ 630.430476][ T3507] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 631.429332][T11177] validate_nla: 19 callbacks suppressed [ 631.429354][T11177] netlink: 'syz.2.1650': attribute type 7 has an invalid length. [ 631.435495][T11182] FAULT_INJECTION: forcing a failure. [ 631.435495][T11182] name failslab, interval 1, probability 0, space 0, times 0 [ 631.447351][T11177] netlink: 'syz.2.1650': attribute type 1 has an invalid length. [ 631.466493][T11177] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1650'. [ 631.493840][T11182] CPU: 1 PID: 11182 Comm: syz.3.1653 Not tainted syzkaller #0 [ 631.501405][T11182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 631.511528][T11182] Call Trace: [ 631.514862][T11182] [ 631.517851][T11182] dump_stack_lvl+0x18c/0x250 [ 631.522608][T11182] ? show_regs_print_info+0x20/0x20 [ 631.527884][T11182] ? load_image+0x420/0x420 [ 631.532471][T11182] ? __might_sleep+0xe0/0xe0 [ 631.537135][T11182] ? __lock_acquire+0x7d40/0x7d40 [ 631.542246][T11182] should_fail_ex+0x39d/0x4d0 [ 631.547057][T11182] should_failslab+0x9/0x20 [ 631.551635][T11182] slab_pre_alloc_hook+0x59/0x310 [ 631.556773][T11182] ? __lock_acquire+0x7d40/0x7d40 [ 631.561879][T11182] kmem_cache_alloc_node+0x60/0x320 [ 631.567143][T11182] ? __alloc_skb+0x103/0x2c0 [ 631.571816][T11182] __alloc_skb+0x103/0x2c0 [ 631.576310][T11182] netlink_sendmsg+0x66a/0xbf0 [ 631.581144][T11182] ? perf_trace_lock+0x304/0x3b0 [ 631.586183][T11182] ? netlink_getsockopt+0x590/0x590 [ 631.591470][T11182] ? aa_sock_msg_perm+0x94/0x150 [ 631.596493][T11182] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 631.601841][T11182] ? security_socket_sendmsg+0x80/0xa0 [ 631.607356][T11182] ? netlink_getsockopt+0x590/0x590 [ 631.612642][T11182] ____sys_sendmsg+0x5ba/0x960 [ 631.617512][T11182] ? __asan_memset+0x22/0x40 [ 631.622174][T11182] ? __sys_sendmsg_sock+0x30/0x30 [ 631.627704][T11182] ? __import_iovec+0x3fa/0x850 [ 631.632676][T11182] ? import_iovec+0x73/0xa0 [ 631.637269][T11182] ___sys_sendmsg+0x2a6/0x360 [ 631.642041][T11182] ? __sys_sendmsg+0x2a0/0x2a0 [ 631.646966][T11182] ? __lock_acquire+0x7d40/0x7d40 [ 631.652156][T11182] __se_sys_sendmsg+0x1c2/0x2b0 [ 631.657089][T11182] ? __x64_sys_sendmsg+0x80/0x80 [ 631.662129][T11182] ? lockdep_hardirqs_on+0x98/0x150 [ 631.667380][T11182] do_syscall_64+0x55/0xb0 [ 631.671855][T11182] ? clear_bhb_loop+0x40/0x90 [ 631.676564][T11182] ? clear_bhb_loop+0x40/0x90 [ 631.681296][T11182] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 631.687249][T11182] RIP: 0033:0x7fc95dd9ce59 [ 631.691699][T11182] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 631.711337][T11182] RSP: 002b:00007fc95ec54028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 631.719793][T11182] RAX: ffffffffffffffda RBX: 00007fc95e015fa0 RCX: 00007fc95dd9ce59 [ 631.727802][T11182] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000005 [ 631.735804][T11182] RBP: 00007fc95ec54090 R08: 0000000000000000 R09: 0000000000000000 [ 631.743826][T11182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 631.751835][T11182] R13: 00007fc95e016038 R14: 00007fc95e015fa0 R15: 00007ffeb3073b88 [ 631.760079][T11182] [ 632.073741][T11191] netlink: 'syz.2.1654': attribute type 21 has an invalid length. [ 632.087642][T11191] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1654'. [ 632.396120][T11197] netlink: 'syz.3.1655': attribute type 25 has an invalid length. [ 632.430553][T11197] netlink: 'syz.3.1655': attribute type 28 has an invalid length. [ 632.627095][T11204] netlink: 'syz.1.1659': attribute type 10 has an invalid length. [ 632.658760][T11204] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1659'. [ 635.362998][T11241] netlink: 'syz.0.1670': attribute type 10 has an invalid length. [ 635.428376][T11241] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1670'. [ 636.291649][T11249] netlink: 'syz.3.1675': attribute type 25 has an invalid length. [ 636.322244][T11249] netlink: 'syz.3.1675': attribute type 28 has an invalid length. [ 636.554246][T11254] netlink: 'syz.1.1676': attribute type 21 has an invalid length. [ 636.598456][T11254] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1676'. [ 637.337183][T11261] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1679'. [ 637.448589][T11261] openvswitch: netlink: Key type 29 is not supported [ 637.509424][T11260] delete_channel: no stack [ 638.909538][T11282] netlink: 'syz.3.1685': attribute type 10 has an invalid length. [ 638.928417][T11282] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1685'. [ 639.419166][T11289] netlink: 763 bytes leftover after parsing attributes in process `syz.0.1686'. [ 642.678959][T11325] netlink: 'syz.3.1695': attribute type 10 has an invalid length. [ 642.708745][T11325] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1695'. [ 646.320443][T11364] netlink: 'syz.1.1708': attribute type 10 has an invalid length. [ 646.437887][T11364] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1708'. [ 651.498778][T11393] netlink: 'syz.3.1719': attribute type 2 has an invalid length. [ 651.506599][T11393] netlink: 'syz.3.1719': attribute type 8 has an invalid length. [ 651.638511][T11393] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1719'. [ 652.268744][T11407] netlink: 'syz.2.1720': attribute type 10 has an invalid length. [ 652.277257][T11407] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1720'. [ 653.648722][T11422] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1725'. [ 657.739514][T11456] netlink: 'syz.2.1733': attribute type 10 has an invalid length. [ 657.747408][T11456] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1733'. [ 659.036135][T11470] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1738'. [ 660.540765][T11490] netlink: 'syz.0.1744': attribute type 10 has an invalid length. [ 660.598614][T11490] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1744'. [ 662.429042][ T3507] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 663.921810][T11517] netlink: 81 bytes leftover after parsing attributes in process `syz.3.1753'. [ 664.842421][T11533] netlink: 'syz.1.1757': attribute type 10 has an invalid length. [ 664.857849][T11533] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1757'. [ 665.664723][T11535] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 666.929301][T11559] netlink: 'syz.3.1763': attribute type 10 has an invalid length. [ 667.001486][T11559] hsr0: entered promiscuous mode [ 667.118795][T11558] netlink: 'syz.3.1763': attribute type 10 has an invalid length. [ 667.697550][T11566] FAULT_INJECTION: forcing a failure. [ 667.697550][T11566] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 667.908615][T11566] CPU: 0 PID: 11566 Comm: syz.1.1764 Not tainted syzkaller #0 [ 667.916158][T11566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 667.926251][T11566] Call Trace: [ 667.929569][T11566] [ 667.932521][T11566] dump_stack_lvl+0x18c/0x250 [ 667.937219][T11566] ? show_regs_print_info+0x20/0x20 [ 667.942427][T11566] ? load_image+0x420/0x420 [ 667.946946][T11566] ? __might_fault+0xaa/0x120 [ 667.951639][T11566] ? __lock_acquire+0x7d40/0x7d40 [ 667.956688][T11566] should_fail_ex+0x39d/0x4d0 [ 667.961386][T11566] _copy_from_user+0x2f/0xe0 [ 667.965993][T11566] xfrm_user_policy+0x2d7/0x930 [ 667.970932][T11566] ? xfrm_unregister_translator+0x70/0x70 [ 667.976664][T11566] ? bpf_lsm_capable+0x9/0x10 [ 667.981364][T11566] ? security_capable+0x89/0xb0 [ 667.986237][T11566] do_ipv6_setsockopt+0xfa7/0x3e20 [ 667.991406][T11566] ? sk_dst_reset+0xa0/0xa0 [ 667.995915][T11566] ? mark_lock+0x94/0x320 [ 668.000256][T11566] ? __lock_acquire+0x1273/0x7d40 [ 668.005316][T11566] ? verify_lock_unused+0x140/0x140 [ 668.010626][T11566] ? mark_lock+0x94/0x320 [ 668.014968][T11566] ? __lock_acquire+0x1273/0x7d40 [ 668.020033][T11566] ? aa_label_sk_perm+0x463/0x5c0 [ 668.025077][T11566] ? aa_sk_perm+0x970/0x970 [ 668.029607][T11566] ? __might_sleep+0xe0/0xe0 [ 668.034215][T11566] ? ksys_write+0x1c4/0x260 [ 668.038746][T11566] ipv6_setsockopt+0x59/0x190 [ 668.043436][T11566] dccp_setsockopt+0x166/0x830 [ 668.048253][T11566] ? aa_af_perm+0x330/0x330 [ 668.052781][T11566] ? dccp_ioctl+0x200/0x200 [ 668.057293][T11566] ? __fget_files+0x28/0x4b0 [ 668.061897][T11566] ? aa_sock_opt_perm+0x74/0x100 [ 668.066850][T11566] ? sock_common_setsockopt+0x36/0xc0 [ 668.072242][T11566] ? sock_common_recvmsg+0x190/0x190 [ 668.077895][T11566] do_sock_setsockopt+0x175/0x1a0 [ 668.082929][T11566] ? __fdget+0x180/0x210 [ 668.087187][T11566] __x64_sys_setsockopt+0x182/0x200 [ 668.092398][T11566] do_syscall_64+0x55/0xb0 [ 668.096823][T11566] ? clear_bhb_loop+0x40/0x90 [ 668.101513][T11566] ? clear_bhb_loop+0x40/0x90 [ 668.106207][T11566] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 668.112116][T11566] RIP: 0033:0x7ff5feb9ce59 [ 668.116542][T11566] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 668.136179][T11566] RSP: 002b:00007ff5ff99e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 668.144607][T11566] RAX: ffffffffffffffda RBX: 00007ff5fee16180 RCX: 00007ff5feb9ce59 [ 668.152591][T11566] RDX: 0000000000000022 RSI: 0000000000000029 RDI: 0000000000000007 [ 668.160569][T11566] RBP: 00007ff5ff99e090 R08: 0000000000000120 R09: 0000000000000000 [ 668.168547][T11566] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 668.176531][T11566] R13: 00007ff5fee16218 R14: 00007ff5fee16180 R15: 00007fff6372e128 [ 668.184537][T11566] [ 668.843924][T11572] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1767'. [ 669.056171][T11574] netlink: 'syz.0.1768': attribute type 10 has an invalid length. [ 669.128173][T11574] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1768'. [ 669.934868][T11586] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1772'. [ 670.574312][T11591] can: request_module (can-proto-0) failed. [ 671.047071][T11597] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 672.308008][T11615] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1780'. [ 673.833009][T11622] netlink: 'syz.3.1781': attribute type 10 has an invalid length. [ 673.901124][T11622] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1781'. [ 673.968598][T11619] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 673.976094][T11619] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 674.064178][T11619] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 674.109645][T11619] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 674.199449][T11619] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 674.206589][T11619] batman_adv: batadv0: Removing interface: veth1_vlan [ 676.102034][T11640] netlink: 'syz.2.1787': attribute type 10 has an invalid length. [ 676.123349][T11649] netlink: 'syz.0.1789': attribute type 21 has an invalid length. [ 676.152713][T11649] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1789'. [ 676.322424][T11647] netlink: 'syz.1.1788': attribute type 2 has an invalid length. [ 676.388841][T11647] netlink: 'syz.1.1788': attribute type 8 has an invalid length. [ 676.396671][T11647] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1788'. [ 676.542381][T11656] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1790'. [ 676.588848][T11660] netlink: 'syz.0.1792': attribute type 3 has an invalid length. [ 676.628462][T11660] netlink: 'syz.0.1792': attribute type 16 has an invalid length. [ 676.636368][T11660] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1792'. [ 676.756157][T11661] netlink: 'syz.3.1791': attribute type 29 has an invalid length. [ 676.818626][T11661] netlink: 'syz.3.1791': attribute type 29 has an invalid length. [ 676.933290][T11664] netlink: 'syz.2.1793': attribute type 10 has an invalid length. [ 676.959648][T11664] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1793'. [ 678.322151][T11687] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1801'. [ 678.347942][T11689] FAULT_INJECTION: forcing a failure. [ 678.347942][T11689] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 678.348005][T11689] CPU: 1 PID: 11689 Comm: syz.1.1802 Not tainted syzkaller #0 [ 678.348025][T11689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 678.348037][T11689] Call Trace: [ 678.348045][T11689] [ 678.348054][T11689] dump_stack_lvl+0x18c/0x250 [ 678.348084][T11689] ? show_regs_print_info+0x20/0x20 [ 678.348105][T11689] ? load_image+0x420/0x420 [ 678.348134][T11689] ? __lock_acquire+0x7d40/0x7d40 [ 678.348159][T11689] ? snprintf+0xe9/0x140 [ 678.348188][T11689] should_fail_ex+0x39d/0x4d0 [ 678.348223][T11689] _copy_to_user+0x2f/0xa0 [ 678.348254][T11689] simple_read_from_buffer+0xe7/0x150 [ 678.348290][T11689] proc_fail_nth_read+0x1e8/0x260 [ 678.348320][T11689] ? proc_fault_inject_write+0x360/0x360 [ 678.348351][T11689] ? fsnotify_perm+0x271/0x5e0 [ 678.348370][T11689] ? proc_fault_inject_write+0x360/0x360 [ 678.348397][T11689] vfs_read+0x28b/0x970 [ 678.348437][T11689] ? kernel_read+0x1e0/0x1e0 [ 678.348462][T11689] ? __fget_files+0x28/0x4b0 [ 678.348485][T11689] ? __fget_files+0x28/0x4b0 [ 678.348510][T11689] ? __fget_files+0x43d/0x4b0 [ 678.348544][T11689] ? __fdget_pos+0x2a3/0x330 [ 678.348567][T11689] ? ksys_read+0x75/0x260 [ 678.348595][T11689] ksys_read+0x150/0x260 [ 678.348623][T11689] ? vfs_write+0x990/0x990 [ 678.348652][T11689] ? lockdep_hardirqs_on+0x98/0x150 [ 678.348679][T11689] do_syscall_64+0x55/0xb0 [ 678.348697][T11689] ? clear_bhb_loop+0x40/0x90 [ 678.348721][T11689] ? clear_bhb_loop+0x40/0x90 [ 678.348747][T11689] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 678.348769][T11689] RIP: 0033:0x7ff5feb5d68e [ 678.348789][T11689] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 678.348806][T11689] RSP: 002b:00007ff5ff9dffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 678.348830][T11689] RAX: ffffffffffffffda RBX: 00007ff5ff9e06c0 RCX: 00007ff5feb5d68e [ 678.348844][T11689] RDX: 000000000000000f RSI: 00007ff5ff9e00a0 RDI: 0000000000000004 [ 678.348857][T11689] RBP: 00007ff5ff9e0090 R08: 0000000000000000 R09: 0000000000000000 [ 678.348869][T11689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 678.348882][T11689] R13: 00007ff5fee16038 R14: 00007ff5fee15fa0 R15: 00007fff6372e128 [ 678.348913][T11689] [ 678.862365][T11698] netlink: 'syz.1.1805': attribute type 10 has an invalid length. [ 678.878531][T11698] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1805'. [ 679.260447][T11705] netlink: 'syz.0.1807': attribute type 10 has an invalid length. [ 679.523924][T11705] team0: Device veth1_macvtap failed to register rx_handler [ 680.916178][T11729] lo: entered allmulticast mode [ 681.049375][T11734] netlink: 'syz.1.1813': attribute type 10 has an invalid length. [ 681.109180][T11734] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 681.120910][T11733] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1815'. [ 682.307331][T11753] netlink: 'syz.1.1821': attribute type 10 has an invalid length. [ 682.348492][T11753] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1821'. [ 683.675871][T11770] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1825'. [ 684.336478][T11783] netlink: 'syz.3.1830': attribute type 29 has an invalid length. [ 684.368562][T11783] netlink: 'syz.3.1830': attribute type 29 has an invalid length. [ 684.391031][T11787] netlink: 'syz.3.1830': attribute type 29 has an invalid length. [ 684.454846][T11783] netlink: 'syz.3.1830': attribute type 29 has an invalid length. [ 684.845057][T11793] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1833'. [ 685.472446][T11803] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1838'. [ 685.581573][T11800] netlink: 'syz.0.1835': attribute type 29 has an invalid length. [ 685.601757][T11800] netlink: 'syz.0.1835': attribute type 29 has an invalid length. [ 685.651944][T11800] netlink: 'syz.0.1835': attribute type 29 has an invalid length. [ 686.109456][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.115951][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.541888][T11815] netlink: 'syz.0.1840': attribute type 10 has an invalid length. [ 686.578803][T11815] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1840'. [ 686.668493][T11821] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1842'. [ 687.676096][T11839] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1847'. [ 687.858330][T11836] netlink: 'syz.0.1844': attribute type 29 has an invalid length. [ 687.880932][T11836] netlink: 'syz.0.1844': attribute type 29 has an invalid length. [ 688.495699][T11855] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1853'. [ 690.220093][T11871] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1857'. [ 691.943315][T11886] validate_nla: 4 callbacks suppressed [ 691.943335][T11886] netlink: 'syz.0.1861': attribute type 21 has an invalid length. [ 691.988370][T11886] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1861'. [ 692.742878][T11902] netlink: 'syz.1.1864': attribute type 10 has an invalid length. [ 692.809723][T11902] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1864'. [ 693.858159][T11910] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1868'. [ 694.355996][T11915] netlink: 'syz.2.1869': attribute type 10 has an invalid length. [ 694.428086][ T1121] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 694.635946][T11915] team0: Device veth1_macvtap failed to register rx_handler [ 696.946774][T11935] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1874'. [ 697.409228][T11948] netlink: 14463 bytes leftover after parsing attributes in process `syz.1.1874'. [ 697.698899][T11951] syz.3.1876 (11951) used obsolete PPPIOCDETACH ioctl [ 698.231677][T11955] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1879'. [ 699.218644][T11964] netlink: 'syz.0.1882': attribute type 10 has an invalid length. [ 699.267230][T11964] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1882'. [ 699.590223][T11966] pim6reg1: entered promiscuous mode [ 699.595601][T11966] pim6reg1: entered allmulticast mode [ 700.564110][T11974] FAULT_INJECTION: forcing a failure. [ 700.564110][T11974] name failslab, interval 1, probability 0, space 0, times 0 [ 700.688338][T11974] CPU: 0 PID: 11974 Comm: syz.1.1885 Not tainted syzkaller #0 [ 700.695887][T11974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 700.705971][T11974] Call Trace: [ 700.709298][T11974] [ 700.712245][T11974] dump_stack_lvl+0x18c/0x250 [ 700.716941][T11974] ? show_regs_print_info+0x20/0x20 [ 700.722152][T11974] ? load_image+0x420/0x420 [ 700.726673][T11974] ? __might_sleep+0xe0/0xe0 [ 700.731281][T11974] ? __lock_acquire+0x7d40/0x7d40 [ 700.736327][T11974] ? prepend_path+0x4b/0x960 [ 700.740966][T11974] should_fail_ex+0x39d/0x4d0 [ 700.745666][T11974] should_failslab+0x9/0x20 [ 700.750210][T11974] slab_pre_alloc_hook+0x59/0x310 [ 700.755253][T11974] ? __asan_memcpy+0x40/0x70 [ 700.759875][T11974] ? tomoyo_encode+0x28b/0x540 [ 700.764648][T11974] ? tomoyo_encode+0x28b/0x540 [ 700.769421][T11974] __kmem_cache_alloc_node+0x53/0x250 [ 700.774808][T11974] ? prepend_path+0x4b/0x960 [ 700.779412][T11974] ? tomoyo_encode+0x28b/0x540 [ 700.784189][T11974] __kmalloc+0xa4/0x230 [ 700.788370][T11974] tomoyo_encode+0x28b/0x540 [ 700.792977][T11974] tomoyo_realpath_from_path+0x592/0x5d0 [ 700.798636][T11974] tomoyo_check_open_permission+0x224/0x460 [ 700.804542][T11974] ? tomoyo_check_open_permission+0x1cf/0x460 [ 700.810707][T11974] ? tomoyo_check_path_number_acl+0x280/0x280 [ 700.816811][T11974] ? __asan_memset+0x22/0x40 [ 700.821436][T11974] ? __rwlock_init+0x150/0x150 [ 700.826243][T11974] ? tomoyo_file_open+0xed/0x180 [ 700.831195][T11974] security_file_open+0x62/0xa0 [ 700.836062][T11974] do_dentry_open+0x380/0x1500 [ 700.840859][T11974] path_openat+0x27f1/0x3230 [ 700.845488][T11974] ? verify_lock_unused+0x140/0x140 [ 700.850737][T11974] ? do_filp_open+0x430/0x430 [ 700.855431][T11974] ? __virt_addr_valid+0x18c/0x540 [ 700.860614][T11974] do_filp_open+0x1f5/0x430 [ 700.865135][T11974] ? vfs_tmpfile+0x490/0x490 [ 700.869844][T11974] ? _raw_spin_unlock+0x28/0x40 [ 700.874778][T11974] ? alloc_fd+0x58f/0x630 [ 700.879152][T11974] do_sys_openat2+0x134/0x1d0 [ 700.884058][T11974] ? do_sys_open+0xe0/0xe0 [ 700.888508][T11974] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 700.894501][T11974] ? lock_chain_count+0x20/0x20 [ 700.899391][T11974] __x64_sys_openat+0x139/0x160 [ 700.904263][T11974] do_syscall_64+0x55/0xb0 [ 700.908693][T11974] ? clear_bhb_loop+0x40/0x90 [ 700.913403][T11974] ? clear_bhb_loop+0x40/0x90 [ 700.918097][T11974] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 700.924021][T11974] RIP: 0033:0x7ff5feb9ce59 [ 700.928453][T11974] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 700.948071][T11974] RSP: 002b:00007ff5ff9e0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 700.956675][T11974] RAX: ffffffffffffffda RBX: 00007ff5fee15fa0 RCX: 00007ff5feb9ce59 [ 700.964658][T11974] RDX: 000000000000275a RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 700.972640][T11974] RBP: 00007ff5ff9e0090 R08: 0000000000000000 R09: 0000000000000000 [ 700.980619][T11974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 700.988597][T11974] R13: 00007ff5fee16038 R14: 00007ff5fee15fa0 R15: 00007fff6372e128 [ 700.996601][T11974] [ 701.018565][T11974] ERROR: Out of memory at tomoyo_realpath_from_path. [ 701.271313][T11981] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1894'. [ 701.688325][T11985] netlink: 14463 bytes leftover after parsing attributes in process `syz.0.1894'. [ 702.529316][T11994] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1889'. [ 703.519854][T12005] netlink: 'syz.2.1893': attribute type 10 has an invalid length. [ 703.585246][T12005] team0: Device veth1_macvtap failed to register rx_handler [ 704.001810][T12010] FAULT_INJECTION: forcing a failure. [ 704.001810][T12010] name failslab, interval 1, probability 0, space 0, times 0 [ 704.038728][T12010] CPU: 1 PID: 12010 Comm: syz.2.1896 Not tainted syzkaller #0 [ 704.046270][T12010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 704.056367][T12010] Call Trace: [ 704.059690][T12010] [ 704.062664][T12010] dump_stack_lvl+0x18c/0x250 [ 704.067391][T12010] ? show_regs_print_info+0x20/0x20 [ 704.072730][T12010] ? load_image+0x420/0x420 [ 704.077283][T12010] ? __might_sleep+0xe0/0xe0 [ 704.081915][T12010] ? __lock_acquire+0x7d40/0x7d40 [ 704.086994][T12010] should_fail_ex+0x39d/0x4d0 [ 704.091822][T12010] should_failslab+0x9/0x20 [ 704.096371][T12010] slab_pre_alloc_hook+0x59/0x310 [ 704.101493][T12010] ? register_netdevice+0x573/0x1bb0 [ 704.106828][T12010] __kmem_cache_alloc_node+0x53/0x250 [ 704.112252][T12010] ? register_netdevice+0x573/0x1bb0 [ 704.117576][T12010] kmalloc_trace+0x2a/0xe0 [ 704.122038][T12010] register_netdevice+0x573/0x1bb0 [ 704.127196][T12010] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 704.132872][T12010] ? netif_stacked_transfer_operstate+0x210/0x210 [ 704.139330][T12010] ? idr_alloc+0x20e/0x2f0 [ 704.143859][T12010] ? mutex_unlock+0x10/0x10 [ 704.148416][T12010] ? vscnprintf+0x80/0x80 [ 704.152792][T12010] ? net_generic+0x1e/0x240 [ 704.157335][T12010] ? net_generic+0x1e/0x240 [ 704.161850][T12010] ? radix_tree_lookup+0x267/0x280 [ 704.166986][T12010] ppp_dev_configure+0x84b/0xad0 [ 704.171981][T12010] ppp_ioctl+0x6e2/0x1a90 [ 704.176329][T12010] ? ppp_poll+0x250/0x250 [ 704.180673][T12010] ? __fget_files+0x28/0x4b0 [ 704.185288][T12010] ? bpf_lsm_file_ioctl+0x9/0x10 [ 704.190246][T12010] ? security_file_ioctl+0x80/0xa0 [ 704.195542][T12010] ? ppp_poll+0x250/0x250 [ 704.199887][T12010] __se_sys_ioctl+0xfd/0x170 [ 704.204497][T12010] do_syscall_64+0x55/0xb0 [ 704.208925][T12010] ? clear_bhb_loop+0x40/0x90 [ 704.213613][T12010] ? clear_bhb_loop+0x40/0x90 [ 704.218311][T12010] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 704.224213][T12010] RIP: 0033:0x7f812559ce59 [ 704.228653][T12010] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 704.248277][T12010] RSP: 002b:00007f81264a1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 704.256802][T12010] RAX: ffffffffffffffda RBX: 00007f8125815fa0 RCX: 00007f812559ce59 [ 704.264781][T12010] RDX: 000000110e22fff6 RSI: 00000000c004743e RDI: 0000000000000005 [ 704.272760][T12010] RBP: 00007f81264a1090 R08: 0000000000000000 R09: 0000000000000000 [ 704.280739][T12010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 704.288717][T12010] R13: 00007f8125816038 R14: 00007f8125815fa0 R15: 00007ffcaaf43088 [ 704.296713][T12010] [ 704.751641][T12015] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1899'. [ 704.886443][T12020] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1900'. [ 705.163247][T12023] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1901'. [ 705.429622][T12027] netlink: 14463 bytes leftover after parsing attributes in process `syz.2.1901'. [ 706.807963][T12043] netlink: 'syz.0.1908': attribute type 10 has an invalid length. [ 706.879070][T12043] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1908'. [ 706.947193][T12043] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 707.408737][T12054] netlink: 'syz.3.1907': attribute type 10 has an invalid length. [ 707.577345][T12059] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1912'. [ 708.734078][T12075] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1917'. [ 709.209451][T12082] netlink: 'syz.0.1926': attribute type 10 has an invalid length. [ 709.307704][T12082] team0: Device veth1_macvtap failed to register rx_handler [ 709.372290][T12085] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1918'. [ 709.814150][T12089] netlink: 14463 bytes leftover after parsing attributes in process `syz.3.1918'. [ 710.552440][T12091] FAULT_INJECTION: forcing a failure. [ 710.552440][T12091] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 710.596815][T12091] CPU: 1 PID: 12091 Comm: syz.1.1920 Not tainted syzkaller #0 [ 710.604374][T12091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 710.614482][T12091] Call Trace: [ 710.617796][T12091] [ 710.620763][T12091] dump_stack_lvl+0x18c/0x250 [ 710.625504][T12091] ? show_regs_print_info+0x20/0x20 [ 710.630746][T12091] ? load_image+0x420/0x420 [ 710.635292][T12091] ? __might_fault+0xaa/0x120 [ 710.640007][T12091] ? __lock_acquire+0x7d40/0x7d40 [ 710.645071][T12091] should_fail_ex+0x39d/0x4d0 [ 710.649801][T12091] _copy_from_user+0x2f/0xe0 [ 710.654439][T12091] __sys_bpf+0x23e/0x890 [ 710.658732][T12091] ? bpf_link_show_fdinfo+0x390/0x390 [ 710.664181][T12091] ? lock_chain_count+0x20/0x20 [ 710.669101][T12091] __x64_sys_bpf+0x7c/0x90 [ 710.673562][T12091] do_syscall_64+0x55/0xb0 [ 710.678011][T12091] ? clear_bhb_loop+0x40/0x90 [ 710.682731][T12091] ? clear_bhb_loop+0x40/0x90 [ 710.687462][T12091] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 710.693407][T12091] RIP: 0033:0x7ff5feb9ce59 [ 710.697864][T12091] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 710.717547][T12091] RSP: 002b:00007ff5ff9e0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 710.725986][T12091] RAX: ffffffffffffffda RBX: 00007ff5fee15fa0 RCX: 00007ff5feb9ce59 [ 710.733971][T12091] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 000000000000000f [ 710.741950][T12091] RBP: 00007ff5ff9e0090 R08: 0000000000000000 R09: 0000000000000000 [ 710.749932][T12091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 710.757913][T12091] R13: 00007ff5fee16038 R14: 00007ff5fee15fa0 R15: 00007fff6372e128 [ 710.765912][T12091] [ 710.936875][T12095] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1922'. [ 711.163426][T12103] netlink: 'syz.2.1925': attribute type 29 has an invalid length. [ 711.182072][T12103] netlink: 'syz.2.1925': attribute type 29 has an invalid length. [ 711.209799][T12103] netlink: 'syz.2.1925': attribute type 29 has an invalid length. [ 711.591219][T12116] netlink: 'syz.1.1931': attribute type 10 has an invalid length. [ 711.703019][T12116] team0: Device veth1_macvtap failed to register rx_handler [ 712.101010][T12122] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1934'. [ 712.153853][T12127] FAULT_INJECTION: forcing a failure. [ 712.153853][T12127] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 712.185256][T12127] CPU: 0 PID: 12127 Comm: syz.1.1936 Not tainted syzkaller #0 [ 712.192802][T12127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 712.202897][T12127] Call Trace: [ 712.206214][T12127] [ 712.209177][T12127] dump_stack_lvl+0x18c/0x250 [ 712.213900][T12127] ? show_regs_print_info+0x20/0x20 [ 712.219135][T12127] ? load_image+0x420/0x420 [ 712.223685][T12127] ? __might_fault+0xaa/0x120 [ 712.228402][T12127] ? __lock_acquire+0x7d40/0x7d40 [ 712.233469][T12127] should_fail_ex+0x39d/0x4d0 [ 712.238375][T12127] _copy_from_user+0x2f/0xe0 [ 712.243014][T12127] ___sys_sendmsg+0x1c7/0x360 [ 712.247735][T12127] ? __sys_sendmsg+0x2a0/0x2a0 [ 712.252553][T12127] ? trace_call_bpf+0xc3/0x6c0 [ 712.257388][T12127] __se_sys_sendmsg+0x1c2/0x2b0 [ 712.262273][T12127] ? __x64_sys_sendmsg+0x80/0x80 [ 712.267264][T12127] ? lockdep_hardirqs_on+0x98/0x150 [ 712.272528][T12127] do_syscall_64+0x55/0xb0 [ 712.276975][T12127] ? clear_bhb_loop+0x40/0x90 [ 712.281694][T12127] ? clear_bhb_loop+0x40/0x90 [ 712.286409][T12127] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 712.292339][T12127] RIP: 0033:0x7ff5feb9ce59 [ 712.296793][T12127] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 712.316520][T12127] RSP: 002b:00007ff5ff9e0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 712.324953][T12127] RAX: ffffffffffffffda RBX: 00007ff5fee15fa0 RCX: 00007ff5feb9ce59 [ 712.332958][T12127] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000006 [ 712.340961][T12127] RBP: 00007ff5ff9e0090 R08: 0000000000000000 R09: 0000000000000000 [ 712.348942][T12127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 712.356918][T12127] R13: 00007ff5fee16038 R14: 00007ff5fee15fa0 R15: 00007fff6372e128 [ 712.364915][T12127] [ 713.816513][T12132] À: port 1(vlan0) entered blocking state [ 713.841890][T12132] À: port 1(vlan0) entered disabled state [ 713.847916][T12132] vlan0: entered allmulticast mode [ 713.865740][T12132] vlan0: entered promiscuous mode [ 713.931405][T12133] netlink: 'syz.2.1938': attribute type 10 has an invalid length. [ 714.058737][ T5082] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4 [ 714.243668][T12147] FAULT_INJECTION: forcing a failure. [ 714.243668][T12147] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 714.275017][T12147] CPU: 0 PID: 12147 Comm: syz.0.1943 Not tainted syzkaller #0 [ 714.282558][T12147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 714.292662][T12147] Call Trace: [ 714.295977][T12147] [ 714.298951][T12147] dump_stack_lvl+0x18c/0x250 [ 714.303685][T12147] ? show_regs_print_info+0x20/0x20 [ 714.308933][T12147] ? load_image+0x420/0x420 [ 714.313489][T12147] ? __might_fault+0xaa/0x120 [ 714.318213][T12147] ? __lock_acquire+0x7d40/0x7d40 [ 714.323288][T12147] should_fail_ex+0x39d/0x4d0 [ 714.328023][T12147] _copy_from_user+0x2f/0xe0 [ 714.332666][T12147] ___sys_sendmsg+0x1c7/0x360 [ 714.337426][T12147] ? get_pid_task+0x20/0x1e0 [ 714.342074][T12147] ? __sys_sendmsg+0x2a0/0x2a0 [ 714.346915][T12147] ? __lock_acquire+0x7d40/0x7d40 [ 714.352014][T12147] __se_sys_sendmsg+0x1c2/0x2b0 [ 714.356930][T12147] ? __x64_sys_sendmsg+0x80/0x80 [ 714.361935][T12147] ? lockdep_hardirqs_on+0x98/0x150 [ 714.367195][T12147] do_syscall_64+0x55/0xb0 [ 714.371648][T12147] ? clear_bhb_loop+0x40/0x90 [ 714.376377][T12147] ? clear_bhb_loop+0x40/0x90 [ 714.381121][T12147] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 714.387254][T12147] RIP: 0033:0x7f1aa619ce59 [ 714.391715][T12147] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 714.411369][T12147] RSP: 002b:00007f1aa70d0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 714.419840][T12147] RAX: ffffffffffffffda RBX: 00007f1aa6415fa0 RCX: 00007f1aa619ce59 [ 714.427861][T12147] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000003 [ 714.435877][T12147] RBP: 00007f1aa70d0090 R08: 0000000000000000 R09: 0000000000000000 [ 714.443891][T12147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 714.451910][T12147] R13: 00007f1aa6416038 R14: 00007f1aa6415fa0 R15: 00007ffd29b4af78 [ 714.459949][T12147] [ 714.887044][T12146] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1942'. [ 714.949035][T12146] team0: Port device team_slave_0 removed [ 714.955422][T12146] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 715.254015][T12154] netlink: 'syz.3.1945': attribute type 10 has an invalid length. [ 715.290297][T12154] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1945'. [ 715.379307][T12154] bridge0: port 2(ipvlan1) entered blocking state [ 715.404609][T12154] bridge0: port 2(ipvlan1) entered disabled state [ 715.714194][T12154] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 715.745459][T12159] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1948'. [ 715.786807][T12160] netlink: 'syz.2.1947': attribute type 33 has an invalid length. [ 715.815507][T12160] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1947'. [ 716.608274][T12177] FAULT_INJECTION: forcing a failure. [ 716.608274][T12177] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 716.689350][T12179] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1954'. [ 716.847318][T12177] CPU: 0 PID: 12177 Comm: syz.3.1950 Not tainted syzkaller #0 [ 716.855038][T12177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 716.865133][T12177] Call Trace: [ 716.868457][T12177] [ 716.871420][T12177] dump_stack_lvl+0x18c/0x250 [ 716.876135][T12177] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 716.882334][T12177] ? show_regs_print_info+0x20/0x20 [ 716.887565][T12177] ? load_image+0x420/0x420 [ 716.892095][T12177] should_fail_ex+0x39d/0x4d0 [ 716.896801][T12177] _copy_from_user+0x2f/0xe0 [ 716.901411][T12177] __sys_bpf+0x23e/0x890 [ 716.905680][T12177] ? bpf_link_show_fdinfo+0x390/0x390 [ 716.911079][T12177] ? lock_chain_count+0x20/0x20 [ 716.915949][T12177] __x64_sys_bpf+0x7c/0x90 [ 716.920379][T12177] do_syscall_64+0x55/0xb0 [ 716.924805][T12177] ? clear_bhb_loop+0x40/0x90 [ 716.929497][T12177] ? clear_bhb_loop+0x40/0x90 [ 716.934195][T12177] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 716.940102][T12177] RIP: 0033:0x7fc95dd9ce59 [ 716.944527][T12177] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 716.964141][T12177] RSP: 002b:00007fc95ec33028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 716.972576][T12177] RAX: ffffffffffffffda RBX: 00007fc95e016090 RCX: 00007fc95dd9ce59 [ 716.980561][T12177] RDX: 0000000000000032 RSI: 0000200000000900 RDI: 000000000000000a [ 716.988545][T12177] RBP: 00007fc95ec33090 R08: 0000000000000000 R09: 0000000000000000 [ 716.996527][T12177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 717.004505][T12177] R13: 00007fc95e016128 R14: 00007fc95e016090 R15: 00007ffeb3073b88 [ 717.012502][T12177] [ 717.759059][T12182] netlink: 'syz.0.1955': attribute type 10 has an invalid length. [ 718.656990][T12196] netlink: 'syz.0.1958': attribute type 10 has an invalid length. [ 718.690108][T12196] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1958'. [ 719.427221][T12207] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1961'. [ 719.518847][T12208] netlink: 'syz.2.1963': attribute type 10 has an invalid length. [ 719.608593][T12208] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1963'. [ 719.710058][T12208] ipvlan1: entered promiscuous mode [ 719.750744][T12208] ipvlan1: entered allmulticast mode [ 719.818604][T12208] veth0_vlan: entered allmulticast mode [ 719.971171][T12208] bridge0: port 3(ipvlan1) entered blocking state [ 720.029810][T12208] bridge0: port 3(ipvlan1) entered disabled state [ 720.219956][T12208] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 720.301828][T12219] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1965'. [ 720.592565][T12226] FAULT_INJECTION: forcing a failure. [ 720.592565][T12226] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 720.623994][T12226] CPU: 1 PID: 12226 Comm: syz.2.1967 Not tainted syzkaller #0 [ 720.631535][T12226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 720.641633][T12226] Call Trace: [ 720.644945][T12226] [ 720.647907][T12226] dump_stack_lvl+0x18c/0x250 [ 720.652644][T12226] ? show_regs_print_info+0x20/0x20 [ 720.657895][T12226] ? load_image+0x420/0x420 [ 720.662458][T12226] ? __might_fault+0xaa/0x120 [ 720.667187][T12226] ? __lock_acquire+0x7d40/0x7d40 [ 720.672281][T12226] should_fail_ex+0x39d/0x4d0 [ 720.677050][T12226] _copy_from_user+0x2f/0xe0 [ 720.681711][T12226] __sys_bpf+0x23e/0x890 [ 720.686007][T12226] ? bpf_link_show_fdinfo+0x390/0x390 [ 720.691444][T12226] ? lock_chain_count+0x20/0x20 [ 720.696341][T12226] __x64_sys_bpf+0x7c/0x90 [ 720.700800][T12226] do_syscall_64+0x55/0xb0 [ 720.705260][T12226] ? clear_bhb_loop+0x40/0x90 [ 720.709983][T12226] ? clear_bhb_loop+0x40/0x90 [ 720.714704][T12226] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 720.720634][T12226] RIP: 0033:0x7f812559ce59 [ 720.725084][T12226] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 720.744732][T12226] RSP: 002b:00007f81264a1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 720.753189][T12226] RAX: ffffffffffffffda RBX: 00007f8125815fa0 RCX: 00007f812559ce59 [ 720.761174][T12226] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 000000000000000f [ 720.769156][T12226] RBP: 00007f81264a1090 R08: 0000000000000000 R09: 0000000000000000 [ 720.777138][T12226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 720.785204][T12226] R13: 00007f8125816038 R14: 00007f8125815fa0 R15: 00007ffcaaf43088 [ 720.793226][T12226] [ 720.906644][T12228] netlink: 'syz.3.1969': attribute type 10 has an invalid length. [ 720.918161][T12228] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1969'. [ 721.763272][T12244] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1976'. [ 722.770831][T12254] netlink: 'syz.1.1977': attribute type 10 has an invalid length. [ 722.781366][T12254] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1977'. [ 722.819940][T12254] bridge0: port 2(ipvlan1) entered blocking state [ 722.849762][T12254] bridge0: port 2(ipvlan1) entered disabled state [ 722.915765][T12254] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 723.275029][T12264] FAULT_INJECTION: forcing a failure. [ 723.275029][T12264] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 723.358613][T12264] CPU: 0 PID: 12264 Comm: syz.0.1980 Not tainted syzkaller #0 [ 723.366161][T12264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 723.376267][T12264] Call Trace: [ 723.379589][T12264] [ 723.382559][T12264] dump_stack_lvl+0x18c/0x250 [ 723.387289][T12264] ? show_regs_print_info+0x20/0x20 [ 723.392529][T12264] ? load_image+0x420/0x420 [ 723.397094][T12264] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 723.403307][T12264] should_fail_ex+0x39d/0x4d0 [ 723.408048][T12264] _copy_from_user+0x2f/0xe0 [ 723.412688][T12264] __sys_bpf+0x23e/0x890 [ 723.416979][T12264] ? bpf_link_show_fdinfo+0x390/0x390 [ 723.422412][T12264] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 723.428625][T12264] __x64_sys_bpf+0x7c/0x90 [ 723.433086][T12264] do_syscall_64+0x55/0xb0 [ 723.437542][T12264] ? clear_bhb_loop+0x40/0x90 [ 723.442267][T12264] ? clear_bhb_loop+0x40/0x90 [ 723.447000][T12264] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 723.452955][T12264] RIP: 0033:0x7f1aa619ce59 [ 723.457422][T12264] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 723.477074][T12264] RSP: 002b:00007f1aa70d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 723.485537][T12264] RAX: ffffffffffffffda RBX: 00007f1aa6415fa0 RCX: 00007f1aa619ce59 [ 723.493551][T12264] RDX: 0000000000000050 RSI: 0000200000000540 RDI: 000000000000000a [ 723.501626][T12264] RBP: 00007f1aa70d0090 R08: 0000000000000000 R09: 0000000000000000 [ 723.509610][T12264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 723.517588][T12264] R13: 00007f1aa6416038 R14: 00007f1aa6415fa0 R15: 00007ffd29b4af78 [ 723.525587][T12264] [ 723.671139][T12273] netlink: 'syz.2.1983': attribute type 29 has an invalid length. [ 723.784863][T12273] netlink: 'syz.2.1983': attribute type 29 has an invalid length. [ 723.828589][T12271] netlink: 'syz.3.1984': attribute type 10 has an invalid length. [ 723.884536][T12271] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1984'. [ 724.751721][T12292] FAULT_INJECTION: forcing a failure. [ 724.751721][T12292] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 724.799249][T12292] CPU: 0 PID: 12292 Comm: syz.2.1991 Not tainted syzkaller #0 [ 724.806798][T12292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 724.816900][T12292] Call Trace: [ 724.820220][T12292] [ 724.823185][T12292] dump_stack_lvl+0x18c/0x250 [ 724.827906][T12292] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 724.834101][T12292] ? show_regs_print_info+0x20/0x20 [ 724.839321][T12292] ? load_image+0x420/0x420 [ 724.843852][T12292] should_fail_ex+0x39d/0x4d0 [ 724.848557][T12292] _copy_from_user+0x2f/0xe0 [ 724.853165][T12292] perf_copy_attr+0x16a/0x840 [ 724.857868][T12292] __se_sys_perf_event_open+0x11b/0x1c50 [ 724.863528][T12292] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 724.869612][T12292] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 724.875278][T12292] ? syscall_enter_from_user_mode+0x2e/0x80 [ 724.881187][T12292] ? __x64_sys_perf_event_open+0x20/0xc0 [ 724.886837][T12292] do_syscall_64+0x55/0xb0 [ 724.891260][T12292] ? clear_bhb_loop+0x40/0x90 [ 724.895949][T12292] ? clear_bhb_loop+0x40/0x90 [ 724.900668][T12292] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 724.906575][T12292] RIP: 0033:0x7f812559ce59 [ 724.911002][T12292] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 724.930620][T12292] RSP: 002b:00007f8126480028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 724.939046][T12292] RAX: ffffffffffffffda RBX: 00007f8125816090 RCX: 00007f812559ce59 [ 724.947029][T12292] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000480 [ 724.955013][T12292] RBP: 00007f8126480090 R08: 0000000000000000 R09: 0000000000000000 [ 724.962993][T12292] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000001 [ 724.970972][T12292] R13: 00007f8125816128 R14: 00007f8125816090 R15: 00007ffcaaf43088 [ 724.978971][T12292] [ 725.378627][T12306] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1993'. [ 726.252259][T12324] netlink: 'syz.0.1998': attribute type 10 has an invalid length. [ 726.328440][T12324] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1998'. [ 726.419260][ T3507] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 727.449190][T12337] netlink: 'syz.1.2003': attribute type 33 has an invalid length. [ 727.469312][T12337] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2003'. [ 727.747162][T12345] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2007'. [ 728.166917][T12343] netlink: 'syz.3.2005': attribute type 29 has an invalid length. [ 728.510883][T12343] netlink: 'syz.3.2005': attribute type 29 has an invalid length. [ 728.992805][T12363] netlink: 'syz.2.2012': attribute type 10 has an invalid length. [ 729.028597][T12363] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2012'. [ 729.546683][T12368] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2013'. [ 730.745680][T12377] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2016'. [ 731.582717][T12389] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2020'. [ 733.141025][T12405] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2025'. [ 733.187834][T12403] netlink: 'syz.2.2024': attribute type 10 has an invalid length. [ 733.268637][T12403] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2024'. [ 734.837170][T12421] netlink: 'syz.1.2030': attribute type 29 has an invalid length. [ 734.872227][T12421] netlink: 'syz.1.2030': attribute type 29 has an invalid length. [ 734.968430][T12425] netlink: 'syz.1.2030': attribute type 29 has an invalid length. [ 735.069003][T12426] netlink: 'syz.1.2030': attribute type 29 has an invalid length. [ 735.394538][T12429] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2033'. [ 736.201397][T12436] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2036'. [ 737.120633][T12440] netlink: 'syz.1.2038': attribute type 10 has an invalid length. [ 737.148566][T12440] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2038'. [ 738.556966][T12461] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2048'. [ 738.676896][T12463] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2047'. [ 739.432368][T12476] netlink: 'syz.1.2052': attribute type 10 has an invalid length. [ 739.461336][T12476] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2052'. [ 741.894025][T12508] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2063'. [ 742.265907][T12512] netlink: 'syz.2.2066': attribute type 10 has an invalid length. [ 742.334274][T12512] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2066'. [ 742.674865][T12521] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2070'. [ 742.989296][T12522] batadv0: entered promiscuous mode [ 747.191606][T12556] netlink: 'syz.2.2081': attribute type 10 has an invalid length. [ 747.222686][T12556] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2081'. [ 747.324381][T12558] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2082'. [ 747.741686][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.748112][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 752.264318][T12596] netlink: 'syz.2.2094': attribute type 10 has an invalid length. [ 752.355589][T12596] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2094'. [ 752.640281][T12599] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2095'. [ 755.839098][T12634] netlink: 'syz.1.2107': attribute type 10 has an invalid length. [ 755.868484][T12634] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2107'. [ 757.922495][T12661] FAULT_INJECTION: forcing a failure. [ 757.922495][T12661] name failslab, interval 1, probability 0, space 0, times 0 [ 758.066302][T12641] delete_channel: no stack [ 758.068283][T12661] CPU: 0 PID: 12661 Comm: syz.0.2117 Not tainted syzkaller #0 [ 758.078401][T12661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 758.088549][T12661] Call Trace: [ 758.091874][T12661] [ 758.094932][T12661] dump_stack_lvl+0x18c/0x250 [ 758.099671][T12661] ? show_regs_print_info+0x20/0x20 [ 758.104925][T12661] ? load_image+0x420/0x420 [ 758.110096][T12661] ? __might_sleep+0xe0/0xe0 [ 758.115009][T12661] ? __lock_acquire+0x7d40/0x7d40 [ 758.120096][T12661] should_fail_ex+0x39d/0x4d0 [ 758.124839][T12661] should_failslab+0x9/0x20 [ 758.129416][T12661] slab_pre_alloc_hook+0x59/0x310 [ 758.134508][T12661] kmem_cache_alloc_node+0x60/0x320 [ 758.139755][T12661] ? lock_chain_count+0x20/0x20 [ 758.144652][T12661] ? dup_task_struct+0x57/0x7c0 [ 758.149564][T12661] dup_task_struct+0x57/0x7c0 [ 758.154288][T12661] ? lockdep_hardirqs_on+0x98/0x150 [ 758.159541][T12661] copy_process+0x586/0x3dc0 [ 758.164256][T12661] ? __pidfd_prepare+0x140/0x140 [ 758.169272][T12661] kernel_clone+0x24b/0x8a0 [ 758.173838][T12661] ? create_io_thread+0x190/0x190 [ 758.178991][T12661] __x64_sys_clone+0x1b7/0x230 [ 758.183810][T12661] ? __fget_files+0x43d/0x4b0 [ 758.188551][T12661] ? __ia32_sys_vfork+0x140/0x140 [ 758.193671][T12661] ? lock_chain_count+0x20/0x20 [ 758.198608][T12661] ? lockdep_hardirqs_on+0x98/0x150 [ 758.203882][T12661] do_syscall_64+0x55/0xb0 [ 758.208343][T12661] ? clear_bhb_loop+0x40/0x90 [ 758.213081][T12661] ? clear_bhb_loop+0x40/0x90 [ 758.217818][T12661] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 758.223759][T12661] RIP: 0033:0x7f1aa619ce59 [ 758.228219][T12661] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 758.247882][T12661] RSP: 002b:00007f1aa70cffd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 758.256361][T12661] RAX: ffffffffffffffda RBX: 00007f1aa6415fa0 RCX: 00007f1aa619ce59 [ 758.264386][T12661] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001000000 [ 758.272385][T12661] RBP: 00007f1aa70d0090 R08: 0000000000000000 R09: 0000000000000000 [ 758.280382][T12661] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 758.288392][T12661] R13: 00007f1aa6416038 R14: 00007f1aa6415fa0 R15: 00007ffd29b4af78 [ 758.296415][T12661] [ 758.459065][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 758.515473][T12657] netlink: 'syz.2.2110': attribute type 10 has an invalid length. [ 758.683730][T12657] team0: Port device dummy0 added [ 759.535881][T12676] netlink: 'syz.2.2120': attribute type 10 has an invalid length. [ 759.578878][T12676] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2120'. [ 760.439197][T12687] bridge0: port 1(bridge_slave_0) entered disabled state [ 760.463817][T12687] bridge0: entered allmulticast mode [ 762.934137][T12711] netlink: 'syz.3.2134': attribute type 10 has an invalid length. [ 763.177176][T12710] delete_channel: no stack [ 763.271430][T12719] netlink: 'syz.2.2137': attribute type 10 has an invalid length. [ 763.350044][T12719] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2137'. [ 763.507848][T12722] FAULT_INJECTION: forcing a failure. [ 763.507848][T12722] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 763.539212][T12722] CPU: 1 PID: 12722 Comm: syz.3.2138 Not tainted syzkaller #0 [ 763.546756][T12722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 763.556857][T12722] Call Trace: [ 763.560169][T12722] [ 763.563131][T12722] dump_stack_lvl+0x18c/0x250 [ 763.567851][T12722] ? show_regs_print_info+0x20/0x20 [ 763.573087][T12722] ? load_image+0x420/0x420 [ 763.577637][T12722] ? __might_fault+0xaa/0x120 [ 763.582351][T12722] ? __lock_acquire+0x7d40/0x7d40 [ 763.587418][T12722] should_fail_ex+0x39d/0x4d0 [ 763.592147][T12722] _copy_from_iter+0x1d9/0x12e0 [ 763.597047][T12722] ? slab_post_alloc_hook+0x8a/0x4b0 [ 763.602373][T12722] ? __virt_addr_valid+0x18c/0x540 [ 763.607525][T12722] ? __lock_acquire+0x7d40/0x7d40 [ 763.612585][T12722] ? rcu_is_watching+0x15/0xb0 [ 763.617395][T12722] ? copyout_mc+0x70/0x70 [ 763.621777][T12722] ? __virt_addr_valid+0x18c/0x540 [ 763.626930][T12722] ? __virt_addr_valid+0x18c/0x540 [ 763.632083][T12722] ? __virt_addr_valid+0x469/0x540 [ 763.637238][T12722] ? __check_object_size+0x506/0xa20 [ 763.642567][T12722] netlink_sendmsg+0x76b/0xbf0 [ 763.647399][T12722] ? netlink_getsockopt+0x590/0x590 [ 763.652634][T12722] ? aa_sock_msg_perm+0x94/0x150 [ 763.657612][T12722] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 763.662933][T12722] ? security_socket_sendmsg+0x80/0xa0 [ 763.668413][T12722] ? netlink_getsockopt+0x590/0x590 [ 763.673633][T12722] ____sys_sendmsg+0x5ba/0x960 [ 763.678412][T12722] ? __asan_memset+0x22/0x40 [ 763.683022][T12722] ? __sys_sendmsg_sock+0x30/0x30 [ 763.688058][T12722] ? __import_iovec+0x5f2/0x850 [ 763.692925][T12722] ? import_iovec+0x73/0xa0 [ 763.697441][T12722] ___sys_sendmsg+0x2a6/0x360 [ 763.702134][T12722] ? get_pid_task+0x20/0x1e0 [ 763.706745][T12722] ? __sys_sendmsg+0x2a0/0x2a0 [ 763.711533][T12722] ? __lock_acquire+0x7d40/0x7d40 [ 763.716588][T12722] __se_sys_sendmsg+0x1c2/0x2b0 [ 763.721450][T12722] ? __x64_sys_sendmsg+0x80/0x80 [ 763.726414][T12722] ? lockdep_hardirqs_on+0x98/0x150 [ 763.731632][T12722] do_syscall_64+0x55/0xb0 [ 763.736054][T12722] ? clear_bhb_loop+0x40/0x90 [ 763.740744][T12722] ? clear_bhb_loop+0x40/0x90 [ 763.745432][T12722] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 763.751425][T12722] RIP: 0033:0x7fc95dd9ce59 [ 763.755852][T12722] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 763.775468][T12722] RSP: 002b:00007fc95ec54028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 763.783918][T12722] RAX: ffffffffffffffda RBX: 00007fc95e015fa0 RCX: 00007fc95dd9ce59 [ 763.791926][T12722] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 763.799922][T12722] RBP: 00007fc95ec54090 R08: 0000000000000000 R09: 0000000000000000 [ 763.807901][T12722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 763.816061][T12722] R13: 00007fc95e016038 R14: 00007fc95e015fa0 R15: 00007ffeb3073b88 [ 763.824056][T12722] [ 764.379824][T12725] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2139'. [ 765.186202][T12732] bridge0: port 1(bridge_slave_0) entered disabled state [ 765.195991][T12732] bridge0: entered allmulticast mode [ 765.366781][T12732] bridge0: port 1(bridge_slave_0) entered blocking state [ 765.374054][T12732] bridge0: port 1(bridge_slave_0) entered forwarding state [ 765.407857][T12732] bridge0: entered promiscuous mode [ 766.202907][T12752] netlink: 'syz.3.2148': attribute type 39 has an invalid length. [ 767.653744][T12758] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2150'. [ 767.930503][T12766] netlink: 'syz.3.2152': attribute type 10 has an invalid length. [ 767.958558][T12766] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2152'. [ 770.343047][T12784] delete_channel: no stack [ 770.520029][T12786] netlink: 'syz.1.2159': attribute type 10 has an invalid length. [ 770.645103][T12786] team0: Port device dummy0 added [ 770.952221][T12799] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2163'. [ 772.681143][T12817] sctp: [Deprecated]: syz.1.2171 (pid 12817) Use of struct sctp_assoc_value in delayed_ack socket option. [ 772.681143][T12817] Use struct sctp_sack_info instead [ 772.898832][T12817] netlink: 'syz.1.2171': attribute type 10 has an invalid length. [ 773.873790][T12817] team0: Device wg1 is of different type [ 774.458349][T12830] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2174'. [ 775.473894][T12842] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2176'. [ 775.514665][T12842] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2176'. [ 775.588833][T12844] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2176'. [ 777.164264][T12863] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2185'. [ 778.831309][T12877] netlink: 'syz.0.2190': attribute type 1 has an invalid length. [ 778.880861][T12877] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.2190'. [ 780.882950][T12901] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2196'. [ 783.104879][T12922] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2202'. [ 786.659812][T12954] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2212'. [ 786.922376][T12950] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2210'. [ 788.074618][T12965] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2223'. [ 788.398077][T12967] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2215'. [ 788.999891][T12975] IPv6: Can't replace route, no match found [ 790.418847][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 791.124600][T12997] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2226'. [ 792.311248][T13010] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2229'. [ 792.366241][T13013] @ÿ: renamed from bond_slave_0 [ 792.608398][T13013] FAULT_INJECTION: forcing a failure. [ 792.608398][T13013] name failslab, interval 1, probability 0, space 0, times 0 [ 792.709388][T13013] CPU: 0 PID: 13013 Comm: syz.3.2230 Not tainted syzkaller #0 [ 792.716933][T13013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 792.727039][T13013] Call Trace: [ 792.730335][T13013] [ 792.733279][T13013] dump_stack_lvl+0x18c/0x250 [ 792.737974][T13013] ? show_regs_print_info+0x20/0x20 [ 792.743185][T13013] ? load_image+0x420/0x420 [ 792.747706][T13013] ? __might_sleep+0xe0/0xe0 [ 792.752308][T13013] ? __lock_acquire+0x7d40/0x7d40 [ 792.757347][T13013] should_fail_ex+0x39d/0x4d0 [ 792.762052][T13013] should_failslab+0x9/0x20 [ 792.766580][T13013] slab_pre_alloc_hook+0x59/0x310 [ 792.771630][T13013] kmem_cache_alloc_node+0x60/0x320 [ 792.776853][T13013] ? __alloc_skb+0x103/0x2c0 [ 792.781466][T13013] __alloc_skb+0x103/0x2c0 [ 792.785899][T13013] rtmsg_ifinfo_build_skb+0x8c/0x260 [ 792.791206][T13013] rtnetlink_event+0x1b7/0x260 [ 792.795990][T13013] notifier_call_chain+0x197/0x380 [ 792.801135][T13013] dev_change_name+0x5e7/0x8c0 [ 792.805929][T13013] ? dev_alloc_name+0x1d0/0x1d0 [ 792.810799][T13013] ? dev_ifsioc+0x316/0xc40 [ 792.815322][T13013] dev_ioctl+0x5ec/0x1140 [ 792.819677][T13013] sock_do_ioctl+0x239/0x310 [ 792.824281][T13013] ? sock_show_fdinfo+0xb0/0xb0 [ 792.829162][T13013] sock_ioctl+0x5ba/0x7e0 [ 792.833507][T13013] ? sock_poll+0x3e0/0x3e0 [ 792.837941][T13013] ? bpf_lsm_file_ioctl+0x9/0x10 [ 792.842885][T13013] ? security_file_ioctl+0x80/0xa0 [ 792.848021][T13013] ? sock_poll+0x3e0/0x3e0 [ 792.852457][T13013] __se_sys_ioctl+0xfd/0x170 [ 792.857062][T13013] do_syscall_64+0x55/0xb0 [ 792.861491][T13013] ? clear_bhb_loop+0x40/0x90 [ 792.866267][T13013] ? clear_bhb_loop+0x40/0x90 [ 792.870961][T13013] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 792.876866][T13013] RIP: 0033:0x7fc95dd9ce59 [ 792.881291][T13013] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 792.900909][T13013] RSP: 002b:00007fc95ec54028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 792.909337][T13013] RAX: ffffffffffffffda RBX: 00007fc95e015fa0 RCX: 00007fc95dd9ce59 [ 792.917332][T13013] RDX: 00002000000000c0 RSI: 0000000000008923 RDI: 0000000000000004 [ 792.925315][T13013] RBP: 00007fc95ec54090 R08: 0000000000000000 R09: 0000000000000000 [ 792.933294][T13013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 792.941278][T13013] R13: 00007fc95e016038 R14: 00007fc95e015fa0 R15: 00007ffeb3073b88 [ 792.949275][T13013] [ 794.844947][T13042] FAULT_INJECTION: forcing a failure. [ 794.844947][T13042] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 795.048016][T13042] CPU: 0 PID: 13042 Comm: syz.3.2238 Not tainted syzkaller #0 [ 795.055567][T13042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 795.065659][T13042] Call Trace: [ 795.068983][T13042] [ 795.071951][T13042] dump_stack_lvl+0x18c/0x250 [ 795.076698][T13042] ? show_regs_print_info+0x20/0x20 [ 795.081960][T13042] ? load_image+0x420/0x420 [ 795.086536][T13042] ? __lock_acquire+0x7d40/0x7d40 [ 795.091606][T13042] ? perf_trace_preemptirq_template+0xac/0x330 [ 795.097812][T13042] should_fail_ex+0x39d/0x4d0 [ 795.102544][T13042] prepare_alloc_pages+0x1e2/0x5f0 [ 795.107681][T13042] __alloc_pages+0x134/0x460 [ 795.112288][T13042] ? zone_statistics+0x170/0x170 [ 795.117242][T13042] ? rcuref_put_slowpath+0xe1/0x150 [ 795.122463][T13042] bpf_prog_test_run_xdp+0xc37/0x10e0 [ 795.127869][T13042] ? dev_put+0x80/0x80 [ 795.131962][T13042] ? dev_put+0x80/0x80 [ 795.136044][T13042] bpf_prog_test_run+0x321/0x390 [ 795.140998][T13042] __sys_bpf+0x49d/0x890 [ 795.145255][T13042] ? bpf_link_show_fdinfo+0x390/0x390 [ 795.150672][T13042] ? lock_chain_count+0x20/0x20 [ 795.155540][T13042] __x64_sys_bpf+0x7c/0x90 [ 795.159967][T13042] do_syscall_64+0x55/0xb0 [ 795.164393][T13042] ? clear_bhb_loop+0x40/0x90 [ 795.169103][T13042] ? clear_bhb_loop+0x40/0x90 [ 795.173880][T13042] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 795.179783][T13042] RIP: 0033:0x7fc95dd9ce59 [ 795.184298][T13042] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 795.204090][T13042] RSP: 002b:00007fc95ec54028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 795.212516][T13042] RAX: ffffffffffffffda RBX: 00007fc95e015fa0 RCX: 00007fc95dd9ce59 [ 795.220502][T13042] RDX: 0000000000000050 RSI: 00002000000011c0 RDI: 000000000000000a [ 795.228481][T13042] RBP: 00007fc95ec54090 R08: 0000000000000000 R09: 0000000000000000 [ 795.236467][T13042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 795.244457][T13042] R13: 00007fc95e016038 R14: 00007fc95e015fa0 R15: 00007ffeb3073b88 [ 795.252456][T13042] [ 795.557645][T13050] FAULT_INJECTION: forcing a failure. [ 795.557645][T13050] name failslab, interval 1, probability 0, space 0, times 0 [ 795.661140][T13050] CPU: 0 PID: 13050 Comm: syz.2.2242 Not tainted syzkaller #0 [ 795.668665][T13050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 795.678761][T13050] Call Trace: [ 795.682073][T13050] [ 795.685034][T13050] dump_stack_lvl+0x18c/0x250 [ 795.689760][T13050] ? show_regs_print_info+0x20/0x20 [ 795.695000][T13050] ? load_image+0x420/0x420 [ 795.699562][T13050] ? __might_sleep+0xe0/0xe0 [ 795.704188][T13050] ? __lock_acquire+0x7d40/0x7d40 [ 795.709254][T13050] should_fail_ex+0x39d/0x4d0 [ 795.714067][T13050] should_failslab+0x9/0x20 [ 795.718620][T13050] slab_pre_alloc_hook+0x59/0x310 [ 795.723694][T13050] ? register_netdevice+0x573/0x1bb0 [ 795.729031][T13050] __kmem_cache_alloc_node+0x53/0x250 [ 795.734443][T13050] ? register_netdevice+0x573/0x1bb0 [ 795.739766][T13050] kmalloc_trace+0x2a/0xe0 [ 795.744199][T13050] register_netdevice+0x573/0x1bb0 [ 795.749336][T13050] ? netif_stacked_transfer_operstate+0x210/0x210 [ 795.755774][T13050] ? __lock_acquire+0x7d40/0x7d40 [ 795.760818][T13050] ? net_generic+0x1e/0x240 [ 795.765417][T13050] ip6_tnl_create2+0x80/0x140 [ 795.770110][T13050] ip6_tnl_locate+0x735/0x830 [ 795.774807][T13050] ? ip6_tnl_parm_from_user+0x340/0x340 [ 795.780362][T13050] ? __might_fault+0xaa/0x120 [ 795.785133][T13050] ? __might_fault+0xc6/0x120 [ 795.789815][T13050] ? __might_fault+0xaa/0x120 [ 795.794501][T13050] ? ip6_tnl_siocdevprivate+0x5eb/0xab0 [ 795.800067][T13050] ip6_tnl_siocdevprivate+0x619/0xab0 [ 795.805474][T13050] ? ip6_tnl_start_xmit+0x11c0/0x11c0 [ 795.810860][T13050] ? dev_ioctl+0x83c/0x1140 [ 795.815377][T13050] ? __lock_acquire+0x7d40/0x7d40 [ 795.820434][T13050] ? dev_ifsioc+0x958/0xc40 [ 795.824949][T13050] dev_ioctl+0x84c/0x1140 [ 795.829298][T13050] sock_ioctl+0x74c/0x7e0 [ 795.833639][T13050] ? sock_poll+0x3e0/0x3e0 [ 795.838077][T13050] ? bpf_lsm_file_ioctl+0x9/0x10 [ 795.843074][T13050] ? security_file_ioctl+0x80/0xa0 [ 795.848199][T13050] ? sock_poll+0x3e0/0x3e0 [ 795.852631][T13050] __se_sys_ioctl+0xfd/0x170 [ 795.857253][T13050] do_syscall_64+0x55/0xb0 [ 795.861692][T13050] ? clear_bhb_loop+0x40/0x90 [ 795.866468][T13050] ? clear_bhb_loop+0x40/0x90 [ 795.871179][T13050] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 795.877174][T13050] RIP: 0033:0x7f812559ce59 [ 795.881598][T13050] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 795.901215][T13050] RSP: 002b:00007f81264a1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 795.909642][T13050] RAX: ffffffffffffffda RBX: 00007f8125815fa0 RCX: 00007f812559ce59 [ 795.917620][T13050] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000005 [ 795.925598][T13050] RBP: 00007f81264a1090 R08: 0000000000000000 R09: 0000000000000000 [ 795.933576][T13050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 795.941553][T13050] R13: 00007f8125816038 R14: 00007f8125815fa0 R15: 00007ffcaaf43088 [ 795.949547][T13050] [ 796.284933][T13055] netlink: 8063 bytes leftover after parsing attributes in process `syz.1.2243'. [ 796.308070][T13055] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2243'. [ 796.348094][T13055] openvswitch: netlink: Key type 4112 is out of range max 32 [ 796.463119][T13055] netlink: 'syz.1.2243': attribute type 1 has an invalid length. [ 796.568378][T13055] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.2243'. [ 798.649221][T13085] FAULT_INJECTION: forcing a failure. [ 798.649221][T13085] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 798.728714][T13085] CPU: 0 PID: 13085 Comm: syz.2.2252 Not tainted syzkaller #0 [ 798.736267][T13085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 798.746374][T13085] Call Trace: [ 798.749699][T13085] [ 798.752660][T13085] dump_stack_lvl+0x18c/0x250 [ 798.757391][T13085] ? show_regs_print_info+0x20/0x20 [ 798.762646][T13085] ? load_image+0x420/0x420 [ 798.767206][T13085] ? __might_fault+0xaa/0x120 [ 798.771925][T13085] ? __lock_acquire+0x7d40/0x7d40 [ 798.776999][T13085] should_fail_ex+0x39d/0x4d0 [ 798.781730][T13085] _copy_from_user+0x2f/0xe0 [ 798.786368][T13085] __sys_bpf+0x23e/0x890 [ 798.790662][T13085] ? bpf_link_show_fdinfo+0x390/0x390 [ 798.796092][T13085] ? lock_chain_count+0x20/0x20 [ 798.801004][T13085] __x64_sys_bpf+0x7c/0x90 [ 798.805466][T13085] do_syscall_64+0x55/0xb0 [ 798.809919][T13085] ? clear_bhb_loop+0x40/0x90 [ 798.814639][T13085] ? clear_bhb_loop+0x40/0x90 [ 798.819354][T13085] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 798.825264][T13085] RIP: 0033:0x7f812559ce59 [ 798.829693][T13085] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 798.849333][T13085] RSP: 002b:00007f8126480028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 798.857760][T13085] RAX: ffffffffffffffda RBX: 00007f8125816090 RCX: 00007f812559ce59 [ 798.865741][T13085] RDX: 000000000000000c RSI: 0000200000000340 RDI: 000000000000000a [ 798.873736][T13085] RBP: 00007f8126480090 R08: 0000000000000000 R09: 0000000000000000 [ 798.881726][T13085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 798.889705][T13085] R13: 00007f8125816128 R14: 00007f8125816090 R15: 00007ffcaaf43088 [ 798.897698][T13085] [ 799.825326][T13093] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2255'. [ 802.228136][T13110] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 803.331465][T13128] netlink: 'syz.0.2266': attribute type 3 has an invalid length. [ 803.418493][T13128] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2266'. [ 806.221184][T13157] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2276'. [ 807.765583][T13161] delete_channel: no stack [ 809.010563][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.016972][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 811.010215][T13212] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 811.021006][T13212] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 811.029633][T13212] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 811.039247][T13212] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 811.048353][T13212] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 811.055812][T13212] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 811.863081][T13211] chnl_net:caif_netlink_parms(): no params data found [ 812.173024][T13211] bridge0: port 1(bridge_slave_0) entered blocking state [ 812.219041][T13211] bridge0: port 1(bridge_slave_0) entered disabled state [ 812.226358][T13211] bridge_slave_0: entered allmulticast mode [ 812.295949][T13211] bridge_slave_0: entered promiscuous mode [ 812.338899][T13211] bridge0: port 2(bridge_slave_1) entered blocking state [ 812.346364][T13211] bridge0: port 2(bridge_slave_1) entered disabled state [ 812.378682][T13211] bridge_slave_1: entered allmulticast mode [ 812.386237][T13211] bridge_slave_1: entered promiscuous mode [ 812.485518][T13211] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 812.542408][T13211] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 812.836443][T13233] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2296'. [ 812.912794][T13233] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 813.139269][ T5082] Bluetooth: hci4: command tx timeout [ 815.220924][ T5082] Bluetooth: hci4: command tx timeout [ 815.329989][T13211] team0: Port device team_slave_0 added [ 815.423454][T13211] team0: Port device team_slave_1 added [ 815.725212][T13211] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 815.758607][T13211] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 815.824379][T13211] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 815.893001][T13211] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 815.902287][T13211] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 815.944952][T13211] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 816.217100][T13253] syzkaller0: entered promiscuous mode [ 816.278349][T13253] syzkaller0: entered allmulticast mode [ 817.002959][ T9299] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 817.298777][ T5082] Bluetooth: hci4: command tx timeout [ 819.388311][ T5082] Bluetooth: hci4: command tx timeout [ 821.320965][ T9299] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 821.421177][T13211] hsr_slave_0: entered promiscuous mode [ 821.438729][T13211] hsr_slave_1: entered promiscuous mode [ 821.458544][T13211] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 821.467555][T13211] Cannot create hsr debugfs directory [ 821.571060][ T9299] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 821.892148][ T9299] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 822.422421][ T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 822.483828][T13286] netlink: 212832 bytes leftover after parsing attributes in process `syz.3.2312'. [ 823.458318][T13291] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2311'. [ 824.340756][T13311] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2316'. [ 825.127301][T13211] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 825.438880][T13211] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 825.495658][T13211] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 825.809285][T13211] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 827.390982][T13358] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2323'. [ 827.464593][T13211] 8021q: adding VLAN 0 to HW filter on device bond0 [ 827.701913][ T9299] hsr_slave_0: left promiscuous mode [ 827.717378][ T9299] hsr_slave_1: left promiscuous mode [ 827.758540][ T9299] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 827.770950][ T9299] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 827.833946][ T9299] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 827.864184][ T9299] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 827.886260][ T9299] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 827.900635][ T9299] batman_adv: batadv0: Removing interface: veth1_vlan [ 827.965060][ T9299] veth0_macvtap: left promiscuous mode [ 827.971364][ T9299] veth1_vlan: left promiscuous mode [ 827.977048][ T9299] veth0_vlan: left promiscuous mode [ 830.493681][ T9299] team0 (unregistering): Port device team_slave_1 removed [ 830.667012][ T9299] team0 (unregistering): Port device team_slave_0 removed [ 831.589719][T13211] 8021q: adding VLAN 0 to HW filter on device team0 [ 831.625584][T11543] bridge0: port 1(bridge_slave_0) entered blocking state [ 831.632840][T11543] bridge0: port 1(bridge_slave_0) entered forwarding state [ 831.696493][T11543] bridge0: port 2(bridge_slave_1) entered blocking state [ 831.703701][T11543] bridge0: port 2(bridge_slave_1) entered forwarding state [ 832.397956][T13211] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 832.582826][T13390] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2330'. [ 832.583526][T13211] veth0_vlan: entered promiscuous mode [ 832.644310][T13390] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 832.654441][T13211] veth1_vlan: entered promiscuous mode [ 832.867220][T13211] veth0_macvtap: entered promiscuous mode [ 832.905929][T13211] veth1_macvtap: entered promiscuous mode [ 832.988016][T13211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 833.130116][T13211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 833.215186][T13211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 833.308640][T13211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 833.368043][T13211] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 833.436568][T13211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 833.476414][T13211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 833.496714][T13211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 833.534842][T13211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 833.564579][T13211] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 833.606417][T13211] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 833.646679][T13211] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 833.672931][T13211] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 833.698301][T13211] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.364990][T13404] netlink: 'syz.1.2333': attribute type 29 has an invalid length. [ 835.387604][T13404] netlink: 'syz.1.2333': attribute type 29 has an invalid length. [ 835.586280][T13404] netlink: 'syz.1.2333': attribute type 29 has an invalid length. [ 835.619351][ T1139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 835.629140][ T1139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 835.794514][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 835.795282][T13410] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2335'. [ 835.802999][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 835.870075][T13411] netlink: 'syz.3.2334': attribute type 33 has an invalid length. [ 835.887586][T13411] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2334'. [ 835.983201][T13408] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2334'. [ 837.130187][T13426] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 837.137493][T13426] IPv6: NLM_F_CREATE should be set when creating new route [ 837.144820][T13426] IPv6: NLM_F_CREATE should be set when creating new route [ 837.152156][T13426] IPv6: NLM_F_CREATE should be set when creating new route [ 837.995205][T13434] FAULT_INJECTION: forcing a failure. [ 837.995205][T13434] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 838.195094][T13434] CPU: 0 PID: 13434 Comm: syz.1.2342 Not tainted syzkaller #0 [ 838.202641][T13434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 838.212738][T13434] Call Trace: [ 838.216051][T13434] [ 838.219022][T13434] dump_stack_lvl+0x18c/0x250 [ 838.223749][T13434] ? show_regs_print_info+0x20/0x20 [ 838.228988][T13434] ? load_image+0x420/0x420 [ 838.233531][T13434] ? __might_fault+0xaa/0x120 [ 838.238245][T13434] ? __lock_acquire+0x7d40/0x7d40 [ 838.243309][T13434] should_fail_ex+0x39d/0x4d0 [ 838.248034][T13434] _copy_from_user+0x2f/0xe0 [ 838.252669][T13434] ___sys_sendmsg+0x1c7/0x360 [ 838.257483][T13434] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 838.263242][T13434] ? __sys_sendmsg+0x2a0/0x2a0 [ 838.268070][T13434] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 838.274312][T13434] __se_sys_sendmsg+0x1c2/0x2b0 [ 838.279222][T13434] ? __x64_sys_sendmsg+0x80/0x80 [ 838.284236][T13434] ? lockdep_hardirqs_on+0x98/0x150 [ 838.289495][T13434] do_syscall_64+0x55/0xb0 [ 838.293955][T13434] ? clear_bhb_loop+0x40/0x90 [ 838.298682][T13434] ? clear_bhb_loop+0x40/0x90 [ 838.303422][T13434] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 838.309380][T13434] RIP: 0033:0x7ff5feb9ce59 [ 838.313846][T13434] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 838.333503][T13434] RSP: 002b:00007ff5ff9e0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 838.341987][T13434] RAX: ffffffffffffffda RBX: 00007ff5fee15fa0 RCX: 00007ff5feb9ce59 [ 838.350007][T13434] RDX: 0000000000000000 RSI: 0000200000000b00 RDI: 000000000000000a [ 838.358024][T13434] RBP: 00007ff5ff9e0090 R08: 0000000000000000 R09: 0000000000000000 [ 838.366047][T13434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 838.374063][T13434] R13: 00007ff5fee16038 R14: 00007ff5fee15fa0 R15: 00007fff6372e128 [ 838.382103][T13434] [ 838.651021][T13445] tap0: tun_chr_ioctl cmd 1074025677 [ 838.658657][T13445] tap0: linktype set to 0 [ 838.783951][T13447] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2345'. [ 839.119294][T13452] netlink: 'syz.1.2346': attribute type 33 has an invalid length. [ 839.182597][T13452] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2346'. [ 839.318147][T13458] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2346'. [ 840.911803][T13480] netlink: 'syz.2.2355': attribute type 10 has an invalid length. [ 841.241909][T13480] team0: Device wg1 is of different type [ 842.269333][T13212] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 842.280112][T13212] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 842.292168][T13212] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 842.301465][T13212] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 842.338516][T13212] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 842.346679][T13212] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 842.765709][T13505] netlink: 'syz.2.2362': attribute type 33 has an invalid length. [ 842.798474][T13505] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2362'. [ 843.444357][T13497] chnl_net:caif_netlink_parms(): no params data found [ 843.836983][T13497] bridge0: port 1(bridge_slave_0) entered blocking state [ 843.878399][T13497] bridge0: port 1(bridge_slave_0) entered disabled state [ 843.918088][T13497] bridge_slave_0: entered allmulticast mode [ 843.944764][T13497] bridge_slave_0: entered promiscuous mode [ 843.969660][T13497] bridge0: port 2(bridge_slave_1) entered blocking state [ 843.977030][T13497] bridge0: port 2(bridge_slave_1) entered disabled state [ 843.998455][T13497] bridge_slave_1: entered allmulticast mode [ 844.019946][T13497] bridge_slave_1: entered promiscuous mode [ 844.143973][T13497] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 844.171834][T13497] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 844.434158][ T5082] Bluetooth: hci1: command tx timeout [ 844.516753][T13497] team0: Port device team_slave_0 added [ 844.754154][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 844.836710][T13497] team0: Port device team_slave_1 added [ 844.925279][T13534] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2368'. [ 845.206401][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.551715][T13539] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2372'. [ 845.602641][T13497] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 845.626166][T13497] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 845.685914][T13497] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 845.712052][T13497] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 845.730456][T13497] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 845.788334][T13497] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 845.892374][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 846.149644][T13497] hsr_slave_0: entered promiscuous mode [ 846.222021][T13497] hsr_slave_1: entered promiscuous mode [ 846.320866][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 846.518383][ T5082] Bluetooth: hci1: command tx timeout [ 848.029683][T13577] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2381'. [ 848.578481][ T5082] Bluetooth: hci1: command tx timeout [ 849.062894][T13497] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 849.310916][T13593] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2383'. [ 849.391159][T13497] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 849.472162][T13497] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 849.770867][T13497] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 850.658403][ T5082] Bluetooth: hci1: command tx timeout [ 850.984396][T13497] 8021q: adding VLAN 0 to HW filter on device bond0 [ 851.057452][T13497] 8021q: adding VLAN 0 to HW filter on device team0 [ 851.358938][T13622] netlink: 'syz.2.2388': attribute type 10 has an invalid length. [ 851.447381][T13622] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2388'. [ 851.485152][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 851.492458][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 851.560725][T13626] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2390'. [ 851.725562][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 851.732930][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 852.681079][ T12] hsr_slave_0: left promiscuous mode [ 852.716103][ T12] hsr_slave_1: left promiscuous mode [ 852.784090][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 852.806747][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 852.831388][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 852.843924][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 852.860462][ T12] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 852.874474][ T12] batman_adv: batadv0: Removing interface: veth1_vlan [ 852.905004][ T12] bridge_slave_0: left allmulticast mode [ 852.919492][ T12] bridge_slave_0: left promiscuous mode [ 852.937927][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 853.023612][ T12] veth0_macvtap: left promiscuous mode [ 853.031053][ T12] veth1_vlan: left promiscuous mode [ 853.049183][ T12] veth0_vlan: left promiscuous mode [ 854.421954][ T1139] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 867.129710][T13212] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 867.140080][T13212] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 867.152375][T13212] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 867.162093][T13212] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 867.173840][T13212] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 867.182192][T13212] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 868.192529][ T5082] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 868.201251][ T5082] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 868.211546][ T5082] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 868.221413][ T5082] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 868.229660][ T5082] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 868.237173][ T5082] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 869.197115][ T5082] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 869.205894][ T5082] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 869.216056][ T5082] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 869.223993][ T5082] Bluetooth: hci2: command tx timeout [ 869.225653][T13659] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 869.242774][T13659] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 869.250222][T13659] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 870.258446][T13212] Bluetooth: hci5: command tx timeout [ 870.423308][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.435833][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.298342][T13659] Bluetooth: hci2: command tx timeout [ 871.304409][T13212] Bluetooth: hci6: command tx timeout [ 872.338534][T13212] Bluetooth: hci5: command tx timeout [ 873.378423][T13212] Bluetooth: hci6: command tx timeout [ 873.378452][T13659] Bluetooth: hci2: command tx timeout [ 874.418318][T13659] Bluetooth: hci5: command tx timeout [ 875.458358][T13659] Bluetooth: hci6: command tx timeout [ 875.458417][T13212] Bluetooth: hci2: command tx timeout [ 876.498314][T13212] Bluetooth: hci5: command tx timeout [ 877.538298][T13212] Bluetooth: hci6: command tx timeout [ 886.418934][T13243] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 902.182365][T13659] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 902.194605][T13659] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 902.206957][T13659] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 902.216996][T13659] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 902.225078][T13659] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 902.233234][T13659] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 904.258449][T13212] Bluetooth: hci7: command tx timeout [ 906.338296][T13212] Bluetooth: hci7: command tx timeout [ 908.418306][T13212] Bluetooth: hci7: command tx timeout [ 910.498316][T13212] Bluetooth: hci7: command tx timeout [ 927.717390][T13659] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 927.726073][T13659] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 927.736427][T13659] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 927.746433][T13659] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 927.755535][T13659] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 927.763007][T13659] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 928.748693][T13212] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 928.757047][T13212] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 928.765242][T13212] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 928.775085][T13212] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 928.784241][T13212] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 928.791861][T13212] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 929.778586][T13659] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 929.787097][T13659] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 929.796669][T13659] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 929.807771][T13659] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 929.816488][T13659] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 929.824098][T13659] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 929.858493][T13659] Bluetooth: hci8: command tx timeout [ 930.818327][T13659] Bluetooth: hci9: command tx timeout [ 931.863314][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.865310][T13212] Bluetooth: hci10: command tx timeout [ 931.877523][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.938257][T13212] Bluetooth: hci8: command tx timeout [ 932.908398][T13212] Bluetooth: hci9: command tx timeout [ 933.938493][ T5082] Bluetooth: hci4: command 0x0406 tx timeout [ 933.944910][T13212] Bluetooth: hci10: command tx timeout [ 934.028317][T13659] Bluetooth: hci8: command tx timeout [ 934.988264][T13659] Bluetooth: hci9: command tx timeout [ 936.018373][T13659] Bluetooth: hci10: command tx timeout [ 936.100145][T13659] Bluetooth: hci8: command tx timeout [ 937.058275][T13659] Bluetooth: hci9: command tx timeout [ 938.098354][T13659] Bluetooth: hci10: command tx timeout [ 947.219991][ T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 962.760446][ T5082] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 962.769891][ T5082] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 962.781526][ T5082] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 962.792684][ T5082] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 962.800665][ T5082] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 962.808277][ T5082] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 964.658372][ T5082] Bluetooth: hci1: command 0x0406 tx timeout [ 964.908401][T13659] Bluetooth: hci11: command tx timeout [ 966.980662][T13659] Bluetooth: hci11: command tx timeout [ 969.058258][T13659] Bluetooth: hci11: command tx timeout [ 971.138333][T13659] Bluetooth: hci11: command tx timeout [ 978.578959][ T1139] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 988.782267][T13212] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 988.792763][T13212] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 988.801348][T13212] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 988.812843][T13212] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 988.821326][T13212] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 988.829619][T13212] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 989.231445][ T5082] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 989.240714][ T5082] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 989.249397][ T5082] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 989.259021][ T5082] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 989.267223][ T5082] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 989.274903][ T5082] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 990.268602][ T5082] Bluetooth: hci2: command 0x0406 tx timeout [ 990.286277][ T5082] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 990.296622][ T5082] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 990.305173][ T5082] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 990.314411][ T5082] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 990.324138][ T5082] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 990.332117][ T5082] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 990.898392][T13659] Bluetooth: hci12: command tx timeout [ 991.298279][T13659] Bluetooth: hci13: command tx timeout [ 992.418789][T13659] Bluetooth: hci14: command tx timeout [ 992.978377][T13659] Bluetooth: hci12: command tx timeout [ 993.301960][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.308647][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.378232][T13212] Bluetooth: hci13: command tx timeout [ 994.498369][T13212] Bluetooth: hci14: command tx timeout [ 995.058233][T13212] Bluetooth: hci12: command tx timeout [ 995.378318][T13212] Bluetooth: hci6: command 0x0406 tx timeout [ 995.383253][ T5774] Bluetooth: hci5: command 0x0406 tx timeout [ 995.458341][T13659] Bluetooth: hci13: command tx timeout [ 996.578321][T13659] Bluetooth: hci14: command tx timeout [ 997.149271][T13659] Bluetooth: hci12: command tx timeout [ 997.538324][T13659] Bluetooth: hci13: command tx timeout [ 998.658704][T13659] Bluetooth: hci14: command tx timeout [ 1010.579169][ T9299] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1012.498279][ T29] INFO: task kworker/u4:2:42 blocked for more than 143 seconds. [ 1012.506024][ T29] Not tainted syzkaller #0 [ 1012.511093][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1012.519894][ T29] task:kworker/u4:2 state:D stack:21712 pid:42 ppid:2 flags:0x00004000 [ 1012.533029][ T29] Workqueue: events_unbound linkwatch_event [ 1012.539069][ T29] Call Trace: [ 1012.542972][ T29] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1012.545957][ T29] __schedule+0x1553/0x45a0 [ 1012.550738][ T29] ? asan.module_dtor+0x20/0x20 [ 1012.555640][ T29] ? __mutex_lock+0x6a4/0xcc0 [ 1012.561941][ T29] ? __mutex_trylock_common+0x8a/0x260 [ 1012.567457][ T29] ? kthread_data+0x4f/0xc0 [ 1012.572083][ T29] ? wq_worker_sleeping+0x63/0x240 [ 1012.577237][ T29] schedule+0xbd/0x170 [ 1012.582818][ T29] schedule_preempt_disabled+0x13/0x20 [ 1012.590860][ T29] __mutex_lock+0x6a9/0xcc0 [ 1012.595441][ T29] ? __mutex_lock+0x4f9/0xcc0 [ 1012.628175][ T29] ? linkwatch_event+0xe/0x60 [ 1012.632967][ T29] ? mutex_lock_nested+0x20/0x20 [ 1012.680317][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 1012.685603][ T29] ? process_scheduled_works+0x96f/0x15d0 [ 1012.694144][ T29] linkwatch_event+0xe/0x60 [ 1012.698857][ T29] process_scheduled_works+0xa5d/0x15d0 [ 1012.704512][ T29] ? worker_attach_to_pool+0x380/0x380 [ 1012.710128][ T29] ? assign_work+0x3d2/0x5d0 [ 1012.714770][ T29] worker_thread+0xa55/0xfc0 [ 1012.719520][ T29] kthread+0x2fa/0x390 [ 1012.723630][ T29] ? pr_cont_work+0x560/0x560 [ 1012.728421][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1012.733052][ T29] ret_from_fork+0x48/0x80 [ 1012.737519][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1012.742227][ T29] ret_from_fork_asm+0x11/0x20 [ 1012.747399][ T29] [ 1012.750665][ T29] INFO: task kworker/u4:4:11543 blocked for more than 143 seconds. [ 1012.758709][ T29] Not tainted syzkaller #0 [ 1012.763671][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1012.773670][ T29] task:kworker/u4:4 state:D stack:23728 pid:11543 ppid:2 flags:0x00004000 [ 1012.783186][ T29] Workqueue: ipv6_addrconf addrconf_dad_work [ 1012.789330][ T29] Call Trace: [ 1012.792638][ T29] [ 1012.795612][ T29] __schedule+0x1553/0x45a0 [ 1012.800248][ T29] ? asan.module_dtor+0x20/0x20 [ 1012.805126][ T29] ? __mutex_lock+0x6a4/0xcc0 [ 1012.809857][ T29] ? __mutex_trylock_common+0x8a/0x260 [ 1012.815351][ T29] ? kthread_data+0x4f/0xc0 [ 1012.819961][ T29] ? wq_worker_sleeping+0x63/0x240 [ 1012.825110][ T29] schedule+0xbd/0x170 [ 1012.829249][ T29] schedule_preempt_disabled+0x13/0x20 [ 1012.834737][ T29] __mutex_lock+0x6a9/0xcc0 [ 1012.839327][ T29] ? __mutex_lock+0x4f9/0xcc0 [ 1012.844043][ T29] ? addrconf_dad_work+0xd4/0x1530 [ 1012.849893][ T29] ? mutex_lock_nested+0x20/0x20 [ 1012.854885][ T29] addrconf_dad_work+0xd4/0x1530 [ 1012.859925][ T29] ? ipv6_get_saddr_eval+0xee0/0xee0 [ 1012.865343][ T29] ? read_lock_is_recursive+0x20/0x20 [ 1012.870827][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 1012.876052][ T29] ? process_scheduled_works+0x96f/0x15d0 [ 1012.881879][ T29] ? process_scheduled_works+0x96f/0x15d0 [ 1012.887636][ T29] process_scheduled_works+0xa5d/0x15d0 [ 1012.893483][ T29] ? worker_attach_to_pool+0x380/0x380 [ 1012.905823][ T29] ? assign_work+0x3d2/0x5d0 [ 1012.910532][ T29] worker_thread+0xa55/0xfc0 [ 1012.915183][ T29] kthread+0x2fa/0x390 [ 1012.919409][ T29] ? pr_cont_work+0x560/0x560 [ 1012.924118][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1012.928779][ T29] ret_from_fork+0x48/0x80 [ 1012.933224][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1012.937825][ T29] ret_from_fork_asm+0x11/0x20 [ 1012.942732][ T29] [ 1012.945798][ T29] INFO: task kworker/1:0:13292 blocked for more than 143 seconds. [ 1012.954080][ T29] Not tainted syzkaller #0 [ 1012.959130][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1012.967848][ T29] task:kworker/1:0 state:D stack:24616 pid:13292 ppid:2 flags:0x00004000 [ 1012.977212][ T29] Workqueue: events switchdev_deferred_process_work [ 1012.984123][ T29] Call Trace: [ 1012.987470][ T29] [ 1012.990503][ T29] __schedule+0x1553/0x45a0 [ 1012.995061][ T29] ? do_raw_spin_lock+0x11f/0x2c0 [ 1013.000388][ T29] ? mark_lock+0x94/0x320 [ 1013.004774][ T29] ? asan.module_dtor+0x20/0x20 [ 1013.009833][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 1013.015073][ T29] schedule+0xbd/0x170 [ 1013.019237][ T29] schedule_preempt_disabled+0x13/0x20 [ 1013.024720][ T29] __mutex_lock+0x6a9/0xcc0 [ 1013.029480][ T29] ? __mutex_lock+0x4f9/0xcc0 [ 1013.034182][ T29] ? switchdev_deferred_process_work+0xe/0x20 [ 1013.040349][ T29] ? mutex_lock_nested+0x20/0x20 [ 1013.045325][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 1013.050604][ T29] ? process_scheduled_works+0x96f/0x15d0 [ 1013.056734][ T29] switchdev_deferred_process_work+0xe/0x20 [ 1013.062810][ T29] process_scheduled_works+0xa5d/0x15d0 [ 1013.068517][ T29] ? worker_attach_to_pool+0x380/0x380 [ 1013.074009][ T29] ? assign_work+0x3d2/0x5d0 [ 1013.078740][ T29] worker_thread+0xa55/0xfc0 [ 1013.083393][ T29] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1013.089388][ T29] ? _raw_spin_unlock+0x40/0x40 [ 1013.094285][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 1013.100317][ T29] kthread+0x2fa/0x390 [ 1013.104414][ T29] ? pr_cont_work+0x560/0x560 [ 1013.109358][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1013.113992][ T29] ret_from_fork+0x48/0x80 [ 1013.118514][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1013.123194][ T29] ret_from_fork_asm+0x11/0x20 [ 1013.128009][ T29] [ 1013.131197][ T29] INFO: task syz-executor:13497 blocked for more than 143 seconds. [ 1013.139583][ T29] Not tainted syzkaller #0 [ 1013.144550][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1013.153374][ T29] task:syz-executor state:D stack:21064 pid:13497 ppid:1 flags:0x00004004 [ 1013.163060][ T29] Call Trace: [ 1013.166375][ T29] [ 1013.169444][ T29] __schedule+0x1553/0x45a0 [ 1013.174019][ T29] ? asan.module_dtor+0x20/0x20 [ 1013.178965][ T29] ? __mutex_lock+0x6a4/0xcc0 [ 1013.183677][ T29] ? __mutex_trylock_common+0x8a/0x260 [ 1013.189275][ T29] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1013.195458][ T29] schedule+0xbd/0x170 [ 1013.199667][ T29] schedule_preempt_disabled+0x13/0x20 [ 1013.205152][ T29] __mutex_lock+0x6a9/0xcc0 [ 1013.209796][ T29] ? __mutex_lock+0x4f9/0xcc0 [ 1013.214496][ T29] ? rtnetlink_rcv_msg+0x811/0xfa0 [ 1013.220030][ T29] ? mutex_lock_nested+0x20/0x20 [ 1013.224981][ T29] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 1013.230962][ T29] rtnetlink_rcv_msg+0x811/0xfa0 [ 1013.235950][ T29] ? rtnetlink_bind+0x80/0x80 [ 1013.240736][ T29] ? mark_lock+0x94/0x320 [ 1013.245113][ T29] ? __lock_acquire+0x1273/0x7d40 [ 1013.250292][ T29] ? __kernel_text_address+0xd/0x30 [ 1013.255551][ T29] ? mark_lock+0x94/0x320 [ 1013.260414][ T29] ? mark_lock+0x94/0x320 [ 1013.264795][ T29] ? __lock_acquire+0x1273/0x7d40 [ 1013.270006][ T29] ? kmalloc_reserve+0x95/0x240 [ 1013.274900][ T29] ? verify_lock_unused+0x140/0x140 [ 1013.280216][ T29] ? verify_lock_unused+0x140/0x140 [ 1013.285455][ T29] netlink_rcv_skb+0x241/0x4d0 [ 1013.290395][ T29] ? rtnetlink_bind+0x80/0x80 [ 1013.295116][ T29] ? netlink_ack+0x1180/0x1180 [ 1013.299988][ T29] ? __lock_acquire+0x7d40/0x7d40 [ 1013.305042][ T29] ? net_generic+0x1e/0x240 [ 1013.309706][ T29] ? netlink_deliver_tap+0x2e/0x1b0 [ 1013.314952][ T29] netlink_unicast+0x751/0x8d0 [ 1013.319828][ T29] netlink_sendmsg+0x8d0/0xbf0 [ 1013.324654][ T29] ? netlink_getsockopt+0x590/0x590 [ 1013.330202][ T29] ? aa_sock_msg_perm+0x94/0x150 [ 1013.335189][ T29] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1013.340581][ T29] ? security_socket_sendmsg+0x80/0xa0 [ 1013.346071][ T29] __sys_sendto+0x4a9/0x6b0 [ 1013.350736][ T29] ? __ia32_sys_getpeername+0x90/0x90 [ 1013.356162][ T29] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1013.362661][ T29] ? lock_chain_count+0x20/0x20 [ 1013.367563][ T29] __x64_sys_sendto+0xde/0xf0 [ 1013.372416][ T29] do_syscall_64+0x55/0xb0 [ 1013.376880][ T29] ? clear_bhb_loop+0x40/0x90 [ 1013.381784][ T29] ? clear_bhb_loop+0x40/0x90 [ 1013.386523][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1013.392582][ T29] RIP: 0033:0x7f7e2e55d68e [ 1013.397035][ T29] RSP: 002b:00007ffd3a8c4b28 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1013.405568][ T29] RAX: ffffffffffffffda RBX: 000055555b614500 RCX: 00007f7e2e55d68e [ 1013.413641][ T29] RDX: 0000000000000040 RSI: 00007f7e2f344670 RDI: 0000000000000003 [ 1013.421732][ T29] RBP: 0000000000000001 R08: 00007ffd3a8c4ba4 R09: 000000000000000c [ 1013.429806][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1013.437809][ T29] R13: 0000000000000000 R14: 00007f7e2f344670 R15: 0000000000000000 [ 1013.446103][ T29] [ 1013.449225][ T29] INFO: task syz.1.2391:13627 blocked for more than 144 seconds. [ 1013.457006][ T29] Not tainted syzkaller #0 [ 1013.462667][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1013.471515][ T29] task:syz.1.2391 state:D stack:24232 pid:13627 ppid:5769 flags:0x00004004 [ 1013.481003][ T29] Call Trace: [ 1013.484313][ T29] [ 1013.487258][ T29] __schedule+0x1553/0x45a0 [ 1013.491847][ T29] ? stack_trace_snprint+0xf0/0xf0 [ 1013.497034][ T29] ? asan.module_dtor+0x20/0x20 [ 1013.502025][ T29] ? __mutex_lock+0x6a4/0xcc0 [ 1013.506747][ T29] ? __mutex_trylock_common+0x8a/0x260 [ 1013.512305][ T29] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1013.518555][ T29] schedule+0xbd/0x170 [ 1013.522671][ T29] schedule_preempt_disabled+0x13/0x20 [ 1013.528230][ T29] __mutex_lock+0x6a9/0xcc0 [ 1013.532778][ T29] ? __mutex_lock+0x4f9/0xcc0 [ 1013.537489][ T29] ? ppp_release+0x8a/0x1f0 [ 1013.542161][ T29] ? mutex_lock_nested+0x20/0x20 [ 1013.547136][ T29] ? fsnotify_set_children_dentry_flags+0x220/0x220 [ 1013.554028][ T29] ppp_release+0x8a/0x1f0 [ 1013.558473][ T29] ? ppp_open+0x70/0x70 [ 1013.562654][ T29] __fput+0x234/0x970 [ 1013.567032][ T29] task_work_run+0x1d4/0x260 [ 1013.571742][ T29] ? task_work_cancel+0x220/0x220 [ 1013.576822][ T29] ? exit_to_user_mode_loop+0x3b/0x110 [ 1013.582381][ T29] exit_to_user_mode_loop+0xe6/0x110 [ 1013.587794][ T29] exit_to_user_mode_prepare+0xee/0x180 [ 1013.593421][ T29] syscall_exit_to_user_mode+0x1a/0x50 [ 1013.598987][ T29] do_syscall_64+0x61/0xb0 [ 1013.603453][ T29] ? clear_bhb_loop+0x40/0x90 [ 1013.614337][ T29] ? clear_bhb_loop+0x40/0x90 [ 1013.619263][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1013.625435][ T29] RIP: 0033:0x7ff5feb9ce59 [ 1013.629958][ T29] RSP: 002b:00007fff6372e288 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1013.638523][ T29] RAX: 0000000000000000 RBX: 00007ff5fee17da0 RCX: 00007ff5feb9ce59 [ 1013.646575][ T29] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1013.654649][ T29] RBP: 00007ff5fee17da0 R08: 0000000000000006 R09: 0000000000000000 [ 1013.662898][ T29] R10: 00007ff5fee17cb0 R11: 0000000000000246 R12: 00000000000d036a [ 1013.671726][ T29] R13: 00007ff5fee15fac R14: 00000000000d0338 R15: 00007ff5fee15fa0 [ 1013.680262][ T29] [ 1013.683340][ T29] INFO: task syz.1.2391:13632 blocked for more than 144 seconds. [ 1013.691147][ T29] Not tainted syzkaller #0 [ 1013.696252][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1013.705027][ T29] task:syz.1.2391 state:D stack:25512 pid:13632 ppid:5769 flags:0x00004006 [ 1013.714328][ T29] Call Trace: [ 1013.717611][ T29] [ 1013.720651][ T29] __schedule+0x1553/0x45a0 [ 1013.725218][ T29] ? asan.module_dtor+0x20/0x20 [ 1013.730150][ T29] ? __mutex_lock+0x6a4/0xcc0 [ 1013.734867][ T29] ? __mutex_trylock_common+0x8a/0x260 [ 1013.740432][ T29] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1013.746627][ T29] schedule+0xbd/0x170 [ 1013.750793][ T29] schedule_preempt_disabled+0x13/0x20 [ 1013.756296][ T29] __mutex_lock+0x6a9/0xcc0 [ 1013.760916][ T29] ? __mutex_lock+0x4f9/0xcc0 [ 1013.765709][ T29] ? ip_tunnel_init_net+0x2cf/0x790 [ 1013.771548][ T29] ? mutex_lock_nested+0x20/0x20 [ 1013.776538][ T29] ? net_generic+0x1e/0x240 [ 1013.781237][ T29] ? net_generic+0x1e/0x240 [ 1013.785768][ T29] ip_tunnel_init_net+0x2cf/0x790 [ 1013.790897][ T29] ? ip_tunnel_get_iflink+0x50/0x50 [ 1013.796161][ T29] ops_init+0x397/0x640 [ 1013.800427][ T29] ? __raw_spin_lock_init+0x45/0x100 [ 1013.805850][ T29] setup_net+0x3b6/0xa30 [ 1013.810181][ T29] ? mutex_unlock+0x10/0x10 [ 1013.814708][ T29] ? copy_net_ns+0x5e0/0x5e0 [ 1013.819428][ T29] ? copy_net_ns+0x351/0x5e0 [ 1013.824052][ T29] ? down_read_killable+0x1d0/0x340 [ 1013.829775][ T29] copy_net_ns+0x36d/0x5e0 [ 1013.834255][ T29] create_new_namespaces+0x3d3/0x6f0 [ 1013.839645][ T29] ? copy_namespaces+0x5c/0x4a0 [ 1013.844521][ T29] copy_namespaces+0x430/0x4a0 [ 1013.849400][ T29] copy_process+0x1724/0x3dc0 [ 1013.854105][ T29] ? plist_add+0x3d8/0x490 [ 1013.858715][ T29] ? copy_process+0x96e/0x3dc0 [ 1013.863532][ T29] ? futex_wait+0x4cc/0x5e0 [ 1013.868075][ T29] ? __pidfd_prepare+0x140/0x140 [ 1013.873495][ T29] kernel_clone+0x24b/0x8a0 [ 1013.878039][ T29] ? create_io_thread+0x190/0x190 [ 1013.883379][ T29] ? do_futex+0x2ff/0x3e0 [ 1013.887772][ T29] __x64_sys_clone+0x1b7/0x230 [ 1013.892660][ T29] ? __ia32_sys_vfork+0x140/0x140 [ 1013.897746][ T29] ? lock_chain_count+0x20/0x20 [ 1013.902717][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 1013.908065][ T29] do_syscall_64+0x55/0xb0 [ 1013.912607][ T29] ? clear_bhb_loop+0x40/0x90 [ 1013.917332][ T29] ? clear_bhb_loop+0x40/0x90 [ 1013.922120][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1013.928058][ T29] RIP: 0033:0x7ff5feb9ce59 [ 1013.932585][ T29] RSP: 002b:00007ff5ff9befd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1013.947870][ T29] RAX: ffffffffffffffda RBX: 00007ff5fee16090 RCX: 00007ff5feb9ce59 [ 1013.955995][ T29] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040042600 [ 1013.964059][ T29] RBP: 00007ff5fec32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1013.972749][ T29] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1013.981280][ T29] R13: 00007ff5fee16128 R14: 00007ff5fee16090 R15: 00007fff6372e128 [ 1013.989721][ T29] [ 1013.992800][ T29] INFO: task syz.0.2393:13639 blocked for more than 144 seconds. [ 1014.001753][ T29] Not tainted syzkaller #0 [ 1014.006717][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1014.015474][ T29] task:syz.0.2393 state:D stack:23944 pid:13639 ppid:13211 flags:0x00004004 [ 1014.024818][ T29] Call Trace: [ 1014.028241][ T29] [ 1014.031224][ T29] __schedule+0x1553/0x45a0 [ 1014.035776][ T29] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1014.042039][ T29] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1014.048293][ T29] ? asan.module_dtor+0x20/0x20 [ 1014.053162][ T29] ? __mutex_lock+0x6a4/0xcc0 [ 1014.057872][ T29] ? __mutex_trylock_common+0x8a/0x260 [ 1014.063474][ T29] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1014.069708][ T29] schedule+0xbd/0x170 [ 1014.073821][ T29] schedule_preempt_disabled+0x13/0x20 [ 1014.079818][ T29] __mutex_lock+0x6a9/0xcc0 [ 1014.084383][ T29] ? __mutex_lock+0x4f9/0xcc0 [ 1014.089216][ T29] ? ip_rt_ioctl+0x115/0x11b0 [ 1014.094002][ T29] ? mutex_lock_nested+0x20/0x20 [ 1014.099232][ T29] ? ip_rt_ioctl+0x110/0x11b0 [ 1014.103948][ T29] ? kasan_check_range+0x1c0/0x290 [ 1014.109159][ T29] ip_rt_ioctl+0x115/0x11b0 [ 1014.113734][ T29] ? fib_validate_source+0x1330/0x1330 [ 1014.120334][ T29] ? __might_fault+0xc6/0x120 [ 1014.125058][ T29] ? __might_fault+0xaa/0x120 [ 1014.129846][ T29] inet_ioctl+0x49e/0x560 [ 1014.134234][ T29] ? inet_shutdown+0x370/0x370 [ 1014.139123][ T29] ? __kmem_cache_free+0xba/0x1e0 [ 1014.144207][ T29] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1014.149777][ T29] sock_do_ioctl+0xfc/0x310 [ 1014.154325][ T29] ? sock_show_fdinfo+0xb0/0xb0 [ 1014.159287][ T29] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1014.165319][ T29] ? lock_chain_count+0x20/0x20 [ 1014.170265][ T29] sock_ioctl+0x5ba/0x7e0 [ 1014.174636][ T29] ? sock_poll+0x3e0/0x3e0 [ 1014.179701][ T29] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1014.185925][ T29] ? sock_poll+0x3e0/0x3e0 [ 1014.190457][ T29] __se_sys_ioctl+0xfd/0x170 [ 1014.195094][ T29] do_syscall_64+0x55/0xb0 [ 1014.199640][ T29] ? clear_bhb_loop+0x40/0x90 [ 1014.204359][ T29] ? clear_bhb_loop+0x40/0x90 [ 1014.209310][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1014.215246][ T29] RIP: 0033:0x7f6dc499ce59 [ 1014.219768][ T29] RSP: 002b:00007f6dc588b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1014.228255][ T29] RAX: ffffffffffffffda RBX: 00007f6dc4c15fa0 RCX: 00007f6dc499ce59 [ 1014.236274][ T29] RDX: 0000200000000100 RSI: 000000000000890b RDI: 0000000000000008 [ 1014.244413][ T29] RBP: 00007f6dc4a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1014.252442][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1014.260688][ T29] R13: 00007f6dc4c16038 R14: 00007f6dc4c15fa0 R15: 00007fffef45e738 [ 1014.269162][ T29] [ 1014.272228][ T29] INFO: task syz.2.2394:13646 blocked for more than 145 seconds. [ 1014.280096][ T29] Not tainted syzkaller #0 [ 1014.285377][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1014.294231][ T29] task:syz.2.2394 state:D stack:26856 pid:13646 ppid:5779 flags:0x00004004 [ 1014.303543][ T29] Call Trace: [ 1014.306827][ T29] [ 1014.309827][ T29] __schedule+0x1553/0x45a0 [ 1014.314384][ T29] ? asan.module_dtor+0x20/0x20 [ 1014.319518][ T29] ? __mutex_lock+0x6a4/0xcc0 [ 1014.324226][ T29] ? __mutex_trylock_common+0x8a/0x260 [ 1014.329784][ T29] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1014.335980][ T29] schedule+0xbd/0x170 [ 1014.340147][ T29] schedule_preempt_disabled+0x13/0x20 [ 1014.345641][ T29] __mutex_lock+0x6a9/0xcc0 [ 1014.350260][ T29] ? __mutex_lock+0x4f9/0xcc0 [ 1014.354983][ T29] ? rtnetlink_rcv_msg+0x811/0xfa0 [ 1014.360209][ T29] ? mutex_lock_nested+0x20/0x20 [ 1014.365186][ T29] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 1014.370386][ T29] rtnetlink_rcv_msg+0x811/0xfa0 [ 1014.375363][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 1014.380685][ T29] ? rtnetlink_bind+0x80/0x80 [ 1014.385762][ T29] ? preempt_schedule_common+0x82/0xc0 [ 1014.391339][ T29] ? preempt_schedule+0xc0/0xd0 [ 1014.396231][ T29] ? schedule_preempt_disabled+0x20/0x20 [ 1014.401961][ T29] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1014.407973][ T29] ? perf_trace_preemptirq_template+0xac/0x330 [ 1014.414206][ T29] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1014.420332][ T29] ? lock_chain_count+0x20/0x20 [ 1014.425215][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 1014.431402][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 1014.436650][ T29] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1014.442744][ T29] ? _raw_spin_unlock+0x40/0x40 [ 1014.447913][ T29] ? rcu_preempt_deferred_qs_irqrestore+0x88e/0xce0 [ 1014.454726][ T29] netlink_rcv_skb+0x241/0x4d0 [ 1014.459695][ T29] ? rtnetlink_bind+0x80/0x80 [ 1014.464556][ T29] ? netlink_ack+0x1180/0x1180 [ 1014.469511][ T29] ? __lock_acquire+0x7d40/0x7d40 [ 1014.474591][ T29] ? __rcu_read_unlock+0x7c/0xd0 [ 1014.479642][ T29] ? netlink_deliver_tap+0x2e/0x1b0 [ 1014.484891][ T29] netlink_unicast+0x751/0x8d0 [ 1014.490182][ T29] netlink_sendmsg+0x8d0/0xbf0 [ 1014.495015][ T29] ? netlink_getsockopt+0x590/0x590 [ 1014.500405][ T29] ? aa_sock_msg_perm+0x94/0x150 [ 1014.505406][ T29] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1014.510782][ T29] ? security_socket_sendmsg+0x80/0xa0 [ 1014.516275][ T29] ? netlink_getsockopt+0x590/0x590 [ 1014.521581][ T29] ____sys_sendmsg+0x5ba/0x960 [ 1014.526391][ T29] ? __asan_memset+0x22/0x40 [ 1014.531050][ T29] ? __sys_sendmsg_sock+0x30/0x30 [ 1014.536127][ T29] ? __import_iovec+0x5f2/0x850 [ 1014.541330][ T29] ? import_iovec+0x73/0xa0 [ 1014.545968][ T29] ___sys_sendmsg+0x2a6/0x360 [ 1014.550751][ T29] ? __sys_sendmsg+0x2a0/0x2a0 [ 1014.555612][ T29] __se_sys_sendmsg+0x1c2/0x2b0 [ 1014.560579][ T29] ? __x64_sys_sendmsg+0x80/0x80 [ 1014.565572][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 1014.570862][ T29] do_syscall_64+0x55/0xb0 [ 1014.575305][ T29] ? clear_bhb_loop+0x40/0x90 [ 1014.580059][ T29] ? clear_bhb_loop+0x40/0x90 [ 1014.584775][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1014.591192][ T29] RIP: 0033:0x7f812559ce59 [ 1014.595663][ T29] RSP: 002b:00007f8126480028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1014.604192][ T29] RAX: ffffffffffffffda RBX: 00007f8125816090 RCX: 00007f812559ce59 [ 1014.612259][ T29] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000006 [ 1014.620357][ T29] RBP: 00007f8125632d6f R08: 0000000000000000 R09: 0000000000000000 [ 1014.628417][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1014.636417][ T29] R13: 00007f8125816128 R14: 00007f8125816090 R15: 00007ffcaaf43088 [ 1014.644490][ T29] [ 1014.647552][ T29] INFO: task syz.2.2394:13647 blocked for more than 145 seconds. [ 1014.655511][ T29] Not tainted syzkaller #0 [ 1014.660629][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1014.669674][ T29] task:syz.2.2394 state:D stack:24680 pid:13647 ppid:5779 flags:0x00004004 [ 1014.679012][ T29] Call Trace: [ 1014.682351][ T29] [ 1014.685328][ T29] __schedule+0x1553/0x45a0 [ 1014.690128][ T29] ? __lock_acquire+0x7d40/0x7d40 [ 1014.695544][ T29] ? asan.module_dtor+0x20/0x20 [ 1014.700547][ T29] ? __mutex_lock+0x6a4/0xcc0 [ 1014.705338][ T29] ? __mutex_trylock_common+0x8a/0x260 [ 1014.710918][ T29] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1014.717107][ T29] schedule+0xbd/0x170 [ 1014.721254][ T29] schedule_preempt_disabled+0x13/0x20 [ 1014.726754][ T29] __mutex_lock+0x6a9/0xcc0 [ 1014.731345][ T29] ? __mutex_lock+0x4f9/0xcc0 [ 1014.736060][ T29] ? ip_rt_ioctl+0x115/0x11b0 [ 1014.740847][ T29] ? mutex_lock_nested+0x20/0x20 [ 1014.745835][ T29] ? bpf_lsm_capable+0x9/0x10 [ 1014.750902][ T29] ? security_capable+0x89/0xb0 [ 1014.755812][ T29] ip_rt_ioctl+0x115/0x11b0 [ 1014.760723][ T29] ? fib_validate_source+0x1330/0x1330 [ 1014.766225][ T29] ? __might_fault+0xc6/0x120 [ 1014.770984][ T29] ? __might_fault+0xaa/0x120 [ 1014.775705][ T29] inet_ioctl+0x49e/0x560 [ 1014.780422][ T29] ? tomoyo_path_number_perm+0x217/0x620 [ 1014.786096][ T29] ? inet_shutdown+0x370/0x370 [ 1014.790932][ T29] ? slab_free_freelist_hook+0x130/0x1a0 [ 1014.796982][ T29] ? tomoyo_path_number_perm+0x500/0x620 [ 1014.802809][ T29] ? __kmem_cache_free+0xba/0x1e0 [ 1014.807878][ T29] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1014.813456][ T29] sock_do_ioctl+0xfc/0x310 [ 1014.818014][ T29] ? sock_show_fdinfo+0xb0/0xb0 [ 1014.823009][ T29] sock_ioctl+0x5ba/0x7e0 [ 1014.827380][ T29] ? sock_poll+0x3e0/0x3e0 [ 1014.831899][ T29] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1014.836877][ T29] ? security_file_ioctl+0x80/0xa0 [ 1014.842104][ T29] ? sock_poll+0x3e0/0x3e0 [ 1014.846567][ T29] __se_sys_ioctl+0xfd/0x170 [ 1014.851267][ T29] do_syscall_64+0x55/0xb0 [ 1014.855721][ T29] ? clear_bhb_loop+0x40/0x90 [ 1014.860510][ T29] ? clear_bhb_loop+0x40/0x90 [ 1014.865237][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1014.871432][ T29] RIP: 0033:0x7f812559ce59 [ 1014.875888][ T29] RSP: 002b:00007f812645f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1014.884417][ T29] RAX: ffffffffffffffda RBX: 00007f8125816180 RCX: 00007f812559ce59 [ 1014.892457][ T29] RDX: 0000200000000100 RSI: 000000000000890b RDI: 0000000000000009 [ 1014.900932][ T29] RBP: 00007f8125632d6f R08: 0000000000000000 R09: 0000000000000000 [ 1014.909010][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1014.917018][ T29] R13: 00007f8125816218 R14: 00007f8125816180 R15: 00007ffcaaf43088 [ 1014.925100][ T29] [ 1014.928257][ T29] INFO: task syz-executor:13650 blocked for more than 145 seconds. [ 1014.936186][ T29] Not tainted syzkaller #0 [ 1014.941452][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1014.950202][ T29] task:syz-executor state:D stack:25320 pid:13650 ppid:1 flags:0x00004004 [ 1014.959556][ T29] Call Trace: [ 1014.962868][ T29] [ 1014.965844][ T29] __schedule+0x1553/0x45a0 [ 1014.970432][ T29] ? asan.module_dtor+0x20/0x20 [ 1014.975323][ T29] ? __mutex_lock+0x6a4/0xcc0 [ 1014.987428][ T29] ? __mutex_trylock_common+0x8a/0x260 [ 1014.993010][ T29] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1014.999698][ T29] schedule+0xbd/0x170 [ 1015.003815][ T29] schedule_preempt_disabled+0x13/0x20 [ 1015.009368][ T29] __mutex_lock+0x6a9/0xcc0 [ 1015.013898][ T29] ? __mutex_lock+0x4f9/0xcc0 [ 1015.018687][ T29] ? rtnetlink_rcv_msg+0x811/0xfa0 [ 1015.023854][ T29] ? mutex_lock_nested+0x20/0x20 [ 1015.028874][ T29] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 1015.034024][ T29] rtnetlink_rcv_msg+0x811/0xfa0 [ 1015.039088][ T29] ? rtnetlink_bind+0x80/0x80 [ 1015.043801][ T29] ? mark_lock+0x94/0x320 [ 1015.048483][ T29] ? __lock_acquire+0x1273/0x7d40 [ 1015.053555][ T29] ? __kernel_text_address+0xd/0x30 [ 1015.058991][ T29] ? mark_lock+0x94/0x320 [ 1015.063529][ T29] ? mark_lock+0x94/0x320 [ 1015.067893][ T29] ? __lock_acquire+0x1273/0x7d40 [ 1015.073033][ T29] ? kmalloc_reserve+0x95/0x240 [ 1015.077925][ T29] ? verify_lock_unused+0x140/0x140 [ 1015.083343][ T29] ? verify_lock_unused+0x140/0x140 [ 1015.088821][ T29] netlink_rcv_skb+0x241/0x4d0 [ 1015.093653][ T29] ? rtnetlink_bind+0x80/0x80 [ 1015.098521][ T29] ? netlink_ack+0x1180/0x1180 [ 1015.103695][ T29] ? __lock_acquire+0x7d40/0x7d40 [ 1015.108840][ T29] ? net_generic+0x1e/0x240 [ 1015.113380][ T29] ? netlink_deliver_tap+0x2e/0x1b0 [ 1015.118686][ T29] netlink_unicast+0x751/0x8d0 [ 1015.123509][ T29] netlink_sendmsg+0x8d0/0xbf0 [ 1015.128366][ T29] ? netlink_getsockopt+0x590/0x590 [ 1015.133618][ T29] ? aa_sock_msg_perm+0x94/0x150 [ 1015.138731][ T29] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1015.144071][ T29] ? security_socket_sendmsg+0x80/0xa0 [ 1015.149623][ T29] __sys_sendto+0x4a9/0x6b0 [ 1015.154162][ T29] ? __ia32_sys_getpeername+0x90/0x90 [ 1015.159672][ T29] ? __lock_acquire+0x7d40/0x7d40 [ 1015.164753][ T29] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1015.170878][ T29] ? lock_chain_count+0x20/0x20 [ 1015.175769][ T29] ? lock_chain_count+0x20/0x20 [ 1015.180726][ T29] __x64_sys_sendto+0xde/0xf0 [ 1015.185445][ T29] do_syscall_64+0x55/0xb0 [ 1015.189935][ T29] ? clear_bhb_loop+0x40/0x90 [ 1015.194649][ T29] ? clear_bhb_loop+0x40/0x90 [ 1015.199438][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1015.205715][ T29] RIP: 0033:0x7fae57d5d68e [ 1015.210415][ T29] RSP: 002b:00007ffd3eee0bf8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1015.218963][ T29] RAX: ffffffffffffffda RBX: 0000555573d26500 RCX: 00007fae57d5d68e [ 1015.226973][ T29] RDX: 0000000000000028 RSI: 00007fae58b44670 RDI: 0000000000000003 [ 1015.235027][ T29] RBP: 0000000000000001 R08: 00007ffd3eee0c74 R09: 000000000000000c [ 1015.243113][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1015.251195][ T29] R13: 0000000000000000 R14: 00007fae58b44670 R15: 0000000000000000 [ 1015.259310][ T29] [ 1015.262342][ T29] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 1015.271451][ T29] [ 1015.271451][ T29] Showing all locks held in the system: [ 1015.279580][ T29] 3 locks held by kworker/0:0/8: [ 1015.284535][ T29] #0: ffff888017c71d38 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 1015.297046][ T29] #1: ffffc900000d7d00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 1015.309026][ T29] #2: ffffffff8e3c3a88 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x92/0xd90 [ 1015.319832][ T29] 4 locks held by kworker/u4:1/12: [ 1015.324989][ T29] #0: ffff88801a254938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 1015.336025][ T29] #1: ffffc90000117d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 1015.346819][ T29] #2: ffffffff8e3b6a50 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x14c/0xbb0 [ 1015.356363][ T29] #3: ffffffff8e3c3a88 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0xf2/0xa80 [ 1015.366643][ T29] 1 lock held by khungtaskd/29: [ 1015.371620][ T29] #0: ffffffff8d132160 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 1015.381688][ T29] 3 locks held by kworker/u4:2/42: [ 1015.386811][ T29] #0: ffff888017c71538 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 1015.398585][ T29] #1: ffffc90000b2fd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 1015.410300][ T29] #2: ffffffff8e3c3a88 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 1015.419447][ T29] 2 locks held by getty/5527: [ 1015.424165][ T29] #0: ffff88823bdbc8a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1015.434186][ T29] #1: ffffc9000328b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x433/0x1390 [ 1015.444475][ T29] 3 locks held by kworker/u4:4/11543: [ 1015.449951][ T29] #0: ffff88802cb0f538 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 1015.461669][ T29] #1: ffffc9000c43fd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 1015.474565][ T29] #2: ffffffff8e3c3a88 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd4/0x1530 [ 1015.484096][ T29] 3 locks held by kworker/1:0/13292: [ 1015.489452][ T29] #0: ffff888017c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 1015.500553][ T29] #1: ffffc90003437d00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 1015.512060][ T29] #2: ffffffff8e3c3a88 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 1015.522633][ T29] 1 lock held by syz-executor/13497: [ 1015.527954][ T29] #0: ffffffff8e3c3a88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 1015.537515][ T29] 1 lock held by syz.1.2391/13627: [ 1015.542954][ T29] #0: ffffffff8e3c3a88 (rtnl_mutex){+.+.}-{3:3}, at: ppp_release+0x8a/0x1f0 [ 1015.551874][ T29] 2 locks held by syz.1.2391/13632: [ 1015.557136][ T29] #0: ffffffff8e3b6a50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x351/0x5e0 [ 1015.566689][ T29] #1: ffffffff8e3c3a88 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x2cf/0x790 [ 1015.576312][ T29] 1 lock held by syz.0.2393/13639: [ 1015.581516][ T29] #0: ffffffff8e3c3a88 (rtnl_mutex){+.+.}-{3:3}, at: ip_rt_ioctl+0x115/0x11b0 [ 1015.590600][ T29] 1 lock held by syz.2.2394/13646: [ 1015.595745][ T29] #0: ffffffff8e3c3a88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 1015.605292][ T29] 1 lock held by syz.2.2394/13647: [ 1015.610489][ T29] #0: ffffffff8e3c3a88 (rtnl_mutex){+.+.}-{3:3}, at: ip_rt_ioctl+0x115/0x11b0 [ 1015.620371][ T29] 1 lock held by syz-executor/13650: [ 1015.625705][ T29] #0: ffffffff8e3c3a88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 1015.635230][ T29] 1 lock held by syz-executor/13654: [ 1015.640624][ T29] #0: ffffffff8e3c3a88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 1015.650342][ T29] 1 lock held by syz-executor/13657: [ 1015.655647][ T29] #0: ffffffff8e3c3a88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 1015.665171][ T29] 1 lock held by syz-executor/13667: [ 1015.670523][ T29] #0: ffffffff8e3c3a88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 1015.680072][ T29] 1 lock held by syz-executor/13672: [ 1015.685403][ T29] #0: ffffffff8e3c3a88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 1015.694890][ T29] 1 lock held by syz-executor/13676: [ 1015.700368][ T29] #0: ffffffff8e3c3a88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 1015.710087][ T29] 1 lock held by syz-executor/13679: [ 1015.715826][ T29] #0: ffffffff8e3c3a88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 1015.725418][ T29] 1 lock held by syz-executor/13689: [ 1015.730785][ T29] #0: ffffffff8e3c3a88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 1015.740323][ T29] 1 lock held by syz-executor/13693: [ 1015.745628][ T29] #0: ffffffff8e3c3a88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 1015.755101][ T29] 1 lock held by syz-executor/13697: [ 1015.760674][ T29] #0: ffffffff8e3c3a88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 1015.770199][ T29] 1 lock held by syz-executor/13700: [ 1015.775511][ T29] #0: ffffffff8e3c3a88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 1015.785006][ T29] [ 1015.787345][ T29] ============================================= [ 1015.787345][ T29] [ 1015.796095][ T29] NMI backtrace for cpu 1 [ 1015.800455][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 1015.807666][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1015.817728][ T29] Call Trace: [ 1015.821021][ T29] [ 1015.823955][ T29] dump_stack_lvl+0x18c/0x250 [ 1015.828677][ T29] ? preempt_count_add+0x91/0x1a0 [ 1015.833732][ T29] ? show_regs_print_info+0x20/0x20 [ 1015.838939][ T29] ? load_image+0x420/0x420 [ 1015.843470][ T29] nmi_cpu_backtrace+0x3a6/0x3e0 [ 1015.848445][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 1015.854621][ T29] ? _printk+0xde/0x130 [ 1015.858791][ T29] ? load_image+0x420/0x420 [ 1015.863312][ T29] ? load_image+0x420/0x420 [ 1015.867829][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 1015.873912][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 1015.879908][ T29] watchdog+0xf3d/0xf80 [ 1015.884081][ T29] ? watchdog+0x1e1/0xf80 [ 1015.888446][ T29] kthread+0x2fa/0x390 [ 1015.892522][ T29] ? hungtask_pm_notify+0x90/0x90 [ 1015.897559][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1015.902164][ T29] ret_from_fork+0x48/0x80 [ 1015.906597][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1015.911203][ T29] ret_from_fork_asm+0x11/0x20 [ 1015.915995][ T29] [ 1015.919631][ T29] Sending NMI from CPU 1 to CPUs 0: [ 1015.925291][ C0] NMI backtrace for cpu 0 [ 1015.925303][ C0] CPU: 0 PID: 1139 Comm: kworker/u4:6 Not tainted syzkaller #0 [ 1015.925319][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1015.925328][ C0] Workqueue: bat_events batadv_nc_worker [ 1015.925450][ C0] RIP: 0010:check_preemption_disabled+0x42/0x110 [ 1015.925475][ C0] Code: 65 8b 05 9d b5 7c 75 65 8b 0d 92 b5 7c 75 f7 c1 ff ff ff 7f 74 1f 65 48 8b 0c 25 28 00 00 00 48 3b 4c 24 08 0f 85 c4 00 00 00 <48> 83 c4 10 5b 41 5e 41 5f 5d c3 48 c7 04 24 00 00 00 00 9c 8f 04 [ 1015.925488][ C0] RSP: 0018:ffffc9000488fa98 EFLAGS: 00000246 [ 1015.925501][ C0] RAX: 0000000000000000 RBX: ffffffff8a4eafc0 RCX: 02954ac7d7c6ab00 [ 1015.925513][ C0] RDX: ffff88802439bc00 RSI: ffffffff8b1c9840 RDI: ffffffff8b1c9800 [ 1015.925524][ C0] RBP: ffff888078287258 R08: dffffc0000000000 R09: 1ffffffff2238ea0 [ 1015.925536][ C0] R10: dffffc0000000000 R11: fffffbfff2238ea1 R12: dffffc0000000000 [ 1015.925547][ C0] R13: ffff88807ef257b0 R14: 0000000000000001 R15: ffff88807ef24c80 [ 1015.925558][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1015.925571][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1015.925582][ C0] CR2: 00005644845d3660 CR3: 000000000cf32000 CR4: 00000000003506f0 [ 1015.925597][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000008d24 [ 1015.925607][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1015.925616][ C0] Call Trace: [ 1015.925623][ C0] [ 1015.925628][ C0] ? batadv_nc_to_purge_nc_path_coding+0x120/0x120 [ 1015.925648][ C0] ? batadv_nc_fwd_flush+0x330/0x330 [ 1015.925664][ C0] rcu_is_watching+0x15/0xb0 [ 1015.925684][ C0] ? batadv_nc_fwd_flush+0x330/0x330 [ 1015.925699][ C0] batadv_nc_process_nc_paths+0xfa/0x390 [ 1015.925718][ C0] ? batadv_nc_process_nc_paths+0xba/0x390 [ 1015.925737][ C0] batadv_nc_worker+0x52b/0x610 [ 1015.925755][ C0] ? process_scheduled_works+0x96f/0x15d0 [ 1015.925774][ C0] process_scheduled_works+0xa5d/0x15d0 [ 1015.925807][ C0] ? worker_attach_to_pool+0x380/0x380 [ 1015.925828][ C0] ? assign_work+0x3d2/0x5d0 [ 1015.925849][ C0] worker_thread+0xa55/0xfc0 [ 1015.925867][ C0] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1015.925887][ C0] ? _raw_spin_unlock+0x40/0x40 [ 1015.925903][ C0] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 1015.925940][ C0] kthread+0x2fa/0x390 [ 1015.925955][ C0] ? pr_cont_work+0x560/0x560 [ 1015.925973][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1015.925988][ C0] ret_from_fork+0x48/0x80 [ 1015.926005][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1015.926020][ C0] ret_from_fork_asm+0x11/0x20 [ 1015.926047][ C0] [ 1015.933566][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 1015.933578][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 1015.933597][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1015.933607][ T29] Call Trace: [ 1015.933614][ T29] [ 1015.933620][ T29] dump_stack_lvl+0x18c/0x250 [ 1015.933646][ T29] ? show_regs_print_info+0x20/0x20 [ 1015.933664][ T29] ? load_image+0x420/0x420 [ 1015.933698][ T29] panic+0x2dc/0x730 [ 1015.933719][ T29] ? schedule_preempt_disabled+0x20/0x20 [ 1015.933740][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 1015.933760][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 1015.933784][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 1015.933810][ T29] watchdog+0xf7c/0xf80 [ 1015.933833][ T29] ? watchdog+0x1e1/0xf80 [ 1015.933861][ T29] kthread+0x2fa/0x390 [ 1015.933877][ T29] ? hungtask_pm_notify+0x90/0x90 [ 1015.933899][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1015.933916][ T29] ret_from_fork+0x48/0x80 [ 1015.933935][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1015.933952][ T29] ret_from_fork_asm+0x11/0x20 [ 1015.933986][ T29] [ 1015.940305][ T29] Kernel Offset: disabled [ 1016.297058][ T29] Rebooting in 86400 seconds..