last executing test programs: 24.785274999s ago: executing program 2 (id=12230): r0 = socket$kcm(0x2, 0x5, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000340)=r1, 0x4) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x13) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x41, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x0, 0x7ffffffc}, {0x1000000a, 0x4}], 0x10, 0x4}, 0x94) close(r0) socket$kcm(0xa, 0x5, 0x0) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) sendmsg$tipc(r5, &(0x7f00000005c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x1, {0x41}}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000140)="9751ee912cb6f14507a7a7787594c3d816fd1c3a3009526726841df38b98c3dffe2518760fd57c5795fb15880e6f3ed1278f3ecdaa9efbd24e26ba0a43bde790b113d200d5244ce9ff26355560256cb758c6525ec501eb2814a2af4e4f85b5b3578a4e3f82b54c4bff0ab146bf202505b7b04bad48bdadace39c88551e8ea9c136895fc0883cc334cb5fbcfd72d0ed4a9480a1a6c6795539354eb45ec6e4e0dfa346e026e9437e090dc1fd36e3bb2bffffeb466804998188b50f642e47fc02fcad19ec035d9c85ea62933c58bd9ec62fc152821c1dc55473d2585d331fe4449a029a7056a0a654a66f72428e7fa9d6bf9ecdea80862e44468358305215284e", 0xff}, {&(0x7f0000000240)="72961ef083ef40503b5a3ceec8f579c30dce224dfe459c22070a71338fae911b302e8a2ce2beeb534de7d5cfc6e822dbe859ed64403bfbc71cadcac62adcd07bc936a5bb59251896e8b05bd2637c54dd720d3c31bf451bf39d45c0b8c24d144d1ee482e3a8c4cec4f98b9f1de3f1e06ba5c009fac83b571970f5f5830975034cbd07fcdaf4a9fe1fc36bdfa58280547d557fbde13028c5dad2269bbb7d41a29f1e48d844773a84bd9ba48d450ff4ff6c", 0xb0}], 0x2, &(0x7f0000000500)="32ca5bb47c4fc41f348e201bff601d8770fb0e8776b9b41e38e826b435b67e0ae15c07a6bb025137fc1737466a3b3eac6c90c609ce88fb0531a45f1fbca4cbf3e92696078933965d74e11aeaba4a749c70d1dddc749fcde5f4092fd34b37e8f79df652fd3df04c34559f077b34ba4e8f9b28b68237b047c770aefd1f036293b6d32379cf885f615454d8ae3091f95a9d6fc171a9d8eee4da", 0x98, 0xc800}, 0x24000000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)=@pppoe={0x18, 0x0, {0x0, @local, 'netdevsim0\x00'}}, 0x80, 0x0}, 0x50a0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r5, 0x1c) 24.691499519s ago: executing program 2 (id=12232): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r2) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x100, 0x0, 0x0, 0x80000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x127) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x40001) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r3) (fail_nth: 6) 24.062047723s ago: executing program 2 (id=12235): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="12000000770000000800"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000880)={r2, &(0x7f00000008c0), &(0x7f0000000900)=""/77}, 0x20) 23.967072323s ago: executing program 2 (id=12237): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x5, 0x17, &(0x7f0000001200)=ANY=[@ANYBLOB="1800000000008000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000007d000000bf0900000000000066090600000003e7040000000600000018010000756c6c2500000000002020207d9af8ff00"], &(0x7f0000001380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 23.773597943s ago: executing program 2 (id=12243): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x11, &(0x7f0000000500)=ANY=[@ANYBLOB="bf16000000000000b7000000000000007b0af0ff000000007b0af8ff000000006a0afaff0f270000bf61000000000000bfa200000000000007020000f0ffffffb70300000c000000b7040000ffffffffb70500000000000085000000550000001500020000000000bf010000000000008500000056000000b70000000000000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000940), 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000980)='ns/net\x00') r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000b00)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b80)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000c80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000cc0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x7af9) r4 = openat$cgroup_freezer_state(r1, &(0x7f0000000000), 0x2, 0x0) write$cgroup_freezer_state(r4, &(0x7f0000000040)='FREEZING\x00', 0x9) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 23.533827937s ago: executing program 2 (id=12244): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x100000001}, 0x4000, 0x2, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="1400000015000b63d25a9a648c0f9de7261a4a1d", 0x14}], 0x1}, 0x2000c884) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=@base={0x9, 0x8, 0x4, 0x100, 0x0, 0x0, 0x1}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0100000004000000040000000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x1, 0xd, &(0x7f0000002800)=ANY=[@ANYBLOB="1800000000000000000000000000000061183000000000007a0af8ff0010000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000150802000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff850000000100000095"], &(0x7f0000002880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r0, &(0x7f0000002a80)={0x0, 0x0, 0x0}, 0x4000) 20.437353273s ago: executing program 3 (id=12272): socket$kcm(0x2, 0x5, 0x84) socket$kcm(0xa, 0x1, 0x106) perf_event_open(&(0x7f0000000900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x28, 0x2, 0x0, 0x0) socketpair(0x18, 0x1, 0x0, 0x0) close(0xffffffffffffffff) close(0xffffffffffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0xa) r0 = socket$kcm(0x10, 0x3, 0x10) r1 = socket$kcm(0x1e, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000a40), 0x43) sendmsg$kcm(r1, &(0x7f0000000a80)={&(0x7f0000000b80)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x40, 0x4, 0x4}}, 0x80, 0x0}, 0x20008044) sendmsg$kcm(r0, &(0x7f0000000980)={0x0, 0xffffff0a, &(0x7f00000009c0)=[{&(0x7f0000000a00)="c018030033000b63d25a80648c2594f91324fc60100c214002000003050582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x16, 0x7}, 0x8050, 0x4, 0x43a1bd76, 0x5, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x2, 0x922000000001, 0x106) close(r2) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94) r4 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r4, &(0x7f0000000040)={&(0x7f0000000080)=@in6={0xa, 0x6005, 0x0, @empty, 0x7}, 0x80, 0x0}, 0x20040040) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000680)={r3, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000ac0)={0x0, 0xfffffffe, &(0x7f0000000b00)=[{&(0x7f0000000b40)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) recvmsg$kcm(r5, &(0x7f00000008c0)={&(0x7f0000000340)=@generic, 0x80, &(0x7f00000007c0)=[{&(0x7f00000003c0)=""/231, 0xe7}, {&(0x7f0000000500)=""/22, 0x16}, {&(0x7f0000000540)=""/27, 0x1b}, {&(0x7f0000000580)=""/78, 0x4e}, {&(0x7f0000000640)=""/2, 0x2}, {&(0x7f0000000700)=""/166, 0xa6}], 0x6, &(0x7f0000000840)=""/91, 0x5b}, 0x2000) 19.604776878s ago: executing program 0 (id=12279): perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xa}, 0xd0a42e14fd8afcb9, 0x0, 0xffffffff, 0x0, 0x40000000, 0x2, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0x12, 0x4, 0x4, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x1e, 0x11, &(0x7f0000000b40)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c40)=[r0], 0x0, 0x0}, 0x94) 19.426577227s ago: executing program 3 (id=12280): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="12000000770000000800000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000880)={0xffffffffffffffff, &(0x7f00000008c0), &(0x7f0000000900)=""/77}, 0x20) 19.345722555s ago: executing program 0 (id=12282): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x5, 0x17, &(0x7f0000001200)=ANY=[@ANYBLOB="1800000000008000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000007d000000bf0900000000000066090600000003e7040000000600000018010000756c6c2500000000002020207d9af8ff00000000ad9100000000000037010000f8ffffffb702000008000000b703000000000000140000"], &(0x7f0000001380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 19.136985796s ago: executing program 3 (id=12283): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000001000)="d80000001e0081064e81f782db44b904000e080006007c09e8fe11a10a0015c00200142603600e120800080024000000a80009001100014003001000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x4000044) 19.006471149s ago: executing program 0 (id=12286): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x100000001}, 0x4000, 0x2, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="1400000015000b63d25a9a648c0f9de7261a4a1d", 0x14}], 0x1}, 0x2000c884) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0100000004000000040000000001"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x1, 0xd, &(0x7f0000002800)=ANY=[@ANYBLOB="1800000000000000000000000000000061183000000000007a0af8ff0010000018110000", @ANYRES32, @ANYBLOB="0000000000000000150802000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff850000000100000095"], &(0x7f0000002880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000002a40)=r4, 0x4) sendmsg$inet(r1, &(0x7f0000002a80)={0x0, 0x0, 0x0}, 0x4000) 18.755281385s ago: executing program 0 (id=12288): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x5, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80720, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000001280), 0x0) close(r4) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000012c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000001380)=ANY=[@ANYBLOB="180000000100"/16], &(0x7f00000013c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001400)={@cgroup=r4, 0x1, 0x0, 0xa, &(0x7f0000001440)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000001480)=[0x0], &(0x7f00000014c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001500)=[0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001540)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="0c0000001000000000000000", @ANYRES32=r4, @ANYBLOB="ae0ea1bb09db8d51c3197e10f9a410fec12513e3431bea1f7149c7dc43ee8eb42c5df679cd74f2c33141ff53daf0d8a0c2719f69ba1cc2ddf9a94b349120db4cc281eb26bdac1eae0cf538f021ba718d61b7f47ba7e7fcc986f323d22653196f3baf3e1713f4d27fcf0fa88edd0cc9beae87ea6158f45aa3e9e5735f51a99efb44b3d4d2f75bd7e2417110fdb2d8d864d9c7a6ba0c32497d50a55f917864614c3ff74499867f12133e5ba793ef81421684652a2a78b615191ad2131fc84cd9afd8b7c05a2a", @ANYRES64=r6], 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000016c0)) socket$kcm(0x1e, 0x2, 0x0) perf_event_open(&(0x7f0000001700)={0x1, 0x80, 0x16, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x31408, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x90a, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000017c0)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0xf0, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001880)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000018c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001940)=ANY=[], 0x128}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001ac0)={0x0, 0x13, &(0x7f0000001b80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) write$cgroup_subtree(r8, &(0x7f0000001c00)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000001680)={0x6, 0x0}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001640)=ANY=[@ANYRES32, @ANYRES32=r1, @ANYBLOB="cc", @ANYRES32=r3, @ANYBLOB, @ANYRES32=r9, @ANYRES64=r6], 0x20) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x1, 0x14212, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x14802, 0x0, 0x2, 0x6, 0x4, 0x1, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(r10, &(0x7f0000000080)={&(0x7f00000000c0)=@in6={0xa, 0x4e1b, 0x3, @remote, 0x4}, 0x80, 0x0}, 0x4c810) sendmsg$kcm(r0, &(0x7f0000003100)={0x0, 0xf00, &(0x7f0000003140)=[{&(0x7f0000003180)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001940)=0xffffffffffffffff, 0x4) 18.684846092s ago: executing program 3 (id=12289): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRES64=r0], 0x0, 0x7, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x1, 0x0, 0x0, 0x7, 0xfffffffb, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x5, 0xffffffffffffffff, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r0}, &(0x7f0000000a00), &(0x7f0000000280)=r1}, 0x20) bpf$ENABLE_STATS(0x20, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) r5 = socket$kcm(0xa, 0x5, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000740), 0x4) setsockopt$sock_attach_bpf(r5, 0x0, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x92c0199, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x10000000000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x8311}, 0x0, 0x9, 0x0, 0x5, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c40)={0x3, 0xc, &(0x7f0000000d00)=ANY=[@ANYBLOB="1802000003000000000000000000000085000000270000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000003010000f8ffffffb702000008000000b703000001000000850000009b0000009500000000000000"], &(0x7f0000000d80)='syzkaller\x00'}, 0x65) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000dc0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000e40)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket$kcm(0xa, 0x2, 0x0) close(r7) r8 = socket$kcm(0xa, 0x5, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x6, 0x4, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f0000001f00)='GPL\x00', 0x4, 0x1076, &(0x7f0000001f40)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) setsockopt$sock_attach_bpf(r8, 0x29, 0x36, &(0x7f0000002f40)=r9, 0x120) close(r1) setsockopt$sock_attach_bpf(r7, 0x29, 0x37, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) recvmsg$unix(r10, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000002f80)={0x5, 0xb, &(0x7f0000003040)=ANY=[@ANYBLOB="1808000000000000000000000000000018ca87514220702500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008120000b703000000000000850000000600000095"], &(0x7f00000030c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r12 = perf_event_open(&(0x7f0000003100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80720, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x2, @perf_bp={0x0}, 0x0, 0x5, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r12, 0x40042408, r11) r13 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000003180)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000031c0)={r13, &(0x7f0000003200)}, 0x20) 18.343845117s ago: executing program 0 (id=12291): socket$kcm(0x2, 0x5, 0x84) socket$kcm(0xa, 0x1, 0x106) perf_event_open(&(0x7f0000000900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x28, 0x2, 0x0, 0x0) socketpair(0x18, 0x1, 0x0, 0x0) close(0xffffffffffffffff) close(0xffffffffffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0xa) r0 = socket$kcm(0x10, 0x3, 0x10) r1 = socket$kcm(0x1e, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000a40), 0x43) sendmsg$kcm(r1, &(0x7f0000000a80)={&(0x7f0000000b80)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x40, 0x4, 0x4}}, 0x80, 0x0}, 0x20008044) sendmsg$kcm(r0, &(0x7f0000000980)={0x0, 0xffffff0a, &(0x7f00000009c0)=[{&(0x7f0000000a00)="c018030033000b63d25a80648c2594f91324fc60100c214002000003050582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x16, 0x7}, 0x8050, 0x4, 0x43a1bd76, 0x5, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x2, 0x922000000001, 0x106) close(r2) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94) r4 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r4, &(0x7f0000000040)={&(0x7f0000000080)=@in6={0xa, 0x6005, 0x0, @empty, 0x7}, 0x80, 0x0}, 0x20040040) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000680)={r3, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000ac0)={0x0, 0xfffffffe, &(0x7f0000000b00)=[{&(0x7f0000000b40)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) recvmsg$kcm(r5, &(0x7f00000008c0)={&(0x7f0000000340)=@generic, 0x80, &(0x7f00000007c0)=[{&(0x7f00000003c0)=""/231, 0xe7}, {&(0x7f0000000500)=""/22, 0x16}, {&(0x7f0000000540)=""/27, 0x1b}, {&(0x7f0000000580)=""/78, 0x4e}, {&(0x7f0000000640)=""/2, 0x2}, {&(0x7f0000000700)=""/166, 0xa6}], 0x6, &(0x7f0000000840)=""/91, 0x5b}, 0x2000) 18.048814427s ago: executing program 4 (id=12296): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x108, 0x0, 0xfffffffe, 0x0, 0x4, 0x0, 0xa}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000c40)='GPL\x00', 0x5, 0x252, &(0x7f0000000c80)=""/195}, 0x48) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0xc1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000d80)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000dc0)) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000040), 0x1}, 0x2080, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, r0, 0x0) 17.693243383s ago: executing program 3 (id=12306): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000001000)="d80000001e0081064e81f782db44b904000e080006007c09e8fe11a10a0015c00200142603600e120800080024000000a80009001100014003001000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x4000044) 17.62594497s ago: executing program 4 (id=12298): socket$kcm(0x2, 0x5, 0x84) socket$kcm(0xa, 0x1, 0x106) perf_event_open(&(0x7f0000000900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x28, 0x2, 0x0, 0x0) socketpair(0x18, 0x1, 0x0, 0x0) close(0xffffffffffffffff) close(0xffffffffffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0xa) r0 = socket$kcm(0x10, 0x3, 0x10) r1 = socket$kcm(0x1e, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000a40), 0x43) sendmsg$kcm(r1, &(0x7f0000000a80)={&(0x7f0000000b80)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x40, 0x4, 0x4}}, 0x80, 0x0}, 0x20008044) sendmsg$kcm(r0, &(0x7f0000000980)={0x0, 0xffffff0a, &(0x7f00000009c0)=[{&(0x7f0000000a00)="c018030033000b63d25a80648c2594f91324fc60100c214002000003050582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x16, 0x7}, 0x8050, 0x4, 0x43a1bd76, 0x5, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x2, 0x922000000001, 0x106) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94) r3 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r3, &(0x7f0000000040)={&(0x7f0000000080)=@in6={0xa, 0x6005, 0x0, @empty, 0x7}, 0x80, 0x0}, 0x20040040) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000680)={r2, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000ac0)={0x0, 0xfffffffe, &(0x7f0000000b00)=[{&(0x7f0000000b40)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) recvmsg$kcm(r4, &(0x7f00000008c0)={&(0x7f0000000340)=@generic, 0x80, &(0x7f00000007c0)=[{&(0x7f00000003c0)=""/231, 0xe7}, {&(0x7f0000000500)=""/22, 0x16}, {&(0x7f0000000540)=""/27, 0x1b}, {&(0x7f0000000580)=""/78, 0x4e}, {&(0x7f0000000640)=""/2, 0x2}, {&(0x7f0000000700)=""/166, 0xa6}], 0x6, &(0x7f0000000840)=""/91, 0x5b}, 0x2000) 17.465805337s ago: executing program 3 (id=12299): r0 = socket$kcm(0xa, 0x922000000003, 0x11) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, 0x0) recvmsg$kcm(r0, &(0x7f0000001300)={&(0x7f0000000140)=@ax25={{}, [@netrom, @netrom, @remote, @bcast, @bcast, @remote, @remote, @netrom]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000001200)=""/228, 0xe4}, 0x60010142) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'wg0\x00', 0x112}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001340)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000001380)=r2, 0x4) r4 = socket$kcm(0x10, 0x400000002, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001480), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x4004004) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000014c0)='memory.current\x00', 0x275a, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000001500)={r6}) socket$kcm(0x11, 0x3, 0x0) perf_event_open(&(0x7f0000001540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000016c0)={0x1e, 0x0, 0x0, &(0x7f00000017c0)='GPL\x00', 0x2, 0xc3, &(0x7f0000001800)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001900)={0x100, 0x1}, 0x8, 0x10, &(0x7f0000001940)={0x0, 0x6, 0x2000}, 0x10, 0x0, r2, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000001a00)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200d0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb}) sendmsg$inet(r4, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001b00)}], 0x1}, 0x0) sendmsg$inet(r4, 0x0, 0x48884) r7 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000001b40)=ANY=[], 0x82d7) recvmsg(r7, 0x0, 0x0) recvmsg$kcm(r7, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x0) r8 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r8, 0x29, 0x24, &(0x7f0000001bc0), 0x4) socket$kcm(0x10, 0x2, 0x0) 17.382717345s ago: executing program 0 (id=12301): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4000000000000007910900000000000620000000000000095000000000000009e574bffff1729aba9b39a58e3cd8757e44cf3611b8e327a0279acba1f7791408d1efa421239728e2e5cc319b58520609dfd4a1a021d000000000000efffff75c3d894d99aef659f8b0000c515d8c219fbd9da31fc3ce3e9a2653000aec385a84a3d3f466bba30ac1486a70037fb03adef1a427fb0f4cb3072182da7c30000000000000000000000000000000000000000000000000000297e9fed660213ecb576987ad0972f18fbb7c9ecc03901f028b15b30ecf3205f90c9684ddc80d13bf37afc00e5efd686e6fb5ef4ee00b66126f773434a5c0d2ad3526bc484a6b94396117615f78f97637d8f8838aa75efb657ddafb15b88d97e47731cc3f55ce4e6a42562e6fb1f0000003030249c350044b09c36d10549a5949ff21418f1517508fb13540a82b5030cd9bb1bb066ca833c1fef6cefa28543ee520e46a3e96aca0d5a5f8cb34ad9c54c3a9a698f835bb83bcfd81ac5cfa18ce0740717994b5152cd0fa735433e50dccee16a208245b4366d44bb7ebd169b9e3a66d0cb29291a50f642ae4cb007540c806cd1cf88fdcaa393d1e1a697649401a802b474e374c767cb1ce52fd917d6af3de547be8429540de37f868a7f25d47c4b710836436008d4e8c8b42aeee84629d06d75ef09e0260b41de1f750480e492b6822d6275b7ccda1141707069cdb21de7a98dc37efdd806cc3619ad0659998bdd90b008c1aed04ee682b8ffd25741abbd9c6482ca45b82b6b7f25f71280cd6ba8bbb1e32dfe84831d1fc132755ce9aaf1952cb6829e9d6f4cbd8a07dc0cebcad512b3e0f2daa622bc805d2e152e0765b20cd6c8e2f4fff81e1458a43f35d36b25225dc0fbaf3b8131f5a8ae73e8badc519350edf048d5f56617"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000280), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) (fail_nth: 6) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000080)) 16.726637642s ago: executing program 1 (id=12302): r0 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0xcc3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x5, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0xc3, &(0x7f0000001000)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001380)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000001480)={0x0, 0x60, 0x0}, 0x40000001) 16.709162444s ago: executing program 4 (id=12303): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="12000000770000000800000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000880)={0xffffffffffffffff, &(0x7f00000008c0), &(0x7f0000000900)=""/77}, 0x20) 16.643810301s ago: executing program 4 (id=12304): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000040)="6f51d9b5ebc36dddd2a9be67", 0xfffffffffffffffe}, 0x20) sendmsg$inet(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f00000000c0)="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", 0x1000}], 0x1}, 0x40005) (async) r1 = perf_event_open$cgroup(&(0x7f0000001140)={0x0, 0x80, 0x36, 0x5, 0x9, 0x1c, 0x0, 0x9, 0x20000, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x100, 0x2, @perf_config_ext={0x5, 0x7a}, 0x10020, 0x1, 0x5, 0x7, 0xcb7, 0x80000000, 0xe4, 0x0, 0x8000, 0x0, 0x1}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x7) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000011c0)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0xa, 0x1b, &(0x7f0000001240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x7}, {}, {}, [@map_idx={0x18, 0x1, 0x5, 0x0, 0xb}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x7}, @call={0x85, 0x0, 0x0, 0xa}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x5}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7fcb}, @map_fd, @func={0x85, 0x0, 0x1, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001340)='GPL\x00', 0xff, 0x63, &(0x7f0000001380)=""/99, 0x41000, 0x17, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001400)={0x1, 0x4, 0x4, 0x8001}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, &(0x7f0000001440)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, r1], &(0x7f0000001480)=[{0x4, 0x3, 0x5, 0x6}, {0x5, 0x2, 0x1, 0x9}, {0x2, 0x4, 0xb, 0x6}, {0x1, 0x4, 0x6, 0x3}], 0x10, 0x800}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000015c0)={{r2, 0xffffffffffffffff}, &(0x7f0000001200), &(0x7f0000001580)=r3}, 0x20) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000001600)={r2}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001640)) (async) r5 = perf_event_open$cgroup(&(0x7f00000016c0)={0x3, 0x80, 0x41, 0x3, 0x8, 0x6, 0x0, 0x80, 0x44000, 0x1e, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000001680), 0x1}, 0x9284, 0x3, 0x10, 0x2, 0xb27, 0x2, 0x7, 0x0, 0x8000, 0x0, 0x6}, r2, 0x5, r2, 0xa) (async) r6 = getpid() syz_open_procfs$namespace(r6, &(0x7f0000001740)='ns/time_for_children\x00') r7 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000001780), 0x2, 0x0) write$cgroup_type(r7, &(0x7f00000017c0), 0x9) (async) openat$cgroup_int(r2, 0xfffffffffffffffe, 0x2, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r5, 0x4008240b, &(0x7f0000001800)={0x5, 0x80, 0x2, 0x7, 0x9, 0x0, 0x0, 0x1, 0x20d4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x7, 0xc543}, 0x20060, 0x3ff, 0x510c1528, 0x0, 0xb0, 0x0, 0x6fa7, 0x0, 0xf4, 0x0, 0xfff}) (async) r8 = openat$cgroup_subtree(r2, &(0x7f0000001880), 0x2, 0x0) close(r8) socketpair(0x8, 0x800, 0xf5, &(0x7f00000018c0)) openat$cgroup_pressure(r2, &(0x7f0000001900)='memory.pressure\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001940)={0x2, 0x80, 0x1, 0x3, 0x3, 0x0, 0x0, 0x200, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2982147b, 0x2, @perf_config_ext={0x7, 0x9}, 0x3000, 0x19f, 0x2, 0x2, 0x7, 0x5, 0x1, 0x0, 0xb11a}, r6, 0xd, r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000019c0)) (async) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001c80)=@bpf_lsm={0x1d, 0x14, &(0x7f0000001a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8a, 0x0, 0x0, 0x0, 0x62da4b7e}, [@btf_id={0x18, 0x2, 0x3, 0x0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4769baa3}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}]}, &(0x7f0000001ac0)='syzkaller\x00', 0x9, 0x23, &(0x7f0000001b00)=""/35, 0x41000, 0x8a, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000001b80)={0x3, 0xb, 0x1ff, 0xf2}, 0x10, 0xffffffffffffffff, 0x0, 0x6, &(0x7f0000001bc0)=[r4, r2, r4, r4, r4], &(0x7f0000001c00)=[{0x5, 0x5, 0xb, 0x1}, {0x1, 0x2, 0x2, 0x3}, {0x3, 0x3, 0x1, 0xc}, {0x0, 0x4, 0x9, 0x1}, {0x0, 0x5, 0x10, 0x4}, {0x3, 0x4, 0xf, 0x4}], 0x10, 0x10000}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001d40)={r2, r2, 0x4, r9}, 0x10) socket$kcm(0x29, 0x3, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000001d80)={'ip6gre0\x00', 0x10}) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002080)={r2, 0xe0, &(0x7f0000001f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000001dc0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000001e00)=[0x0, 0x0], &(0x7f0000001e40)=[0x0, 0x0], 0x0, 0x23, &(0x7f0000001e80)=[{}, {}], 0x10, 0x10, &(0x7f0000001ec0), &(0x7f0000001f00), 0x8, 0xd6, 0x8, 0x8, &(0x7f0000001f40)}}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000020c0)={0x3, 0x4, 0x4, 0xa, 0x0, r4, 0x0, '\x00', r10, r2, 0x0, 0x4}, 0x50) (async) write$cgroup_netprio_ifpriomap(r2, &(0x7f0000002140)={'nicvf0', 0x32, 0x33}, 0x9) 16.643253631s ago: executing program 1 (id=12305): bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x15, &(0x7f0000000780)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0008000000000000b7080000864000007b8af8fd00000000bfa20000000000000702b3650dd3e7ba8f73fa9dde8555e3a63b0000f8ffffffb703000008000000b70400000000400085211a67384ee3f09f9019ea0300c432cc000000820000001811000065c059c8472ce4e807a3f4d1ce54acccb1feb64e055722204139be5cbaa41488ed57d1", @ANYRES32], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 16.641908521s ago: executing program 4 (id=12314): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x9, 0x4, 0x8, 0x8}, 0x50) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x8, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x1, 0x10, &(0x7f0000000b40)=ANY=[], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000bc0)=r4, 0x4) sendmsg$unix(r1, &(0x7f0000000c00)={0x0, 0xfffffffffffffe96, 0x0, 0x0, 0x0, 0x0, 0x20000001}, 0x40000) r5 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800020007000200060001c003", 0x31}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x3, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000085100000ffffffff"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f00}, 0x94) socket$kcm(0x21, 0x2, 0xa) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x8, 0x0, 0x8}, 0x0, 0xfffff7ffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1900000004"], 0x50) r6 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) recvmsg$unix(r7, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r6, 0x84, 0x10, &(0x7f0000000680)=r8, 0x8) sendmsg(r5, &(0x7f0000002c40)={&(0x7f0000000180)=@sco, 0x80, &(0x7f0000002940)=[{&(0x7f0000000340)="b27494b3971b3cb09e13eeb4049079e5051ef31166eb197468216d36c027db90aa8c8c9d1aecf393f880f464212860289126a87360e69e2090cb54236d821da381590bb12ff39b25547d2edecf36aea580cd0b8976e1fc953181c3ccbd96cfc10241e55eba03562b77ca345fe80ff9083d8a758ca69bcd91453ed6c9", 0x7c}, {&(0x7f0000001740)="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", 0x1000}, {&(0x7f0000002740)="4bf571a8176986ae31ce25f39c374b2ec3d9e3947455c52348c1188ce9a73b8c4841487478ee1cdde7fbbef2e1e39d271cbf493c601bf1335b1c1f4a3e1b13e915f8ceb5a33c79b5340662006c6e2a27fa2d57c09e50196322e1e3c3", 0x5c}, {&(0x7f0000002840)="b5faf9175a05b8757311e7bb88c2e446067db3976a82a8d57af7f6cae4583287e5e35a40432c3dab76f548bcb6312b58dd96a323c192918530f3d132752d18a0", 0x40}, {&(0x7f00000028c0)="38b9543daa1c8626d6982afbc78304c2a5149208c722a75586440a401a6d7c188b0732fb346f500b11486dfb2361", 0x2e}, {&(0x7f0000002900)="4c4155935dcc3b72b8085ba5c3ef85cfd9bbb5382df837d05d4274a02fb078cc589b0a", 0x23}], 0x6, &(0x7f00000029c0)=[{0x18, 0x1, 0x1, "9f9eec22ac850b"}, {0x48, 0x108, 0x2, "ce4b2b0b9bd7c1580e52dae93299f37825fbfd6913425a9628852f901e75897695005580bf18cf011e9a28a302e31e8b854a5d902854c0"}, {0x58, 0x10c, 0x8001, "a46d3522e2e64cfc6fb582ec4cbf38c3de2ed92b511aadae40fc1354f53b81d447187d7e8075312c5966ddafea1e33bd33243161fc05c0b8c3b9cbc2931e0a881abd9f681810"}, {0xa8, 0x10b, 0x6, "7f967dbc8c14afb2c0f5f97467bcc0f0b4a45ddceaf36c773522e550d30598e93a053c75e473e13d6597ea0eaf5275d7108d27aca96206f2e69daadf8d7254f7cad5b4673123061c0ccc5fe0198c313d72cd81eb7a967d9151fb3aea281f7fe257e0c7eacc3c4e6a0e38c61f8a06251bfa230fc4b8b835a565ea260c3e668fcc7bbbe60f56d10564aba44c011dd12a44389dbe0faa5e14"}, {0x100, 0x112, 0xf85, "a86c6cc5b6fb4c3ae06a6a3e02ed7449324c6c61be9f850878e636e991d3310e06765aa2c293fe4405d9a8e0fe6a771a74c5939bca1ee40f13e71c65716e343cc8bcd64d1e8dc2facf345d4fd01d392a30b1a8fd3179edd124938b78b241b7cdc0d8aed420a59015e1b962a8d9349077d3e71968273306e12ff07fa437ba2110745476144daf1adc1bb85eca701fe997b5289f1ee8db8d33ca6584a030ed24cad06bf5987716917b11029f6c98e17c6ebc605bbf704a777b673f62c9686d9404ef3c3c92245ac25d927ea6c3ec98fa3566e5c8559c096d357095176e88f6477051fedb81e6bb7d83d8"}, {0x10, 0x107, 0x401}], 0x270}, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = socket$kcm(0x2, 0x3, 0x2) recvmsg$kcm(r9, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x40010030) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(r9, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, &(0x7f0000002800)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001740), 0x6000}], 0x4, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x10}, @multicast1}}}], 0x20}, 0x0) 16.629090652s ago: executing program 1 (id=12307): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRES64=r0], 0x0, 0x7, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x1, 0x0, 0x0, 0x7, 0xfffffffb, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x5, 0xffffffffffffffff, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r0}, &(0x7f0000000a00), &(0x7f0000000280)=r1}, 0x20) bpf$ENABLE_STATS(0x20, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) r5 = socket$kcm(0xa, 0x5, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000740), 0x4) setsockopt$sock_attach_bpf(r5, 0x0, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x92c0199, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x10000000000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x8311}, 0x0, 0x9, 0x0, 0x5, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c40)={0x3, 0xc, &(0x7f0000000d00)=ANY=[@ANYBLOB="1802000003000000000000000000000085000000270000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000003010000f8ffffffb702000008000000b703000001000000850000009b0000009500000000000000"], &(0x7f0000000d80)='syzkaller\x00'}, 0x65) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000dc0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000e40)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket$kcm(0xa, 0x2, 0x0) close(r7) r8 = socket$kcm(0xa, 0x5, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x6, 0x4, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f0000001f00)='GPL\x00', 0x4, 0x1076, &(0x7f0000001f40)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) setsockopt$sock_attach_bpf(r8, 0x29, 0x36, &(0x7f0000002f40)=r9, 0x120) close(r1) setsockopt$sock_attach_bpf(r7, 0x29, 0x37, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) recvmsg$unix(r10, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000002f80)={0x5, 0xb, &(0x7f0000003040)=ANY=[@ANYBLOB="1808000000000000000000000000000018ca87514220702500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008120000b703000000000000850000000600000095"], &(0x7f00000030c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r12 = perf_event_open(&(0x7f0000003100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80720, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x2, @perf_bp={0x0}, 0x0, 0x5, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r12, 0x40042408, r11) r13 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000003180)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000031c0)={r13, &(0x7f0000003200)}, 0x20) 15.758002191s ago: executing program 4 (id=12308): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x108, 0x0, 0xfffffffe, 0x0, 0x4, 0x0, 0xa}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000c40)='GPL\x00', 0x5, 0x252, &(0x7f0000000c80)=""/195}, 0x48) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0xc1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000d80)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000dc0)) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000040), 0x1}, 0x2080, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, r0, 0x0) 15.733543404s ago: executing program 1 (id=12309): r0 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0xcc3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x5, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0xc3, &(0x7f0000001000)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001440)="88", 0x1}], 0x1}, 0x45) recvmsg$unix(r2, &(0x7f0000001480)={0x0, 0x60, 0x0}, 0x40000001) 15.677756279s ago: executing program 1 (id=12310): perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xa}, 0xd0a42e14fd8afcb9, 0x0, 0xffffffff, 0x0, 0x40000000, 0x2, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0x12, 0x4, 0x4, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x1e, 0x11, &(0x7f0000000b40)=ANY=[@ANYBLOB="bf16000000000000620afcff00000000bfa200000000000007020000fcffffff1851000000000000000000000000000085000000010000001500070000000000bf"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c40)=[r0], 0x0, 0x0}, 0x94) 15.641007573s ago: executing program 1 (id=12311): socket$kcm(0x2, 0x5, 0x84) socket$kcm(0xa, 0x1, 0x106) perf_event_open(&(0x7f0000000900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x28, 0x2, 0x0, 0x0) socketpair(0x18, 0x1, 0x0, 0x0) close(0xffffffffffffffff) close(0xffffffffffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0xa) r0 = socket$kcm(0x10, 0x3, 0x10) r1 = socket$kcm(0x1e, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000a40), 0x43) sendmsg$kcm(r1, &(0x7f0000000a80)={&(0x7f0000000b80)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x40, 0x4, 0x4}}, 0x80, 0x0}, 0x20008044) sendmsg$kcm(r0, &(0x7f0000000980)={0x0, 0xffffff0a, &(0x7f00000009c0)=[{&(0x7f0000000a00)="c018030033000b63d25a80648c2594f91324fc60100c214002000003050582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x16, 0x7}, 0x8050, 0x4, 0x43a1bd76, 0x5, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}, 0x0) close(r2) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94) r4 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r4, &(0x7f0000000040)={&(0x7f0000000080)=@in6={0xa, 0x6005, 0x0, @empty, 0x7}, 0x80, 0x0}, 0x20040040) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000680)={r3, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000ac0)={0x0, 0xfffffffe, &(0x7f0000000b00)=[{&(0x7f0000000b40)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) recvmsg$kcm(r5, &(0x7f00000008c0)={&(0x7f0000000340)=@generic, 0x80, &(0x7f00000007c0)=[{&(0x7f00000003c0)=""/231, 0xe7}, {&(0x7f0000000500)=""/22, 0x16}, {&(0x7f0000000540)=""/27, 0x1b}, {&(0x7f0000000580)=""/78, 0x4e}, {&(0x7f0000000640)=""/2, 0x2}, {&(0x7f0000000700)=""/166, 0xa6}], 0x6, &(0x7f0000000840)=""/91, 0x5b}, 0x2000) 2.130121713s ago: executing program 32 (id=12301): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000280), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) (fail_nth: 6) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000080)) 2.070231059s ago: executing program 33 (id=12299): r0 = socket$kcm(0xa, 0x922000000003, 0x11) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, 0x0) recvmsg$kcm(r0, &(0x7f0000001300)={&(0x7f0000000140)=@ax25={{}, [@netrom, @netrom, @remote, @bcast, @bcast, @remote, @remote, @netrom]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000001200)=""/228, 0xe4}, 0x60010142) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'wg0\x00', 0x112}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001340)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000001380)=r2, 0x4) r4 = socket$kcm(0x10, 0x400000002, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001480), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x4004004) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000014c0)='memory.current\x00', 0x275a, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000001500)={r6}) socket$kcm(0x11, 0x3, 0x0) perf_event_open(&(0x7f0000001540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000016c0)={0x1e, 0x0, 0x0, &(0x7f00000017c0)='GPL\x00', 0x2, 0xc3, &(0x7f0000001800)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001900)={0x100, 0x1}, 0x8, 0x10, &(0x7f0000001940)={0x0, 0x6, 0x2000}, 0x10, 0x0, r2, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000001a00)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200d0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb}) sendmsg$inet(r4, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001b00)}], 0x1}, 0x0) sendmsg$inet(r4, 0x0, 0x48884) r7 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000001b40)=ANY=[], 0x82d7) recvmsg(r7, 0x0, 0x0) recvmsg$kcm(r7, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x0) r8 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r8, 0x29, 0x24, &(0x7f0000001bc0), 0x4) socket$kcm(0x10, 0x2, 0x0) 48.609885ms ago: executing program 34 (id=12311): socket$kcm(0x2, 0x5, 0x84) socket$kcm(0xa, 0x1, 0x106) perf_event_open(&(0x7f0000000900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x28, 0x2, 0x0, 0x0) socketpair(0x18, 0x1, 0x0, 0x0) close(0xffffffffffffffff) close(0xffffffffffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0xa) r0 = socket$kcm(0x10, 0x3, 0x10) r1 = socket$kcm(0x1e, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000a40), 0x43) sendmsg$kcm(r1, &(0x7f0000000a80)={&(0x7f0000000b80)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x40, 0x4, 0x4}}, 0x80, 0x0}, 0x20008044) sendmsg$kcm(r0, &(0x7f0000000980)={0x0, 0xffffff0a, &(0x7f00000009c0)=[{&(0x7f0000000a00)="c018030033000b63d25a80648c2594f91324fc60100c214002000003050582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x16, 0x7}, 0x8050, 0x4, 0x43a1bd76, 0x5, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}, 0x0) close(r2) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94) r4 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r4, &(0x7f0000000040)={&(0x7f0000000080)=@in6={0xa, 0x6005, 0x0, @empty, 0x7}, 0x80, 0x0}, 0x20040040) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000680)={r3, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000ac0)={0x0, 0xfffffffe, &(0x7f0000000b00)=[{&(0x7f0000000b40)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) recvmsg$kcm(r5, &(0x7f00000008c0)={&(0x7f0000000340)=@generic, 0x80, &(0x7f00000007c0)=[{&(0x7f00000003c0)=""/231, 0xe7}, {&(0x7f0000000500)=""/22, 0x16}, {&(0x7f0000000540)=""/27, 0x1b}, {&(0x7f0000000580)=""/78, 0x4e}, {&(0x7f0000000640)=""/2, 0x2}, {&(0x7f0000000700)=""/166, 0xa6}], 0x6, &(0x7f0000000840)=""/91, 0x5b}, 0x2000) 0s ago: executing program 35 (id=12308): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x108, 0x0, 0xfffffffe, 0x0, 0x4, 0x0, 0xa}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000c40)='GPL\x00', 0x5, 0x252, &(0x7f0000000c80)=""/195}, 0x48) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0xc1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000d80)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000dc0)) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000040), 0x1}, 0x2080, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, r0, 0x0) kernel console output (not intermixed with test programs): z.4.11537'. [ 1533.779635][ T7638] netlink: 'syz.3.11539': attribute type 33 has an invalid length. [ 1533.794465][ T7638] netlink: 152 bytes leftover after parsing attributes in process `syz.3.11539'. [ 1534.599480][ T7672] netlink: 'syz.2.11550': attribute type 39 has an invalid length. [ 1535.090022][ T7679] FAULT_INJECTION: forcing a failure. [ 1535.090022][ T7679] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1535.153654][ T7679] CPU: 1 PID: 7679 Comm: syz.3.11553 Not tainted syzkaller #0 [ 1535.161187][ T7679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1535.171315][ T7679] Call Trace: [ 1535.174636][ T7679] [ 1535.177604][ T7679] dump_stack_lvl+0x188/0x250 [ 1535.182338][ T7679] ? show_regs_print_info+0x20/0x20 [ 1535.187583][ T7679] ? load_image+0x410/0x410 [ 1535.192157][ T7679] ? __lock_acquire+0x7d40/0x7d40 [ 1535.197241][ T7679] should_fail+0x383/0x4b0 [ 1535.201802][ T7679] _copy_to_user+0x2e/0x130 [ 1535.206379][ T7679] simple_read_from_buffer+0xe3/0x150 [ 1535.211850][ T7679] proc_fail_nth_read+0x1a6/0x220 [ 1535.217037][ T7679] ? proc_fault_inject_write+0x310/0x310 [ 1535.222720][ T7679] ? fsnotify_perm+0x254/0x560 [ 1535.227721][ T7679] ? proc_fault_inject_write+0x310/0x310 [ 1535.233402][ T7679] vfs_read+0x2ff/0xd50 [ 1535.237606][ T7679] ? __lock_acquire+0x7d40/0x7d40 [ 1535.242677][ T7679] ? kernel_read+0x1e0/0x1e0 [ 1535.247343][ T7679] ? mutex_lock_nested+0x17/0x20 [ 1535.252444][ T7679] ? __fdget_pos+0x2bf/0x370 [ 1535.257078][ T7679] ? ksys_read+0x70/0x260 [ 1535.261479][ T7679] ksys_read+0x153/0x260 [ 1535.265781][ T7679] ? vfs_write+0xd70/0xd70 [ 1535.270290][ T7679] ? lockdep_hardirqs_on+0x94/0x140 [ 1535.275558][ T7679] do_syscall_64+0x4c/0xa0 [ 1535.280022][ T7679] ? clear_bhb_loop+0x30/0x80 [ 1535.284838][ T7679] ? clear_bhb_loop+0x30/0x80 [ 1535.289670][ T7679] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1535.295693][ T7679] RIP: 0033:0x7fa6d5618d8e [ 1535.300176][ T7679] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1535.319826][ T7679] RSP: 002b:00007fa6d38aefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1535.328292][ T7679] RAX: ffffffffffffffda RBX: 00007fa6d38af6c0 RCX: 00007fa6d5618d8e [ 1535.336352][ T7679] RDX: 000000000000000f RSI: 00007fa6d38af0a0 RDI: 0000000000000004 [ 1535.344365][ T7679] RBP: 00007fa6d38af090 R08: 0000000000000000 R09: 0000000000000000 [ 1535.352379][ T7679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1535.360394][ T7679] R13: 00007fa6d58df038 R14: 00007fa6d58defa0 R15: 00007ffcc0c52108 [ 1535.368468][ T7679] [ 1535.505980][ T7691] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.11557'. [ 1535.765441][ T7710] netlink: 'syz.3.11558': attribute type 33 has an invalid length. [ 1535.893359][ T7710] netlink: 152 bytes leftover after parsing attributes in process `syz.3.11558'. [ 1536.131660][ T7726] netlink: 'syz.2.11563': attribute type 39 has an invalid length. [ 1536.397535][ T7737] netlink: 132 bytes leftover after parsing attributes in process `syz.4.11568'. [ 1537.919300][ T7796] sctp: [Deprecated]: syz.1.11591 (pid 7796) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1537.919300][ T7796] Use struct sctp_sack_info instead [ 1537.939394][ T7798] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11590'. [ 1538.870205][ T7838] FAULT_INJECTION: forcing a failure. [ 1538.870205][ T7838] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1538.912466][ T7838] CPU: 1 PID: 7838 Comm: syz.1.11607 Not tainted syzkaller #0 [ 1538.920000][ T7838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1538.930478][ T7838] Call Trace: [ 1538.933792][ T7838] [ 1538.936753][ T7838] dump_stack_lvl+0x188/0x250 [ 1538.941508][ T7838] ? show_regs_print_info+0x20/0x20 [ 1538.946764][ T7838] ? load_image+0x410/0x410 [ 1538.951308][ T7838] ? __lock_acquire+0x7d40/0x7d40 [ 1538.956375][ T7838] ? bpf_test_run+0x78e/0x800 [ 1538.961097][ T7838] should_fail+0x383/0x4b0 [ 1538.965554][ T7838] _copy_to_user+0x2e/0x130 [ 1538.970101][ T7838] bpf_test_finish+0x1e6/0x2f0 [ 1538.974905][ T7838] ? convert_skb_to___skb+0x360/0x360 [ 1538.980346][ T7838] ? _copy_from_user+0x111/0x170 [ 1538.985322][ T7838] ? bpf_test_init+0x171/0x1b0 [ 1538.990138][ T7838] ? xdp_convert_buff_to_md+0x154/0x1e0 [ 1538.995733][ T7838] bpf_prog_test_run_xdp+0x61c/0x910 [ 1539.001152][ T7838] ? dev_put+0x70/0x70 [ 1539.005279][ T7838] ? dev_put+0x70/0x70 [ 1539.009385][ T7838] bpf_prog_test_run+0x31c/0x390 [ 1539.014389][ T7838] __sys_bpf+0x5a5/0x6f0 [ 1539.018681][ T7838] ? bpf_link_show_fdinfo+0x380/0x380 [ 1539.024095][ T7838] ? rcu_nmi_exit+0x6f/0xf0 [ 1539.028656][ T7838] __x64_sys_bpf+0x78/0x90 [ 1539.033118][ T7838] do_syscall_64+0x4c/0xa0 [ 1539.037580][ T7838] ? clear_bhb_loop+0x30/0x80 [ 1539.042320][ T7838] ? clear_bhb_loop+0x30/0x80 [ 1539.047079][ T7838] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1539.053017][ T7838] RIP: 0033:0x7fb751fed559 [ 1539.057478][ T7838] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1539.077130][ T7838] RSP: 002b:00007fb750244028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1539.085590][ T7838] RAX: ffffffffffffffda RBX: 00007fb752273fa0 RCX: 00007fb751fed559 [ 1539.093607][ T7838] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a [ 1539.101638][ T7838] RBP: 00007fb750244090 R08: 0000000000000000 R09: 0000000000000000 [ 1539.109662][ T7838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1539.117673][ T7838] R13: 00007fb752274038 R14: 00007fb752273fa0 R15: 00007ffd77d42f08 [ 1539.125731][ T7838] [ 1539.553828][ T7857] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11614'. [ 1539.837995][ T7870] sctp: [Deprecated]: syz.2.11617 (pid 7870) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1539.837995][ T7870] Use struct sctp_sack_info instead [ 1541.355189][ T7921] FAULT_INJECTION: forcing a failure. [ 1541.355189][ T7921] name failslab, interval 1, probability 0, space 0, times 0 [ 1541.446654][ T7921] CPU: 0 PID: 7921 Comm: syz.3.11639 Not tainted syzkaller #0 [ 1541.454194][ T7921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1541.464291][ T7921] Call Trace: [ 1541.467607][ T7921] [ 1541.470568][ T7921] dump_stack_lvl+0x188/0x250 [ 1541.475287][ T7921] ? show_regs_print_info+0x20/0x20 [ 1541.480553][ T7921] ? load_image+0x410/0x410 [ 1541.485102][ T7921] ? __might_sleep+0xf0/0xf0 [ 1541.489732][ T7921] ? __lock_acquire+0x7d40/0x7d40 [ 1541.494817][ T7921] should_fail+0x383/0x4b0 [ 1541.499284][ T7921] should_failslab+0x5/0x20 [ 1541.503827][ T7921] slab_pre_alloc_hook+0x51/0xc0 [ 1541.508811][ T7921] kmem_cache_alloc_node+0x47/0x2c0 [ 1541.514053][ T7921] ? alloc_vmap_area+0x199/0x1b30 [ 1541.519121][ T7921] alloc_vmap_area+0x199/0x1b30 [ 1541.524029][ T7921] ? vm_map_ram+0xba0/0xba0 [ 1541.528595][ T7921] __get_vm_area_node+0x14f/0x2d0 [ 1541.533665][ T7921] __vmalloc_node_range+0xef/0x8b0 [ 1541.538813][ T7921] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 1541.544432][ T7921] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1541.550559][ T7921] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 1541.556148][ T7921] __vmalloc+0x76/0x80 [ 1541.560258][ T7921] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 1541.565848][ T7921] bpf_prog_alloc_no_stats+0x36/0x2c0 [ 1541.571294][ T7921] bpf_prog_alloc+0x1a/0x1e0 [ 1541.575953][ T7921] __get_filter+0xf2/0x400 [ 1541.580425][ T7921] sk_attach_filter+0x20/0x140 [ 1541.585235][ T7921] tun_attach_filter+0x170/0x270 [ 1541.590229][ T7921] __tun_chr_ioctl+0x1863/0x1f30 [ 1541.595255][ T7921] ? tun_flow_create+0x310/0x310 [ 1541.600253][ T7921] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1541.605244][ T7921] ? security_file_ioctl+0x7c/0xa0 [ 1541.610500][ T7921] ? tun_chr_poll+0x620/0x620 [ 1541.615225][ T7921] __se_sys_ioctl+0xfa/0x170 [ 1541.619860][ T7921] do_syscall_64+0x4c/0xa0 [ 1541.624399][ T7921] ? clear_bhb_loop+0x30/0x80 [ 1541.629113][ T7921] ? clear_bhb_loop+0x30/0x80 [ 1541.633872][ T7921] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1541.639810][ T7921] RIP: 0033:0x7fa6d5658559 [ 1541.644263][ T7921] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1541.663909][ T7921] RSP: 002b:00007fa6d38af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1541.672399][ T7921] RAX: ffffffffffffffda RBX: 00007fa6d58defa0 RCX: 00007fa6d5658559 [ 1541.680413][ T7921] RDX: 0000200000000840 RSI: 00000000401054d5 RDI: 0000000000000005 [ 1541.688436][ T7921] RBP: 00007fa6d38af090 R08: 0000000000000000 R09: 0000000000000000 [ 1541.696455][ T7921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1541.704466][ T7921] R13: 00007fa6d58df038 R14: 00007fa6d58defa0 R15: 00007ffcc0c52108 [ 1541.712501][ T7921] [ 1541.804229][ T7921] syz.3.11639: vmalloc error: size 4096, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 1541.922495][ T7921] CPU: 0 PID: 7921 Comm: syz.3.11639 Not tainted syzkaller #0 [ 1541.930040][ T7921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1541.940131][ T7921] Call Trace: [ 1541.943441][ T7921] [ 1541.946427][ T7921] dump_stack_lvl+0x188/0x250 [ 1541.951287][ T7921] ? rcu_lock_release+0x5/0x20 [ 1541.956101][ T7921] ? show_regs_print_info+0x20/0x20 [ 1541.961362][ T7921] ? load_image+0x410/0x410 [ 1541.965936][ T7921] warn_alloc+0x245/0x320 [ 1541.970340][ T7921] ? zone_watermark_ok_safe+0x250/0x250 [ 1541.975926][ T7921] ? __get_vm_area_node+0x164/0x2d0 [ 1541.981154][ T7921] __vmalloc_node_range+0x2b1/0x8b0 [ 1541.986393][ T7921] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1541.992416][ T7921] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 1541.997986][ T7921] __vmalloc+0x76/0x80 [ 1542.002086][ T7921] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 1542.007687][ T7921] bpf_prog_alloc_no_stats+0x36/0x2c0 [ 1542.013096][ T7921] bpf_prog_alloc+0x1a/0x1e0 [ 1542.017720][ T7921] __get_filter+0xf2/0x400 [ 1542.022174][ T7921] sk_attach_filter+0x20/0x140 [ 1542.026969][ T7921] tun_attach_filter+0x170/0x270 [ 1542.031940][ T7921] __tun_chr_ioctl+0x1863/0x1f30 [ 1542.036915][ T7921] ? tun_flow_create+0x310/0x310 [ 1542.041898][ T7921] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1542.046864][ T7921] ? security_file_ioctl+0x7c/0xa0 [ 1542.052003][ T7921] ? tun_chr_poll+0x620/0x620 [ 1542.056707][ T7921] __se_sys_ioctl+0xfa/0x170 [ 1542.061350][ T7921] do_syscall_64+0x4c/0xa0 [ 1542.065795][ T7921] ? clear_bhb_loop+0x30/0x80 [ 1542.070498][ T7921] ? clear_bhb_loop+0x30/0x80 [ 1542.075202][ T7921] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1542.081128][ T7921] RIP: 0033:0x7fa6d5658559 [ 1542.085591][ T7921] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1542.105224][ T7921] RSP: 002b:00007fa6d38af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1542.113669][ T7921] RAX: ffffffffffffffda RBX: 00007fa6d58defa0 RCX: 00007fa6d5658559 [ 1542.121669][ T7921] RDX: 0000200000000840 RSI: 00000000401054d5 RDI: 0000000000000005 [ 1542.129663][ T7921] RBP: 00007fa6d38af090 R08: 0000000000000000 R09: 0000000000000000 [ 1542.137661][ T7921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1542.145665][ T7921] R13: 00007fa6d58df038 R14: 00007fa6d58defa0 R15: 00007ffcc0c52108 [ 1542.153678][ T7921] [ 1542.178186][ T7921] Mem-Info: [ 1542.181346][ T7921] active_anon:274 inactive_anon:6246 isolated_anon:0 [ 1542.181346][ T7921] active_file:26519 inactive_file:35852 isolated_file:0 [ 1542.181346][ T7921] unevictable:768 dirty:147 writeback:0 [ 1542.181346][ T7921] slab_reclaimable:21747 slab_unreclaimable:100712 [ 1542.181346][ T7921] mapped:30020 shmem:1635 pagetables:603 bounce:0 [ 1542.181346][ T7921] kernel_misc_reclaimable:0 [ 1542.181346][ T7921] free:1355855 free_pcp:11058 free_cma:0 [ 1542.242382][ T7921] Node 0 active_anon:1064kB inactive_anon:24472kB active_file:105876kB inactive_file:143408kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120080kB dirty:588kB writeback:0kB shmem:4460kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10948kB pagetables:2412kB all_unreclaimable? no [ 1542.312816][ T7921] Node 1 active_anon:32kB inactive_anon:512kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 1542.344523][ T7921] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1542.372798][ T7921] lowmem_reserve[]: 0 2523 2524 2524 2524 [ 1542.380400][ T7921] Node 0 DMA32 free:1489416kB min:34648kB low:43308kB high:51968kB reserved_highatomic:0KB active_anon:1064kB inactive_anon:24572kB active_file:105876kB inactive_file:143408kB unevictable:1536kB writepending:588kB present:3129332kB managed:2590808kB mlocked:0kB bounce:0kB free_pcp:40688kB local_pcp:19148kB free_cma:0kB [ 1542.413900][ T7921] lowmem_reserve[]: 0 0 0 0 0 [ 1542.419193][ T7921] Node 0 Normal free:16kB min:12kB low:12kB high:12kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:916kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 1542.447257][ T7921] lowmem_reserve[]: 0 0 0 0 0 [ 1542.452061][ T7921] Node 1 Normal free:3918728kB min:55240kB low:69048kB high:82856kB reserved_highatomic:0KB active_anon:32kB inactive_anon:512kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:4152kB local_pcp:2552kB free_cma:0kB [ 1542.481614][ T7921] lowmem_reserve[]: 0 0 0 0 0 [ 1542.487004][ T7921] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1542.499992][ T7921] Node 0 DMA32: 3066*4kB (UME) 2208*8kB (UME) 2778*16kB (UME) 2462*32kB (UME) 2019*64kB (UME) 934*128kB (UME) 452*256kB (UME) 202*512kB (UME) 62*1024kB (ME) 15*2048kB (UM) 189*4096kB (UM) = 1489416kB [ 1542.520265][ T7921] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1542.533315][ T7921] Node 1 Normal: 168*4kB (UME) 49*8kB (UME) 28*16kB (UME) 181*32kB (UME) 72*64kB (UME) 20*128kB (UE) 9*256kB (UM) 3*512kB (U) 1*1024kB (E) 2*2048kB (ME) 951*4096kB (UM) = 3918728kB [ 1542.551613][ T7949] sctp: [Deprecated]: syz.2.11646 (pid 7949) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1542.551613][ T7949] Use struct sctp_sack_info instead [ 1542.568123][ T7921] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1542.577761][ T7921] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1542.588312][ T7921] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1542.598041][ T7921] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1542.607462][ T7921] 64006 total pagecache pages [ 1542.612267][ T7921] 0 pages in swap cache [ 1542.616820][ T7921] Swap cache stats: add 0, delete 0, find 0/0 [ 1542.623020][ T7921] Free swap = 124996kB [ 1542.633308][ T7921] Total swap = 124996kB [ 1542.654598][ T7921] 2097051 pages RAM [ 1542.658978][ T7921] 0 pages HighMem/MovableOnly [ 1542.665427][ T7921] 415362 pages reserved [ 1542.677692][ T7921] 0 pages cma reserved [ 1542.691643][ T7923] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11640'. [ 1542.757811][ T7941] device sit0 entered promiscuous mode [ 1542.794540][ T7937] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 1542.846538][ T7937] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 1542.968865][ T7937] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1542.991807][ T7948] pimreg1: tun_chr_ioctl cmd 1074025677 [ 1543.023759][ T7948] pimreg1: linktype set to 768 [ 1544.144606][ T7975] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.11656'. [ 1544.147747][ T7972] FAULT_INJECTION: forcing a failure. [ 1544.147747][ T7972] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1544.180079][ T7972] CPU: 1 PID: 7972 Comm: syz.2.11655 Not tainted syzkaller #0 [ 1544.187628][ T7972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1544.197720][ T7972] Call Trace: [ 1544.201031][ T7972] [ 1544.201044][ T7972] dump_stack_lvl+0x188/0x250 [ 1544.208725][ T7972] ? show_regs_print_info+0x20/0x20 [ 1544.213974][ T7972] ? load_image+0x410/0x410 [ 1544.218530][ T7972] ? __lock_acquire+0x7d40/0x7d40 [ 1544.223598][ T7972] should_fail+0x383/0x4b0 [ 1544.228058][ T7972] _copy_to_user+0x2e/0x130 [ 1544.232606][ T7972] simple_read_from_buffer+0xe3/0x150 [ 1544.238027][ T7972] proc_fail_nth_read+0x1a6/0x220 [ 1544.243127][ T7972] ? proc_fault_inject_write+0x310/0x310 [ 1544.248810][ T7972] ? fsnotify_perm+0x254/0x560 [ 1544.253644][ T7972] ? proc_fault_inject_write+0x310/0x310 [ 1544.259323][ T7972] vfs_read+0x2ff/0xd50 [ 1544.263959][ T7972] ? __lock_acquire+0x7d40/0x7d40 [ 1544.269041][ T7972] ? kernel_read+0x1e0/0x1e0 [ 1544.273697][ T7972] ? mutex_lock_nested+0x17/0x20 [ 1544.278707][ T7972] ? __fdget_pos+0x2bf/0x370 [ 1544.283329][ T7972] ? ksys_read+0x70/0x260 [ 1544.287698][ T7972] ksys_read+0x153/0x260 [ 1544.291979][ T7972] ? vfs_write+0xd70/0xd70 [ 1544.296440][ T7972] ? lockdep_hardirqs_on+0x94/0x140 [ 1544.301684][ T7972] do_syscall_64+0x4c/0xa0 [ 1544.306137][ T7972] ? clear_bhb_loop+0x30/0x80 [ 1544.310846][ T7972] ? clear_bhb_loop+0x30/0x80 [ 1544.315562][ T7972] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1544.321486][ T7972] RIP: 0033:0x7feacfa4dd8e [ 1544.325970][ T7972] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1544.345620][ T7972] RSP: 002b:00007feacdce3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1544.354079][ T7972] RAX: ffffffffffffffda RBX: 00007feacdce46c0 RCX: 00007feacfa4dd8e [ 1544.362096][ T7972] RDX: 000000000000000f RSI: 00007feacdce40a0 RDI: 0000000000000034 [ 1544.370116][ T7972] RBP: 00007feacdce4090 R08: 0000000000000000 R09: 0000000000000000 [ 1544.378147][ T7972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1544.386157][ T7972] R13: 00007feacfd14038 R14: 00007feacfd13fa0 R15: 00007ffe3be25e78 [ 1544.394193][ T7972] [ 1544.709043][ T7983] netlink: 132 bytes leftover after parsing attributes in process `syz.4.11658'. [ 1545.310206][ T8012] FAULT_INJECTION: forcing a failure. [ 1545.310206][ T8012] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1545.324189][ T8012] CPU: 0 PID: 8012 Comm: syz.4.11669 Not tainted syzkaller #0 [ 1545.331717][ T8012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1545.341802][ T8012] Call Trace: [ 1545.345106][ T8012] [ 1545.348069][ T8012] dump_stack_lvl+0x188/0x250 [ 1545.352808][ T8012] ? show_regs_print_info+0x20/0x20 [ 1545.358044][ T8012] ? load_image+0x410/0x410 [ 1545.362593][ T8012] ? __lock_acquire+0x7d40/0x7d40 [ 1545.367659][ T8012] should_fail+0x383/0x4b0 [ 1545.372122][ T8012] _copy_from_iter+0x234/0x1160 [ 1545.377018][ T8012] ? __lock_acquire+0x7d40/0x7d40 [ 1545.382104][ T8012] ? copy_mc_pipe_to_iter+0x7d0/0x7d0 [ 1545.387534][ T8012] ? __virt_addr_valid+0x3c6/0x470 [ 1545.392712][ T8012] ? __phys_addr_symbol+0x2b/0x70 [ 1545.397778][ T8012] ? __check_object_size+0x30c/0x410 [ 1545.403112][ T8012] netlink_sendmsg+0x758/0xbe0 [ 1545.407922][ T8012] ? netlink_getsockopt+0x570/0x570 [ 1545.413147][ T8012] ? aa_sock_msg_perm+0x94/0x150 [ 1545.418152][ T8012] ? apparmor_socket_sendmsg+0x88/0x230 [ 1545.423758][ T8012] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1545.429081][ T8012] ? security_socket_sendmsg+0x7c/0xa0 [ 1545.434581][ T8012] ? netlink_getsockopt+0x570/0x570 [ 1545.439815][ T8012] ____sys_sendmsg+0x5be/0x8f0 [ 1545.444639][ T8012] ? __sys_sendmsg_sock+0x30/0x30 [ 1545.449701][ T8012] ? import_iovec+0x6f/0xa0 [ 1545.454245][ T8012] ___sys_sendmsg+0x236/0x2e0 [ 1545.458973][ T8012] ? __sys_sendmsg+0x290/0x290 [ 1545.463829][ T8012] __se_sys_sendmsg+0x1b7/0x2a0 [ 1545.468720][ T8012] ? __x64_sys_sendmsg+0x80/0x80 [ 1545.473774][ T8012] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1545.479812][ T8012] ? lockdep_hardirqs_on+0x94/0x140 [ 1545.485053][ T8012] do_syscall_64+0x4c/0xa0 [ 1545.489505][ T8012] ? clear_bhb_loop+0x30/0x80 [ 1545.494220][ T8012] ? clear_bhb_loop+0x30/0x80 [ 1545.498931][ T8012] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1545.504858][ T8012] RIP: 0033:0x7f8c5227d559 [ 1545.509315][ T8012] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1545.529040][ T8012] RSP: 002b:00007f8c504d4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1545.537582][ T8012] RAX: ffffffffffffffda RBX: 00007f8c52503fa0 RCX: 00007f8c5227d559 [ 1545.545576][ T8012] RDX: 0000000000000010 RSI: 00002000000003c0 RDI: 0000000000000003 [ 1545.553593][ T8012] RBP: 00007f8c504d4090 R08: 0000000000000000 R09: 0000000000000000 [ 1545.561587][ T8012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1545.569595][ T8012] R13: 00007f8c52504038 R14: 00007f8c52503fa0 R15: 00007ffcd7953fe8 [ 1545.577604][ T8012] [ 1545.601617][ T8022] sctp: [Deprecated]: syz.3.11666 (pid 8022) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1545.601617][ T8022] Use struct sctp_sack_info instead [ 1545.926764][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.933240][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.141022][ T8036] netlink: 'syz.2.11676': attribute type 21 has an invalid length. [ 1546.517835][ T8058] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11680'. [ 1546.753963][ T8066] sctp: [Deprecated]: syz.3.11683 (pid 8066) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1546.753963][ T8066] Use struct sctp_sack_info instead [ 1547.115627][ T8079] sctp: [Deprecated]: syz.4.11688 (pid 8079) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1547.115627][ T8079] Use struct sctp_sack_info instead [ 1547.464365][ T8087] FAULT_INJECTION: forcing a failure. [ 1547.464365][ T8087] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1547.484020][ T8087] CPU: 1 PID: 8087 Comm: syz.2.11692 Not tainted syzkaller #0 [ 1547.491562][ T8087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1547.501715][ T8087] Call Trace: [ 1547.505046][ T8087] [ 1547.508031][ T8087] dump_stack_lvl+0x188/0x250 [ 1547.512793][ T8087] ? show_regs_print_info+0x20/0x20 [ 1547.518060][ T8087] ? load_image+0x410/0x410 [ 1547.522688][ T8087] ? __lock_acquire+0x7d40/0x7d40 [ 1547.527800][ T8087] should_fail+0x383/0x4b0 [ 1547.532303][ T8087] _copy_to_user+0x2e/0x130 [ 1547.536880][ T8087] simple_read_from_buffer+0xe3/0x150 [ 1547.542331][ T8087] proc_fail_nth_read+0x1a6/0x220 [ 1547.547446][ T8087] ? proc_fault_inject_write+0x310/0x310 [ 1547.553154][ T8087] ? fsnotify_perm+0x254/0x560 [ 1547.557988][ T8087] ? proc_fault_inject_write+0x310/0x310 [ 1547.563707][ T8087] vfs_read+0x2ff/0xd50 [ 1547.567953][ T8087] ? __lock_acquire+0x7d40/0x7d40 [ 1547.573056][ T8087] ? kernel_read+0x1e0/0x1e0 [ 1547.577789][ T8087] ? mutex_lock_nested+0x17/0x20 [ 1547.582783][ T8087] ? __fdget_pos+0x2bf/0x370 [ 1547.587417][ T8087] ? ksys_read+0x70/0x260 [ 1547.591820][ T8087] ksys_read+0x153/0x260 [ 1547.596180][ T8087] ? vfs_write+0xd70/0xd70 [ 1547.600720][ T8087] ? lockdep_hardirqs_on+0x94/0x140 [ 1547.606078][ T8087] do_syscall_64+0x4c/0xa0 [ 1547.610541][ T8087] ? clear_bhb_loop+0x30/0x80 [ 1547.615275][ T8087] ? clear_bhb_loop+0x30/0x80 [ 1547.620016][ T8087] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1547.625977][ T8087] RIP: 0033:0x7feacfa4dd8e [ 1547.630450][ T8087] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1547.650106][ T8087] RSP: 002b:00007feacdce3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1547.658588][ T8087] RAX: ffffffffffffffda RBX: 00007feacdce46c0 RCX: 00007feacfa4dd8e [ 1547.666620][ T8087] RDX: 000000000000000f RSI: 00007feacdce40a0 RDI: 000000000000002b [ 1547.674656][ T8087] RBP: 00007feacdce4090 R08: 0000000000000000 R09: 0000000000000000 [ 1547.682735][ T8087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1547.690791][ T8087] R13: 00007feacfd14038 R14: 00007feacfd13fa0 R15: 00007ffe3be25e78 [ 1547.699034][ T8087] [ 1547.732786][ T8093] netlink: 'syz.1.11693': attribute type 39 has an invalid length. [ 1548.080916][ T8104] netlink: 'syz.4.11699': attribute type 3 has an invalid length. [ 1548.117190][ T8104] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.11699'. [ 1548.228628][ T8110] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11702'. [ 1548.326324][ T8116] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.11704'. [ 1548.422945][ T8116] netlink: 'syz.4.11704': attribute type 10 has an invalid length. [ 1548.510138][ T8116] bridge0: port 2(bridge_slave_1) entered disabled state [ 1548.529472][ T8116] device bridge_slave_1 left promiscuous mode [ 1548.543935][ T8116] bridge0: port 2(bridge_slave_1) entered disabled state [ 1548.552010][ T8123] sctp: [Deprecated]: syz.0.11706 (pid 8123) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1548.552010][ T8123] Use struct sctp_sack_info instead [ 1548.607572][ T8116] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1548.823247][ T8130] netlink: 'syz.1.11709': attribute type 39 has an invalid length. [ 1548.998574][ T8135] netlink: 'syz.1.11711': attribute type 3 has an invalid length. [ 1549.010102][ T8135] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11711'. [ 1550.482067][ T8173] FAULT_INJECTION: forcing a failure. [ 1550.482067][ T8173] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1550.569615][ T8173] CPU: 1 PID: 8173 Comm: syz.2.11722 Not tainted syzkaller #0 [ 1550.577149][ T8173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1550.587500][ T8173] Call Trace: [ 1550.590831][ T8173] [ 1550.593790][ T8173] dump_stack_lvl+0x188/0x250 [ 1550.598518][ T8173] ? show_regs_print_info+0x20/0x20 [ 1550.603757][ T8173] ? load_image+0x410/0x410 [ 1550.608302][ T8173] ? __lock_acquire+0x7d40/0x7d40 [ 1550.613379][ T8173] should_fail+0x383/0x4b0 [ 1550.617839][ T8173] _copy_to_user+0x2e/0x130 [ 1550.622394][ T8173] simple_read_from_buffer+0xe3/0x150 [ 1550.627973][ T8173] proc_fail_nth_read+0x1a6/0x220 [ 1550.633102][ T8173] ? proc_fault_inject_write+0x310/0x310 [ 1550.638899][ T8173] ? fsnotify_perm+0x254/0x560 [ 1550.643703][ T8173] ? proc_fault_inject_write+0x310/0x310 [ 1550.649376][ T8173] vfs_read+0x2ff/0xd50 [ 1550.653670][ T8173] ? __lock_acquire+0x7d40/0x7d40 [ 1550.658742][ T8173] ? kernel_read+0x1e0/0x1e0 [ 1550.663394][ T8173] ? mutex_lock_nested+0x17/0x20 [ 1550.668423][ T8173] ? __fdget_pos+0x2bf/0x370 [ 1550.673080][ T8173] ? ksys_read+0x70/0x260 [ 1550.677451][ T8173] ksys_read+0x153/0x260 [ 1550.681740][ T8173] ? vfs_write+0xd70/0xd70 [ 1550.686212][ T8173] ? lockdep_hardirqs_on+0x94/0x140 [ 1550.691484][ T8173] do_syscall_64+0x4c/0xa0 [ 1550.695946][ T8173] ? clear_bhb_loop+0x30/0x80 [ 1550.700658][ T8173] ? clear_bhb_loop+0x30/0x80 [ 1550.705380][ T8173] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1550.711304][ T8173] RIP: 0033:0x7feacfa4dd8e [ 1550.715749][ T8173] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1550.735388][ T8173] RSP: 002b:00007feacdca1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1550.743852][ T8173] RAX: ffffffffffffffda RBX: 00007feacdca26c0 RCX: 00007feacfa4dd8e [ 1550.751866][ T8173] RDX: 000000000000000f RSI: 00007feacdca20a0 RDI: 0000000000000032 [ 1550.759876][ T8173] RBP: 00007feacdca2090 R08: 0000000000000000 R09: 0000000000000000 [ 1550.767888][ T8173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1550.775900][ T8173] R13: 00007feacfd14218 R14: 00007feacfd14180 R15: 00007ffe3be25e78 [ 1550.783935][ T8173] [ 1550.968750][ T8176] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11723'. [ 1551.068968][ T8183] FAULT_INJECTION: forcing a failure. [ 1551.068968][ T8183] name failslab, interval 1, probability 0, space 0, times 0 [ 1551.117136][ T8183] CPU: 1 PID: 8183 Comm: syz.4.11726 Not tainted syzkaller #0 [ 1551.124666][ T8183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1551.134753][ T8183] Call Trace: [ 1551.138157][ T8183] [ 1551.141115][ T8183] dump_stack_lvl+0x188/0x250 [ 1551.145833][ T8183] ? show_regs_print_info+0x20/0x20 [ 1551.151066][ T8183] ? load_image+0x410/0x410 [ 1551.155622][ T8183] should_fail+0x383/0x4b0 [ 1551.160078][ T8183] should_failslab+0x5/0x20 [ 1551.164610][ T8183] slab_pre_alloc_hook+0x51/0xc0 [ 1551.169578][ T8183] ? security_inode_alloc+0x30/0x110 [ 1551.174900][ T8183] kmem_cache_alloc+0x3d/0x280 [ 1551.179800][ T8183] security_inode_alloc+0x30/0x110 [ 1551.184966][ T8183] inode_init_always+0x8e5/0xc90 [ 1551.189943][ T8183] new_inode_pseudo+0x8e/0x210 [ 1551.194753][ T8183] __sock_create+0x128/0x910 [ 1551.199395][ T8183] udp_sock_create4+0xc2/0x480 [ 1551.204197][ T8183] ? free_zapped_rcu+0x1f0/0x1f0 [ 1551.209173][ T8183] ? erspan_exit_batch_net+0x20/0x20 [ 1551.214511][ T8183] rxrpc_lookup_local+0xd15/0x1600 [ 1551.219683][ T8183] ? rxrpc_process_local_events+0x920/0x920 [ 1551.225620][ T8183] ? __local_bh_enable_ip+0x13e/0x1c0 [ 1551.231026][ T8183] ? _local_bh_enable+0xa0/0xa0 [ 1551.235928][ T8183] rxrpc_sendmsg+0x3e7/0x890 [ 1551.240566][ T8183] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1551.245891][ T8183] ? rxrpc_getsockopt+0x150/0x150 [ 1551.250965][ T8183] ____sys_sendmsg+0x5be/0x8f0 [ 1551.255787][ T8183] ? __sys_sendmsg_sock+0x30/0x30 [ 1551.260850][ T8183] ? import_iovec+0x6f/0xa0 [ 1551.265394][ T8183] ___sys_sendmsg+0x236/0x2e0 [ 1551.270125][ T8183] ? __sys_sendmsg+0x290/0x290 [ 1551.274937][ T8183] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1551.280817][ T8183] __se_sys_sendmsg+0x1b7/0x2a0 [ 1551.285709][ T8183] ? __x64_sys_sendmsg+0x80/0x80 [ 1551.290697][ T8183] ? syscall_enter_from_user_mode+0x2a/0x70 [ 1551.296638][ T8183] do_syscall_64+0x4c/0xa0 [ 1551.301092][ T8183] ? clear_bhb_loop+0x30/0x80 [ 1551.305807][ T8183] ? clear_bhb_loop+0x30/0x80 [ 1551.310526][ T8183] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1551.316456][ T8183] RIP: 0033:0x7f8c5227d559 [ 1551.320905][ T8183] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1551.340550][ T8183] RSP: 002b:00007f8c504d4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1551.349010][ T8183] RAX: ffffffffffffffda RBX: 00007f8c52503fa0 RCX: 00007f8c5227d559 [ 1551.357044][ T8183] RDX: 0000000000000000 RSI: 0000200000001500 RDI: 0000000000000004 [ 1551.365056][ T8183] RBP: 00007f8c504d4090 R08: 0000000000000000 R09: 0000000000000000 [ 1551.373062][ T8183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1551.381072][ T8183] R13: 00007f8c52504038 R14: 00007f8c52503fa0 R15: 00007ffcd7953fe8 [ 1551.389098][ T8183] [ 1551.402871][ T8183] socket: no more sockets [ 1551.511300][ T8187] delete_channel: no stack [ 1551.728146][ T8204] sctp: [Deprecated]: syz.0.11731 (pid 8204) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1551.728146][ T8204] Use struct sctp_sack_info instead [ 1551.745745][ T8208] sctp: [Deprecated]: syz.2.11732 (pid 8208) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1551.745745][ T8208] Use struct sctp_sack_info instead [ 1551.784104][ T8207] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.11744'. [ 1551.958978][ T8213] netlink: 'syz.3.11735': attribute type 39 has an invalid length. [ 1552.225183][ T8229] sctp: [Deprecated]: syz.3.11740 (pid 8229) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1552.225183][ T8229] Use struct sctp_sack_info instead [ 1552.424381][ T8232] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11741'. [ 1553.040709][ T8245] netlink: 'syz.2.11746': attribute type 3 has an invalid length. [ 1553.065465][ T8245] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.11746'. [ 1553.148296][ T8249] syzkaller1: tun_chr_ioctl cmd 21731 [ 1553.317601][ T8249] device syzkaller0 entered promiscuous mode [ 1553.326517][ T8258] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.11750'. [ 1553.337008][ T8247] netlink: 132 bytes leftover after parsing attributes in process `syz.4.11747'. [ 1553.354356][ T8259] netlink: 'syz.3.11748': attribute type 1 has an invalid length. [ 1553.373911][ T8259] netlink: 'syz.3.11748': attribute type 4 has an invalid length. [ 1553.383616][ T8259] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.11748'. [ 1553.494929][ T8261] netlink: 'syz.2.11751': attribute type 39 has an invalid length. [ 1553.622720][ T8265] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.11753'. [ 1553.680540][ T8265] netlink: 'syz.2.11753': attribute type 10 has an invalid length. [ 1553.769619][ T8265] bridge0: port 2(bridge_slave_1) entered disabled state [ 1553.805197][ T8265] device bridge_slave_1 left promiscuous mode [ 1553.815653][ T8265] bridge0: port 2(bridge_slave_1) entered disabled state [ 1553.843054][ T8272] sctp: [Deprecated]: syz.0.11754 (pid 8272) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1553.843054][ T8272] Use struct sctp_sack_info instead [ 1553.859905][ T8265] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1554.559787][ T8291] sctp: [Deprecated]: syz.1.11759 (pid 8291) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1554.559787][ T8291] Use struct sctp_sack_info instead [ 1554.593837][ T8290] netlink: 'syz.4.11761': attribute type 29 has an invalid length. [ 1554.594755][ T8285] delete_channel: no stack [ 1554.623917][ T8290] netlink: 'syz.4.11761': attribute type 29 has an invalid length. [ 1554.643404][ T8290] netlink: 'syz.4.11761': attribute type 29 has an invalid length. [ 1554.655154][ T8290] netlink: 'syz.4.11761': attribute type 29 has an invalid length. [ 1555.622020][ T8307] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11767'. [ 1555.981391][ T8328] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.11773'. [ 1556.132526][ T8328] bridge0: port 2(bridge_slave_1) entered disabled state [ 1556.364052][ T8328] device bridge_slave_1 left promiscuous mode [ 1556.383005][ T8328] bridge0: port 2(bridge_slave_1) entered disabled state [ 1556.486676][ T8328] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1556.725638][ T8346] netlink: 152 bytes leftover after parsing attributes in process `syz.0.11777'. [ 1557.132029][ T8355] validate_nla: 3 callbacks suppressed [ 1557.132050][ T8355] netlink: 'syz.3.11780': attribute type 39 has an invalid length. [ 1557.861397][ T8368] FAULT_INJECTION: forcing a failure. [ 1557.861397][ T8368] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1557.907091][ T8368] CPU: 1 PID: 8368 Comm: syz.0.11789 Not tainted syzkaller #0 [ 1557.914629][ T8368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1557.924723][ T8368] Call Trace: [ 1557.928050][ T8368] [ 1557.931202][ T8368] dump_stack_lvl+0x188/0x250 [ 1557.935961][ T8368] ? show_regs_print_info+0x20/0x20 [ 1557.941206][ T8368] ? load_image+0x410/0x410 [ 1557.945753][ T8368] ? __lock_acquire+0x7d40/0x7d40 [ 1557.950819][ T8368] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 1557.957109][ T8368] should_fail+0x383/0x4b0 [ 1557.961584][ T8368] _copy_from_user+0x2e/0x170 [ 1557.966301][ T8368] __sys_bpf+0x26d/0x6f0 [ 1557.970592][ T8368] ? bpf_link_show_fdinfo+0x380/0x380 [ 1557.976008][ T8368] ? rcu_nmi_exit+0x6f/0xf0 [ 1557.980574][ T8368] __x64_sys_bpf+0x78/0x90 [ 1557.985030][ T8368] do_syscall_64+0x4c/0xa0 [ 1557.989513][ T8368] ? clear_bhb_loop+0x30/0x80 [ 1557.994234][ T8368] ? clear_bhb_loop+0x30/0x80 [ 1557.998949][ T8368] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1558.004884][ T8368] RIP: 0033:0x7f91d7ba7559 [ 1558.009348][ T8368] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1558.028990][ T8368] RSP: 002b:00007f91d5dfe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1558.037534][ T8368] RAX: ffffffffffffffda RBX: 00007f91d7e2dfa0 RCX: 00007f91d7ba7559 [ 1558.045547][ T8368] RDX: 0000000000000080 RSI: 0000200000000140 RDI: 0000000000000005 [ 1558.053556][ T8368] RBP: 00007f91d5dfe090 R08: 0000000000000000 R09: 0000000000000000 [ 1558.061571][ T8368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1558.069584][ T8368] R13: 00007f91d7e2e038 R14: 00007f91d7e2dfa0 R15: 00007ffcf42a8778 [ 1558.077698][ T8368] [ 1558.205311][ T8376] delete_channel: no stack [ 1558.214920][ T8375] sctp: [Deprecated]: syz.3.11799 (pid 8375) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1558.214920][ T8375] Use struct sctp_sack_info instead [ 1558.722768][ T8398] netlink: 71 bytes leftover after parsing attributes in process `syz.2.11798'. [ 1558.835455][ T8406] netlink: 'syz.0.11800': attribute type 39 has an invalid length. [ 1559.037474][ T8410] sctp: [Deprecated]: syz.1.11802 (pid 8410) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1559.037474][ T8410] Use struct sctp_sack_info instead [ 1559.455553][ T8422] netlink: 'syz.3.11806': attribute type 10 has an invalid length. [ 1559.476239][ T8422] netlink: 'syz.3.11806': attribute type 4 has an invalid length. [ 1559.484370][ T8422] netlink: 116 bytes leftover after parsing attributes in process `syz.3.11806'. [ 1559.494622][ T8422] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1559.824325][ T8436] netlink: 'syz.1.11813': attribute type 39 has an invalid length. [ 1559.853835][ T8440] sctp: [Deprecated]: syz.4.11812 (pid 8440) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1559.853835][ T8440] Use struct sctp_sack_info instead [ 1560.375328][ T8461] netlink: 'syz.3.11820': attribute type 33 has an invalid length. [ 1560.414723][ T8461] netlink: 152 bytes leftover after parsing attributes in process `syz.3.11820'. [ 1560.643251][ T8467] netlink: 'syz.1.11823': attribute type 9 has an invalid length. [ 1560.924649][ T8476] FAULT_INJECTION: forcing a failure. [ 1560.924649][ T8476] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1560.944615][ T8476] CPU: 0 PID: 8476 Comm: syz.0.11826 Not tainted syzkaller #0 [ 1560.952140][ T8476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1560.962245][ T8476] Call Trace: [ 1560.965537][ T8476] [ 1560.968484][ T8476] dump_stack_lvl+0x188/0x250 [ 1560.973181][ T8476] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1560.979354][ T8476] ? show_regs_print_info+0x20/0x20 [ 1560.984721][ T8476] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1560.991022][ T8476] should_fail+0x383/0x4b0 [ 1560.995468][ T8476] _copy_from_iter+0x234/0x1160 [ 1561.000350][ T8476] ? __lock_acquire+0x7d40/0x7d40 [ 1561.005408][ T8476] ? copy_mc_pipe_to_iter+0x7d0/0x7d0 [ 1561.010808][ T8476] ? __virt_addr_valid+0x3c6/0x470 [ 1561.015935][ T8476] ? __phys_addr_symbol+0x2b/0x70 [ 1561.020983][ T8476] ? __check_object_size+0x30c/0x410 [ 1561.026293][ T8476] netlink_sendmsg+0x758/0xbe0 [ 1561.031103][ T8476] ? lockdep_hardirqs_on+0x94/0x140 [ 1561.036345][ T8476] ? netlink_getsockopt+0x570/0x570 [ 1561.041563][ T8476] ? security_socket_sendmsg+0x41/0xa0 [ 1561.047054][ T8476] ? security_socket_sendmsg+0x7c/0xa0 [ 1561.052543][ T8476] ? netlink_getsockopt+0x570/0x570 [ 1561.057755][ T8476] ____sys_sendmsg+0x5be/0x8f0 [ 1561.062546][ T8476] ? __sys_sendmsg_sock+0x30/0x30 [ 1561.067604][ T8476] ? import_iovec+0x6f/0xa0 [ 1561.072138][ T8476] ___sys_sendmsg+0x236/0x2e0 [ 1561.076836][ T8476] ? __sys_sendmsg+0x290/0x290 [ 1561.081626][ T8476] ? check_preemption_disabled+0x37/0x110 [ 1561.087379][ T8476] __se_sys_sendmsg+0x1b7/0x2a0 [ 1561.092249][ T8476] ? __x64_sys_sendmsg+0x80/0x80 [ 1561.097209][ T8476] ? lockdep_hardirqs_on+0x94/0x140 [ 1561.102439][ T8476] do_syscall_64+0x4c/0xa0 [ 1561.106875][ T8476] ? clear_bhb_loop+0x30/0x80 [ 1561.111569][ T8476] ? clear_bhb_loop+0x30/0x80 [ 1561.116269][ T8476] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1561.122178][ T8476] RIP: 0033:0x7f91d7ba7559 [ 1561.126607][ T8476] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1561.146223][ T8476] RSP: 002b:00007f91d5dfe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1561.154661][ T8476] RAX: ffffffffffffffda RBX: 00007f91d7e2dfa0 RCX: 00007f91d7ba7559 [ 1561.162648][ T8476] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000004 [ 1561.170630][ T8476] RBP: 00007f91d5dfe090 R08: 0000000000000000 R09: 0000000000000000 [ 1561.178613][ T8476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1561.186594][ T8476] R13: 00007f91d7e2e038 R14: 00007f91d7e2dfa0 R15: 00007ffcf42a8778 [ 1561.194603][ T8476] [ 1561.257932][ T8478] netlink: 'syz.3.11827': attribute type 39 has an invalid length. [ 1561.520112][ T8493] netlink: 'syz.2.11835': attribute type 33 has an invalid length. [ 1561.572075][ T8493] netlink: 152 bytes leftover after parsing attributes in process `syz.2.11835'. [ 1561.638761][ T8497] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.11837'. [ 1561.704694][ T8500] sctp: [Deprecated]: syz.0.11836 (pid 8500) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1561.704694][ T8500] Use struct sctp_sack_info instead [ 1561.900901][ T8505] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11840'. [ 1562.245312][ T8512] netlink: 71 bytes leftover after parsing attributes in process `syz.1.11838'. [ 1562.384348][ T8511] netlink: 'syz.3.11841': attribute type 33 has an invalid length. [ 1562.393060][ T8511] netlink: 152 bytes leftover after parsing attributes in process `syz.3.11841'. [ 1562.755548][ T8533] sctp: [Deprecated]: syz.4.11845 (pid 8533) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1562.755548][ T8533] Use struct sctp_sack_info instead [ 1562.990084][ T8542] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.11851'. [ 1563.740195][ T8559] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11858'. [ 1563.758935][ T8560] netlink: 'syz.3.11856': attribute type 39 has an invalid length. [ 1563.867598][ T8568] sctp: [Deprecated]: syz.4.11857 (pid 8568) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1563.867598][ T8568] Use struct sctp_sack_info instead [ 1564.195974][ T8585] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.11863'. [ 1565.013916][ T8613] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.11876'. [ 1565.036705][ T145] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1565.156714][ T145] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1565.270668][ T145] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1565.310996][ T8619] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11877'. [ 1565.373723][ T145] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1565.401929][ T8620] rxe_eth0 speed is unknown, defaulting to 1000 [ 1565.646573][ T8634] sctp: [Deprecated]: syz.1.11880 (pid 8634) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1565.646573][ T8634] Use struct sctp_sack_info instead [ 1565.745463][ T8633] netlink: 'syz.3.11882': attribute type 10 has an invalid length. [ 1566.215683][ T8652] netlink: 'syz.4.11886': attribute type 33 has an invalid length. [ 1566.345095][ T8620] chnl_net:caif_netlink_parms(): no params data found [ 1566.515567][ T8620] bridge0: port 1(bridge_slave_0) entered blocking state [ 1566.523498][ T8620] bridge0: port 1(bridge_slave_0) entered disabled state [ 1566.532925][ T8620] device bridge_slave_0 entered promiscuous mode [ 1566.542993][ T8620] bridge0: port 2(bridge_slave_1) entered blocking state [ 1566.550690][ T8620] bridge0: port 2(bridge_slave_1) entered disabled state [ 1566.559538][ T8620] device bridge_slave_1 entered promiscuous mode [ 1566.590575][ T8620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1566.610446][ T8620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1566.675433][ T8620] team0: Port device team_slave_0 added [ 1566.690012][ T8620] team0: Port device team_slave_1 added [ 1566.744230][ T8620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1566.757248][ T8620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1566.799801][ T8620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1566.863547][ T8620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1566.890542][ T8620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1566.962365][ T8686] __nla_validate_parse: 3 callbacks suppressed [ 1566.962403][ T8686] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.11894'. [ 1566.987498][ T8620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1567.059705][ T8682] netlink: 'syz.3.11893': attribute type 33 has an invalid length. [ 1567.103603][ T8682] netlink: 152 bytes leftover after parsing attributes in process `syz.3.11893'. [ 1567.191141][ T8686] netlink: 'syz.1.11894': attribute type 10 has an invalid length. [ 1567.246237][ T13] Bluetooth: hci2: command 0x0409 tx timeout [ 1567.312407][ T8686] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1567.380723][ T8620] device hsr_slave_0 entered promiscuous mode [ 1567.415114][ T8620] device hsr_slave_1 entered promiscuous mode [ 1567.473983][ T8700] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11897'. [ 1567.843792][ T8716] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.11900'. [ 1567.960619][ T8716] netlink: 'syz.4.11900': attribute type 10 has an invalid length. [ 1568.020854][ T8720] netlink: 'syz.2.11899': attribute type 33 has an invalid length. [ 1568.029909][ T8720] netlink: 152 bytes leftover after parsing attributes in process `syz.2.11899'. [ 1568.388531][ T8732] netlink: 'syz.3.11907': attribute type 33 has an invalid length. [ 1568.426119][ T8732] netlink: 152 bytes leftover after parsing attributes in process `syz.3.11907'. [ 1568.454581][ T145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1568.474191][ T145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1568.482850][ T145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1568.510703][ T145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1568.536248][ T145] device bridge_slave_1 left promiscuous mode [ 1568.543282][ T145] bridge0: port 2(bridge_slave_1) entered disabled state [ 1568.554561][ T145] device bridge_slave_0 left promiscuous mode [ 1568.569092][ T145] bridge0: port 1(bridge_slave_0) entered disabled state [ 1568.589559][ T145] device veth1_macvtap left promiscuous mode [ 1568.595676][ T145] device veth0_macvtap left promiscuous mode [ 1568.609480][ T145] device veth1_vlan left promiscuous mode [ 1568.615534][ T145] device veth0_vlan left promiscuous mode [ 1568.916750][ T145] team0 (unregistering): Port device team_slave_1 removed [ 1569.201873][ T8620] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1569.251073][ T8620] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1569.326006][ T13] Bluetooth: hci2: command 0x041b tx timeout [ 1569.396353][ T8620] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1569.454929][ T8775] netlink: 132 bytes leftover after parsing attributes in process `syz.4.11915'. [ 1569.631788][ T8620] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1569.778977][ T8790] sctp: [Deprecated]: syz.2.11919 (pid 8790) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1569.778977][ T8790] Use struct sctp_sack_info instead [ 1569.830591][ T8620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1569.860550][T24071] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1569.871988][T24071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1569.950027][ T8620] 8021q: adding VLAN 0 to HW filter on device team0 [ 1569.992851][T24071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1570.031284][T24071] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1570.121367][T24071] bridge0: port 1(bridge_slave_0) entered blocking state [ 1570.128658][T24071] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1570.178780][T24071] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1570.248945][T12791] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1570.273022][T12791] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1570.293315][T12791] bridge0: port 2(bridge_slave_1) entered blocking state [ 1570.300498][T12791] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1570.325568][T12791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1570.344599][T12791] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1570.362034][T12791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1570.388880][T12791] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1570.402701][T12791] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1570.456532][T12791] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1570.477819][T12791] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1570.487860][T12791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1570.497225][T12791] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1570.542097][ T8620] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1570.584641][ T8620] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1570.652540][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1570.672238][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1570.711650][ T8821] netlink: 'syz.2.11925': attribute type 33 has an invalid length. [ 1570.797763][ T8821] netlink: 152 bytes leftover after parsing attributes in process `syz.2.11925'. [ 1571.236401][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1571.274540][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1571.322413][ T8620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1571.405903][ T1161] Bluetooth: hci2: command 0x040f tx timeout [ 1571.448560][ T8848] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11930'. [ 1571.539206][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1571.567942][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1571.638153][T12791] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1571.662044][T12791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1571.677966][T12791] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1571.696814][T12791] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1571.725113][ T8620] device veth0_vlan entered promiscuous mode [ 1571.763455][ T8620] device veth1_vlan entered promiscuous mode [ 1571.778716][ T8859] sctp: [Deprecated]: syz.1.11935 (pid 8859) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1571.778716][ T8859] Use struct sctp_sack_info instead [ 1571.830803][T12791] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1571.839998][T12791] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1571.852075][T12791] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1571.863313][T12791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1571.882013][ T8620] device veth0_macvtap entered promiscuous mode [ 1571.936477][ T8620] device veth1_macvtap entered promiscuous mode [ 1571.974174][ T8620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1571.991411][ T8620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1572.002127][ T8620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1572.018550][ T8620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1572.031130][ T8620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1572.058690][ T8620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1572.069538][ T8620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1572.101914][ T8620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1572.160911][ T8620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1572.196435][T12791] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1572.236275][T12791] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1572.269575][T12791] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1572.294581][T12791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1572.313198][ T8620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1572.334950][ T8620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1572.345501][ T8620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1572.362979][ T8620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1572.373164][ T8620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1572.394155][ T8620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1572.405594][ T8620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1572.422641][ T8620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1572.434361][ T8620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1572.459075][T12791] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1572.485640][T12791] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1572.505307][ T8620] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1572.522122][ T8620] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1572.541079][ T8620] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1572.561125][ T8620] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1572.612077][ T8883] netlink: 'syz.3.11945': attribute type 33 has an invalid length. [ 1572.642493][ T8883] netlink: 152 bytes leftover after parsing attributes in process `syz.3.11945'. [ 1572.942263][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1572.959294][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1572.995887][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1573.028179][T12791] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1573.044126][T12791] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1573.083245][T12791] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1573.283461][ T8906] netlink: 'syz.4.11949': attribute type 33 has an invalid length. [ 1573.399280][ T8906] netlink: 152 bytes leftover after parsing attributes in process `syz.4.11949'. [ 1573.487320][ T13] Bluetooth: hci2: command 0x0419 tx timeout [ 1576.447981][ T8930] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11953'. [ 1576.508682][ T8929] netlink: 'syz.1.11957': attribute type 39 has an invalid length. [ 1576.517190][ T8931] sctp: [Deprecated]: syz.4.11956 (pid 8931) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1576.517190][ T8931] Use struct sctp_sack_info instead [ 1577.219166][ T8950] device lo entered promiscuous mode [ 1577.282327][ T8950] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1577.399617][ T8954] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.11978'. [ 1577.572064][ T8958] netlink: 'syz.2.11978': attribute type 10 has an invalid length. [ 1578.130956][ T8984] sctp: [Deprecated]: syz.0.11979 (pid 8984) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1578.130956][ T8984] Use struct sctp_sack_info instead [ 1578.301704][ T8987] device lo entered promiscuous mode [ 1578.326651][ T8987] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1578.806537][ T9017] netlink: 'syz.3.11993': attribute type 33 has an invalid length. [ 1578.814936][ T9017] netlink: 152 bytes leftover after parsing attributes in process `syz.3.11993'. [ 1579.331927][ T9037] netlink: 'syz.2.12003': attribute type 39 has an invalid length. [ 1579.808616][ T9062] netlink: 'syz.0.12011': attribute type 39 has an invalid length. [ 1579.814224][ T9063] sctp: [Deprecated]: syz.4.12012 (pid 9063) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1579.814224][ T9063] Use struct sctp_sack_info instead [ 1580.083679][ T9081] netlink: 'syz.0.12019': attribute type 39 has an invalid length. [ 1580.355573][ T9087] device lo entered promiscuous mode [ 1580.370658][ T9087] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1580.693397][ T9097] netlink: 'syz.0.12023': attribute type 33 has an invalid length. [ 1580.714931][ T9097] netlink: 152 bytes leftover after parsing attributes in process `syz.0.12023'. [ 1581.337507][ T9122] FAULT_INJECTION: forcing a failure. [ 1581.337507][ T9122] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1581.386170][ T9122] CPU: 0 PID: 9122 Comm: syz.2.12033 Not tainted syzkaller #0 [ 1581.393705][ T9122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1581.403913][ T9122] Call Trace: [ 1581.407238][ T9122] [ 1581.410219][ T9122] dump_stack_lvl+0x188/0x250 [ 1581.414944][ T9122] ? show_regs_print_info+0x20/0x20 [ 1581.420175][ T9122] ? load_image+0x410/0x410 [ 1581.424719][ T9122] ? __lock_acquire+0x7d40/0x7d40 [ 1581.429794][ T9122] should_fail+0x383/0x4b0 [ 1581.434248][ T9122] _copy_from_user+0x2e/0x170 [ 1581.438953][ T9122] __copy_msghdr_from_user+0xc9/0x630 [ 1581.444349][ T9122] ? verify_lock_unused+0x140/0x140 [ 1581.449579][ T9122] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 1581.454912][ T9122] ___sys_sendmsg+0x19a/0x2e0 [ 1581.459639][ T9122] ? __sys_sendmsg+0x290/0x290 [ 1581.464490][ T9122] __se_sys_sendmsg+0x1b7/0x2a0 [ 1581.469378][ T9122] ? __x64_sys_sendmsg+0x80/0x80 [ 1581.474331][ T9122] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1581.480373][ T9122] ? lockdep_hardirqs_on+0x94/0x140 [ 1581.485624][ T9122] do_syscall_64+0x4c/0xa0 [ 1581.490085][ T9122] ? clear_bhb_loop+0x30/0x80 [ 1581.494795][ T9122] ? clear_bhb_loop+0x30/0x80 [ 1581.499504][ T9122] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1581.505420][ T9122] RIP: 0033:0x7feacfa8d559 [ 1581.509859][ T9122] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1581.529486][ T9122] RSP: 002b:00007feacdce4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1581.537930][ T9122] RAX: ffffffffffffffda RBX: 00007feacfd13fa0 RCX: 00007feacfa8d559 [ 1581.545928][ T9122] RDX: 000000000004c810 RSI: 0000200000000080 RDI: 0000000000000004 [ 1581.553915][ T9122] RBP: 00007feacdce4090 R08: 0000000000000000 R09: 0000000000000000 [ 1581.561915][ T9122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1581.569904][ T9122] R13: 00007feacfd14038 R14: 00007feacfd13fa0 R15: 00007ffe3be25e78 [ 1581.577937][ T9122] [ 1581.657624][ T145] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1581.727839][ T9126] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1581.735207][ T9126] IPv6: NLM_F_CREATE should be set when creating new route [ 1581.742572][ T9126] IPv6: NLM_F_CREATE should be set when creating new route [ 1581.749902][ T9126] IPv6: NLM_F_CREATE should be set when creating new route [ 1581.800035][ T145] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1581.834685][ T9115] rxe_eth0 speed is unknown, defaulting to 1000 [ 1581.858451][ T9130] netlink: 132 bytes leftover after parsing attributes in process `syz.4.12037'. [ 1581.912804][ T145] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1582.005238][ T145] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1582.252677][ T9150] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.12044'. [ 1582.362676][ T9115] chnl_net:caif_netlink_parms(): no params data found [ 1582.404288][ T9150] netlink: 'syz.3.12044': attribute type 10 has an invalid length. [ 1582.722068][ T9115] bridge0: port 1(bridge_slave_0) entered blocking state [ 1582.787547][ T9115] bridge0: port 1(bridge_slave_0) entered disabled state [ 1582.824337][ T9115] device bridge_slave_0 entered promiscuous mode [ 1582.858043][ T9115] bridge0: port 2(bridge_slave_1) entered blocking state [ 1582.865268][ T9115] bridge0: port 2(bridge_slave_1) entered disabled state [ 1582.878772][ T9115] device bridge_slave_1 entered promiscuous mode [ 1582.901167][ T9176] netlink: 'syz.4.12047': attribute type 33 has an invalid length. [ 1582.916677][ T9176] netlink: 152 bytes leftover after parsing attributes in process `syz.4.12047'. [ 1583.024638][ T9115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1583.038568][ T9185] sctp: [Deprecated]: syz.0.12049 (pid 9185) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1583.038568][ T9185] Use struct sctp_sack_info instead [ 1583.093691][ T9115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1583.152377][ T9191] netlink: 128 bytes leftover after parsing attributes in process `syz.3.12053'. [ 1583.167309][ T9191] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1583.212763][ T9191] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1583.538753][ T9115] team0: Port device team_slave_0 added [ 1583.545733][ T9193] mac80211_hwsim hwsim220 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1583.571243][ T9201] FAULT_INJECTION: forcing a failure. [ 1583.571243][ T9201] name failslab, interval 1, probability 0, space 0, times 0 [ 1583.584796][ T9201] CPU: 0 PID: 9201 Comm: syz.3.12055 Not tainted syzkaller #0 [ 1583.592303][ T9201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1583.602389][ T9201] Call Trace: [ 1583.605722][ T9201] [ 1583.608685][ T9201] dump_stack_lvl+0x188/0x250 [ 1583.613412][ T9201] ? show_regs_print_info+0x20/0x20 [ 1583.618663][ T9201] ? load_image+0x410/0x410 [ 1583.623213][ T9201] ? __might_sleep+0xf0/0xf0 [ 1583.627839][ T9201] ? __lock_acquire+0x7d40/0x7d40 [ 1583.632916][ T9201] should_fail+0x383/0x4b0 [ 1583.637376][ T9201] should_failslab+0x5/0x20 [ 1583.642010][ T9201] slab_pre_alloc_hook+0x51/0xc0 [ 1583.646987][ T9201] ? __alloc_file+0x25/0x240 [ 1583.651602][ T9201] kmem_cache_alloc+0x3d/0x280 [ 1583.656407][ T9201] __alloc_file+0x25/0x240 [ 1583.660986][ T9201] alloc_empty_file+0x90/0x180 [ 1583.665797][ T9201] dentry_open+0x5c/0x120 [ 1583.670162][ T9201] ns_ioctl+0x39f/0x4c0 [ 1583.674438][ T9201] ? rcu_lock_release+0x20/0x20 [ 1583.679340][ T9201] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1583.684318][ T9201] ? security_file_ioctl+0x7c/0xa0 [ 1583.689582][ T9201] ? rcu_lock_release+0x20/0x20 [ 1583.694474][ T9201] __se_sys_ioctl+0xfa/0x170 [ 1583.699100][ T9201] do_syscall_64+0x4c/0xa0 [ 1583.703536][ T9201] ? clear_bhb_loop+0x30/0x80 [ 1583.708238][ T9201] ? clear_bhb_loop+0x30/0x80 [ 1583.712940][ T9201] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1583.718858][ T9201] RIP: 0033:0x7fa6d5658559 [ 1583.723305][ T9201] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1583.743021][ T9201] RSP: 002b:00007fa6d38af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1583.751459][ T9201] RAX: ffffffffffffffda RBX: 00007fa6d58defa0 RCX: 00007fa6d5658559 [ 1583.759455][ T9201] RDX: 0000000000000000 RSI: 000000000000b701 RDI: 0000000000000003 [ 1583.767442][ T9201] RBP: 00007fa6d38af090 R08: 0000000000000000 R09: 0000000000000000 [ 1583.775431][ T9201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1583.783422][ T9201] R13: 00007fa6d58df038 R14: 00007fa6d58defa0 R15: 00007ffcc0c52108 [ 1583.791432][ T9201] [ 1583.801896][ T7693] Bluetooth: hci5: command 0x0409 tx timeout [ 1583.829146][ T9115] team0: Port device team_slave_1 added [ 1583.939688][ T9115] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1584.010742][ T9115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1584.076775][ T9115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1584.120515][ T9115] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1584.186037][ T9115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1584.244790][ T9115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1584.359639][ T9115] device hsr_slave_0 entered promiscuous mode [ 1584.396243][ T9115] device hsr_slave_1 entered promiscuous mode [ 1584.420837][ T9115] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1584.455992][ T9115] Cannot create hsr debugfs directory [ 1584.467641][ T9229] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.12063'. [ 1584.490173][ T9226] netlink: 'syz.3.12061': attribute type 33 has an invalid length. [ 1584.541660][ T9226] netlink: 152 bytes leftover after parsing attributes in process `syz.3.12061'. [ 1584.660679][ T9229] netlink: 'syz.4.12063': attribute type 10 has an invalid length. [ 1584.968808][ T9251] netlink: 'syz.0.12067': attribute type 1 has an invalid length. [ 1584.985084][ T9251] netlink: 180900 bytes leftover after parsing attributes in process `syz.0.12067'. [ 1585.073871][ T9251] netlink: 128 bytes leftover after parsing attributes in process `syz.0.12067'. [ 1585.106698][ T9259] sctp: [Deprecated]: syz.3.12068 (pid 9259) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1585.106698][ T9259] Use struct sctp_sack_info instead [ 1585.123580][ T9251] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1585.159801][ T9251] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1585.230888][ T145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1585.259702][ T145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1585.271100][ T145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1585.296518][ T145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1585.326325][ T145] device veth1_macvtap left promiscuous mode [ 1585.341554][ T145] device veth0_macvtap left promiscuous mode [ 1585.351525][ T145] device veth1_vlan left promiscuous mode [ 1585.366180][ T145] device veth0_vlan left promiscuous mode [ 1585.397484][ T9267] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.12079'. [ 1585.725417][ T145] team0 (unregistering): Port device geneve1 removed [ 1585.835318][ T145] team0 (unregistering): Port device team_slave_1 removed [ 1585.886036][ T1161] Bluetooth: hci5: command 0x041b tx timeout [ 1585.894145][ T145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1585.916964][ T145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1585.941873][ T145] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1586.130128][ T145] bond0 (unregistering): Released all slaves [ 1586.191516][ T9267] netlink: 'syz.4.12079': attribute type 10 has an invalid length. [ 1586.234740][ T9282] netlink: 'syz.0.12075': attribute type 33 has an invalid length. [ 1586.244855][ T9282] netlink: 152 bytes leftover after parsing attributes in process `syz.0.12075'. [ 1586.344329][ T9290] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.12078'. [ 1586.369251][ T9290] netlink: 16126 bytes leftover after parsing attributes in process `syz.2.12078'. [ 1586.458679][ T9290] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.12078'. [ 1586.882444][ T9298] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.12080'. [ 1587.966052][ T1161] Bluetooth: hci5: command 0x040f tx timeout [ 1589.503406][ T9302] netlink: 'syz.0.12080': attribute type 10 has an invalid length. [ 1589.535224][ T9302] bridge0: port 2(bridge_slave_1) entered disabled state [ 1589.554986][ T9302] device bridge_slave_1 left promiscuous mode [ 1589.562440][ T9302] bridge0: port 2(bridge_slave_1) entered disabled state [ 1589.593628][ T9302] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1589.643815][ T9318] sctp: [Deprecated]: syz.3.12087 (pid 9318) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1589.643815][ T9318] Use struct sctp_sack_info instead [ 1589.762525][ T9320] netlink: 'syz.4.12090': attribute type 33 has an invalid length. [ 1589.793723][ T9323] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.12091'. [ 1589.849209][ T9320] netlink: 152 bytes leftover after parsing attributes in process `syz.4.12090'. [ 1589.924451][ T9323] netlink: 'syz.0.12091': attribute type 10 has an invalid length. [ 1590.055446][ T13] Bluetooth: hci5: command 0x0419 tx timeout [ 1590.079478][ T9328] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12092'. [ 1590.125367][ T9115] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1590.154607][ T9330] mac80211_hwsim hwsim213 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1590.194265][ T9115] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1590.213442][ T9115] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1590.224454][ T9115] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1590.423137][ T9115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1590.447984][T24071] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1590.459164][T24071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1590.503496][ T9115] 8021q: adding VLAN 0 to HW filter on device team0 [ 1590.533384][T24071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1590.550981][ T9349] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.12097'. [ 1590.573272][T24071] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1590.601470][T24071] bridge0: port 1(bridge_slave_0) entered blocking state [ 1590.608732][T24071] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1590.651543][T24071] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1590.683492][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1590.702254][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1590.751785][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 1590.758997][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1590.827860][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1590.862719][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1590.911115][T24071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1590.936868][T24071] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1590.986766][T24071] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1591.042409][T24071] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1591.081485][T24071] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1591.090026][ T9368] sctp: [Deprecated]: syz.0.12102 (pid 9368) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1591.090026][ T9368] Use struct sctp_sack_info instead [ 1591.120699][T24071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1591.141090][T24071] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1591.160825][T24071] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1591.184934][T24071] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1591.422126][ T9115] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1591.460537][ T9347] rxe_eth0 speed is unknown, defaulting to 1000 [ 1591.946286][ T9392] netlink: 'syz.0.12106': attribute type 39 has an invalid length. [ 1592.033554][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1592.046496][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1592.095556][ T9115] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1592.271271][ T9397] netlink: 'syz.3.12107': attribute type 3 has an invalid length. [ 1592.308220][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1592.309901][ T9397] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.12107'. [ 1592.339207][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1592.423346][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1592.441763][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1592.458269][ T9115] device veth0_vlan entered promiscuous mode [ 1592.473901][ T9115] device veth1_vlan entered promiscuous mode [ 1592.510923][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1592.567027][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1592.579849][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1592.594375][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1592.627696][ T9403] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.12109'. [ 1592.652399][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1592.673953][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1592.708227][ T9115] device veth0_macvtap entered promiscuous mode [ 1592.749006][ T9403] netlink: 'syz.0.12109': attribute type 10 has an invalid length. [ 1592.766413][ T9406] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12110'. [ 1592.780496][ T9115] device veth1_macvtap entered promiscuous mode [ 1592.818740][ T9115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1592.830061][ T9115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1592.840383][ T9115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1592.851439][ T9115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1592.861704][ T9115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1592.880391][ T9115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1592.890658][ T9115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1592.901549][ T9115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1592.913561][ T9115] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1592.942823][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1592.952981][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1592.967730][ T9115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1592.979785][ T9115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1592.990135][ T9115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1593.001068][ T9115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1593.011742][ T9115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1593.024465][ T9115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1593.035117][ T9115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1593.047530][ T9115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1593.059510][ T9115] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1593.068189][T24071] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1593.078327][T24071] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1593.091893][ T9115] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1593.102525][ T9115] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1593.112080][ T9115] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1593.121676][ T9115] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1593.308738][ T1234] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1593.320429][ T1234] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1593.352478][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1593.376778][T24071] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1593.384659][T24071] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1593.401786][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1593.730309][ T9427] FAULT_INJECTION: forcing a failure. [ 1593.730309][ T9427] name failslab, interval 1, probability 0, space 0, times 0 [ 1593.775297][ T9429] netlink: 'syz.2.12119': attribute type 39 has an invalid length. [ 1593.831487][ T9427] CPU: 1 PID: 9427 Comm: syz.1.12118 Not tainted syzkaller #0 [ 1593.839016][ T9427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1593.849222][ T9427] Call Trace: [ 1593.852545][ T9427] [ 1593.855510][ T9427] dump_stack_lvl+0x188/0x250 [ 1593.860238][ T9427] ? show_regs_print_info+0x20/0x20 [ 1593.865517][ T9427] ? load_image+0x410/0x410 [ 1593.870079][ T9427] ? mark_lock+0x94/0x320 [ 1593.874566][ T9427] should_fail+0x383/0x4b0 [ 1593.879034][ T9427] should_failslab+0x5/0x20 [ 1593.883578][ T9427] slab_pre_alloc_hook+0x51/0xc0 [ 1593.888583][ T9427] kmem_cache_alloc_trace+0x47/0x290 [ 1593.893923][ T9427] ? sock_hash_update_common+0xb2/0x970 [ 1593.899536][ T9427] sock_hash_update_common+0xb2/0x970 [ 1593.905001][ T9427] ? _local_bh_enable+0xa0/0xa0 [ 1593.909908][ T9427] sock_map_update_elem_sys+0x3e5/0x5e0 [ 1593.915505][ T9427] ? sock_map_prog_detach+0x290/0x290 [ 1593.920921][ T9427] ? bpf_map_update_value+0x150/0x650 [ 1593.926353][ T9427] map_update_elem+0x603/0x760 [ 1593.931180][ T9427] __sys_bpf+0x46b/0x6f0 [ 1593.935478][ T9427] ? bpf_link_show_fdinfo+0x380/0x380 [ 1593.940919][ T9427] __x64_sys_bpf+0x78/0x90 [ 1593.945381][ T9427] do_syscall_64+0x4c/0xa0 [ 1593.949831][ T9427] ? clear_bhb_loop+0x30/0x80 [ 1593.954565][ T9427] ? clear_bhb_loop+0x30/0x80 [ 1593.959287][ T9427] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1593.965221][ T9427] RIP: 0033:0x7f952de74559 [ 1593.969673][ T9427] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1593.989319][ T9427] RSP: 002b:00007f952c0cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1593.997787][ T9427] RAX: ffffffffffffffda RBX: 00007f952e0fafa0 RCX: 00007f952de74559 [ 1594.005901][ T9427] RDX: 0000000000000020 RSI: 0000200000000140 RDI: 0000000000000002 [ 1594.013914][ T9427] RBP: 00007f952c0cb090 R08: 0000000000000000 R09: 0000000000000000 [ 1594.021928][ T9427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1594.029938][ T9427] R13: 00007f952e0fb038 R14: 00007f952e0fafa0 R15: 00007ffdbdb5c7b8 [ 1594.037992][ T9427] [ 1594.624100][ T9433] rxe_eth0 speed is unknown, defaulting to 1000 [ 1595.066251][ T9440] netlink: 'syz.2.12123': attribute type 9 has an invalid length. [ 1595.074481][ T9440] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.12123'. [ 1595.270916][ T9447] netlink: 'syz.0.12125': attribute type 3 has an invalid length. [ 1595.292332][ T9447] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.12125'. [ 1595.535620][ T9453] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12127'. [ 1595.591388][ T9451] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.12126'. [ 1595.610074][ T9433] chnl_net:caif_netlink_parms(): no params data found [ 1595.684692][ T9451] netlink: 'syz.2.12126': attribute type 10 has an invalid length. [ 1595.841718][ T9433] bridge0: port 1(bridge_slave_0) entered blocking state [ 1595.872867][ T9433] bridge0: port 1(bridge_slave_0) entered disabled state [ 1595.908014][ T9433] device bridge_slave_0 entered promiscuous mode [ 1595.946448][ T9433] bridge0: port 2(bridge_slave_1) entered blocking state [ 1595.971933][ T9433] bridge0: port 2(bridge_slave_1) entered disabled state [ 1596.001408][ T9433] device bridge_slave_1 entered promiscuous mode [ 1596.104857][ T9433] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1596.157325][ T9433] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1596.305325][ T9433] team0: Port device team_slave_0 added [ 1596.331633][ T9433] team0: Port device team_slave_1 added [ 1596.508109][ T9433] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1596.515125][ T9433] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1596.529326][ T13] Bluetooth: hci0: command 0x0409 tx timeout [ 1596.588318][ T9433] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1596.618205][ T9433] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1596.650581][ T9433] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1596.733439][ T9433] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1597.222334][ T9433] device hsr_slave_0 entered promiscuous mode [ 1597.232518][ T9433] device hsr_slave_1 entered promiscuous mode [ 1597.267878][ T9433] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1597.275585][ T9433] Cannot create hsr debugfs directory [ 1597.662932][ T9433] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1597.749716][ T9496] netlink: 'syz.1.12136': attribute type 9 has an invalid length. [ 1597.771558][ T9496] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.12136'. [ 1597.847331][ T9433] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1597.978801][ T9497] netlink: 'syz.0.12139': attribute type 33 has an invalid length. [ 1598.035297][ T9497] netlink: 152 bytes leftover after parsing attributes in process `syz.0.12139'. [ 1598.157452][ T9433] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1598.236645][ T9433] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1598.606322][ T13] Bluetooth: hci0: command 0x041b tx timeout [ 1598.671113][ T9433] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1598.808271][ T9433] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1598.851604][ T9433] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1598.880024][ T9433] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1598.941192][ T9517] netlink: 'syz.4.12145': attribute type 9 has an invalid length. [ 1599.240726][ T9528] mac80211_hwsim hwsim234 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1599.282444][ T9433] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1599.328614][T12791] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1599.348172][T12791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1599.367299][ T9433] 8021q: adding VLAN 0 to HW filter on device team0 [ 1599.418191][T12791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1599.435041][T12791] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1599.448437][T12791] bridge0: port 1(bridge_slave_0) entered blocking state [ 1599.455581][T12791] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1599.521564][T12791] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1599.546861][T12791] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1599.556872][T12791] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1599.565574][T12791] bridge0: port 2(bridge_slave_1) entered blocking state [ 1599.572812][T12791] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1599.636044][T12791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1599.645113][T12791] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1599.685415][ T9537] netlink: 'syz.0.12154': attribute type 39 has an invalid length. [ 1599.708306][T24071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1599.732880][T24071] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1599.760488][T24071] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1599.790498][T24071] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1599.800582][T24071] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1599.883247][T24071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1599.900804][T24071] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1599.925745][ T9541] netlink: 'syz.4.12155': attribute type 9 has an invalid length. [ 1599.942718][T24071] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1599.960401][T24071] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1599.976170][ T9541] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.12155'. [ 1599.997632][ T9433] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1600.252512][ T9556] netlink: 'syz.2.12159': attribute type 33 has an invalid length. [ 1600.293988][ T9556] netlink: 152 bytes leftover after parsing attributes in process `syz.2.12159'. [ 1600.545333][T12791] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1600.569404][T12791] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1600.611592][ T9433] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1600.706526][ T1160] Bluetooth: hci0: command 0x040f tx timeout [ 1600.728592][ T9571] mac80211_hwsim hwsim220 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1600.991984][T12791] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1601.008137][T12791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1601.069760][ T145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1601.102009][ T145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1601.128023][ T145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1601.169783][ T145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1601.200213][ T145] device bridge_slave_0 left promiscuous mode [ 1601.222425][ T145] bridge0: port 1(bridge_slave_0) entered disabled state [ 1601.262716][ T145] device veth1_macvtap left promiscuous mode [ 1601.286420][ T145] device veth0_macvtap left promiscuous mode [ 1601.311417][ T145] device veth1_vlan left promiscuous mode [ 1601.337876][ T145] device veth0_vlan left promiscuous mode [ 1601.399341][ T9595] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.12174'. [ 1601.643992][ T145] team0 (unregistering): Port device geneve1 removed [ 1601.719772][ T145] team0 (unregistering): Port device hsr_slave_1 removed [ 1601.770221][ T145] team0 (unregistering): Port device team_slave_1 removed [ 1601.794123][ T145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1601.806314][ T1234] wlan1: Trigger new scan to find an IBSS to join [ 1601.822458][ T145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1601.841528][ T145] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1601.929739][ T145] bond0 (unregistering): Released all slaves [ 1601.968713][ T9574] netlink: 'syz.1.12165': attribute type 9 has an invalid length. [ 1601.990613][T12791] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1602.011254][T12791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1602.024427][ T9595] netlink: 'syz.2.12174': attribute type 10 has an invalid length. [ 1602.067340][ T9433] device veth0_vlan entered promiscuous mode [ 1602.078730][T12791] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1602.115186][T12791] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1602.144646][ T9433] device veth1_vlan entered promiscuous mode [ 1602.230361][T12791] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1602.275336][T12791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1602.322318][ T9433] device veth0_macvtap entered promiscuous mode [ 1602.344978][ T9612] netlink: 'syz.1.12180': attribute type 39 has an invalid length. [ 1602.597724][ T9624] netlink: 'syz.0.12178': attribute type 9 has an invalid length. [ 1602.597760][ T9433] device veth1_macvtap entered promiscuous mode [ 1602.605603][ T9624] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.12178'. [ 1602.793848][ T9633] FAULT_INJECTION: forcing a failure. [ 1602.793848][ T9633] name failslab, interval 1, probability 0, space 0, times 0 [ 1602.814608][ T9633] CPU: 1 PID: 9633 Comm: syz.4.12187 Not tainted syzkaller #0 [ 1602.822136][ T9633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1602.832228][ T9633] Call Trace: [ 1602.835550][ T9633] [ 1602.838542][ T9633] dump_stack_lvl+0x188/0x250 [ 1602.843271][ T9633] ? show_regs_print_info+0x20/0x20 [ 1602.848510][ T9633] ? load_image+0x410/0x410 [ 1602.850093][ T13] Bluetooth: hci0: command 0x0419 tx timeout [ 1602.853057][ T9633] ? __lock_acquire+0x7d40/0x7d40 [ 1602.864390][ T9633] ? alloc_empty_file_noaccount+0x80/0x80 [ 1602.870163][ T9633] should_fail+0x383/0x4b0 [ 1602.874651][ T9633] should_failslab+0x5/0x20 [ 1602.879192][ T9633] slab_pre_alloc_hook+0x51/0xc0 [ 1602.884179][ T9633] __kmalloc+0x6b/0x340 [ 1602.888376][ T9633] ? netns_bpf_link_create+0x4a7/0x870 [ 1602.893883][ T9633] netns_bpf_link_create+0x4a7/0x870 [ 1602.899226][ T9633] ? netns_bpf_prog_detach+0x280/0x280 [ 1602.904775][ T9633] link_create+0x508/0x660 [ 1602.909251][ T9633] __sys_bpf+0x645/0x6f0 [ 1602.913574][ T9633] ? bpf_link_show_fdinfo+0x380/0x380 [ 1602.918994][ T9633] ? rcu_nmi_exit+0x6f/0xf0 [ 1602.923562][ T9633] __x64_sys_bpf+0x78/0x90 [ 1602.928056][ T9633] do_syscall_64+0x4c/0xa0 [ 1602.932518][ T9633] ? clear_bhb_loop+0x30/0x80 [ 1602.937229][ T9633] ? clear_bhb_loop+0x30/0x80 [ 1602.941973][ T9633] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1602.947905][ T9633] RIP: 0033:0x7f8c5227d559 [ 1602.952350][ T9633] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1602.972014][ T9633] RSP: 002b:00007f8c504d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1602.980600][ T9633] RAX: ffffffffffffffda RBX: 00007f8c52503fa0 RCX: 00007f8c5227d559 [ 1602.988617][ T9633] RDX: 000000000000000a RSI: 0000200000000cc0 RDI: 000000000000001c [ 1602.996636][ T9633] RBP: 00007f8c504d4090 R08: 0000000000000000 R09: 0000000000000000 [ 1603.004659][ T9633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1603.012787][ T9633] R13: 00007f8c52504038 R14: 00007f8c52503fa0 R15: 00007ffcd7953fe8 [ 1603.020815][ T9633] [ 1603.025467][T12791] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1603.043515][T12791] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1603.105474][ T9433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1603.123557][ T9433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1603.134607][ T9433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1603.153076][ T9433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1603.164495][ T9433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1603.184042][ T9433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1603.198794][ T9433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1603.210933][ T9433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1603.223236][ T9433] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1603.242169][T24071] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1603.256496][T24071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1603.272186][ T9433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1603.305884][ T9433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1603.323600][ T9433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1603.356017][ T9433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1603.373491][ T9433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1603.393329][ T9433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1603.405059][ T9433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1603.424180][ T9433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1603.436751][ T9433] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1603.477759][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1603.489903][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1603.503368][ T9644] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.12191'. [ 1603.521102][ T9433] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1603.535949][ T9433] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1603.544857][ T9433] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1603.579908][ T9433] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1603.667394][ T9651] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.12194'. [ 1603.742890][ T9651] netlink: 'syz.1.12194': attribute type 10 has an invalid length. [ 1603.857311][ T9651] bridge0: port 2(bridge_slave_1) entered disabled state [ 1603.885537][ T9651] device bridge_slave_1 left promiscuous mode [ 1603.897346][ T9651] bridge0: port 2(bridge_slave_1) entered disabled state [ 1604.022336][ T9651] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1604.121987][ T9659] netlink: 'syz.0.12195': attribute type 33 has an invalid length. [ 1604.156477][ T9659] netlink: 152 bytes leftover after parsing attributes in process `syz.0.12195'. [ 1604.199754][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1604.230627][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1604.238696][T12791] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1604.279603][T12791] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1604.301274][T12791] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1604.319945][ T9665] sctp: [Deprecated]: syz.2.12198 (pid 9665) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1604.319945][ T9665] Use struct sctp_sack_info instead [ 1604.335498][T12791] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1604.434812][ T9670] netlink: 'syz.0.12200': attribute type 39 has an invalid length. [ 1604.459474][ T9667] mac80211_hwsim hwsim222 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1604.752317][ T9680] mac80211_hwsim hwsim240 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1604.846250][T24071] wlan1: Trigger new scan to find an IBSS to join [ 1604.939983][ T9696] mac80211_hwsim hwsim240 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1605.095509][ T9697] netlink: 'syz.4.12210': attribute type 33 has an invalid length. [ 1605.104662][ T9697] netlink: 152 bytes leftover after parsing attributes in process `syz.4.12210'. [ 1605.352340][ T9700] netlink: 'syz.0.12209': attribute type 9 has an invalid length. [ 1605.379774][ T9702] netlink: 'syz.3.12211': attribute type 39 has an invalid length. [ 1605.674935][ T9710] delete_channel: no stack [ 1605.848916][ T9723] mac80211_hwsim hwsim222 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1605.961789][ T9735] sctp: [Deprecated]: syz.0.12222 (pid 9735) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1605.961789][ T9735] Use struct sctp_sack_info instead [ 1605.992822][ T9731] mac80211_hwsim hwsim220 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1606.128160][ T9744] netlink: 'syz.3.12225': attribute type 33 has an invalid length. [ 1606.486996][ T9744] netlink: 152 bytes leftover after parsing attributes in process `syz.3.12225'. [ 1606.649561][ T9751] netlink: 'syz.1.12229': attribute type 39 has an invalid length. [ 1606.775658][ T9757] FAULT_INJECTION: forcing a failure. [ 1606.775658][ T9757] name failslab, interval 1, probability 0, space 0, times 0 [ 1606.788927][ T9757] CPU: 1 PID: 9757 Comm: syz.2.12232 Not tainted syzkaller #0 [ 1606.796431][ T9757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1606.806624][ T9757] Call Trace: [ 1606.809936][ T9757] [ 1606.812899][ T9757] dump_stack_lvl+0x188/0x250 [ 1606.817626][ T9757] ? show_regs_print_info+0x20/0x20 [ 1606.822870][ T9757] ? load_image+0x410/0x410 [ 1606.827432][ T9757] ? mark_lock+0x94/0x320 [ 1606.831829][ T9757] ? __lock_acquire+0x12df/0x7d40 [ 1606.836913][ T9757] should_fail+0x383/0x4b0 [ 1606.841384][ T9757] should_failslab+0x5/0x20 [ 1606.845927][ T9757] slab_pre_alloc_hook+0x51/0xc0 [ 1606.850909][ T9757] kmem_cache_alloc_node+0x47/0x2c0 [ 1606.856142][ T9757] ? __alloc_skb+0xf4/0x750 [ 1606.860686][ T9757] __alloc_skb+0xf4/0x750 [ 1606.865058][ T9757] tipc_msg_create+0x46/0x4b0 [ 1606.869805][ T9757] tipc_group_create_event+0x11f/0x960 [ 1606.875314][ T9757] tipc_sk_proto_rcv+0x6c5/0x1770 [ 1606.880396][ T9757] ? mark_lock+0x94/0x320 [ 1606.884770][ T9757] ? trace_tipc_sk_dump+0x200/0x200 [ 1606.890008][ T9757] ? __lock_acquire+0x13b3/0x7d40 [ 1606.895076][ T9757] ? tipc_sk_filtering+0x138/0x510 [ 1606.900237][ T9757] tipc_sk_filter_rcv+0x2e91/0x30b0 [ 1606.905494][ T9757] ? verify_lock_unused+0x140/0x140 [ 1606.910749][ T9757] ? rcu_lock_release+0x5/0x20 [ 1606.915554][ T9757] ? mark_lock+0x94/0x320 [ 1606.919930][ T9757] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1606.925952][ T9757] ? tipc_sk_rcv+0x712/0x2a10 [ 1606.930673][ T9757] ? lock_chain_count+0x20/0x20 [ 1606.935566][ T9757] ? tipc_sk_publish+0x420/0x420 [ 1606.940546][ T9757] ? __local_bh_enable_ip+0xd7/0x1c0 [ 1606.945906][ T9757] ? __local_bh_enable_ip+0x136/0x1c0 [ 1606.951340][ T9757] tipc_sk_rcv+0x846/0x2a10 [ 1606.955923][ T9757] ? is_bpf_text_address+0x254/0x270 [ 1606.961254][ T9757] ? __skb_queue_purge+0x160/0x160 [ 1606.966417][ T9757] ? kfree+0xef/0x2a0 [ 1606.970460][ T9757] ? __raw_spin_lock_init+0x41/0x100 [ 1606.975782][ T9757] tipc_node_xmit+0x203/0xf70 [ 1606.980489][ T9757] ? kasan_set_track+0x62/0x70 [ 1606.985402][ T9757] ? kasan_set_free_info+0x1f/0x40 [ 1606.990545][ T9757] ? ____kasan_slab_free+0xd5/0x110 [ 1606.995783][ T9757] ? kfree+0xef/0x2a0 [ 1606.999822][ T9757] ? tipc_group_delete+0x3b0/0x4b0 [ 1607.005005][ T9757] ? tipc_sk_leave+0x150/0x4d0 [ 1607.009808][ T9757] ? sock_close+0xbf/0x210 [ 1607.014375][ T9757] ? __fput+0x212/0x8c0 [ 1607.018564][ T9757] ? tipc_node_get_linkname+0x190/0x190 [ 1607.024156][ T9757] ? syscall_exit_to_user_mode+0x16/0x40 [ 1607.029843][ T9757] ? do_syscall_64+0x58/0xa0 [ 1607.034473][ T9757] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1607.040604][ T9757] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1607.046634][ T9757] tipc_node_distr_xmit+0x2c7/0x3f0 [ 1607.051889][ T9757] ? tipc_node_xmit_skb+0x190/0x190 [ 1607.057126][ T9757] ? tipc_group_delete+0x3b0/0x4b0 [ 1607.062276][ T9757] ? kfree+0xef/0x2a0 [ 1607.066290][ T9757] tipc_group_delete+0x3e8/0x4b0 [ 1607.071266][ T9757] ? slab_free_freelist_hook+0xec/0x170 [ 1607.076846][ T9757] ? kmem_cache_free+0x14c/0x210 [ 1607.081823][ T9757] ? tipc_group_update_member+0x350/0x350 [ 1607.087597][ T9757] ? tipc_group_self+0x22/0x1c0 [ 1607.092495][ T9757] tipc_sk_leave+0x150/0x4d0 [ 1607.097212][ T9757] ? __tipc_shutdown+0x1580/0x1580 [ 1607.102359][ T9757] ? _local_bh_enable+0xa0/0xa0 [ 1607.107255][ T9757] tipc_release+0x318/0x1f70 [ 1607.111896][ T9757] ? tipc_sock_destruct+0x170/0x170 [ 1607.117140][ T9757] sock_close+0xbf/0x210 [ 1607.121412][ T9757] ? sock_mmap+0x90/0x90 [ 1607.125692][ T9757] __fput+0x212/0x8c0 [ 1607.129720][ T9757] task_work_run+0x125/0x1a0 [ 1607.134363][ T9757] exit_to_user_mode_loop+0x10f/0x130 [ 1607.140028][ T9757] exit_to_user_mode_prepare+0xee/0x180 [ 1607.145604][ T9757] syscall_exit_to_user_mode+0x16/0x40 [ 1607.151093][ T9757] do_syscall_64+0x58/0xa0 [ 1607.155593][ T9757] ? clear_bhb_loop+0x30/0x80 [ 1607.160400][ T9757] ? clear_bhb_loop+0x30/0x80 [ 1607.165137][ T9757] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1607.171123][ T9757] RIP: 0033:0x7feacfa8d559 [ 1607.175591][ T9757] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1607.195262][ T9757] RSP: 002b:00007feacdce4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1607.203727][ T9757] RAX: 0000000000000000 RBX: 00007feacfd13fa0 RCX: 00007feacfa8d559 [ 1607.211737][ T9757] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 1607.219734][ T9757] RBP: 00007feacdce4090 R08: 0000000000000000 R09: 0000000000000000 [ 1607.227844][ T9757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1607.235860][ T9757] R13: 00007feacfd14038 R14: 00007feacfd13fa0 R15: 00007ffe3be25e78 [ 1607.243902][ T9757] [ 1607.329980][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.337646][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.628669][ T9772] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.12238'. [ 1607.659022][ T9772] netlink: 'syz.3.12238': attribute type 10 has an invalid length. [ 1607.715591][ T9772] bridge0: port 2(bridge_slave_1) entered disabled state [ 1607.732020][ T9772] device bridge_slave_1 left promiscuous mode [ 1607.739115][ T9772] bridge0: port 2(bridge_slave_1) entered disabled state [ 1607.770325][ T9772] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1607.816498][T12791] wlan1: Creating new IBSS network, BSSID e2:2b:dd:6b:ad:79 [ 1607.822675][ T9778] mac80211_hwsim hwsim231 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1607.839313][ T9777] mac80211_hwsim hwsim222 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1607.853029][ T9786] netlink: 'syz.1.12242': attribute type 39 has an invalid length. [ 1608.770068][T24071] wlan1: Trigger new scan to find an IBSS to join [ 1608.819538][ T9812] rxe_eth0 speed is unknown, defaulting to 1000 [ 1609.051136][ T9825] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.12256'. [ 1609.088666][ T9827] mac80211_hwsim hwsim234 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1609.434587][ T9835] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.12259'. [ 1609.481621][ T9812] chnl_net:caif_netlink_parms(): no params data found [ 1609.659733][ T9812] bridge0: port 1(bridge_slave_0) entered blocking state [ 1609.667341][ T9812] bridge0: port 1(bridge_slave_0) entered disabled state [ 1609.676039][ T9812] device bridge_slave_0 entered promiscuous mode [ 1609.685629][ T9812] bridge0: port 2(bridge_slave_1) entered blocking state [ 1609.693127][ T9812] bridge0: port 2(bridge_slave_1) entered disabled state [ 1609.701668][ T9812] device bridge_slave_1 entered promiscuous mode [ 1609.733654][ T9812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1609.769009][ T9812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1609.791531][ T9844] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.12261'. [ 1609.955410][ T9846] mac80211_hwsim hwsim231 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1610.000732][ T9812] team0: Port device team_slave_0 added [ 1610.027202][ T9812] team0: Port device team_slave_1 added [ 1610.093183][ T9849] netlink: 'syz.4.12263': attribute type 39 has an invalid length. [ 1610.161415][ T9812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1610.202712][ T9812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1610.306476][ T9812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1610.348849][ T9857] netlink: 'syz.3.12264': attribute type 9 has an invalid length. [ 1610.379636][ T9861] sctp: [Deprecated]: syz.0.12265 (pid 9861) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1610.379636][ T9861] Use struct sctp_sack_info instead [ 1610.431735][ T9812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1610.441522][ T9812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1610.500865][ T9812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1610.663864][ T9812] device hsr_slave_0 entered promiscuous mode [ 1610.686024][T18822] Bluetooth: hci3: command 0x0409 tx timeout [ 1610.693706][ T9812] device hsr_slave_1 entered promiscuous mode [ 1610.731979][ T9812] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1610.760274][ T9812] Cannot create hsr debugfs directory [ 1611.013145][ T9812] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1611.089565][ T9875] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.12272'. [ 1611.127229][ T9812] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1611.139782][ T9877] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.12273'. [ 1611.162304][ T9878] netlink: 'syz.3.12272': attribute type 10 has an invalid length. [ 1611.236128][ T9877] netlink: 'syz.1.12273': attribute type 10 has an invalid length. [ 1611.332264][ T9812] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1611.441944][ T9812] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1611.505187][ T9887] mac80211_hwsim hwsim231 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1611.717241][ T9812] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1611.727650][ T9812] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1611.756731][ T9812] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1611.780192][ T9812] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1611.807977][T12791] wlan1: Trigger new scan to find an IBSS to join [ 1612.214234][ T9812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1612.293418][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1612.327174][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1612.353053][ T9812] 8021q: adding VLAN 0 to HW filter on device team0 [ 1612.393846][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1612.433435][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1612.466845][ T1234] bridge0: port 1(bridge_slave_0) entered blocking state [ 1612.474017][ T1234] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1612.489865][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1612.504960][ T9908] netlink: 'syz.3.12283': attribute type 9 has an invalid length. [ 1612.515785][ T9913] sctp: [Deprecated]: syz.1.12284 (pid 9913) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1612.515785][ T9913] Use struct sctp_sack_info instead [ 1612.573688][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1612.607416][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1612.630713][ T9914] netlink: 121460 bytes leftover after parsing attributes in process `syz.4.12287'. [ 1612.669808][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 1612.677073][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1612.716159][ T9914] netlink: 22796 bytes leftover after parsing attributes in process `syz.4.12287'. [ 1612.726331][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1612.754226][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1612.766111][T18822] Bluetooth: hci3: command 0x041b tx timeout [ 1612.794050][ T9912] delete_channel: no stack [ 1612.801026][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1612.824124][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1612.832926][ T9921] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.12289'. [ 1612.872836][ T9922] netlink: 'syz.0.12288': attribute type 39 has an invalid length. [ 1612.894151][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1612.917386][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1612.941626][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1612.966925][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1612.979755][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1612.996765][ T9812] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1613.008497][ T9812] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1613.027404][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1613.041686][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1613.138690][ T9928] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.12291'. [ 1613.188492][ T9928] netlink: 'syz.0.12291': attribute type 10 has an invalid length. [ 1613.342406][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1613.355512][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1613.381595][ T9812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1613.438881][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1613.451160][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1613.499747][ T9942] netlink: 'syz.1.12295': attribute type 3 has an invalid length. [ 1613.515718][ T9942] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.12295'. [ 1613.552547][ T9812] device veth0_vlan entered promiscuous mode [ 1613.564692][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1613.583153][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1613.636076][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1613.658138][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1613.721324][ T9812] device veth1_vlan entered promiscuous mode [ 1613.771960][T24071] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1613.799493][T24071] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1613.807585][ T1234] wlan1: Trigger new scan to find an IBSS to join [ 1613.808547][ T155] wlan1: Trigger new scan to find an IBSS to join [ 1613.833535][T24071] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1613.852940][T24071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1613.866540][ T9812] device veth0_macvtap entered promiscuous mode [ 1613.874456][ T9946] netlink: 'syz.3.12306': attribute type 9 has an invalid length. [ 1613.896292][ T9812] device veth1_macvtap entered promiscuous mode [ 1613.948617][ T9948] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.12298'. [ 1614.005935][ T9812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1614.027352][ T9812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1614.056017][ T9812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1614.073227][ T9812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1614.083446][ T9812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1614.101395][ T9812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1614.127313][ T9812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1614.151512][ T9812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1614.162975][ T9812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1614.174243][ T9812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1614.188766][ T9812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1614.205295][ T9958] netlink: 'syz.1.12300': attribute type 39 has an invalid length. [ 1614.221854][ T9948] netlink: 'syz.4.12298': attribute type 10 has an invalid length. [ 1614.231559][ T9955] FAULT_INJECTION: forcing a failure. [ 1614.231559][ T9955] name failslab, interval 1, probability 0, space 0, times 0 [ 1614.249162][ T9955] CPU: 0 PID: 9955 Comm: syz.0.12301 Not tainted syzkaller #0 [ 1614.256696][ T9955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1614.266803][ T9955] Call Trace: [ 1614.270148][ T9955] [ 1614.273144][ T9955] dump_stack_lvl+0x188/0x250 [ 1614.277912][ T9955] ? show_regs_print_info+0x20/0x20 [ 1614.283177][ T9955] ? load_image+0x410/0x410 [ 1614.287763][ T9955] ? __might_sleep+0xf0/0xf0 [ 1614.292414][ T9955] ? __lock_acquire+0x7d40/0x7d40 [ 1614.297549][ T9955] should_fail+0x383/0x4b0 [ 1614.302058][ T9955] should_failslab+0x5/0x20 [ 1614.306612][ T9955] slab_pre_alloc_hook+0x51/0xc0 [ 1614.311623][ T9955] __kmalloc_node+0x6d/0x3a0 [ 1614.316272][ T9955] ? kvmalloc_node+0x84/0x130 [ 1614.321005][ T9955] ? __rwlock_init+0x140/0x140 [ 1614.325844][ T9955] kvmalloc_node+0x84/0x130 [ 1614.330440][ T9955] __veth_napi_enable_range+0xa8/0x420 [ 1614.336013][ T9955] veth_napi_enable_range+0xd0/0x150 [ 1614.341384][ T9955] veth_set_features+0x1f4/0x2f0 [ 1614.346445][ T9955] __netdev_update_features+0x914/0x16d0 [ 1614.352191][ T9955] ? dev_xdp_attach+0xed0/0xed0 [ 1614.357147][ T9955] ? __might_fault+0xb7/0x110 [ 1614.361902][ T9955] ? __lock_acquire+0x7d40/0x7d40 [ 1614.367035][ T9955] ? __might_fault+0xb3/0x110 [ 1614.371785][ T9955] ? _copy_from_user+0x111/0x170 [ 1614.376824][ T9955] ethtool_set_one_feature+0x1b9/0x200 [ 1614.382363][ T9955] ? ethtool_get_one_feature+0x1a0/0x1a0 [ 1614.388186][ T9955] ? security_capable+0x85/0xb0 [ 1614.393133][ T9955] dev_ethtool+0xd1b/0xff0 [ 1614.397640][ T9955] ? ethtool_get_module_eeprom_call+0x170/0x170 [ 1614.403966][ T9955] ? mutex_lock_io_nested+0x60/0x60 [ 1614.409250][ T9955] ? __lock_acquire+0x7d40/0x7d40 [ 1614.414331][ T9955] ? full_name_hash+0x8e/0xe0 [ 1614.419221][ T9955] dev_ioctl+0x457/0xe30 [ 1614.423531][ T9955] ? _copy_from_user+0x111/0x170 [ 1614.428547][ T9955] sock_do_ioctl+0x245/0x320 [ 1614.433219][ T9955] ? sock_show_fdinfo+0xb0/0xb0 [ 1614.438205][ T9955] sock_ioctl+0x48a/0x700 [ 1614.442611][ T9955] ? sock_poll+0x420/0x420 [ 1614.447143][ T9955] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1614.452130][ T9955] ? security_file_ioctl+0x7c/0xa0 [ 1614.457309][ T9955] ? sock_poll+0x420/0x420 [ 1614.461802][ T9955] __se_sys_ioctl+0xfa/0x170 [ 1614.466490][ T9955] do_syscall_64+0x4c/0xa0 [ 1614.471085][ T9955] ? clear_bhb_loop+0x30/0x80 [ 1614.475814][ T9955] ? clear_bhb_loop+0x30/0x80 [ 1614.480570][ T9955] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1614.486523][ T9955] RIP: 0033:0x7f30a8fe8559 [ 1614.490989][ T9955] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1614.510667][ T9955] RSP: 002b:00007f30a723f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1614.519167][ T9955] RAX: ffffffffffffffda RBX: 00007f30a926efa0 RCX: 00007f30a8fe8559 [ 1614.527201][ T9955] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 000000000000002d [ 1614.535221][ T9955] RBP: 00007f30a723f090 R08: 0000000000000000 R09: 0000000000000000 [ 1614.543246][ T9955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1614.551265][ T9955] R13: 00007f30a926f038 R14: 00007f30a926efa0 R15: 00007ffdbb963ee8 [ 1614.559356][ T9955] [ 1614.631817][ T9955] veth1_to_bond: set_features() failed (-12); wanted 0x000061164fdd59e9, left 0x000061164fdd19e9 [ 1614.833433][ T9974] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.12307'. [ 1614.846437][ T4283] Bluetooth: hci3: command 0x040f tx timeout [ 1614.852785][T12791] wlan1: Trigger new scan to find an IBSS to join [ 1614.882652][ T9975] sctp: [Deprecated]: syz.4.12314 (pid 9975) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1614.882652][ T9975] Use struct sctp_sack_info instead [ 1615.028506][ T1234] wlan1: Creating new IBSS network, BSSID 6e:e8:d3:ef:dd:41 [ 1615.915601][ T9986] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.12311'. [ 1616.927109][ T13] Bluetooth: hci3: command 0x0419 tx timeout [ 1617.806099][ T9] wlan1: Creating new IBSS network, BSSID 1e:c2:a3:59:7e:e9 [ 1617.806687][ T1234] wlan1: Trigger new scan to find an IBSS to join [ 1618.707199][ T1234] wlan1: Creating new IBSS network, BSSID ee:08:a6:7c:8f:5f [ 1631.485871][ T13] Bluetooth: hci4: command 0x0409 tx timeout [ 1631.566245][ T7719] Bluetooth: hci6: command 0x0409 tx timeout [ 1633.566669][ T7693] Bluetooth: hci4: command 0x041b tx timeout [ 1633.646231][ T7693] Bluetooth: hci7: command 0x0409 tx timeout [ 1633.652337][ T7693] Bluetooth: hci6: command 0x041b tx timeout [ 1633.656593][ T13] Bluetooth: hci8: command 0x0409 tx timeout [ 1635.655969][ T13] Bluetooth: hci4: command 0x040f tx timeout [ 1635.726045][ T13] Bluetooth: hci8: command 0x041b tx timeout [ 1635.733138][ T13] Bluetooth: hci6: command 0x040f tx timeout [ 1635.739556][ T13] Bluetooth: hci7: command 0x041b tx timeout [ 1637.736069][ T13] Bluetooth: hci4: command 0x0419 tx timeout [ 1637.806132][ T13] Bluetooth: hci7: command 0x040f tx timeout [ 1637.812349][ T13] Bluetooth: hci6: command 0x0419 tx timeout [ 1637.818844][ T13] Bluetooth: hci8: command 0x040f tx timeout [ 1639.886083][ T1160] Bluetooth: hci8: command 0x0419 tx timeout [ 1639.896023][ T7719] Bluetooth: hci7: command 0x0419 tx timeout [ 1645.117132][T24071] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1650.206167][ T470] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1650.846429][T24071] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1668.767478][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.774016][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 1670.525964][ T7693] Bluetooth: hci9: command 0x0409 tx timeout [ 1672.608159][ T13] Bluetooth: hci9: command 0x041b tx timeout [ 1674.685962][ T13] Bluetooth: hci9: command 0x040f tx timeout [ 1676.041735][T24071] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1676.765931][ T13] Bluetooth: hci9: command 0x0419 tx timeout [ 1682.206444][T24071] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1682.216136][ T9] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1691.325922][ T13] Bluetooth: hci2: command 0x0406 tx timeout [ 1692.136026][ T13] Bluetooth: hci10: command 0x0409 tx timeout [ 1692.205964][ T7692] Bluetooth: hci11: command 0x0409 tx timeout [ 1694.206038][ T7692] Bluetooth: hci10: command 0x041b tx timeout [ 1694.285947][ T7692] Bluetooth: hci11: command 0x041b tx timeout [ 1694.605925][ T4283] Bluetooth: hci13: command 0x0409 tx timeout [ 1694.606412][ T7693] Bluetooth: hci12: command 0x0409 tx timeout [ 1696.287660][ T4283] Bluetooth: hci10: command 0x040f tx timeout [ 1696.366036][ T4283] Bluetooth: hci11: command 0x040f tx timeout [ 1696.686031][ T4283] Bluetooth: hci12: command 0x041b tx timeout [ 1696.693194][ T4283] Bluetooth: hci13: command 0x041b tx timeout [ 1698.375981][ T13] Bluetooth: hci10: command 0x0419 tx timeout [ 1698.456105][ T13] Bluetooth: hci11: command 0x0419 tx timeout [ 1698.776070][ T13] Bluetooth: hci13: command 0x040f tx timeout [ 1698.782790][ T13] Bluetooth: hci12: command 0x040f tx timeout [ 1700.856028][ T13] Bluetooth: hci12: command 0x0419 tx timeout [ 1700.862236][ T13] Bluetooth: hci13: command 0x0419 tx timeout [ 1706.685977][ T1160] Bluetooth: hci5: command 0x0406 tx timeout [ 1707.069036][T24071] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1714.216167][ T470] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1714.218880][ T1234] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1716.925926][ T13] Bluetooth: hci0: command 0x0406 tx timeout [ 1730.208401][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.217755][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.616054][ T13] Bluetooth: hci14: command 0x0409 tx timeout [ 1732.296083][ T7693] Bluetooth: hci3: command 0x0406 tx timeout [ 1732.686005][ T7693] Bluetooth: hci14: command 0x041b tx timeout [ 1734.766174][ T7692] Bluetooth: hci14: command 0x040f tx timeout [ 1736.855975][ T1160] Bluetooth: hci14: command 0x0419 tx timeout [ 1738.096357][ T9] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1746.206675][ T9] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1746.216431][T10039] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1752.205834][ T13] Bluetooth: hci15: command 0x0409 tx timeout [ 1752.285901][ T13] Bluetooth: hci16: command 0x0409 tx timeout [ 1752.765864][ T13] Bluetooth: hci6: command 0x0406 tx timeout [ 1752.772061][ T13] Bluetooth: hci4: command 0x0406 tx timeout [ 1754.295900][ T4283] Bluetooth: hci15: command 0x041b tx timeout [ 1754.376101][ T4283] Bluetooth: hci16: command 0x041b tx timeout [ 1755.165894][ T13] Bluetooth: hci17: command 0x0409 tx timeout [ 1755.245888][ T7693] Bluetooth: hci18: command 0x0409 tx timeout [ 1756.366073][ T7692] Bluetooth: hci15: command 0x040f tx timeout [ 1756.446265][ T7692] Bluetooth: hci16: command 0x040f tx timeout [ 1757.245996][ T7692] Bluetooth: hci17: command 0x041b tx timeout [ 1757.326018][ T7692] Bluetooth: hci18: command 0x041b tx timeout [ 1757.885992][ T7693] Bluetooth: hci7: command 0x0406 tx timeout [ 1757.892098][ T7693] Bluetooth: hci8: command 0x0406 tx timeout [ 1758.456183][ T7693] Bluetooth: hci15: command 0x0419 tx timeout [ 1758.526262][ T7692] Bluetooth: hci16: command 0x0419 tx timeout [ 1759.335919][ T7692] Bluetooth: hci17: command 0x040f tx timeout [ 1759.405913][ T7692] Bluetooth: hci18: command 0x040f tx timeout [ 1760.926381][ T27] INFO: task kworker/u4:1:145 blocked for more than 143 seconds. [ 1760.934182][ T27] Not tainted syzkaller #0 [ 1760.944007][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1760.954766][ T27] task:kworker/u4:1 state:D stack:21232 pid: 145 ppid: 2 flags:0x00004000 [ 1760.965386][ T27] Workqueue: netns cleanup_net [ 1760.970523][ T27] Call Trace: [ 1760.973841][ T27] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1760.977227][ T27] __schedule+0x11c3/0x4350 [ 1760.984012][ T27] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 1760.991946][ T27] ? rcu_lock_acquire+0x30/0x30 [ 1761.002474][ T27] ? release_firmware_map_entry+0x190/0x190 [ 1761.010118][ T27] ? __mutex_lock_common+0xdf0/0x2400 [ 1761.015552][ T27] ? release_firmware_map_entry+0x190/0x190 [ 1761.030898][ T27] ? __lock_acquire+0x7d40/0x7d40 [ 1761.036186][ T27] ? __mutex_trylock_common+0x86/0x260 [ 1761.041708][ T27] ? kthread_data+0x4b/0xc0 [ 1761.065800][ T27] schedule+0x11b/0x1e0 [ 1761.070038][ T27] schedule_preempt_disabled+0xf/0x20 [ 1761.075449][ T27] __mutex_lock_common+0xdf5/0x2400 [ 1761.087281][ T27] ? ieee80211_unregister_hw+0x4d/0x220 [ 1761.092910][ T27] ? mutex_lock_io_nested+0x60/0x60 [ 1761.098634][ T27] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1761.104584][ T27] ? up_write+0x1b6/0x410 [ 1761.112977][ T27] mutex_lock_nested+0x17/0x20 [ 1761.121772][ T27] ieee80211_unregister_hw+0x4d/0x220 [ 1761.127574][ T27] mac80211_hwsim_del_radio+0x282/0x470 [ 1761.133217][ T27] ? rhashtable_remove_fast+0xa70/0xa70 [ 1761.141346][ T27] hwsim_exit_net+0x589/0x650 [ 1761.146667][ T27] ? hwsim_init_net+0x80/0x80 [ 1761.151413][ T27] ? __ip_vs_dev_cleanup_batch+0x234/0x250 [ 1761.157662][ T27] cleanup_net+0x703/0xba0 [ 1761.162129][ T27] ? ops_free_list+0x330/0x330 [ 1761.167297][ T27] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1761.173240][ T27] ? _raw_spin_unlock+0x40/0x40 [ 1761.178493][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1761.183738][ T27] process_one_work+0x867/0xff0 [ 1761.188984][ T27] ? worker_detach_from_pool+0x240/0x240 [ 1761.194653][ T27] ? lockdep_hardirqs_off+0x70/0x100 [ 1761.200327][ T27] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1761.205386][ T27] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1761.211028][ T27] ? wq_worker_running+0x97/0x170 [ 1761.216138][ T27] worker_thread+0xad7/0x12a0 [ 1761.220881][ T27] kthread+0x42e/0x520 [ 1761.224996][ T27] ? rcu_lock_release+0x20/0x20 [ 1761.229946][ T27] ? kthread_blkcg+0xd0/0xd0 [ 1761.234588][ T27] ret_from_fork+0x1f/0x30 [ 1761.239507][ T27] [ 1761.242597][ T27] INFO: task kworker/u4:2:155 blocked for more than 143 seconds. [ 1761.254460][ T27] Not tainted syzkaller #0 [ 1761.263175][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1761.272023][ T27] task:kworker/u4:2 state:D stack:21104 pid: 155 ppid: 2 flags:0x00004000 [ 1761.281317][ T27] Workqueue: events_unbound linkwatch_event [ 1761.287314][ T27] Call Trace: [ 1761.290621][ T27] [ 1761.293583][ T27] __schedule+0x11c3/0x4350 [ 1761.298216][ T27] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 1761.304842][ T27] ? __lock_acquire+0x13b3/0x7d40 [ 1761.309963][ T27] ? rcu_lock_acquire+0x30/0x30 [ 1761.314844][ T27] ? __mutex_lock_common+0xdf0/0x2400 [ 1761.320290][ T27] ? release_firmware_map_entry+0x190/0x190 [ 1761.326357][ T27] ? __lock_acquire+0x7d40/0x7d40 [ 1761.331422][ T27] ? __mutex_trylock_common+0x86/0x260 [ 1761.336984][ T27] ? kthread_data+0x4b/0xc0 [ 1761.341609][ T27] schedule+0x11b/0x1e0 [ 1761.345872][ T27] schedule_preempt_disabled+0xf/0x20 [ 1761.351287][ T27] __mutex_lock_common+0xdf5/0x2400 [ 1761.357196][ T27] ? linkwatch_event+0xa/0x50 [ 1761.361942][ T27] ? mutex_lock_io_nested+0x60/0x60 [ 1761.367698][ T27] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1761.373788][ T27] ? read_lock_is_recursive+0x10/0x10 [ 1761.379715][ T27] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1761.385648][ T27] ? _raw_spin_unlock+0x40/0x40 [ 1761.390641][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1761.395943][ T27] mutex_lock_nested+0x17/0x20 [ 1761.400760][ T27] linkwatch_event+0xa/0x50 [ 1761.405302][ T27] process_one_work+0x867/0xff0 [ 1761.410391][ T4283] Bluetooth: hci17: command 0x0419 tx timeout [ 1761.416583][ T27] ? worker_detach_from_pool+0x240/0x240 [ 1761.422254][ T27] ? lockdep_hardirqs_off+0x70/0x100 [ 1761.427775][ T27] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1761.432844][ T27] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1761.438513][ T27] ? wq_worker_running+0x97/0x170 [ 1761.443696][ T27] worker_thread+0xad7/0x12a0 [ 1761.448509][ T27] kthread+0x42e/0x520 [ 1761.452610][ T27] ? rcu_lock_release+0x20/0x20 [ 1761.457641][ T27] ? kthread_blkcg+0xd0/0xd0 [ 1761.462273][ T27] ret_from_fork+0x1f/0x30 [ 1761.468797][ T27] [ 1761.472012][ T27] INFO: task kworker/0:8:1161 blocked for more than 143 seconds. [ 1761.479841][ T27] Not tainted syzkaller #0 [ 1761.484798][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1761.493758][ T4283] Bluetooth: hci18: command 0x0419 tx timeout [ 1761.499920][ T27] task:kworker/0:8 state:D stack:24400 pid: 1161 ppid: 2 flags:0x00004000 [ 1761.509317][ T27] Workqueue: ipv6_addrconf addrconf_dad_work [ 1761.515354][ T27] Call Trace: [ 1761.518770][ T27] [ 1761.521739][ T27] __schedule+0x11c3/0x4350 [ 1761.526353][ T27] ? __rwlock_init+0x140/0x140 [ 1761.531152][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 1761.536461][ T27] ? release_firmware_map_entry+0x190/0x190 [ 1761.542401][ T27] ? __mutex_trylock_common+0x86/0x260 [ 1761.548034][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1761.553273][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 1761.558571][ T27] schedule+0x11b/0x1e0 [ 1761.562760][ T27] schedule_preempt_disabled+0xf/0x20 [ 1761.568350][ T27] __mutex_lock_common+0xdf5/0x2400 [ 1761.573713][ T27] ? addrconf_dad_work+0xc4/0x1530 [ 1761.580146][ T27] ? mutex_lock_io_nested+0x60/0x60 [ 1761.585408][ T27] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 1761.592144][ T27] mutex_lock_nested+0x17/0x20 [ 1761.597019][ T27] addrconf_dad_work+0xc4/0x1530 [ 1761.602017][ T27] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1761.608130][ T27] ? rcu_lock_release+0x20/0x20 [ 1761.613023][ T27] ? read_lock_is_recursive+0x10/0x10 [ 1761.618498][ T27] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1761.624561][ T27] ? _raw_spin_unlock+0x40/0x40 [ 1761.629611][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1761.634870][ T27] process_one_work+0x867/0xff0 [ 1761.639853][ T27] ? worker_detach_from_pool+0x240/0x240 [ 1761.645524][ T27] ? lockdep_hardirqs_off+0x70/0x100 [ 1761.650984][ T27] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1761.656119][ T27] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1761.661760][ T27] ? wq_worker_running+0x97/0x170 [ 1761.666932][ T27] worker_thread+0xad7/0x12a0 [ 1761.671682][ T27] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1761.677741][ T27] kthread+0x42e/0x520 [ 1761.681848][ T27] ? rcu_lock_release+0x20/0x20 [ 1761.688790][ T27] ? kthread_blkcg+0xd0/0xd0 [ 1761.693428][ T27] ret_from_fork+0x1f/0x30 [ 1761.697951][ T27] [ 1761.701065][ T27] INFO: task kworker/1:22:7695 blocked for more than 144 seconds. [ 1761.709421][ T27] Not tainted syzkaller #0 [ 1761.714386][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1761.723129][ T27] task:kworker/1:22 state:D stack:25360 pid: 7695 ppid: 2 flags:0x00004000 [ 1761.732741][ T27] Workqueue: ipv6_addrconf addrconf_dad_work [ 1761.739202][ T27] Call Trace: [ 1761.742508][ T27] [ 1761.745475][ T27] __schedule+0x11c3/0x4350 [ 1761.750100][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 1761.755457][ T27] ? release_firmware_map_entry+0x190/0x190 [ 1761.761595][ T27] ? __mutex_trylock_common+0x86/0x260 [ 1761.767179][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1761.772408][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 1761.777722][ T27] schedule+0x11b/0x1e0 [ 1761.781919][ T27] schedule_preempt_disabled+0xf/0x20 [ 1761.787391][ T27] __mutex_lock_common+0xdf5/0x2400 [ 1761.792635][ T27] ? addrconf_dad_work+0xc4/0x1530 [ 1761.799719][ T27] ? mutex_lock_io_nested+0x60/0x60 [ 1761.804978][ T27] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 1761.812126][ T27] mutex_lock_nested+0x17/0x20 [ 1761.817455][ T27] addrconf_dad_work+0xc4/0x1530 [ 1761.822472][ T27] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1761.828922][ T27] ? rcu_lock_release+0x20/0x20 [ 1761.833826][ T27] ? read_lock_is_recursive+0x10/0x10 [ 1761.839312][ T27] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1761.845362][ T27] ? _raw_spin_unlock+0x40/0x40 [ 1761.850325][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1761.855680][ T27] process_one_work+0x867/0xff0 [ 1761.860669][ T27] ? worker_detach_from_pool+0x240/0x240 [ 1761.866454][ T27] ? lockdep_hardirqs_off+0x70/0x100 [ 1761.871780][ T27] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1761.876906][ T27] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1761.882484][ T27] ? wq_worker_running+0x97/0x170 [ 1761.887766][ T27] worker_thread+0xad7/0x12a0 [ 1761.892511][ T27] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1761.898531][ T27] kthread+0x42e/0x520 [ 1761.902630][ T27] ? rcu_lock_release+0x20/0x20 [ 1761.909576][ T27] ? kthread_blkcg+0xd0/0xd0 [ 1761.914214][ T27] ret_from_fork+0x1f/0x30 [ 1761.919093][ T27] [ 1761.922204][ T27] INFO: task syz-executor:9812 blocked for more than 144 seconds. [ 1761.930194][ T27] Not tainted syzkaller #0 [ 1761.935164][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1761.943908][ T27] task:syz-executor state:D stack:21200 pid: 9812 ppid: 1 flags:0x00004004 [ 1761.953390][ T27] Call Trace: [ 1761.956848][ T27] [ 1761.959828][ T27] __schedule+0x11c3/0x4350 [ 1761.964383][ T27] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 1761.971482][ T27] ? release_firmware_map_entry+0x190/0x190 [ 1761.977741][ T27] ? __mutex_lock_common+0xdf0/0x2400 [ 1761.983162][ T27] ? release_firmware_map_entry+0x190/0x190 [ 1761.989525][ T27] ? __lock_acquire+0x7d40/0x7d40 [ 1761.994594][ T27] ? __mutex_trylock_common+0x86/0x260 [ 1762.000512][ T27] ? rcu_lock_release+0x20/0x20 [ 1762.005419][ T27] schedule+0x11b/0x1e0 [ 1762.010020][ T27] schedule_preempt_disabled+0xf/0x20 [ 1762.015440][ T27] __mutex_lock_common+0xdf5/0x2400 [ 1762.023085][ T27] ? rtnetlink_rcv_msg+0x79f/0xf10 [ 1762.028528][ T27] ? mutex_lock_io_nested+0x60/0x60 [ 1762.033775][ T27] ? __lock_acquire+0x7d40/0x7d40 [ 1762.039144][ T27] mutex_lock_nested+0x17/0x20 [ 1762.043966][ T27] rtnetlink_rcv_msg+0x79f/0xf10 [ 1762.049358][ T27] ? lock_chain_count+0x20/0x20 [ 1762.054352][ T27] ? rtnetlink_bind+0x80/0x80 [ 1762.059518][ T27] ? __local_bh_enable_ip+0x136/0x1c0 [ 1762.064934][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 1762.070641][ T27] ? __local_bh_enable_ip+0x136/0x1c0 [ 1762.076432][ T27] ? _local_bh_enable+0xa0/0xa0 [ 1762.081354][ T27] ? __dev_queue_xmit+0x1b64/0x2e50 [ 1762.087602][ T27] ? dev_queue_xmit+0x20/0x20 [ 1762.092364][ T27] ? memcpy+0x3c/0x60 [ 1762.096639][ T27] ? __copy_skb_header+0x3ba/0x4f0 [ 1762.101847][ T27] netlink_rcv_skb+0x1e9/0x430 [ 1762.107565][ T27] ? rtnetlink_bind+0x80/0x80 [ 1762.112298][ T27] ? netlink_ack+0xb10/0xb10 [ 1762.117066][ T27] netlink_unicast+0x78f/0x940 [ 1762.121883][ T27] netlink_sendmsg+0x8ba/0xbe0 [ 1762.126825][ T27] ? netlink_getsockopt+0x570/0x570 [ 1762.132398][ T27] ? aa_sock_msg_perm+0x94/0x150 [ 1762.137608][ T27] ? apparmor_socket_sendmsg+0x88/0x230 [ 1762.143206][ T27] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1762.148666][ T27] ? security_socket_sendmsg+0x7c/0xa0 [ 1762.154188][ T27] __sys_sendto+0x46d/0x620 [ 1762.158890][ T27] ? __ia32_sys_getpeername+0x80/0x80 [ 1762.165038][ T27] ? lock_chain_count+0x20/0x20 [ 1762.170240][ T27] __x64_sys_sendto+0xda/0xf0 [ 1762.175138][ T27] do_syscall_64+0x4c/0xa0 [ 1762.179716][ T27] ? clear_bhb_loop+0x30/0x80 [ 1762.184473][ T27] ? clear_bhb_loop+0x30/0x80 [ 1762.189968][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1762.196086][ T27] RIP: 0033:0x7fb242c2bd8e [ 1762.200559][ T27] RSP: 002b:00007ffe5c178618 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1762.209209][ T27] RAX: ffffffffffffffda RBX: 0000555584990500 RCX: 00007fb242c2bd8e [ 1762.217986][ T27] RDX: 0000000000000028 RSI: 00007fb243a20670 RDI: 0000000000000003 [ 1762.226170][ T27] RBP: 0000000000000001 R08: 00007ffe5c178694 R09: 000000000000000c [ 1762.234170][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1762.242232][ T27] R13: 0000000000000000 R14: 00007fb243a20670 R15: 0000000000000000 [ 1762.250325][ T27] [ 1762.253443][ T27] INFO: task syz.3.12299:9949 blocked for more than 144 seconds. [ 1762.261465][ T27] Not tainted syzkaller #0 [ 1762.267180][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1762.276235][ T27] task:syz.3.12299 state:D stack:27280 pid: 9949 ppid: 9433 flags:0x00004004 [ 1762.285489][ T27] Call Trace: [ 1762.289403][ T27] [ 1762.292383][ T27] __schedule+0x11c3/0x4350 [ 1762.298066][ T27] ? stack_trace_save+0xa6/0xf0 [ 1762.302991][ T27] ? rcu_lock_acquire+0x30/0x30 [ 1762.308262][ T27] ? __mutex_lock_common+0xdf0/0x2400 [ 1762.313693][ T27] ? release_firmware_map_entry+0x190/0x190 [ 1762.320075][ T27] ? __lock_acquire+0x7d40/0x7d40 [ 1762.325142][ T27] ? __mutex_trylock_common+0x86/0x260 [ 1762.331709][ T27] ? rcu_lock_release+0x20/0x20 [ 1762.336912][ T27] schedule+0x11b/0x1e0 [ 1762.341113][ T27] schedule_preempt_disabled+0xf/0x20 [ 1762.346926][ T27] __mutex_lock_common+0xdf5/0x2400 [ 1762.352188][ T27] ? tun_chr_close+0x3d/0x1b0 [ 1762.357281][ T27] ? mutex_lock_io_nested+0x60/0x60 [ 1762.362624][ T27] ? tun_chr_open+0x4d0/0x4d0 [ 1762.368369][ T27] mutex_lock_nested+0x17/0x20 [ 1762.373188][ T27] tun_chr_close+0x3d/0x1b0 [ 1762.378158][ T27] ? tun_chr_open+0x4d0/0x4d0 [ 1762.382879][ T27] __fput+0x212/0x8c0 [ 1762.387242][ T27] task_work_run+0x125/0x1a0 [ 1762.391875][ T27] exit_to_user_mode_loop+0x10f/0x130 [ 1762.397729][ T27] exit_to_user_mode_prepare+0xee/0x180 [ 1762.403418][ T27] syscall_exit_to_user_mode+0x16/0x40 [ 1762.410023][ T27] do_syscall_64+0x58/0xa0 [ 1762.414486][ T27] ? clear_bhb_loop+0x30/0x80 [ 1762.419626][ T27] ? clear_bhb_loop+0x30/0x80 [ 1762.424369][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1762.430758][ T27] RIP: 0033:0x7f8a7a4b2559 [ 1762.435214][ T27] RSP: 002b:00007ffc59ee2098 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1762.444165][ T27] RAX: 0000000000000000 RBX: 00007f8a7a73ada0 RCX: 00007f8a7a4b2559 [ 1762.452485][ T27] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1762.461422][ T27] RBP: 00007f8a7a73ada0 R08: 0000000000000006 R09: 0000000000000000 [ 1762.470508][ T27] R10: 00007f8a7a73acb0 R11: 0000000000000246 R12: 000000000018a3b9 [ 1762.478945][ T27] R13: 00007f8a7a73918c R14: 000000000018a183 R15: 00007f8a7a739180 [ 1762.487265][ T27] [ 1762.490349][ T27] INFO: task syz.0.12301:9954 blocked for more than 144 seconds. [ 1762.498561][ T27] Not tainted syzkaller #0 [ 1762.503524][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1762.512597][ T27] task:syz.0.12301 state:D stack:26448 pid: 9954 ppid: 8620 flags:0x00004004 [ 1762.522907][ T27] Call Trace: [ 1762.526606][ T27] [ 1762.529574][ T27] __schedule+0x11c3/0x4350 [ 1762.534127][ T27] ? __lock_acquire+0x13b3/0x7d40 [ 1762.539692][ T27] ? rcu_lock_acquire+0x30/0x30 [ 1762.544595][ T27] ? __mutex_lock_common+0xdf0/0x2400 [ 1762.551361][ T27] ? release_firmware_map_entry+0x190/0x190 [ 1762.557702][ T27] ? __lock_acquire+0x7d40/0x7d40 [ 1762.562775][ T27] ? __mutex_trylock_common+0x86/0x260 [ 1762.568635][ T27] ? rcu_lock_release+0x20/0x20 [ 1762.574158][ T27] schedule+0x11b/0x1e0 [ 1762.578569][ T27] schedule_preempt_disabled+0xf/0x20 [ 1762.583987][ T27] __mutex_lock_common+0xdf5/0x2400 [ 1762.589372][ T27] ? tun_chr_close+0x3d/0x1b0 [ 1762.594095][ T27] ? mutex_lock_io_nested+0x60/0x60 [ 1762.599499][ T27] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1762.605531][ T27] ? tun_chr_open+0x4d0/0x4d0 [ 1762.610360][ T27] mutex_lock_nested+0x17/0x20 [ 1762.615172][ T27] tun_chr_close+0x3d/0x1b0 [ 1762.619792][ T27] ? tun_chr_open+0x4d0/0x4d0 [ 1762.624508][ T27] __fput+0x212/0x8c0 [ 1762.628651][ T27] task_work_run+0x125/0x1a0 [ 1762.633282][ T27] exit_to_user_mode_loop+0x10f/0x130 [ 1762.638751][ T27] exit_to_user_mode_prepare+0xee/0x180 [ 1762.644366][ T27] syscall_exit_to_user_mode+0x16/0x40 [ 1762.650043][ T27] do_syscall_64+0x58/0xa0 [ 1762.654505][ T27] ? clear_bhb_loop+0x30/0x80 [ 1762.659342][ T27] ? clear_bhb_loop+0x30/0x80 [ 1762.664056][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1762.670102][ T27] RIP: 0033:0x7f30a8fe8559 [ 1762.674723][ T27] RSP: 002b:00007ffdbb964048 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1762.685458][ T27] RAX: 0000000000000000 RBX: 00007f30a9270da0 RCX: 00007f30a8fe8559 [ 1762.693656][ T27] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1762.701735][ T27] RBP: 00007f30a9270da0 R08: 0000000000000006 R09: 0000000000000000 [ 1762.710037][ T27] R10: 00007f30a9270cb0 R11: 0000000000000246 R12: 000000000018a400 [ 1762.718168][ T27] R13: 00007f30a926f09c R14: 000000000018a142 R15: 00007ffdbb964150 [ 1762.726416][ T27] [ 1762.729590][ T27] INFO: task syz.4.12308:9979 blocked for more than 145 seconds. [ 1762.737422][ T27] Not tainted syzkaller #0 [ 1762.742735][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1762.751638][ T27] task:syz.4.12308 state:D stack:25944 pid: 9979 ppid: 1258 flags:0x00004004 [ 1762.760945][ T27] Call Trace: [ 1762.764266][ T27] [ 1762.767322][ T27] __schedule+0x11c3/0x4350 [ 1762.771881][ T27] ? perf_trace_lock+0x301/0x390 [ 1762.777746][ T27] ? rcu_lock_acquire+0x30/0x30 [ 1762.782656][ T27] ? __mutex_lock_common+0xdf0/0x2400 [ 1762.790146][ T27] ? release_firmware_map_entry+0x190/0x190 [ 1762.796178][ T27] ? __lock_acquire+0x7d40/0x7d40 [ 1762.801237][ T27] ? __mutex_trylock_common+0x86/0x260 [ 1762.806982][ T27] ? rcu_lock_release+0x20/0x20 [ 1762.811872][ T27] schedule+0x11b/0x1e0 [ 1762.816116][ T27] schedule_preempt_disabled+0xf/0x20 [ 1762.821528][ T27] __mutex_lock_common+0xdf5/0x2400 [ 1762.826859][ T27] ? __tun_chr_ioctl+0x3f3/0x1f30 [ 1762.831924][ T27] ? mutex_lock_io_nested+0x60/0x60 [ 1762.837237][ T27] ? __might_fault+0xb3/0x110 [ 1762.841969][ T27] mutex_lock_nested+0x17/0x20 [ 1762.847031][ T27] __tun_chr_ioctl+0x3f3/0x1f30 [ 1762.852065][ T27] ? tun_flow_create+0x310/0x310 [ 1762.857149][ T27] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1762.862260][ T27] ? security_file_ioctl+0x7c/0xa0 [ 1762.867505][ T27] ? tun_chr_poll+0x620/0x620 [ 1762.872219][ T27] __se_sys_ioctl+0xfa/0x170 [ 1762.877359][ T27] do_syscall_64+0x4c/0xa0 [ 1762.881825][ T27] ? clear_bhb_loop+0x30/0x80 [ 1762.886912][ T27] ? clear_bhb_loop+0x30/0x80 [ 1762.891628][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1762.899855][ T27] RIP: 0033:0x7f8c5227d559 [ 1762.904312][ T27] RSP: 002b:00007f8c504d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1762.913162][ T27] RAX: ffffffffffffffda RBX: 00007f8c52503fa0 RCX: 00007f8c5227d559 [ 1762.921259][ T27] RDX: 0000200000000300 RSI: 00000000400454ca RDI: 0000000000000005 [ 1762.929438][ T27] RBP: 00007f8c52314b20 R08: 0000000000000000 R09: 0000000000000000 [ 1762.937533][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1762.945538][ T27] R13: 00007f8c52504038 R14: 00007f8c52503fa0 R15: 00007ffcd7953fe8 [ 1762.953652][ T27] [ 1762.956762][ T27] INFO: task syz.4.12308:9982 blocked for more than 145 seconds. [ 1762.964501][ T27] Not tainted syzkaller #0 [ 1762.969523][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1762.978251][ T27] task:syz.4.12308 state:D stack:29040 pid: 9982 ppid: 1258 flags:0x00004004 [ 1762.987628][ T27] Call Trace: [ 1762.990945][ T27] [ 1762.993922][ T27] __schedule+0x11c3/0x4350 [ 1762.998606][ T27] ? rcu_lock_acquire+0x30/0x30 [ 1763.003499][ T27] ? __mutex_lock_common+0xdf0/0x2400 [ 1763.009244][ T27] ? release_firmware_map_entry+0x190/0x190 [ 1763.015190][ T27] ? __lock_acquire+0x7d40/0x7d40 [ 1763.021051][ T27] ? __mutex_trylock_common+0x86/0x260 [ 1763.026836][ T27] ? rcu_lock_release+0x20/0x20 [ 1763.031737][ T27] schedule+0x11b/0x1e0 [ 1763.036293][ T27] schedule_preempt_disabled+0xf/0x20 [ 1763.041704][ T27] __mutex_lock_common+0xdf5/0x2400 [ 1763.047322][ T27] ? __tun_chr_ioctl+0x3f3/0x1f30 [ 1763.052390][ T27] ? mutex_lock_io_nested+0x60/0x60 [ 1763.058052][ T27] ? __might_fault+0xb3/0x110 [ 1763.062801][ T27] mutex_lock_nested+0x17/0x20 [ 1763.068119][ T27] __tun_chr_ioctl+0x3f3/0x1f30 [ 1763.073033][ T27] ? tun_flow_create+0x310/0x310 [ 1763.078410][ T27] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1763.083477][ T27] ? security_file_ioctl+0x7c/0xa0 [ 1763.089001][ T27] ? tun_chr_poll+0x620/0x620 [ 1763.093730][ T27] __se_sys_ioctl+0xfa/0x170 [ 1763.098776][ T27] do_syscall_64+0x4c/0xa0 [ 1763.103225][ T27] ? clear_bhb_loop+0x30/0x80 [ 1763.108305][ T27] ? clear_bhb_loop+0x30/0x80 [ 1763.113168][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1763.121440][ T27] RIP: 0033:0x7f8c5227d559 [ 1763.126144][ T27] RSP: 002b:00007f8c504b3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1763.134642][ T27] RAX: ffffffffffffffda RBX: 00007f8c52504090 RCX: 00007f8c5227d559 [ 1763.142693][ T27] RDX: 0000200000000d80 RSI: 00000000400454ca RDI: 0000000000000005 [ 1763.150931][ T27] RBP: 00007f8c52314b20 R08: 0000000000000000 R09: 0000000000000000 [ 1763.159063][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1763.167101][ T27] R13: 00007f8c52504128 R14: 00007f8c52504090 R15: 00007ffcd7953fe8 [ 1763.175180][ T27] [ 1763.178421][ T27] INFO: task syz.1.12311:9986 blocked for more than 145 seconds. [ 1763.186297][ T27] Not tainted syzkaller #0 [ 1763.191258][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1763.200571][ T27] task:syz.1.12311 state:D stack:23952 pid: 9986 ppid: 9115 flags:0x00004004 [ 1763.210138][ T27] Call Trace: [ 1763.213440][ T27] [ 1763.216760][ T27] __schedule+0x11c3/0x4350 [ 1763.221443][ T27] ? rcu_lock_acquire+0x30/0x30 [ 1763.228854][ T27] ? __mutex_lock_common+0xdf0/0x2400 [ 1763.234267][ T27] ? release_firmware_map_entry+0x190/0x190 [ 1763.240241][ T27] ? __lock_acquire+0x7d40/0x7d40 [ 1763.245298][ T27] ? __mutex_trylock_common+0x86/0x260 [ 1763.250835][ T27] ? rcu_lock_release+0x20/0x20 [ 1763.255795][ T27] schedule+0x11b/0x1e0 [ 1763.259993][ T27] schedule_preempt_disabled+0xf/0x20 [ 1763.265395][ T27] __mutex_lock_common+0xdf5/0x2400 [ 1763.270722][ T27] ? rtnetlink_rcv_msg+0x79f/0xf10 [ 1763.275908][ T27] ? mutex_lock_io_nested+0x60/0x60 [ 1763.281139][ T27] ? __lock_acquire+0x7d40/0x7d40 [ 1763.286308][ T27] mutex_lock_nested+0x17/0x20 [ 1763.291108][ T27] rtnetlink_rcv_msg+0x79f/0xf10 [ 1763.296146][ T27] ? rtnetlink_bind+0x80/0x80 [ 1763.300871][ T27] ? migrate_enable+0x13e/0x200 [ 1763.305837][ T27] ? trace_call_bpf+0x515/0x5b0 [ 1763.310763][ T27] ? __bpf_trace_bpf_trace_printk+0x20/0x20 [ 1763.316753][ T27] ? __dev_queue_xmit+0x1b64/0x2e50 [ 1763.321985][ T27] ? perf_trace_run_bpf_submit+0x124/0x1c0 [ 1763.327935][ T27] ? perf_trace_lock+0x301/0x390 [ 1763.332931][ T27] ? trace_event_raw_event_lock+0x250/0x250 [ 1763.340966][ T27] ? __copy_skb_header+0x3ba/0x4f0 [ 1763.346197][ T27] netlink_rcv_skb+0x1e9/0x430 [ 1763.350998][ T27] ? rtnetlink_bind+0x80/0x80 [ 1763.355831][ T27] ? netlink_ack+0xb10/0xb10 [ 1763.360507][ T27] netlink_unicast+0x78f/0x940 [ 1763.365339][ T27] netlink_sendmsg+0x8ba/0xbe0 [ 1763.370221][ T27] ? netlink_getsockopt+0x570/0x570 [ 1763.375460][ T27] ? aa_sock_msg_perm+0x94/0x150 [ 1763.380495][ T27] ? apparmor_socket_sendmsg+0x88/0x230 [ 1763.386124][ T27] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1763.391540][ T27] ? security_socket_sendmsg+0x7c/0xa0 [ 1763.397117][ T27] ? netlink_getsockopt+0x570/0x570 [ 1763.402368][ T27] ____sys_sendmsg+0x5be/0x8f0 [ 1763.409202][ T27] ? __sys_sendmsg_sock+0x30/0x30 [ 1763.414283][ T27] ? import_iovec+0x6f/0xa0 [ 1763.420833][ T27] ___sys_sendmsg+0x236/0x2e0 [ 1763.425576][ T27] ? __sys_sendmsg+0x290/0x290 [ 1763.430465][ T27] ? rcu_is_watching+0x11/0xa0 [ 1763.435275][ T27] __se_sys_sendmsg+0x1b7/0x2a0 [ 1763.440224][ T27] ? __x64_sys_sendmsg+0x80/0x80 [ 1763.445198][ T27] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1763.453257][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 1763.458584][ T27] do_syscall_64+0x4c/0xa0 [ 1763.463031][ T27] ? clear_bhb_loop+0x30/0x80 [ 1763.467794][ T27] ? clear_bhb_loop+0x30/0x80 [ 1763.472516][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1763.478508][ T27] RIP: 0033:0x7f952de74559 [ 1763.482965][ T27] RSP: 002b:00007f952c0cb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1763.491597][ T27] RAX: ffffffffffffffda RBX: 00007f952e0fafa0 RCX: 00007f952de74559 [ 1763.499669][ T27] RDX: 0000000000000000 RSI: 0000200000000ac0 RDI: 000000000000000c [ 1763.507738][ T27] RBP: 00007f952df0bb20 R08: 0000000000000000 R09: 0000000000000000 [ 1763.515778][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1763.523782][ T27] R13: 00007f952e0fb038 R14: 00007f952e0fafa0 R15: 00007ffdbdb5c7b8 [ 1763.531863][ T27] [ 1763.535043][ T27] [ 1763.535043][ T27] Showing all locks held in the system: [ 1763.542946][ T27] 2 locks held by kworker/u4:0/9: [ 1763.548081][ T27] 1 lock held by khungtaskd/27: [ 1763.552953][ T27] #0: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 1763.562710][ T27] 4 locks held by kworker/u4:1/145: [ 1763.569035][ T27] #0: ffff8880179cd938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0 [ 1763.579632][ T27] #1: ffffc900016ffd00 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0 [ 1763.590575][ T27] #2: ffffffff8e25fe10 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x148/0xba0 [ 1763.600788][ T27] #3: ffffffff8e26bd48 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x4d/0x220 [ 1763.610821][ T27] 3 locks held by kworker/u4:2/155: [ 1763.616172][ T27] #0: ffff888017879138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0 [ 1763.627429][ T27] #1: ffffc90002017d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0 [ 1763.637793][ T27] #2: ffffffff8e26bd48 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xa/0x50 [ 1763.646977][ T27] 2 locks held by getty/3944: [ 1763.651688][ T27] #0: ffff88814cdb9098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 1763.661613][ T27] #1: ffffc900025e62e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x594/0x1a50 [ 1763.672685][ T27] 3 locks held by kworker/0:8/1161: [ 1763.678342][ T27] #0: ffff88802c028d38 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0 [ 1763.689630][ T27] #1: ffffc90002f6fd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0 [ 1763.701929][ T27] #2: ffffffff8e26bd48 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xc4/0x1530 [ 1763.711467][ T27] 3 locks held by kworker/1:22/7695: [ 1763.716857][ T27] #0: ffff88802c028d38 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0 [ 1763.727833][ T27] #1: ffffc90002ebfd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0 [ 1763.740050][ T27] #2: ffffffff8e26bd48 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xc4/0x1530 [ 1763.749599][ T27] 3 locks held by kworker/1:33/7719: [ 1763.754910][ T27] #0: ffff888017871938 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0 [ 1763.766730][ T27] #1: ffffc9000350fd00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0 [ 1763.778665][ T27] #2: ffffffff8e26bd48 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x82/0xa90 [ 1763.789088][ T27] 1 lock held by syz-executor/9812: [ 1763.794314][ T27] #0: ffffffff8e26bd48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x79f/0xf10 [ 1763.803907][ T27] 1 lock held by syz.3.12299/9949: [ 1763.809220][ T27] #0: ffffffff8e26bd48 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3d/0x1b0 [ 1763.818291][ T27] 1 lock held by syz.0.12301/9954: [ 1763.823431][ T27] #0: ffffffff8e26bd48 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3d/0x1b0 [ 1763.832554][ T27] 1 lock held by syz.0.12301/9957: [ 1763.837727][ T27] #0: ffffffff8e26bd48 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x534/0xe30 [ 1763.846581][ T27] 1 lock held by syz.4.12308/9979: [ 1763.851720][ T27] #0: ffffffff8e26bd48 (rtnl_mutex){+.+.}-{3:3}, at: __tun_chr_ioctl+0x3f3/0x1f30 [ 1763.861156][ T27] 1 lock held by syz.4.12308/9982: [ 1763.866352][ T27] #0: ffffffff8e26bd48 (rtnl_mutex){+.+.}-{3:3}, at: __tun_chr_ioctl+0x3f3/0x1f30 [ 1763.875873][ T27] 1 lock held by syz.1.12311/9986: [ 1763.881007][ T27] #0: ffffffff8e26bd48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x79f/0xf10 [ 1763.890920][ T27] 1 lock held by syz-executor/9991: [ 1763.896781][ T27] #0: ffffffff8e26bd48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x79f/0xf10 [ 1763.906379][ T27] 1 lock held by syz-executor/9994: [ 1763.911600][ T27] #0: ffffffff8e26bd48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x79f/0xf10 [ 1763.921131][ T27] 1 lock held by syz-executor/9999: [ 1763.926392][ T27] #0: ffffffff8e26bd48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x79f/0xf10 [ 1763.936038][ T27] 1 lock held by syz-executor/10001: [ 1763.941381][ T27] #0: ffffffff8e26bd48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x79f/0xf10 [ 1763.950938][ T27] 1 lock held by syz-executor/10013: [ 1763.956318][ T27] #0: ffffffff8e26bd48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x79f/0xf10 [ 1763.966012][ T27] 1 lock held by syz-executor/10020: [ 1763.971332][ T27] #0: ffffffff8e26bd48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x79f/0xf10 [ 1763.980869][ T27] 1 lock held by syz-executor/10025: [ 1763.986249][ T27] #0: ffffffff8e26bd48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x79f/0xf10 [ 1763.997198][ T27] 1 lock held by syz-executor/10029: [ 1764.002519][ T27] #0: ffffffff8e26bd48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x79f/0xf10 [ 1764.012361][ T27] 1 lock held by syz-executor/10031: [ 1764.017985][ T27] #0: ffffffff8e26bd48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x79f/0xf10 [ 1764.027729][ T27] 1 lock held by syz-executor/10041: [ 1764.033037][ T27] #0: ffffffff8e26bd48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x79f/0xf10 [ 1764.042552][ T27] 1 lock held by syz-executor/10049: [ 1764.047939][ T27] #0: ffffffff8e26bd48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x79f/0xf10 [ 1764.057459][ T27] 1 lock held by syz-executor/10052: [ 1764.062773][ T27] #0: ffffffff8e26bd48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x79f/0xf10 [ 1764.072368][ T27] 1 lock held by syz-executor/10058: [ 1764.077734][ T27] #0: ffffffff8e26bd48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x79f/0xf10 [ 1764.087257][ T27] 1 lock held by syz-executor/10060: [ 1764.092561][ T27] #0: ffffffff8e26bd48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x79f/0xf10 [ 1764.102106][ T27] [ 1764.104566][ T27] ============================================= [ 1764.104566][ T27] [ 1764.113533][ T27] NMI backtrace for cpu 1 [ 1764.117909][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 1764.125320][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1764.135411][ T27] Call Trace: [ 1764.138697][ T27] [ 1764.141630][ T27] dump_stack_lvl+0x188/0x250 [ 1764.146326][ T27] ? show_regs_print_info+0x20/0x20 [ 1764.151564][ T27] ? load_image+0x410/0x410 [ 1764.156073][ T27] ? tick_nohz_tick_stopped+0x7b/0xb0 [ 1764.161471][ T27] ? nmi_cpu_backtrace+0x1b2/0x3d0 [ 1764.166686][ T27] nmi_cpu_backtrace+0x3a2/0x3d0 [ 1764.171635][ T27] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 1764.177790][ T27] ? _printk+0xda/0x130 [ 1764.181948][ T27] ? load_image+0x410/0x410 [ 1764.186454][ T27] ? load_image+0x410/0x410 [ 1764.190984][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 1764.197058][ T27] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 1764.203047][ T27] watchdog+0xe1b/0xe60 [ 1764.207239][ T27] kthread+0x42e/0x520 [ 1764.211311][ T27] ? hungtask_pm_notify+0x40/0x40 [ 1764.216364][ T27] ? kthread_blkcg+0xd0/0xd0 [ 1764.221002][ T27] ret_from_fork+0x1f/0x30 [ 1764.225441][ T27] [ 1764.229115][ T27] Sending NMI from CPU 1 to CPUs 0: [ 1764.234361][ C0] NMI backtrace for cpu 0 [ 1764.234372][ C0] CPU: 0 PID: 9 Comm: kworker/u4:0 Not tainted syzkaller #0 [ 1764.234388][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1764.234400][ C0] Workqueue: bat_events batadv_nc_worker [ 1764.234452][ C0] RIP: 0010:__lock_acquire+0x10fc/0x7d40 [ 1764.234476][ C0] Code: 03 89 c3 81 e3 ff 1f 00 00 c1 e8 03 25 f8 03 00 00 48 8d b8 c0 60 04 91 be 08 00 00 00 e8 5c 65 61 00 48 0f a3 1d 24 5c a7 0f <0f> 83 48 01 00 00 48 69 c3 d0 00 00 00 48 8d 98 80 df 9a 90 49 b8 [ 1764.234490][ C0] RSP: 0018:ffffc90000ce7820 EFLAGS: 00000057 [ 1764.234504][ C0] RAX: 0000000000000001 RBX: 00000000000007af RCX: ffffffff815d0494 [ 1764.234516][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff910461b0 [ 1764.234527][ C0] RBP: ffffc90000ce7a68 R08: ffffffff910461b7 R09: 1ffffffff2208c36 [ 1764.234540][ C0] R10: dffffc0000000000 R11: fffffbfff2208c37 R12: 000000007ac6483d [ 1764.234552][ C0] R13: ffff88813fed0000 R14: 00000000b6ea1faa R15: ffff88813fed0b60 [ 1764.234565][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1764.234579][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1764.234591][ C0] CR2: 00007f975d51e49d CR3: 000000002bb75000 CR4: 00000000003506f0 [ 1764.234606][ C0] DR0: 0000200000000300 DR1: 0000200000000300 DR2: 0000200000000300 [ 1764.234618][ C0] DR3: 0000200000000300 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1764.234629][ C0] Call Trace: [ 1764.234634][ C0] [ 1764.234643][ C0] ? mark_lock+0x94/0x320 [ 1764.234667][ C0] ? verify_lock_unused+0x140/0x140 [ 1764.234690][ C0] ? verify_lock_unused+0x140/0x140 [ 1764.234715][ C0] lock_acquire+0x19f/0x400 [ 1764.234733][ C0] ? rcu_lock_acquire+0x5/0x30 [ 1764.234755][ C0] ? rcu_lock_release+0x5/0x20 [ 1764.234773][ C0] ? read_lock_is_recursive+0x10/0x10 [ 1764.234793][ C0] ? __lock_acquire+0x7d40/0x7d40 [ 1764.234812][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1764.234832][ C0] ? __lock_acquire+0x7d40/0x7d40 [ 1764.234854][ C0] rcu_lock_acquire+0x2a/0x30 [ 1764.234872][ C0] ? rcu_lock_acquire+0x5/0x30 [ 1764.234890][ C0] batadv_nc_worker+0xc9/0x5c0 [ 1764.234918][ C0] process_one_work+0x867/0xff0 [ 1764.234943][ C0] ? worker_detach_from_pool+0x240/0x240 [ 1764.234960][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 1764.234979][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1764.234995][ C0] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1764.235012][ C0] ? wq_worker_running+0x97/0x170 [ 1764.235029][ C0] worker_thread+0xad7/0x12a0 [ 1764.235058][ C0] kthread+0x42e/0x520 [ 1764.235073][ C0] ? rcu_lock_release+0x20/0x20 [ 1764.235089][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1764.235105][ C0] ret_from_fork+0x1f/0x30 [ 1764.235129][ C0] [ 1764.252779][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 1764.507781][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 1764.515007][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1764.525091][ T27] Call Trace: [ 1764.528384][ T27] [ 1764.531351][ T27] dump_stack_lvl+0x188/0x250 [ 1764.536038][ T27] ? show_regs_print_info+0x20/0x20 [ 1764.541239][ T27] ? load_image+0x410/0x410 [ 1764.545766][ T27] panic+0x2f8/0x850 [ 1764.549676][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 1764.555311][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 1764.559838][ T27] ? __irq_work_queue_local+0x12c/0x190 [ 1764.565395][ T27] ? nmi_trigger_cpumask_backtrace+0x260/0x280 [ 1764.571640][ T27] watchdog+0xe5a/0xe60 [ 1764.575842][ T27] kthread+0x42e/0x520 [ 1764.579913][ T27] ? hungtask_pm_notify+0x40/0x40 [ 1764.584941][ T27] ? kthread_blkcg+0xd0/0xd0 [ 1764.589540][ T27] ret_from_fork+0x1f/0x30 [ 1764.593977][ T27] [ 1764.597374][ T27] Kernel Offset: disabled [ 1764.601714][ T27] Rebooting in 86400 seconds..