last executing test programs: 18.288681289s ago: executing program 4 (id=6777): socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={r0, 0x20, &(0x7f0000000380)={&(0x7f0000000240)=""/169, 0xa9, 0x0, &(0x7f0000000300)=""/98, 0x62}}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x40000}, [@tail_call={{}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) close(r3) ioctl$TUNSETLINK(r2, 0x400454cd, 0x118) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="1b23000d"], 0xffdd) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="2e0000006600816657bb97c9269de9aaec8488040f0000004cb9cca7480ef402000000e105000a00000200000000", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x1e, '\x00', 0x0, @fallback=0x9}, 0x94) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x2, 0x0, 0x7, 0x10, 0x0, 0x4000000000000000, 0x1481, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x56, 0xf}, 0x120c2, 0x41c, 0x1, 0x0, 0x5, 0x0, 0x0, 0x0, 0xffffbffe}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002420702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000022850000009400000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x2f) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)) 17.852303391s ago: executing program 4 (id=6783): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x6, 0x0) r1 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r1, &(0x7f00000003c0)={&(0x7f0000000200)=@nl=@unspec, 0x80, &(0x7f0000000380)}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002e000000180100011f786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000fc000000b7030000000000008500000072000000955008d9686e86d900fd20294e9d52593725bc9bc6887c42df152268f0b00f526c9b30931a351ea038411529206ccfa881bc3e70fd3331ef25e6b3fb512e3bff7a7b9882797172045d968bbb6c755f3c90e8b86d34c4c6a8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r3, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xfe, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000700)=0xffffffffffffffff, 0x4) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x200040, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x100, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x80, 0x3, 0x4, 0x0, 0x0, 0x6, 0x20202, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0x4}, 0x5010, 0x102, 0x9, 0x5, 0x8, 0x100, 0x89, 0x0, 0x200, 0x0, 0x7}, 0x0, 0x3, 0xffffffffffffffff, 0x9) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8946, &(0x7f0000000080)) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000840), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x18, 0x0, &(0x7f0000000280), &(0x7f0000000540)='syzkaller\x00', 0x7ff, 0x6e, &(0x7f0000000680)=""/110, 0x41000, 0x10, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000740)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000780)={0x3, 0x4, 0x8, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000880)=[0xffffffffffffffff, r5, r7], 0x0, 0x10, 0x8001}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0xffffd, 0x10000, @value=r4}, 0x28) 17.813701454s ago: executing program 2 (id=6784): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000740)=[{0x0}], 0x1, 0x0, 0x0, 0x7}, 0x0) 17.708179099s ago: executing program 2 (id=6786): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001dc0)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x66, 0x0, 0x0, 0x0, 0x4ff1}}, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x18, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94) r0 = socket$kcm(0x11, 0x2, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000000c0)=r0, 0x8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd634936f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x82, 0x0) close(r3) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x16) 17.548375208s ago: executing program 4 (id=6789): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d0002117ea6e070d6064e22000300000000250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4", 0x45}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 17.469199782s ago: executing program 2 (id=6790): socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1d, 0x2, 0x7, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00', 0x10}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{}, {}, {}]}) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0xd}, 0x80, &(0x7f00000018c0)=[{&(0x7f0000000080)="27050200160014000600002f86dd", 0xe}], 0x1}, 0x200400c0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffc}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x6, '\x00', 0x0, r1, 0x4, 0x0, 0x1}, 0x50) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89a0, &(0x7f0000000080)) r3 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x49, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89a2, &(0x7f0000000080)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x1, 0x84) write$cgroup_freezer_state(r5, 0x0, 0xfffffdc3) 17.327361859s ago: executing program 4 (id=6794): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r0 = socket$kcm(0x1e, 0x1, 0x0) recvmsg$kcm(r0, 0x0, 0x40010103) r1 = socket$kcm(0x15, 0x5, 0x0) sendmsg$inet(r1, &(0x7f0000000380)={&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}, 0x4000000) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0xfffffffe}, 0x10}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x10000830d}, 0x2, 0x2, 0xfffffffe, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x29, 0x0, &(0x7f00000002c0)="b90103606989017f020001be00"/28, 0x0, 0x103, 0x1000000, 0xff69, 0x24, &(0x7f0000000640)="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", &(0x7f0000000000), 0xce560d0f586006d8}, 0x50) r3 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r3, &(0x7f0000002700)={&(0x7f0000000080)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000180)="90", 0x1}], 0x1}, 0x8040) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd, 0x6, 0x5, 0xa, 0x8001, 0x0, 0x0, 0x0, 0x4713}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="210000000800000001040000ffd6000000000000", @ANYRES32, @ANYBLOB="7f00"/20, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="0000000002000000014000000000000000000000000000000000003f2495cba478086de257394d1c5edf00"], 0x50) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000400)=r6, 0x4) mkdirat$cgroup(r4, &(0x7f00000004c0)='syz0\x00', 0x1ff) sendmsg$kcm(r3, &(0x7f0000000340)={&(0x7f00000000c0)=@in={0x2, 0x4e21, @local}, 0x80, &(0x7f0000000300)}, 0x4000) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0xb, &(0x7f00000001c0)=r6, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001000)=@bpf_lsm={0x1d, 0x0, 0x0, &(0x7f0000000880)='syzkaller\x00', 0x1ff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000c40)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c80)={0x0, 0x2000a, 0xa, 0xfff}, 0x10}, 0x94) r7 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r7, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000080)=[{&(0x7f00000000c0)='#', 0x1}], 0x1}, 0x4000040) recvmsg(r7, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x31}, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x7, &(0x7f0000000180), 0x43) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf6b5, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02002200356bd25a806f8c6394f91124fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 17.30698408s ago: executing program 2 (id=6795): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80008, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x152, 0x1, 0x0, 0x2, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x1e, 0x1, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x2a}, 0x94) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="d8000000150081044e81f782db44b9040a78080206000000040000a118000300ff05000006000e1208000f0100810401a80016eaa400010000005f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e00600000000d5e1cace81b341139fe3cd4032e8edb12d1d2eb0c0ed0bfffdccf85df947e5e0", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) 17.040274343s ago: executing program 0 (id=6796): perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x541b, &(0x7f00000000c0)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x123f42, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'\x00', 0x6132}) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x4) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$ITER_CREATE(0xb, &(0x7f00000002c0)={r2}, 0x8) socket$kcm(0x2, 0x3, 0x2) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000140097f87059ae08060c040002ff0f2d00000000000001870182fa73a69d35a2cca84708f7abca1b4e7d06a6bd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) write$cgroup_netprio_ifpriomap(r2, &(0x7f0000000000)={'geneve0', 0x32, 0x31}, 0xa) 16.846003744s ago: executing program 2 (id=6799): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80008, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x152, 0x1, 0x0, 0x2, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x2, 0x200000000000001, 0x106) r0 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$sock(r0, &(0x7f0000000600)={&(0x7f0000000580)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41, 0x1}, 0x1}}, 0x80, 0x0}, 0x48811) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, 0x0, &(0x7f00000001c0)}, 0x20) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x74, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x6, 0x4000000000}, 0x624d, 0x0, 0x80000000, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18006daaed13ff00000000000000"], 0x0}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.idle_time\x00', 0x275a, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001140)={&(0x7f0000001000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x1, 0x3}, {0x3, 0x3}, {0xd, 0x4}]}]}, {0x0, [0x2e, 0x0]}}, &(0x7f0000001080)=""/190, 0x40, 0xbe, 0x1}, 0x28) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000900)={0xffffffffffffffff, &(0x7f0000000740)="9d077b0d6850da9c8d325c3eda1366e56fe32395d93822aed3290e5e453ba750662f", &(0x7f0000000800)=""/213}, 0x20) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000100)=r2, 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@fallback, 0x5, 0x1, 0x400, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socketpair$unix(0x1, 0x1, 0x0, 0x0) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r3, 0x24, 0x0, 0xc, &(0x7f0000000140)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x64, &(0x7f0000000000), 0xfee2) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xf7, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f008004be0ffff00124000632f77fbacf01416ac141416440c05114d2f87e5940c05ab861813f2325f1a39010702038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff40000", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xe, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000000000008510000001000000950000000000000018150000", @ANYRES32, @ANYBLOB="00008d2ae4900000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000630000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x1f000000}, 0x600) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) 16.777326998s ago: executing program 0 (id=6800): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001dc0)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x66, 0x0, 0x0, 0x0, 0x4ff1}}, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x18, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94) r0 = socket$kcm(0x11, 0x2, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000000c0)=r0, 0x8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd634936f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x82, 0x0) close(r3) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x16) 16.776481988s ago: executing program 3 (id=6801): perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0xa1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000540)={&(0x7f0000000180)="baef6f5fbbbeef4c41dedf7fcd10126499f8f51d1717a762f922bf77cad474a779510607c4f80496e86ec78c4fb40372e1fd50e68e9ab99cf862f742ecaf75a4c14be3c641053c76afa31081b6334fcc526bdeffb4e9faea0f5a3648d0ca68281577d2ad62acbceb6fbceafedeac1a2fd5c1760d9ee43241be84b7121eeb67a0bd1f743a9104738bbd3c27041ed40ea771bf1de215b5d695158807187d1b06436dd1c01ca7efde2c3cfcb63cce9ada6fcfa4c39925b4619a1efb1532a93a80b4b39ff7fd5db7dbb91e03a587c011878f1250", &(0x7f0000000280)=""/156, &(0x7f0000000400)="6d6cdaef59cb4dfcee58d99d88a9d17b696b2e47e6cf4773587fd60f6d333a57aaf9acf93550057ed67dbdda5a0121d2cf808eb145a3477e5d59155ea7eab0de9e35f9f9f4fd762866556a2eb6d1aea71d51d7dd2944f98fece4b5dd0fdbc76a0ef35a25322113b287b5c157feeffa372f220bddc008ba133510a26549a1fe9e724a860404", &(0x7f00000004c0)="14adb300545ab56abf2dbed865bffbb021cb2988499de55faec7bdd341e3da907704689991f33d0b1f8bcb15acbabf7b6ee5ee1b78614be6e7eadfdc5bee93030e78f3e8d379f7f9df6966dd7411ecad0d0a", 0x5, r0}, 0x38) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x20000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x2, 0x9, 0x0, 0x20000, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$kcm(0x29, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000600)) bpf$MAP_CREATE(0x0, 0x0, 0x37) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5, 0x0, 0x0, 0x43cd, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x23, 0x5, 0x0) setsockopt$sock_attach_bpf(r4, 0x113, 0x4, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d800000010008104687da3aa7143a0b8c81f080b21000000e8fe55a19c9d8714060014000000001208000a0043000040a80012000400054006000d000360107134cf6ee08000a0e408e8d8ef52a9d765dd11683296b7947968c7c0b7a196e6f66100000000000000000000003a17b259b640cce85107000014bbba2379bdbb26887321ace48051f2373a24cbd99f0c59b23c28b7be", 0x95}, {&(0x7f0000000140)="aa581ff83dac4a519b67538bfa897e210c31e1446808358248cf2d795634b12c4ce81c3876aff89235b78ea0e5c5badfa122797d62c09ada744195f31cd5e6fc4b2a32", 0x43}], 0x2}, 0x0) 16.651433934s ago: executing program 0 (id=6802): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000142020207b1af8ff00"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000440)=ANY=[@ANYRESOCT], 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x19, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 16.646663854s ago: executing program 3 (id=6803): socket$kcm(0x10, 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x15, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, 0xfffffffffffffffe) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x1, 0x0, 0x7, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xaa}, [@ldst={0x7, 0x3, 0x0, 0x0, 0xa}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) syz_clone(0x20083500, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80720, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="0f0200003a000517d25a80648c63940d0324fc600b020000280008c321d51f000200080000003e37eb248833c33ccf43bf38", 0x32}, {&(0x7f0000000240)="14ea6b09a80fdd9810700f03d15a4c5ed13c5c9768b359f879a6db6ee18a54321484f4f48481dc5f007ccb4e5142a37bb45726fa7e5362f171c9a4ee99949c6e867251ba84edb024a97e8be1ad62727bb4bed90e4a62941a8336517c6f875606f41898dd831b4a7aec1b41c0c135332020604e9c34ccde232d5b9c76f91adf73c72a6cd62933753ec2263f5067bff09d4bcc1c5665c74e9bb7bc525daaffd17491087a5ffd5fd65eb611c415a9c885535e7d8f4c8058ad267e61da6db9585f4b41357e4823de2a70f4399ed933edbc", 0xcf}, {&(0x7f0000000340)="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", 0xfa}, {&(0x7f0000000440)="de19f496ca4908ffcc0049bc7dae9c6a39a13cb6", 0x14}], 0x4, 0x0, 0x0, 0x6c000000}, 0x0) 16.595538017s ago: executing program 1 (id=6804): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d0002117ea6e070d6064e22000300000000250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4", 0x45}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 16.464714634s ago: executing program 1 (id=6805): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x115046, 0x0, 0x0, 0x9, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="b9ff03076844268cb89e14f086dd47e0ffff00122c00631177fbac141416e000030a44079f034d2f87e589ca6aab845013f2325f1a392f050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x7000000}, 0x2c) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000000c0), 0x8) r2 = socket$kcm(0x11, 0x2, 0x0) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r3, 0x107, 0x12, &(0x7f00000000c0)=r2, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="180200000300000000000000000000008500000053000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000020b7030000000000008500000017000000950000000000000010650439b6e0e483ffb17b12e4111f76b9ffb760b03af79019b46ac94be749076ca1f048b5c41b10f31be14ee6d177c12507d049e7d88b84edda1e7b8cb1fae82b88ea4d0d98c8b8e941f7"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x81) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x4}, 0xc00, 0x0, 0x0, 0x7, 0x4}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) 16.462299534s ago: executing program 0 (id=6815): close(0x3) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7df}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(0x0, 0x11) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x80008, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_ttl={{0x14, 0x110, 0x2, 0x800000}}], 0x30}, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x40) sendmsg$kcm(r3, &(0x7f0000000340)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x3}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000003c21c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc17d0822ca4232c98a9936ba722475ca500", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0x87}, {&(0x7f0000001ec0)="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", 0xa91}], 0x3}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x2, 0xb9, &(0x7f0000000080)=""/185}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6349363006"], 0xfdef) socket$kcm(0xf, 0x3, 0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r4, 0xe0, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="03000000040000000400000001000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="18"], 0x50) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002ac0)="418668ee2c3bef5a6d47a11369bab1d1665613f4dd") gettid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000002b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000020}, 0x20000404) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x0) socketpair(0x9, 0x3, 0x9, &(0x7f0000000140)) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d80000002000811f4e81f782db44b90402000000e8fe55a1180015000600142603600e1209000a0000000401a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970100040000", 0xd8}], 0x1}, 0x0) close(0x3) 16.326295741s ago: executing program 2 (id=6806): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r0 = socket$kcm(0x1e, 0x1, 0x0) recvmsg$kcm(r0, 0x0, 0x40010103) r1 = socket$kcm(0x15, 0x5, 0x0) sendmsg$inet(r1, &(0x7f0000000380)={&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}, 0x4000000) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0xfffffffe}, 0x10}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x10000830d}, 0x2, 0x2, 0xfffffffe, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x29, 0x0, &(0x7f00000002c0)="b90103606989017f020001be00"/28, 0x0, 0x103, 0x1000000, 0xff69, 0x24, &(0x7f0000000640)="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", &(0x7f0000000000), 0xce560d0f586006d8}, 0x50) r3 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r3, &(0x7f0000002700)={&(0x7f0000000080)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000180)="90", 0x1}], 0x1}, 0x8040) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd, 0x6, 0x5, 0xa, 0x8001, 0x0, 0x0, 0x0, 0x4713}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="210000000800000001040000ffd6000000000000", @ANYRES32, @ANYBLOB="7f00"/20, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="0000000002000000014000"/22], 0x50) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000400)=r6, 0x4) mkdirat$cgroup(r4, &(0x7f00000004c0)='syz0\x00', 0x1ff) sendmsg$kcm(r3, &(0x7f0000000340)={&(0x7f00000000c0)=@in={0x2, 0x4e21, @local}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000200)='*', 0x1}], 0x1}, 0x4000) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0xb, &(0x7f00000001c0)=r6, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001000)=@bpf_lsm={0x1d, 0x0, 0x0, &(0x7f0000000880)='syzkaller\x00', 0x1ff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000c40)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c80)={0x0, 0x2000a, 0xa, 0xfff}, 0x10}, 0x94) r7 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r7, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000080)=[{&(0x7f00000000c0)='#', 0x1}], 0x1}, 0x4000040) recvmsg(r7, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x31}, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x7, &(0x7f0000000180), 0x43) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf6b5, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02002200356bd25a806f8c6394f91124fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 16.261083114s ago: executing program 4 (id=6807): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYRESDEC, @ANYBLOB="a55a1dac5c29c370369a122b3c884097b257723fdd0036dfdf9180d63560faeba6ee0c46b6e2764d3d272207af881c692c0e4cb5937690b37d4cea729cef20483642c2cd83f0dbaa9cb9e9833aa2718c5e44eef1da80adb5267d92ce75997072657082763be84c5fda962a4830113e0c8feb4139d750cd13f56146d0d716d18d498d6c74f254821f037082eba5c802324839e87796bfad1e3fc503327a03778a0a75501ebe9ab197a2ead62c29354746554378bde819165a3df429d06c7b1b282451b772b30ee415445fad842d69390698f924", @ANYRESDEC, @ANYRES8=0x0], 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a40)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x1, 0x8}}, @typedef={0x1, 0x0, 0x0, 0x8, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2, 0x800}}, @union={0xb, 0x2, 0x0, 0x5, 0x0, 0xb0, [{0xa, 0x3, 0x66d6e815}, {0x2, 0x2, 0x7ff}]}, @decl_tag={0xd, 0x0, 0x0, 0x11, 0x1, 0x2}, @float={0x7, 0x0, 0x0, 0x10, 0x8}]}, {0x0, [0x30]}}, &(0x7f0000000940)=""/212, 0x97, 0xd4, 0x1, 0x5}, 0x28) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0xd, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r1, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000bb818500000082000000850000002a00000095"], &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @sched_cls=0x37, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x0, 0xe, 0x0, &(0x7f0000000900)="928e04b416cac951c35f7f4586e6", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x101, 0x3fff7ffa}, 0x0, 0x35, 0x9, 0x7, 0x3, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0xa0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x9, 0x4022, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x5, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000680)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xffff7f44, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x4}, 0x50) r4 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x404f444) r5 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000000000001000000000000000100100000b"], 0x28}, 0xfc40) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000740)=0x35d) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20282, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xa6b2}, 0x9000, 0x0, 0x2, 0x4, 0x1000000, 0x0, 0xffff, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040200080211000000040000a118000200e000000114140e1208000f0100810401a80016ea1f000840032e5f54c92011144dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c01000000000000e2cb090000001fb79101015ee4bd31445a7ba9599763001b14620d9de656d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9e5e6d98031b68c76f9cefbbcbee5de6ccd40d", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4009044) 16.118408512s ago: executing program 0 (id=6808): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="06000000040000000400000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={&(0x7f0000000380)="15c36fdb942fec4cd54d9e697ee957623aaa8d6954c3f962fa7797c04fcc363357ca0e5ffc018bed592bc5be2302a8620d77493555a2966920d5899e9e6e0e8cd9ccbf1ee34afff84ce7bda23a99945470b51c9e7151a78ee17dd71ee0a72bb9ac4b640ff505e4702799987c7047e22dc5117020c242e6412e4dcde11333f2d3673b7eb08b0aecc8f7eb755a1a343defdd8690bedc823a0ea67af57b0094772282086eb6ae37096c701599acf569e2f571cb12712093663b51b255100da39c4375b0d0cbd2", &(0x7f0000000480)=""/255, &(0x7f0000000580)="9c25a724d30fdd079a446d322fbc45d995d7654b9ca35882d0aa18e5646859d695ab407a8cf05ee473f8bf3158c04f7e9ee9233f258833a9dd2d1b31c91eb3bb077a29217509ef0d170b968aa1ddd5d3d03d20ddf8d26d0097584f6c9fff5c7bec05a4922d72cfd45db181e1", &(0x7f0000000600)="d65bb21e8b3328d2d4517ad0edab3f55f371e4a65f91e9369ec9eba925eaa885abd662c48ff8bc2a07648385452e61f03891fa6d042fe6afb9ee14ed41de2cd4afb9ac091fca04abc6160959d7410bb237d9063a981b927c00125a9023006c3a2ae8eeaa88955458f76bce92b7bfaa414d0198a868c3158bca557c69f3d119a245930c49417a774d64c1bb75effdeb68f957d48bf4ab4d914f1d934d7428fe7fc0404951f047710b45bb8e0e411d4fd3fd3108bd9580042d47b625f82b96614851b66246ffe1a878f175d78b02a519ff65463c7e352fb128", 0x300, r0}, 0x38) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1, 0x1}, 0xc) 16.093090433s ago: executing program 1 (id=6809): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0x3) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x6, 0x0) r1 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r3, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xfe, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000700)=0xffffffffffffffff, 0x4) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x200040, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x100, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x80, 0x3, 0x4, 0x0, 0x0, 0x6, 0x20202, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0x4}, 0x5010, 0x102, 0x9, 0x5, 0x8, 0x100, 0x89, 0x0, 0x200, 0x0, 0x7}, 0x0, 0x3, 0xffffffffffffffff, 0x9) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8946, &(0x7f0000000080)) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000840), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x18, 0x0, &(0x7f0000000280), &(0x7f0000000540)='syzkaller\x00', 0x7ff, 0x6e, &(0x7f0000000680)=""/110, 0x41000, 0x10, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000000740)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000780)={0x3, 0x4, 0x8, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000880)=[r4, r6, r8], 0x0, 0x10, 0x8001}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0xffffd, 0x10000, @value=r5}, 0x28) 16.039538126s ago: executing program 3 (id=6810): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 15.988671728s ago: executing program 0 (id=6811): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80008, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x152, 0x1, 0x0, 0x2, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001340)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4870000000000000200000000000e0ff95000000000000002ba7e1d30cb599e83f040000f300000000bd01212fb56f040026fbfefc41056bd8174b79ed317142fa9ea4158123751c5c652fbc1626cca2a2ad75806150ae0209e62f55ee988e6e06c8206ac6939fc404004900c788b277be1cb79b0a4dcf3ed410f6accd3641110bec4e90a634199e07f8f6eb9604000e011ea665c45a3449abe802f5ab3e89cf6cfdffffffb8580218ce740068720000074e8b1715807ea0ca469e468eea13c9a77e1c89c5082a703fd2f73902ebcfcf49822775985bf313405b367e81c700000040000000000200000000005335000000143ea7042ab40c7cb70cc8943a6d60d7c4900282e147d08e0af4b29df814f5691db43a5c00000004000000000089faff01210cce39bf405f1e846c12423a164a330100846f26ad03dd65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d6155102b1ced1e8019e63c850bf895abba14f6fbd7fb5e2a431ab914040000000000010092c9f4609646b6c5c29647d2f950a959cf9938d6dfcb8ed2cbdc2ba9d580609e31c3fa90812a533ce206e7e57a79d6fce424c2200af6c7784a1975fabc0c4dd418c005479ecab19bdfb15a32a4fd67ce446adb431d7e74853b7978639be2463308af07db79240acaf0910300000077d05d988d6efdffdf48dca02113a38300cabf2b5543ffc166955709009e000000000061622718551c20ec23812770d72c700a44e113d17088fdd00600000f7889b8d7044f56ff030000000000006cd4970400cac6f45a6922ded2e29514af463f740586903500090000000000000000be34b10f9d640dd782ac0cbc0abcf72846903243d0d0f4bc7fb0a0d7c5000032daaf281c450e64c33aac8ff7e7d1c94c4505a9839688b008c370494f6734b771546d9552d3bb2da0d000000000000000009125c97f0400f5e1671bc5eb7739daa7820a91cb0e732df2ae1d39c747e00a4fbfe8942fa859cd28bdaa1509309926c77fbcb15ec58b42b4bfaf5a6b649dd5f13cd776e6c7c4b5c4b0de20e0c81efb5e392a13cdd2ce219e6733b378553ead4c8cc530b62c36364e6505992209bdbc6203da7a3797246a6adef071102f0aa2c40095ddd05176f5cb8bd99e1ba0f9568f3e3876bba7bf973334e7919a080000000000000004fb996ad919f7e9672ce107000000ad882f2aead166c94500be902ee7dabc768eb9ec13f334aae90981ecaf5f744f22f2e45afe2c9e863fef0ad9d1ac32276cffe5f1fc21390797d0244cf1ce269d10525745caaa3f77d1b80116cb385a0242010000000100000091a0116f4693133138583da5e10b434697b0443b7b4ddfb3ace29e16e5a881336aad0974269a1025e2a9a135c0508af1aec2926627b43bba1229a7466bdca64f514b7911458da09fe8681916d408d753226a83ae2424ccd3fc508216aea86833030f569d61dc998620fcf4eeb92e7bc511df63c53b82514493b8f3c74f44ba184d40e87612024da1a1ebe316923865f037c01d71b5de81121046d84b18acb5cbea7eecad9b6dd46ed83515cd911e0e5f00019be25b5910a3193e90be231a05fd82e6003969c3f081ff1d0eb50a04d14644234828cbb5aaa0ece702abdd425fa25ae04a2315c89064df633700000000d9e5953ea67310993d01000000000000003ac753358791b1490273ca535e05b11d815237743a5b79ad45de2a3c91257f02c2f30f55136628090702f70000d0055b238f466e1442f8ec7a5b394228035039ceeb452dca75f9ff5332b4c4777a58a0aa9a821667c685492a1689ad4218cea744b332ab232a09cf1ec375627074ce2d3d7619936768a84a1465fff4610cf8838b28319e0f79533d87eedba55955434f132ab7b8840558b3f918d675a79907a72a8252cd3fbaea5d3006a03507818231a335ae759ed25534f2e90a7def4b3d4af7fd47ab1a701e4b7a7dfc1d12775ed0a31bc7b5855880aa767e68196c7aa5ac115724b6cb8fcebb67719eccd87b06b38566cf61ad2f307a79d2ce9801837bf0bd3af0271de700eef2795d28cb0017000000000000000000e052d93194121b774d21a0317d0346078400004652c769fd3d3e661a2fb511164f1502ab2ac4eb3f19c042163e0bdb88b82de384a8055e8b1e24294b0546cce481ff5618b7b9585dbb64d66debf219fa479abf22f3d64fe82e466ea6f278ea00cee8a2088359946e726aef83d9ff9281ab79625e2979fe689a5a246cbbdf6ad488f43f46b2536f175f46dfb27d5229467270246ab53616c46edf34c559d3de0c59ca3305e66825715e5e4cd5b54c1b05c09f04337a76a30373baac3ecec91fd546eb7c32dbecb18a308a0004be94dfab28c2a51dc856df0000000010c12254f041804f7f7074356789b1d4dd55f3e045a48241a4ce04d06acb2cf11eab759ba78da5da0f26126d4cf2c73e5f94030000040000000000000000c301985d603403592486204054be3fdda91f9e315886941928e5a8bc1a00e69a98c0a8f7192f6ee93cc4124cf4e7610915efc08c834a44e1d685d6835a40b5bc615949cbcd98d0e68d7eef5d32d5fcc7923d7544fa492aa38717481c55e86dcd7816ad8940bd19953603000000adeb9117e8b94ab422c8d62f858875dccdbc89572231ef5d6df6a9c55f8df763c7c64da7cc017e1e3f5cd4cb9fe6d19b11d4d38239d318016be64dc097982e23462392a0cd05afb2e060fd6424a942ef00dfbd057311aab94f307d10c7a1af0d8e5a0fcb547475d13c0000000000000000f1cc97103d714d1af45790517c4a0f5c6a5024e3359e8d83e3f6edf9e2afb5ab59c7b2b45cfb0a3c1303a98e4ed531ac11cca1cd744b431de74c7cd6533adaa8ec749061b2959d53da626aa189781dc1be4d5d81aebc0cada819895b377d6cf0a7878ba99864ae84464744c605646caf2e06b13eba7ba10acf77d91b2297e9573abb0a4da534d735a223626402b308daf7835780fa6f4e410000000000fb00000000000000000000b1495213060000000000000049584655c4fce8c5bb7c54664aef6d780100358aa54bcb49926c4be9ee4659153d9fa95d07cc4efdab2c355efe8e8d0255d0b748366dafe042d78479c21d832e1431ed6d646d13e8e7230300920a5642bbed1dee9b46b6122f572047ccf3c8edd82660e5d74c52be71d780c30000000000fd00000000000000000000000044ff72f96f084f4b6cdcb1b4a9d8e9f99f1b85497d0c3df704c8a0034c09caeeb0e34799b755649883539258a7b33dcef15d8fd1953ebaaa3cff81a0de7a05a440f20f6b273ceb8678f10378b670be7504dabd1471355d853292775d0366891f0bcf0a6087ed4f1f2def52394db3e9d8318bbb9baff3db95bfd69e08ded502cc08a485c804e4fd107a7ca2a64ca081c6b2f7b895cdf98b763ebab9451c65eced6f5f97a541210806d885762ac3150225036c7eccd7a05593abd963f9a02df58085115e54f675e6a08d05b5722cabf989b4bbc562e073b81bae61f05c5e1f90e021340b60cc5fb8fdb09b6d20b0d87a6ed800000000000000000000000000000000006cc6f64f583a26a78f7f417f66c0a832f5194ddfce51e5aff28f621bb2fd2a5ab719df823488d6e869b08d3d4ac7950c60144cf77437e29895a23282e3c65e015d1c3348329b0ee77d93596e3f1287552e0c8cdb326c5118d2e9ca8c67c7f3c9b66c9cb03edec184ad1d9544c7a3be250e471dca00000078544d79c0efe4094e561eeb26ee4c81106d03c004bc1589ef6e13648999c8735e26aa90c571fa3c07238697b13c52715055445e96995fe3273b0346b03fc742c06aa3947e0d9cf0c99b5e245ede85893112deea8bd3355a32ec15e1242f170e42f28cea4105541e11c8605628b9ca935bc252fee8b596a52da4984d26bd29cb0623f00c6b0a4c00ad406d729babb8fa16f3182c5b98493a5aa943aa3a777a751f56e0c7a74f7f63d83ff119561acd5fe560563b051dc29ac586b21148ad5a5498369ac347d19660c132b1df58d65418bc824d8b88b699462c2ce6524eaf0905445413033f041a26b189f2553ef218eba22152a4dc979a0e37396ae1a2883b1e4d44c8af7973d5c1f286c26459209db5a9a51dc69d0ba3fb6c884e50be3598ac53295137c97dabe52d98fed0b352c0b68b7e75ed59931ef57bb5fc28d5b1f914fc8abbb444637a5dfbac5035eb0713efb823360a8da80e4265e599f76952a8082b8c5f7890275a922cd2ccaaf75dcca6849e89e1bab32fe9b598c61d7565dc6ab0a6d43b60f8d08ddf27a286807692d18973edaa6d5401c79b3cafaab4a8d6c946cbe5de350000000022e16a5f72c6d41dc9de8517fdcfa0c0efca880257443cfc3057c353569ffb1588b4bb261a6e99c5936e1b4339d87ec84db99e797f44451fc6b5da1950d24b3d4118f2288804740e605500c1f493c7dc42164cc6c1b01a329ce95272a07a355d4ba705b5e71ce5e1042a0c638e565881e5eedbc62f79407b73ae787c9cdb752eda44aeef962c93ab245f61e8ca5c0d41cc56124840f1b2b30be599fea0afaf905f90dd3e55fef0b94afbfd7144b7"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x18000000000002a0, 0x34, 0x62, &(0x7f0000000380)="b9e403c6630d698cb8a00b04339c", 0x0, 0x172, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d8000000180081084e81f783db4cb9040a07080006007c09e8fc55a10a0015000600142603600e120800120081000401a8000180fec0ffff000000fd035c0461c1d67f6f94007134cf6efb803fa007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) socket$kcm(0x1e, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000340)=ANY=[@ANYRES64], 0x2) r4 = perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x3, 0xfd, 0x20, 0x8, 0x0, 0x0, 0x48040, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0x4, 0x8}, 0x2600, 0x6, 0xe0d4, 0x8, 0x7, 0xff, 0x5, 0x0, 0x8, 0x0, 0x3}, 0x0, 0x2, r3, 0x2) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x98187, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, r3, 0x0, r4, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r6, 0x29, 0x1b, 0x0, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="d8000000150081044e81f782db44b9040a78080206000000040000a118000300ff05000006000e1208000f0100810401a80016eaa400010000005f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e00600000000d5e1cace81b341139fe3cd4032e8edb12d1d2eb0c0ed0bfffdccf85df947e5e0", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="190000000400000008000000ab0d000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r7 = socket$kcm(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) close(r7) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r9, 0x0, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socket$kcm(0x29, 0x7, 0x0) 15.988340628s ago: executing program 3 (id=6812): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001dc0)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x66, 0x0, 0x0, 0x0, 0x4ff1}}, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x18, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94) r0 = socket$kcm(0x11, 0x2, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000000c0)=r0, 0x8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd634936f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x82, 0x0) close(r3) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x16) 15.987910408s ago: executing program 1 (id=6813): perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0xa1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000540)={&(0x7f0000000180)="baef6f5fbbbeef4c41dedf7fcd10126499f8f51d1717a762f922bf77cad474a779510607c4f80496e86ec78c4fb40372e1fd50e68e9ab99cf862f742ecaf75a4c14be3c641053c76afa31081b6334fcc526bdeffb4e9faea0f5a3648d0ca68281577d2ad62acbceb6fbceafedeac1a2fd5c1760d9ee43241be84b7121eeb67a0bd1f743a9104738bbd3c27041ed40ea771bf1de215b5d695158807187d1b06436dd1c01ca7efde2c3cfcb63cce9ada6fcfa4c39925b4619a1efb1532a93a80b4b39ff7fd5db7dbb91e03a587c011878f1250", &(0x7f0000000280)=""/156, &(0x7f0000000400)="6d6cdaef59cb4dfcee58d99d88a9d17b696b2e47e6cf4773587fd60f6d333a57aaf9acf93550057ed67dbdda5a0121d2cf808eb145a3477e5d59155ea7eab0de9e35f9f9f4fd762866556a2eb6d1aea71d51d7dd2944f98fece4b5dd0fdbc76a0ef35a25322113b287b5c157feeffa372f220bddc008ba133510a26549a1fe9e724a860404", &(0x7f00000004c0)="14adb300545ab56abf2dbed865bffbb021cb2988499de55faec7bdd341e3da907704689991f33d0b1f8bcb15acbabf7b6ee5ee1b78614be6e7eadfdc5bee93030e78f3e8d379f7f9df6966dd7411ecad0d0a", 0x5, r0}, 0x38) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x20000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x2, 0x9, 0x0, 0x20000, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$kcm(0x29, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000600)) bpf$MAP_CREATE(0x0, 0x0, 0x37) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5, 0x0, 0x0, 0x43cd, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x23, 0x5, 0x0) setsockopt$sock_attach_bpf(r4, 0x113, 0x4, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d800000010008104687da3aa7143a0b8c81f080b21000000e8fe55a19c9d8714060014000000001208000a0043000040a80012000400054006000d000360107134cf6ee08000a0e408e8d8ef52a9d765dd11683296b7947968c7c0b7a196e6f66100000000000000000000003a17b259b640cce85107000014bbba2379bdbb26887321ace48051f2373a24cbd99f0c59b23c28b7be", 0x95}, {&(0x7f0000000140)="aa581ff83dac4a519b67538bfa897e210c31e1446808358248cf2d795634b12c4ce81c3876aff89235b78ea0e5c5badfa122797d62c09ada744195f31cd5e6fc4b2a32", 0x43}], 0x2}, 0x0) 15.888842054s ago: executing program 4 (id=6814): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80a2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xa6b2}, 0x9000, 0x0, 0x2, 0x4, 0x1000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x114}, 0x10) setsockopt$sock_attach_bpf(r1, 0x1, 0x22, &(0x7f00000018c0), 0x4) recvmsg(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002d00)=""/78, 0x4e}, 0x0) 15.857751425s ago: executing program 3 (id=6816): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d0002117ea6e070d6064e22000300000000250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4", 0x45}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 15.802127388s ago: executing program 1 (id=6817): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x6, 0x0) r2 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r2, &(0x7f00000003c0)={&(0x7f0000000200)=@nl=@unspec, 0x80, &(0x7f0000000380)}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000ac0)=ANY=[@ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r4, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xfe, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000700)=0xffffffffffffffff, 0x4) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x200040, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x100, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x80, 0x3, 0x4, 0x0, 0x0, 0x6, 0x20202, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0x4}, 0x5010, 0x102, 0x9, 0x5, 0x8, 0x100, 0x89, 0x0, 0x200, 0x0, 0x7}, 0x0, 0x3, 0xffffffffffffffff, 0x9) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8946, &(0x7f0000000080)) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000840), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x18, 0x0, &(0x7f0000000280), &(0x7f0000000540)='syzkaller\x00', 0x7ff, 0x6e, &(0x7f0000000680)=""/110, 0x41000, 0x10, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000000740)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000780)={0x3, 0x4, 0x8, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000880)=[0xffffffffffffffff, r6, r8], 0x0, 0x10, 0x8001}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0xffffd, 0x10000, @value=r5}, 0x28) 15.77282725s ago: executing program 3 (id=6818): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80008, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x152, 0x1, 0x0, 0x2, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x2, 0x200000000000001, 0x106) r0 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$sock(r0, &(0x7f0000000600)={&(0x7f0000000580)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41, 0x1}, 0x1}}, 0x80, 0x0}, 0x48811) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, 0x0, &(0x7f00000001c0)}, 0x20) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x74, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x6, 0x4000000000}, 0x624d, 0x0, 0x80000000, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18006daaed13ff00000000000000"], 0x0}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.idle_time\x00', 0x275a, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001140)={&(0x7f0000001000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x1, 0x3}, {0x3, 0x3}, {0xd, 0x4}]}]}, {0x0, [0x2e, 0x0]}}, &(0x7f0000001080)=""/190, 0x40, 0xbe, 0x1}, 0x28) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000900)={0xffffffffffffffff, &(0x7f0000000740)="9d077b0d6850da9c8d325c3eda1366e56fe32395d93822aed3290e5e453ba750662f", &(0x7f0000000800)=""/213}, 0x20) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000100)=r2, 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@fallback, 0x5, 0x1, 0x400, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socketpair$unix(0x1, 0x1, 0x0, 0x0) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r3, 0x24, 0x0, 0xc, &(0x7f0000000140)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x64, &(0x7f0000000000), 0xfee2) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xf7, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f008004be0ffff00124000632f77fbacf01416ac141416440c05114d2f87e5940c05ab861813f2325f1a39010702038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff40000", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xe, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000000000008510000001000000950000000000000018150000", @ANYRES32, @ANYBLOB="00008d2ae4900000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000630000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x1f000000}, 0x600) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) 15.57357932s ago: executing program 1 (id=6819): socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1d, 0x2, 0x7, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00', 0x10}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{}, {}, {}]}) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0xd}, 0x80, &(0x7f00000018c0)=[{&(0x7f0000000080)="27050200160014000600002f86dd", 0xe}], 0x1}, 0x200400c0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffc}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x6, '\x00', 0x0, r1, 0x4, 0x0, 0x1}, 0x50) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89a0, &(0x7f0000000080)) r3 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x49, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89a2, &(0x7f0000000080)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x1, 0x84) write$cgroup_freezer_state(r5, 0x0, 0xfffffdc3) 364.664741ms ago: executing program 32 (id=6811): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80008, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x152, 0x1, 0x0, 0x2, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x18000000000002a0, 0x34, 0x62, &(0x7f0000000380)="b9e403c6630d698cb8a00b04339c", 0x0, 0x172, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d8000000180081084e81f783db4cb9040a07080006007c09e8fc55a10a0015000600142603600e120800120081000401a8000180fec0ffff000000fd035c0461c1d67f6f94007134cf6efb803fa007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) socket$kcm(0x1e, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000340)=ANY=[@ANYRES64], 0x2) r4 = perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x3, 0xfd, 0x20, 0x8, 0x0, 0x0, 0x48040, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0x4, 0x8}, 0x2600, 0x6, 0xe0d4, 0x8, 0x7, 0xff, 0x5, 0x0, 0x8, 0x0, 0x3}, 0x0, 0x2, r3, 0x2) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x98187, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, r3, 0x0, r4, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r6, 0x29, 0x1b, 0x0, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="d8000000150081044e81f782db44b9040a78080206000000040000a118000300ff05000006000e1208000f0100810401a80016eaa400010000005f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e00600000000d5e1cace81b341139fe3cd4032e8edb12d1d2eb0c0ed0bfffdccf85df947e5e0", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="190000000400000008000000ab0d000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r7 = socket$kcm(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) close(r7) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r9, 0x0, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socket$kcm(0x29, 0x7, 0x0) 297.972794ms ago: executing program 33 (id=6819): socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1d, 0x2, 0x7, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00', 0x10}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{}, {}, {}]}) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0xd}, 0x80, &(0x7f00000018c0)=[{&(0x7f0000000080)="27050200160014000600002f86dd", 0xe}], 0x1}, 0x200400c0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffc}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x6, '\x00', 0x0, r1, 0x4, 0x0, 0x1}, 0x50) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89a0, &(0x7f0000000080)) r3 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x49, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89a2, &(0x7f0000000080)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x1, 0x84) write$cgroup_freezer_state(r5, 0x0, 0xfffffdc3) 258.049086ms ago: executing program 34 (id=6806): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r0 = socket$kcm(0x1e, 0x1, 0x0) recvmsg$kcm(r0, 0x0, 0x40010103) r1 = socket$kcm(0x15, 0x5, 0x0) sendmsg$inet(r1, &(0x7f0000000380)={&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}, 0x4000000) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0xfffffffe}, 0x10}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x10000830d}, 0x2, 0x2, 0xfffffffe, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x29, 0x0, &(0x7f00000002c0)="b90103606989017f020001be00"/28, 0x0, 0x103, 0x1000000, 0xff69, 0x24, &(0x7f0000000640)="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", &(0x7f0000000000), 0xce560d0f586006d8}, 0x50) r3 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r3, &(0x7f0000002700)={&(0x7f0000000080)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000180)="90", 0x1}], 0x1}, 0x8040) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd, 0x6, 0x5, 0xa, 0x8001, 0x0, 0x0, 0x0, 0x4713}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="210000000800000001040000ffd6000000000000", @ANYRES32, @ANYBLOB="7f00"/20, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="0000000002000000014000"/22], 0x50) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000400)=r6, 0x4) mkdirat$cgroup(r4, &(0x7f00000004c0)='syz0\x00', 0x1ff) sendmsg$kcm(r3, &(0x7f0000000340)={&(0x7f00000000c0)=@in={0x2, 0x4e21, @local}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000200)='*', 0x1}], 0x1}, 0x4000) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0xb, &(0x7f00000001c0)=r6, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001000)=@bpf_lsm={0x1d, 0x0, 0x0, &(0x7f0000000880)='syzkaller\x00', 0x1ff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000c40)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c80)={0x0, 0x2000a, 0xa, 0xfff}, 0x10}, 0x94) r7 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r7, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000080)=[{&(0x7f00000000c0)='#', 0x1}], 0x1}, 0x4000040) recvmsg(r7, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x31}, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x7, &(0x7f0000000180), 0x43) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf6b5, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02002200356bd25a806f8c6394f91124fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 136.327073ms ago: executing program 35 (id=6818): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80008, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x152, 0x1, 0x0, 0x2, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x2, 0x200000000000001, 0x106) r0 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$sock(r0, &(0x7f0000000600)={&(0x7f0000000580)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41, 0x1}, 0x1}}, 0x80, 0x0}, 0x48811) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, 0x0, &(0x7f00000001c0)}, 0x20) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x74, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x6, 0x4000000000}, 0x624d, 0x0, 0x80000000, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18006daaed13ff00000000000000"], 0x0}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.idle_time\x00', 0x275a, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001140)={&(0x7f0000001000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x1, 0x3}, {0x3, 0x3}, {0xd, 0x4}]}]}, {0x0, [0x2e, 0x0]}}, &(0x7f0000001080)=""/190, 0x40, 0xbe, 0x1}, 0x28) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000900)={0xffffffffffffffff, &(0x7f0000000740)="9d077b0d6850da9c8d325c3eda1366e56fe32395d93822aed3290e5e453ba750662f", &(0x7f0000000800)=""/213}, 0x20) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000100)=r2, 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@fallback, 0x5, 0x1, 0x400, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socketpair$unix(0x1, 0x1, 0x0, 0x0) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r3, 0x24, 0x0, 0xc, &(0x7f0000000140)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x64, &(0x7f0000000000), 0xfee2) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xf7, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f008004be0ffff00124000632f77fbacf01416ac141416440c05114d2f87e5940c05ab861813f2325f1a39010702038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff40000", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xe, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000000000008510000001000000950000000000000018150000", @ANYRES32, @ANYBLOB="00008d2ae4900000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000630000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x1f000000}, 0x600) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) 0s ago: executing program 36 (id=6814): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80a2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xa6b2}, 0x9000, 0x0, 0x2, 0x4, 0x1000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x114}, 0x10) setsockopt$sock_attach_bpf(r1, 0x1, 0x22, &(0x7f00000018c0), 0x4) recvmsg(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002d00)=""/78, 0x4e}, 0x0) kernel console output (not intermixed with test programs): ss `syz.3.6074'. [ 600.101332][T20914] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.203239][T20914] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.420821][T20990] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.6080'. [ 600.485512][T20914] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.503397][T20992] netlink: 'syz.0.6081': attribute type 3 has an invalid length. [ 600.542667][T20992] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.6081'. [ 600.757827][T21005] device syzkaller0 entered promiscuous mode [ 600.770067][T20914] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 600.841522][T20914] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 600.852613][ T6748] tipc: Left network mode [ 600.874227][T20914] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 600.932824][T20914] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 601.154617][T21016] netlink: 'syz.3.6089': attribute type 3 has an invalid length. [ 601.174599][T21016] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.6089'. [ 602.077386][ T4269] Bluetooth: hci2: command 0x040f tx timeout [ 604.073074][T20914] 8021q: adding VLAN 0 to HW filter on device bond0 [ 604.099301][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 604.110504][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 604.121031][T20914] 8021q: adding VLAN 0 to HW filter on device team0 [ 604.157251][ T4188] Bluetooth: hci2: command 0x0419 tx timeout [ 604.168773][T21036] device syzkaller0 entered promiscuous mode [ 604.186521][T10438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 604.198593][T10438] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 604.207021][T10438] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.214114][T10438] bridge0: port 1(bridge_slave_0) entered forwarding state [ 604.248768][T21041] netlink: 'syz.3.6099': attribute type 1 has an invalid length. [ 604.256569][T21041] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.6099'. [ 604.271763][T10438] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 604.292049][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 604.306491][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 604.326536][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 604.333732][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 604.531521][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 604.572604][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 604.591330][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 604.605363][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 604.622304][T21052] netlink: 'syz.3.6101': attribute type 3 has an invalid length. [ 604.631764][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 604.641065][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 604.650346][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 604.659791][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 604.667612][T21052] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.6101'. [ 604.733705][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 604.766373][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 604.827588][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 604.871358][T20914] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 605.316651][T21075] ': port 1(team0) entered blocking state [ 605.347466][T21075] ': port 1(team0) entered disabled state [ 605.362457][T21075] device team0 entered promiscuous mode [ 605.377755][T21075] device team_slave_0 entered promiscuous mode [ 605.385808][T21075] device team_slave_1 entered promiscuous mode [ 605.435598][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 605.470781][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 605.486458][T20914] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 605.572822][T21084] device syzkaller0 entered promiscuous mode [ 605.599688][ T6748] device team0 left promiscuous mode [ 605.605044][ T6748] device team_slave_0 left promiscuous mode [ 605.626152][ T6748] device team_slave_1 left promiscuous mode [ 605.632715][ T6748] GPL: port 1(team0) entered disabled state [ 605.692263][ T6748] device hsr_slave_0 left promiscuous mode [ 605.704911][ T6748] device hsr_slave_1 left promiscuous mode [ 605.732360][ T6748] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 605.746714][ T6748] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 605.766468][ T6748] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 605.776265][ T6748] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 605.790621][ T6748] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 605.802944][ T6748] batman_adv: batadv0: Removing interface: virt_wifi0 [ 605.822956][ T6748] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 605.835549][ T6748] batman_adv: batadv0: Removing interface: veth0_vlan [ 605.846284][ T6748] device bridge_slave_1 left promiscuous mode [ 605.855865][ T6748] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.877000][ T6748] device bridge_slave_0 left promiscuous mode [ 605.886499][ T6748] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.931813][ T6748] device veth1_macvtap left promiscuous mode [ 605.938778][ T6748] device veth0_macvtap left promiscuous mode [ 605.944932][ T6748] device veth1_vlan left promiscuous mode [ 605.957353][ T6748] device veth0_vlan left promiscuous mode [ 606.286172][T21103] netlink: 'syz.3.6116': attribute type 3 has an invalid length. [ 606.295782][T21103] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.6116'. [ 606.331658][ T6748] team0 (unregistering): Port device team_slave_1 removed [ 606.347096][ T6748] team0 (unregistering): Port device team_slave_0 removed [ 606.363023][ T6748] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 606.381006][ T6748] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 606.451626][ T6748] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 606.460482][ T6748] bond0 (unregistering): Released all slaves [ 606.684710][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 606.708459][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 606.756140][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 606.808398][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 606.826925][T20914] device veth0_vlan entered promiscuous mode [ 606.864023][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 606.873446][T21108] netlink: 'syz.0.6118': attribute type 3 has an invalid length. [ 606.882221][T21108] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.6118'. [ 606.904492][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 606.944690][T20914] device veth1_vlan entered promiscuous mode [ 607.074202][T21118] netlink: 'syz.1.6122': attribute type 3 has an invalid length. [ 607.082785][T21118] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.6122'. [ 607.101299][T20914] device veth0_macvtap entered promiscuous mode [ 607.153978][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 607.164081][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 607.187811][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 607.196886][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 607.222604][T20914] device veth1_macvtap entered promiscuous mode [ 607.241148][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 607.268676][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 607.301112][T20914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 607.333499][T20914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.366493][T20914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 607.391591][T20914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.407199][T20914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 607.418674][T20914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.428913][T20914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 607.441866][T20914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.457789][T20914] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 607.470159][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 607.495914][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 607.541157][T20914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 607.557057][T20914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.576330][T20914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 607.594270][T20914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.606983][T20914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 607.618265][T20914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.628526][T20914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 607.639435][T20914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.665100][T20914] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 607.690470][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 607.734481][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 607.781437][T20914] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.818384][T20914] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.837323][T20914] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.865848][T20914] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.895095][T21139] device syzkaller0 entered promiscuous mode [ 608.127382][T10438] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 608.135331][T10438] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 608.223778][T10438] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 608.296609][ T309] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 608.341551][T21150] netlink: 'syz.0.6134': attribute type 3 has an invalid length. [ 608.352405][ T309] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 608.375972][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 608.399989][T21150] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.6134'. [ 608.501942][T21166] netlink: 'syz.2.6137': attribute type 3 has an invalid length. [ 608.522999][T21167] netlink: 'syz.4.6052': attribute type 2 has an invalid length. [ 608.551803][T21166] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.6137'. [ 608.565353][T21167] netlink: 'syz.4.6052': attribute type 8 has an invalid length. [ 608.591155][T21167] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6052'. [ 609.161540][T21189] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.6148'. [ 609.349915][T21197] netlink: 'syz.1.6151': attribute type 2 has an invalid length. [ 609.370186][T21197] netlink: 'syz.1.6151': attribute type 8 has an invalid length. [ 609.394818][T21197] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6151'. [ 609.539394][T21201] ': port 1(team0) entered blocking state [ 609.558230][T21201] ': port 1(team0) entered disabled state [ 609.628656][T21201] device team0 entered promiscuous mode [ 609.648250][T21201] device team_slave_0 entered promiscuous mode [ 609.656144][T21201] device team_slave_1 entered promiscuous mode [ 609.682843][T21208] netlink: 'syz.0.6155': attribute type 10 has an invalid length. [ 609.693602][T21208] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6155'. [ 609.704132][T21208] device dummy0 entered promiscuous mode [ 609.712080][T21208] bridge0: port 3(dummy0) entered blocking state [ 609.718983][T21208] bridge0: port 3(dummy0) entered disabled state [ 609.727061][T21208] bridge0: port 3(dummy0) entered blocking state [ 609.733557][T21208] bridge0: port 3(dummy0) entered forwarding state [ 609.835177][T21180] chnl_net:caif_netlink_parms(): no params data found [ 609.994614][T21218] netlink: 'syz.0.6156': attribute type 3 has an invalid length. [ 610.011736][T21218] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.6156'. [ 611.127512][ T13] Bluetooth: hci3: command 0x0409 tx timeout [ 612.304241][T21180] bridge0: port 1(bridge_slave_0) entered blocking state [ 612.347370][T21180] bridge0: port 1(bridge_slave_0) entered disabled state [ 612.398279][T21180] device bridge_slave_0 entered promiscuous mode [ 612.421109][T21231] netlink: 'syz.2.6163': attribute type 2 has an invalid length. [ 612.430232][T21231] netlink: 'syz.2.6163': attribute type 8 has an invalid length. [ 612.442551][T21231] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6163'. [ 612.456909][T21180] bridge0: port 2(bridge_slave_1) entered blocking state [ 612.474509][T21180] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.483079][T21180] device bridge_slave_1 entered promiscuous mode [ 612.505841][T21234] device syzkaller0 entered promiscuous mode [ 612.578282][T21180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 612.632238][T21180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 612.749181][T21180] team0: Port device team_slave_0 added [ 612.764830][T21180] team0: Port device team_slave_1 added [ 612.801997][T21180] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 612.819762][T21180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 612.855204][T21180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 612.868426][T21180] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 612.875477][T21180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 612.910939][T21180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 613.018388][ T6748] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.060628][T21180] device hsr_slave_0 entered promiscuous mode [ 613.076879][T21180] device hsr_slave_1 entered promiscuous mode [ 613.090231][T21180] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 613.104639][T21180] Cannot create hsr debugfs directory [ 613.156060][ T6748] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.207740][ T13] Bluetooth: hci3: command 0x041b tx timeout [ 613.243555][ T6748] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.335010][ T6748] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.396479][T21271] device syzkaller0 entered promiscuous mode [ 613.586217][ T6748] tipc: Left network mode [ 614.778823][ T6748] device team0 left promiscuous mode [ 614.787291][ T6748] device team_slave_0 left promiscuous mode [ 614.804127][ T6748] device team_slave_1 left promiscuous mode [ 614.811313][ T6748] GPL: port 1(team0) entered disabled state [ 614.832384][ T6748] device hsr_slave_0 left promiscuous mode [ 614.846555][ T6748] device hsr_slave_1 left promiscuous mode [ 614.853299][ T6748] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 614.868412][ T6748] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 614.886875][ T6748] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 614.909021][ T6748] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 614.932588][ T6748] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 614.958440][ T6748] batman_adv: batadv0: Removing interface: virt_wifi0 [ 614.974823][ T6748] device bridge_slave_1 left promiscuous mode [ 614.990157][ T6748] bridge0: port 2(bridge_slave_1) entered disabled state [ 615.010875][ T6748] device bridge_slave_0 left promiscuous mode [ 615.024774][ T6748] bridge0: port 1(bridge_slave_0) entered disabled state [ 615.053010][ T6748] device veth1_macvtap left promiscuous mode [ 615.069357][ T6748] device veth0_macvtap left promiscuous mode [ 615.077939][ T6748] device veth1_vlan left promiscuous mode [ 615.083747][ T6748] device veth0_vlan left promiscuous mode [ 615.277593][ T4188] Bluetooth: hci3: command 0x040f tx timeout [ 615.597005][ T6748] team0 (unregistering): Port device team_slave_1 removed [ 615.622879][ T6748] team0 (unregistering): Port device team_slave_0 removed [ 615.644026][ T6748] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 615.665895][ T6748] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 615.754501][ T6748] bond0 (unregistering): Released all slaves [ 615.825197][T21180] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 615.878755][T21180] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 615.912428][T21180] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 615.992187][T21180] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 616.074777][T21351] netlink: 'syz.1.6193': attribute type 3 has an invalid length. [ 616.100565][T21351] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.6193'. [ 616.197722][T21180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 616.244071][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 616.258692][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 616.279016][T21180] 8021q: adding VLAN 0 to HW filter on device team0 [ 616.311709][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 616.350613][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 616.395833][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 616.403036][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 616.458128][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 616.519786][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 616.568530][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 616.577041][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 616.584162][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 616.734213][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 616.745019][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 616.759110][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 616.773395][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 616.783362][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 616.824999][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 616.854465][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 616.940503][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 616.957054][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 616.983518][T21368] device syzkaller0 entered promiscuous mode [ 617.239236][T21382] netlink: 'syz.1.6204': attribute type 10 has an invalid length. [ 617.267762][T21382] netlink: 156 bytes leftover after parsing attributes in process `syz.1.6204'. [ 617.367460][ T7] Bluetooth: hci3: command 0x0419 tx timeout [ 617.437986][T21180] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 617.485451][T21180] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 617.511406][T10438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 617.522679][T21393] FAULT_INJECTION: forcing a failure. [ 617.522679][T21393] name failslab, interval 1, probability 0, space 0, times 0 [ 617.530238][T10438] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 617.573754][T21393] CPU: 0 PID: 21393 Comm: syz.1.6206 Not tainted syzkaller #0 [ 617.581332][T21393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 617.591403][T21393] Call Trace: [ 617.594717][T21393] [ 617.597677][T21393] dump_stack_lvl+0x188/0x250 [ 617.602387][T21393] ? show_regs_print_info+0x20/0x20 [ 617.607608][T21393] ? load_image+0x400/0x400 [ 617.612189][T21393] should_fail+0x38c/0x4c0 [ 617.616678][T21393] should_failslab+0x5/0x20 [ 617.621203][T21393] slab_pre_alloc_hook+0x51/0xc0 [ 617.626173][T21393] ? skb_clone+0x1bd/0x350 [ 617.630609][T21393] kmem_cache_alloc+0x3d/0x290 [ 617.635408][T21393] skb_clone+0x1bd/0x350 [ 617.639675][T21393] __netlink_deliver_tap+0x3cd/0x7c0 [ 617.644992][T21393] netlink_deliver_tap+0x16c/0x180 [ 617.650132][T21393] netlink_unicast+0x74f/0x920 [ 617.654933][T21393] netlink_sendmsg+0x8ba/0xbe0 [ 617.659740][T21393] ? netlink_getsockopt+0x570/0x570 [ 617.664959][T21393] ? aa_sock_msg_perm+0x94/0x150 [ 617.669930][T21393] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 617.675253][T21393] ? security_socket_sendmsg+0x7c/0xa0 [ 617.680731][T21393] ? netlink_getsockopt+0x570/0x570 [ 617.685945][T21393] ____sys_sendmsg+0x5b7/0x8f0 [ 617.690749][T21393] ? __sys_sendmsg_sock+0x30/0x30 [ 617.695802][T21393] ? import_iovec+0x6f/0xa0 [ 617.700335][T21393] ___sys_sendmsg+0x236/0x2e0 [ 617.705039][T21393] ? __sys_sendmsg+0x2a0/0x2a0 [ 617.709839][T21393] ? vfs_write+0x8b2/0xd60 [ 617.714295][T21393] __se_sys_sendmsg+0x1af/0x290 [ 617.719168][T21393] ? __x64_sys_sendmsg+0x80/0x80 [ 617.724140][T21393] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 617.730164][T21393] ? lockdep_hardirqs_on+0x94/0x140 [ 617.735407][T21393] do_syscall_64+0x4c/0xa0 [ 617.739863][T21393] ? clear_bhb_loop+0x30/0x80 [ 617.744575][T21393] ? clear_bhb_loop+0x30/0x80 [ 617.749269][T21393] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 617.755194][T21393] RIP: 0033:0x7f13be317819 [ 617.759635][T21393] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 617.779278][T21393] RSP: 002b:00007f13bc571028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 617.787712][T21393] RAX: ffffffffffffffda RBX: 00007f13be590fa0 RCX: 00007f13be317819 [ 617.795697][T21393] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000005 [ 617.803694][T21393] RBP: 00007f13bc571090 R08: 0000000000000000 R09: 0000000000000000 [ 617.811678][T21393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 617.819665][T21393] R13: 00007f13be591038 R14: 00007f13be590fa0 R15: 00007ffe6d0fa918 [ 617.827665][T21393] [ 618.478831][T21415] netlink: 'syz.0.6212': attribute type 2 has an invalid length. [ 618.517403][T21415] netlink: 'syz.0.6212': attribute type 8 has an invalid length. [ 618.546415][T21415] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6212'. [ 618.589821][T21418] netlink: 'syz.2.6215': attribute type 10 has an invalid length. [ 618.612370][T21420] netlink: 'syz.1.6211': attribute type 3 has an invalid length. [ 618.617803][T21418] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6215'. [ 618.656093][T21420] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.6211'. [ 618.675566][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 618.698622][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 618.716581][T21180] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 618.793139][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 618.828809][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 618.905787][T10438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 618.956668][T10438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 619.016696][T10438] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 619.062594][T10438] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 619.109355][T21180] device veth0_vlan entered promiscuous mode [ 619.168688][T21180] device veth1_vlan entered promiscuous mode [ 619.203954][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 619.261983][T10438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 619.281115][T10438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 619.308971][T21180] device veth0_macvtap entered promiscuous mode [ 619.326232][T21180] device veth1_macvtap entered promiscuous mode [ 619.368036][T21180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 619.396959][T21180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 619.423048][T21180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 619.459620][T21180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 619.490137][T21180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 619.519422][T21180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 619.542877][T21180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 619.577318][T21180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 619.631464][T21180] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 619.698737][T21180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 619.729396][T21180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 619.773782][T21180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 619.794602][T21180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 619.817693][T21180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 619.839186][T21180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 619.877224][T21180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 619.910233][T21180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 619.937795][T21180] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 619.962460][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 619.978943][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 619.998971][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 620.031405][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 620.054884][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 620.078259][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 620.111674][T21449] device syzkaller0 entered promiscuous mode [ 620.137400][T21180] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.156343][T21180] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.175858][T21180] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.194902][T21180] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.378204][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 620.386145][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 620.425465][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 620.467243][ T309] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 620.475080][ T309] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 620.500887][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 620.650945][T21463] netlink: 'syz.2.6226': attribute type 10 has an invalid length. [ 620.659867][T21463] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6226'. [ 620.902890][T21470] netlink: 'syz.3.6140': attribute type 3 has an invalid length. [ 620.961790][T21470] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.6140'. [ 621.385936][T21496] netlink: 'syz.2.6231': attribute type 3 has an invalid length. [ 621.447943][T21496] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.6231'. [ 621.707094][T10438] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.756200][T21503] netlink: 'syz.1.6236': attribute type 2 has an invalid length. [ 621.782230][T21503] netlink: 'syz.1.6236': attribute type 8 has an invalid length. [ 621.798056][T21503] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6236'. [ 621.882512][T10438] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.162544][T10438] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.238273][T21522] netlink: 'syz.2.6243': attribute type 1 has an invalid length. [ 622.292521][T21522] netlink: 'syz.2.6243': attribute type 4 has an invalid length. [ 622.377551][T21522] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.6243'. [ 622.395277][T10438] batman_adv: batadv0: Removing interface: netdevsim0 [ 622.425190][T10438] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.462697][T21531] device syzkaller0 entered promiscuous mode [ 622.485349][T21489] chnl_net:caif_netlink_parms(): no params data found [ 622.697592][T21489] bridge0: port 1(bridge_slave_0) entered blocking state [ 622.705224][T21489] bridge0: port 1(bridge_slave_0) entered disabled state [ 622.715643][T21489] device bridge_slave_0 entered promiscuous mode [ 622.747514][T21489] bridge0: port 2(bridge_slave_1) entered blocking state [ 622.835732][T21489] bridge0: port 2(bridge_slave_1) entered disabled state [ 622.871844][T21489] device bridge_slave_1 entered promiscuous mode [ 622.918845][T21551] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.6249'. [ 622.948732][T10438] tipc: Left network mode [ 623.019719][T21489] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 623.137931][T21489] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 623.225949][T21568] FAULT_INJECTION: forcing a failure. [ 623.225949][T21568] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 623.264326][T21563] netlink: 'syz.3.6251': attribute type 3 has an invalid length. [ 623.284459][T21568] CPU: 0 PID: 21568 Comm: syz.4.6253 Not tainted syzkaller #0 [ 623.292035][T21568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 623.297937][T21563] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.6251'. [ 623.302108][T21568] Call Trace: [ 623.302136][T21568] [ 623.302145][T21568] dump_stack_lvl+0x188/0x250 [ 623.302172][T21568] ? show_regs_print_info+0x20/0x20 [ 623.302193][T21568] ? load_image+0x400/0x400 [ 623.302219][T21568] ? __lock_acquire+0x7d10/0x7d10 [ 623.302248][T21568] should_fail+0x38c/0x4c0 [ 623.341664][T21568] _copy_to_user+0x2e/0x130 [ 623.346200][T21568] simple_read_from_buffer+0xe3/0x150 [ 623.351615][T21568] proc_fail_nth_read+0x1a6/0x220 [ 623.356682][T21568] ? proc_fault_inject_write+0x310/0x310 [ 623.362446][T21568] ? fsnotify_perm+0x254/0x560 [ 623.367239][T21568] ? proc_fault_inject_write+0x310/0x310 [ 623.372901][T21568] vfs_read+0x301/0xd60 [ 623.377087][T21568] ? kernel_read+0x1e0/0x1e0 [ 623.381700][T21568] ? rcu_nmi_exit+0x6f/0xf0 [ 623.386232][T21568] ? __fget_files+0x40f/0x480 [ 623.390940][T21568] ? mutex_lock_nested+0x17/0x20 [ 623.395905][T21568] ? __fdget_pos+0x2bf/0x370 [ 623.400514][T21568] ? ksys_read+0x71/0x260 [ 623.404875][T21568] ksys_read+0x152/0x260 [ 623.409149][T21568] ? vfs_write+0xd60/0xd60 [ 623.413578][T21568] ? syscall_enter_from_user_mode+0x2a/0x70 [ 623.419490][T21568] do_syscall_64+0x4c/0xa0 [ 623.423916][T21568] ? clear_bhb_loop+0x30/0x80 [ 623.428604][T21568] ? clear_bhb_loop+0x30/0x80 [ 623.433292][T21568] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 623.439194][T21568] RIP: 0033:0x7ff0e6cdb04e [ 623.443628][T21568] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 623.463362][T21568] RSP: 002b:00007ff0e4f73fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 623.471800][T21568] RAX: ffffffffffffffda RBX: 00007ff0e4f746c0 RCX: 00007ff0e6cdb04e [ 623.479790][T21568] RDX: 000000000000000f RSI: 00007ff0e4f740a0 RDI: 0000000000000008 [ 623.487769][T21568] RBP: 00007ff0e4f74090 R08: 0000000000000000 R09: 0000000000000000 [ 623.495752][T21568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 623.503734][T21568] R13: 00007ff0e6f94038 R14: 00007ff0e6f93fa0 R15: 00007ffd3bb58808 [ 623.511733][T21568] [ 623.520785][ T7] Bluetooth: hci4: command 0x0409 tx timeout [ 623.549123][T21489] team0: Port device team_slave_0 added [ 623.556974][T21489] team0: Port device team_slave_1 added [ 623.584465][T21572] netlink: 'syz.1.6254': attribute type 2 has an invalid length. [ 623.601591][T21572] netlink: 'syz.1.6254': attribute type 8 has an invalid length. [ 623.616777][T21572] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6254'. [ 623.660133][T21489] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 623.671127][T21489] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 623.718342][T21489] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 623.744355][T21489] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 623.761922][T21489] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 623.825391][T21489] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 623.890524][T21588] device syzkaller0 entered promiscuous mode [ 623.940119][T21489] device hsr_slave_0 entered promiscuous mode [ 623.963880][T21489] device hsr_slave_1 entered promiscuous mode [ 623.985221][T21489] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 624.009880][T21489] Cannot create hsr debugfs directory [ 624.079368][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.085780][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.546555][T21615] netlink: 'syz.4.6264': attribute type 3 has an invalid length. [ 624.562989][T21615] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.6264'. [ 624.819197][T21629] netlink: 'syz.2.6270': attribute type 2 has an invalid length. [ 624.840491][T21629] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6270'. [ 624.877696][T21636] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6271'. [ 625.055712][T10438] device team0 left promiscuous mode [ 625.070985][T10438] device team_slave_0 left promiscuous mode [ 625.077635][T10438] device team_slave_1 left promiscuous mode [ 625.084369][T10438] GPL: port 1(team0) entered disabled state [ 625.114929][T10438] device hsr_slave_0 left promiscuous mode [ 625.129261][T10438] device hsr_slave_1 left promiscuous mode [ 625.157968][T10438] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 625.171094][T10438] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 625.198996][T10438] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 625.212293][T10438] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 625.272038][T10438] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 625.283016][T10438] batman_adv: batadv0: Removing interface: virt_wifi0 [ 625.607837][ T4188] Bluetooth: hci4: command 0x041b tx timeout [ 626.304189][T10438] bridge0: port 3(dummy0) entered disabled state [ 626.317467][T10438] device bridge_slave_1 left promiscuous mode [ 626.323677][T10438] bridge0: port 2(bridge_slave_1) entered disabled state [ 626.339671][T10438] device bridge_slave_0 left promiscuous mode [ 626.346128][T10438] bridge0: port 1(bridge_slave_0) entered disabled state [ 626.364868][T10438] device veth1_macvtap left promiscuous mode [ 626.371607][T10438] device veth0_macvtap left promiscuous mode [ 626.378506][T10438] device veth1_vlan left promiscuous mode [ 626.384495][T10438] device veth0_vlan left promiscuous mode [ 626.825642][T10438] team0 (unregistering): Port device team_slave_1 removed [ 626.846833][T10438] team0 (unregistering): Port device team_slave_0 removed [ 626.861425][T10438] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 626.878584][T10438] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 626.946149][T10438] bond0 (unregistering): Released all slaves [ 627.046910][T21489] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 627.089904][T21489] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 627.133329][T21489] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 627.179804][T21489] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 627.219697][T21674] validate_nla: 3 callbacks suppressed [ 627.219712][T21674] netlink: 'syz.2.6282': attribute type 2 has an invalid length. [ 627.246260][T21674] netlink: 'syz.2.6282': attribute type 8 has an invalid length. [ 627.265519][T21674] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6282'. [ 627.431155][T21489] 8021q: adding VLAN 0 to HW filter on device bond0 [ 627.480232][T21489] 8021q: adding VLAN 0 to HW filter on device team0 [ 627.497328][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 627.506719][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 627.530006][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 627.559898][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 627.639138][T21703] FAULT_INJECTION: forcing a failure. [ 627.639138][T21703] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 627.675388][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 627.682701][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 627.691217][ T4188] Bluetooth: hci4: command 0x040f tx timeout [ 627.704995][T21703] CPU: 1 PID: 21703 Comm: syz.3.6289 Not tainted syzkaller #0 [ 627.712488][T21703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 627.722568][T21703] Call Trace: [ 627.725888][T21703] [ 627.728839][T21703] dump_stack_lvl+0x188/0x250 [ 627.733545][T21703] ? show_regs_print_info+0x20/0x20 [ 627.738774][T21703] ? load_image+0x400/0x400 [ 627.743339][T21703] ? __lock_acquire+0x7d10/0x7d10 [ 627.748407][T21703] should_fail+0x38c/0x4c0 [ 627.749478][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 627.752874][T21703] _copy_from_user+0x2e/0x170 [ 627.765615][T21703] sock_do_ioctl+0x18c/0x320 [ 627.770362][T21703] ? sock_show_fdinfo+0xb0/0xb0 [ 627.775299][T21703] sock_ioctl+0x4d2/0x710 [ 627.779655][T21703] ? sock_poll+0x410/0x410 [ 627.784103][T21703] ? bpf_lsm_file_ioctl+0x5/0x10 [ 627.789063][T21703] ? security_file_ioctl+0x7c/0xa0 [ 627.793390][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 627.794305][T21703] ? sock_poll+0x410/0x410 [ 627.806789][T21703] __se_sys_ioctl+0xfa/0x170 [ 627.811408][T21703] do_syscall_64+0x4c/0xa0 [ 627.815855][T21703] ? clear_bhb_loop+0x30/0x80 [ 627.820566][T21703] ? clear_bhb_loop+0x30/0x80 [ 627.823160][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 627.825274][T21703] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 627.825304][T21703] RIP: 0033:0x7fa54e89f819 [ 627.832517][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 627.838315][T21703] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 627.838333][T21703] RSP: 002b:00007fa54caf9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 627.877984][T21703] RAX: ffffffffffffffda RBX: 00007fa54eb18fa0 RCX: 00007fa54e89f819 [ 627.885977][T21703] RDX: 0000000000000000 RSI: 00000000000089e0 RDI: 0000000000000003 [ 627.893982][T21703] RBP: 00007fa54caf9090 R08: 0000000000000000 R09: 0000000000000000 [ 627.902085][T21703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 627.910081][T21703] R13: 00007fa54eb19038 R14: 00007fa54eb18fa0 R15: 00007fffe88fe688 [ 627.918097][T21703] [ 627.921109][T21701] netlink: 'syz.1.6290': attribute type 3 has an invalid length. [ 627.935502][T21701] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.6290'. [ 627.938154][T21699] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.6287'. [ 627.987416][T21698] netlink: 'syz.4.6288': attribute type 10 has an invalid length. [ 628.069291][T21698] device wg1 entered promiscuous mode [ 628.085642][T21698] team0: Device wg1 is of different type [ 628.133987][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 628.157929][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 628.189675][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 628.218382][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 628.236234][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 628.285893][T21489] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 628.337268][T21489] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 628.480387][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 628.498964][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 628.526801][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 628.575505][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 628.606381][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 628.635035][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 628.651983][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 628.663542][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 628.696718][T21726] device syzkaller0 entered promiscuous mode [ 629.029720][T21748] netlink: 'syz.2.6299': attribute type 10 has an invalid length. [ 629.075705][T21748] device wg1 entered promiscuous mode [ 629.114755][T21748] team0: Device wg1 is of different type [ 629.197770][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 629.205332][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 629.251727][T21489] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 629.344198][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 629.364957][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 629.454912][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 629.491232][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 629.549465][T21489] device veth0_vlan entered promiscuous mode [ 629.557702][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 629.590625][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 629.623411][T21489] device veth1_vlan entered promiscuous mode [ 629.748948][ T6748] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 629.757974][ T7] Bluetooth: hci4: command 0x0419 tx timeout [ 629.797627][ T6748] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 629.814929][ T6748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 629.834293][ T6748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 629.856297][T21489] device veth0_macvtap entered promiscuous mode [ 629.904626][T21489] device veth1_macvtap entered promiscuous mode [ 629.931479][T21772] netlink: 'syz.4.6305': attribute type 3 has an invalid length. [ 629.959343][T21489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 629.974279][T21772] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.6305'. [ 630.021362][T21489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.073138][T21489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 630.092231][T21489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.115010][T21489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 630.136709][T21489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.158603][T21489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 630.201241][T21489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.234552][T21489] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 630.264396][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 630.284579][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 630.310645][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 630.355585][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 630.386992][T21489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 630.433333][T21489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.457191][T21489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 630.497002][T21489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.527330][T21489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 630.558533][T21489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.584796][T21489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 630.626210][T21489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.689101][T21489] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 630.727224][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 630.752202][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 630.818936][T21793] device syzkaller0 entered promiscuous mode [ 630.826684][T21489] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.866629][T21489] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.896703][T21489] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.921592][T21489] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.326770][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 631.364786][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 631.383511][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 631.465443][ T6748] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 631.479230][ T6748] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 631.516434][ T6748] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 631.912592][T21846] netlink: 'syz.1.6319': attribute type 3 has an invalid length. [ 631.921424][T21846] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.6319'. [ 632.349892][ T6748] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.514858][ T6748] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.686290][ T6748] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.857637][ T6748] batman_adv: batadv0: Removing interface: netdevsim0 [ 632.871886][ T6748] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.886197][T21877] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6330'. [ 632.958520][T21851] chnl_net:caif_netlink_parms(): no params data found [ 633.305332][T21896] netlink: 'syz.1.6336': attribute type 3 has an invalid length. [ 633.316970][T21896] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.6336'. [ 634.329077][ T4188] Bluetooth: hci0: command 0x0409 tx timeout [ 636.226442][T21851] bridge0: port 1(bridge_slave_0) entered blocking state [ 636.297193][T21851] bridge0: port 1(bridge_slave_0) entered disabled state [ 636.321124][T21851] device bridge_slave_0 entered promiscuous mode [ 636.349408][T21851] bridge0: port 2(bridge_slave_1) entered blocking state [ 636.356562][T21851] bridge0: port 2(bridge_slave_1) entered disabled state [ 636.381017][T21851] device bridge_slave_1 entered promiscuous mode [ 636.407456][ T4228] Bluetooth: hci0: command 0x041b tx timeout [ 636.439766][T21908] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6340'. [ 636.484305][T21851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 636.521191][T21851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 636.631759][T21851] team0: Port device team_slave_0 added [ 636.684266][ T6748] tipc: Left network mode [ 636.692844][T21851] team0: Port device team_slave_1 added [ 636.775629][T21851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 636.786072][T21851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 636.843618][T21851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 636.878589][T21851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 636.894162][T21851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 636.959390][T21851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 637.120996][T21851] device hsr_slave_0 entered promiscuous mode [ 637.158926][T21851] device hsr_slave_1 entered promiscuous mode [ 637.176702][T21851] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 637.194985][T21851] Cannot create hsr debugfs directory [ 637.279871][T21943] netlink: 'syz.1.6346': attribute type 10 has an invalid length. [ 637.420874][T21943] device team0 left promiscuous mode [ 637.473775][T21943] device team_slave_0 left promiscuous mode [ 637.486791][T21943] device team_slave_1 left promiscuous mode [ 637.494556][T21943] ': port 1(team0) entered disabled state [ 637.508351][T21943] 8021q: adding VLAN 0 to HW filter on device team0 [ 637.525813][T21943] bond0: (slave team0): Enslaving as an active interface with an up link [ 637.534275][T21948] netlink: 'syz.3.6348': attribute type 3 has an invalid length. [ 637.534294][T21948] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.6348'. [ 638.251509][T21990] FAULT_INJECTION: forcing a failure. [ 638.251509][T21990] name failslab, interval 1, probability 0, space 0, times 0 [ 638.264313][T21990] CPU: 1 PID: 21990 Comm: syz.4.6358 Not tainted syzkaller #0 [ 638.271782][T21990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 638.281856][T21990] Call Trace: [ 638.285148][T21990] [ 638.288091][T21990] dump_stack_lvl+0x188/0x250 [ 638.292793][T21990] ? show_regs_print_info+0x20/0x20 [ 638.298025][T21990] ? load_image+0x400/0x400 [ 638.302562][T21990] ? rcu_lock_release+0x5/0x20 [ 638.307347][T21990] should_fail+0x38c/0x4c0 [ 638.311787][T21990] should_failslab+0x5/0x20 [ 638.316317][T21990] slab_pre_alloc_hook+0x51/0xc0 [ 638.321286][T21990] ? __nf_conntrack_alloc+0x99/0x380 [ 638.326591][T21990] kmem_cache_alloc+0x3d/0x290 [ 638.331382][T21990] __nf_conntrack_alloc+0x99/0x380 [ 638.336515][T21990] init_conntrack+0x258/0x14d0 [ 638.341351][T21990] ? __nf_conntrack_find_get+0x581/0x650 [ 638.347007][T21990] ? early_drop+0x810/0x810 [ 638.351531][T21990] ? nf_conntrack_find_get+0x670/0x670 [ 638.357015][T21990] ? __siphash_unaligned+0x258/0x3a0 [ 638.362335][T21990] nf_conntrack_in+0xd38/0x1730 [ 638.367221][T21990] ? nf_ct_pernet+0x240/0x240 [ 638.371931][T21990] ? ip6t_alloc_initial_table+0x640/0x640 [ 638.377694][T21990] ? ipv6_defrag+0x2d2/0x3a0 [ 638.382319][T21990] ? ipv4_confirm+0x220/0x220 [ 638.387036][T21990] nf_hook_slow+0xb9/0x200 [ 638.391470][T21990] ? refcount_add+0x80/0x80 [ 638.395990][T21990] NF_HOOK+0x1f2/0x390 [ 638.400091][T21990] ? refcount_add+0x80/0x80 [ 638.404621][T21990] ? ip6_rcv_core+0x1620/0x1620 [ 638.409489][T21990] ? refcount_add+0x80/0x80 [ 638.414014][T21990] ? ip6_rcv_finish_core+0x420/0x420 [ 638.419317][T21990] __netif_receive_skb+0xcc/0x290 [ 638.424364][T21990] ? ktime_get_with_offset+0x2d7/0x320 [ 638.429844][T21990] netif_receive_skb+0x19e/0x700 [ 638.434809][T21990] ? _copy_from_iter+0x5cb/0x1170 [ 638.439861][T21990] ? netif_receive_skb_core+0x210/0x210 [ 638.445435][T21990] tun_rx_batched+0x5fb/0x760 [ 638.450131][T21990] ? lockdep_hardirqs_on_prepare+0x770/0x770 [ 638.456139][T21990] ? local_bh_enable+0x20/0x20 [ 638.460924][T21990] ? __local_bh_enable_ip+0x136/0x1c0 [ 638.466313][T21990] ? read_lock_is_recursive+0x10/0x10 [ 638.471726][T21990] ? __local_bh_enable_ip+0x136/0x1c0 [ 638.477117][T21990] ? _local_bh_enable+0xa0/0xa0 [ 638.481983][T21990] ? skb_copy_datagram_from_iter+0x5ab/0x6a0 [ 638.487995][T21990] tun_get_user+0x2517/0x3a70 [ 638.492705][T21990] ? tun_ring_recv+0xc40/0xc40 [ 638.497500][T21990] ? rcu_lock_release+0x5/0x20 [ 638.502308][T21990] ? __lock_acquire+0x7d10/0x7d10 [ 638.507364][T21990] tun_chr_write_iter+0x112/0x1e0 [ 638.512437][T21990] vfs_write+0x745/0xd60 [ 638.516726][T21990] ? file_end_write+0x250/0x250 [ 638.517596][ T4188] Bluetooth: hci0: command 0x040f tx timeout [ 638.521600][T21990] ? __fget_files+0x40f/0x480 [ 638.521649][T21990] ? __fdget_pos+0x1e2/0x370 [ 638.536880][T21990] ? ksys_write+0x71/0x260 [ 638.541319][T21990] ksys_write+0x152/0x260 [ 638.545671][T21990] ? __ia32_sys_read+0x80/0x80 [ 638.550464][T21990] ? lockdep_hardirqs_on+0x94/0x140 [ 638.555701][T21990] do_syscall_64+0x4c/0xa0 [ 638.560140][T21990] ? clear_bhb_loop+0x30/0x80 [ 638.564840][T21990] ? clear_bhb_loop+0x30/0x80 [ 638.569538][T21990] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 638.575454][T21990] RIP: 0033:0x7ff0e6d1a819 [ 638.579886][T21990] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 638.599508][T21990] RSP: 002b:00007ff0e4f53028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 638.607945][T21990] RAX: ffffffffffffffda RBX: 00007ff0e6f94090 RCX: 00007ff0e6d1a819 [ 638.615946][T21990] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 638.623935][T21990] RBP: 00007ff0e4f53090 R08: 0000000000000000 R09: 0000000000000000 [ 638.632065][T21990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 638.640050][T21990] R13: 00007ff0e6f94128 R14: 00007ff0e6f94090 R15: 00007ffd3bb58808 [ 638.648065][T21990] [ 639.983173][T21851] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 640.015919][T21851] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 640.066822][T21851] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 640.095800][ T6748] device team0 left promiscuous mode [ 640.110907][ T6748] device team_slave_0 left promiscuous mode [ 640.135827][ T6748] device team_slave_1 left promiscuous mode [ 640.172970][ T6748] GPL: port 1(team0) entered disabled state [ 640.427384][ T6748] device hsr_slave_0 left promiscuous mode [ 640.486411][ T6748] device hsr_slave_1 left promiscuous mode [ 640.496609][ T6748] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 640.541152][T22030] netlink: 'syz.3.6369': attribute type 3 has an invalid length. [ 640.550563][ T6748] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 640.558005][ T4269] Bluetooth: hci0: command 0x0419 tx timeout [ 640.573420][ T6748] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 640.587257][T22030] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.6369'. [ 640.601479][ T6748] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 640.619785][ T6748] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 640.640723][ T6748] batman_adv: batadv0: Removing interface: virt_wifi0 [ 640.648755][ T6748] device bridge_slave_1 left promiscuous mode [ 640.655147][ T6748] bridge0: port 2(bridge_slave_1) entered disabled state [ 640.678208][ T6748] device bridge_slave_0 left promiscuous mode [ 640.692470][ T6748] bridge0: port 1(bridge_slave_0) entered disabled state [ 640.753956][ T6748] device veth1_macvtap left promiscuous mode [ 640.782748][ T6748] device veth0_macvtap left promiscuous mode [ 640.804247][ T6748] device veth1_vlan left promiscuous mode [ 641.440045][ T6748] team0 (unregistering): Port device team_slave_1 removed [ 641.464826][ T6748] team0 (unregistering): Port device team_slave_0 removed [ 641.495881][ T6748] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 641.532802][ T6748] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 641.680681][ T6748] bond0 (unregistering): Released all slaves [ 641.764095][T21851] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 641.797561][T22036] netlink: 'syz.0.6372': attribute type 2 has an invalid length. [ 641.805331][T22036] netlink: 'syz.0.6372': attribute type 8 has an invalid length. [ 641.844100][T22036] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6372'. [ 642.140695][T21851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 642.202454][T22066] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6374'. [ 642.248086][T22066] bond0: (slave bond_slave_0): Releasing backup interface [ 642.299099][T22066] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 642.384659][T21851] 8021q: adding VLAN 0 to HW filter on device team0 [ 642.467729][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 642.485847][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 642.536755][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 642.560804][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 642.595754][ T309] bridge0: port 1(bridge_slave_0) entered blocking state [ 642.602964][ T309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 642.733467][T22080] netlink: 'syz.3.6377': attribute type 10 has an invalid length. [ 642.831755][T22080] 8021q: adding VLAN 0 to HW filter on device team0 [ 642.873133][T22080] bond0: (slave team0): Enslaving as an active interface with an up link [ 642.939648][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 642.984833][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 642.996420][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 643.013338][ T309] bridge0: port 2(bridge_slave_1) entered blocking state [ 643.020625][ T309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 643.038647][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 643.061251][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 643.090553][T22090] netlink: 'syz.1.6379': attribute type 10 has an invalid length. [ 643.107566][T22090] netlink: 156 bytes leftover after parsing attributes in process `syz.1.6379'. [ 643.147337][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 643.196581][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 643.247932][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 643.295825][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 643.323591][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 643.356954][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 643.382866][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 643.518679][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 643.540096][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 643.576854][T22122] netlink: 'syz.3.6383': attribute type 3 has an invalid length. [ 643.598048][T22122] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.6383'. [ 643.611278][T22111] netlink: 'syz.1.6385': attribute type 2 has an invalid length. [ 643.624917][T22111] netlink: 'syz.1.6385': attribute type 8 has an invalid length. [ 643.640089][T22111] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6385'. [ 643.664181][T21851] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 644.242456][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 644.273613][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 644.323128][T21851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 644.432559][T22145] netlink: 'syz.3.6392': attribute type 3 has an invalid length. [ 644.445413][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 644.457295][T22145] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.6392'. [ 644.487478][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 644.519986][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 644.537742][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 644.573948][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 644.599253][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 644.631661][T21851] device veth0_vlan entered promiscuous mode [ 644.668447][T21851] device veth1_vlan entered promiscuous mode [ 644.731250][T10438] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 644.758019][T10438] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 644.772617][T10438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 644.801825][T10438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 644.834390][T21851] device veth0_macvtap entered promiscuous mode [ 644.851800][T22160] netlink: 'syz.0.6395': attribute type 10 has an invalid length. [ 647.708087][T22160] 8021q: adding VLAN 0 to HW filter on device team0 [ 647.720471][T22160] bond0: (slave team0): Enslaving as an active interface with an up link [ 647.741135][T21851] device veth1_macvtap entered promiscuous mode [ 647.762342][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 647.777686][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 647.792354][T22166] netlink: 'syz.3.6399': attribute type 2 has an invalid length. [ 647.802695][T22166] netlink: 'syz.3.6399': attribute type 8 has an invalid length. [ 647.822897][T22166] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6399'. [ 647.927826][T21851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 647.995823][T21851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 648.046146][T21851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 648.068480][T21851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 648.089684][T21851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 648.096042][T22170] netlink: 'syz.0.6401': attribute type 3 has an invalid length. [ 648.120662][T21851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 648.137156][T21851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 648.148395][T22170] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.6401'. [ 648.159623][T21851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 648.191420][T21851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 648.249294][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 648.288438][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 648.326516][T21851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 648.345966][T21851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 648.356819][T21851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 648.375291][T21851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 648.385698][T21851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 648.405883][T21851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 648.416250][T21851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 648.433284][T21851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 648.454315][T21851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 648.481342][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 648.502364][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 648.535894][T21851] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.585459][T21851] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.624764][T21851] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.644971][T21851] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.840214][T22192] delete_channel: no stack [ 648.866942][ T1217] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 648.883980][ T1217] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 648.959888][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 648.992482][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 649.037144][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 649.044751][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 649.244965][T22208] FAULT_INJECTION: forcing a failure. [ 649.244965][T22208] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 649.267299][T22208] CPU: 1 PID: 22208 Comm: syz.4.6413 Not tainted syzkaller #0 [ 649.274792][T22208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 649.284889][T22208] Call Trace: [ 649.288191][T22208] [ 649.291139][T22208] dump_stack_lvl+0x188/0x250 [ 649.295845][T22208] ? show_regs_print_info+0x20/0x20 [ 649.301070][T22208] ? load_image+0x400/0x400 [ 649.305598][T22208] ? __lock_acquire+0x7d10/0x7d10 [ 649.310639][T22208] ? vfs_write+0x8b2/0xd60 [ 649.315079][T22208] should_fail+0x38c/0x4c0 [ 649.319520][T22208] _copy_from_user+0x2e/0x170 [ 649.324226][T22208] __sys_bpf+0x26d/0x6f0 [ 649.328493][T22208] ? bpf_link_show_fdinfo+0x380/0x380 [ 649.333912][T22208] ? rcu_nmi_exit+0x6f/0xf0 [ 649.338442][T22208] ? vtime_user_exit+0x2c8/0x3e0 [ 649.343401][T22208] __x64_sys_bpf+0x78/0x90 [ 649.347838][T22208] do_syscall_64+0x4c/0xa0 [ 649.352279][T22208] ? clear_bhb_loop+0x30/0x80 [ 649.356977][T22208] ? clear_bhb_loop+0x30/0x80 [ 649.361675][T22208] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 649.367592][T22208] RIP: 0033:0x7ff0e6d1a819 [ 649.372032][T22208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 649.391652][T22208] RSP: 002b:00007ff0e4f74028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 649.400086][T22208] RAX: ffffffffffffffda RBX: 00007ff0e6f93fa0 RCX: 00007ff0e6d1a819 [ 649.408075][T22208] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 649.416075][T22208] RBP: 00007ff0e4f74090 R08: 0000000000000000 R09: 0000000000000000 [ 649.424073][T22208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 649.432069][T22208] R13: 00007ff0e6f94038 R14: 00007ff0e6f93fa0 R15: 00007ffd3bb58808 [ 649.440076][T22208] [ 652.293223][T22227] netlink: 'syz.4.6420': attribute type 10 has an invalid length. [ 652.346681][T22227] team0: Device wg1 is of different type [ 652.761859][T22247] netlink: 'syz.4.6426': attribute type 10 has an invalid length. [ 652.820717][T22247] device syz_tun entered promiscuous mode [ 652.898664][T22247] team0: Port device syz_tun added [ 652.918755][T22252] netlink: 'syz.4.6426': attribute type 4 has an invalid length. [ 652.926576][T22252] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6426'. [ 653.075390][T22251] netlink: 'syz.2.6427': attribute type 3 has an invalid length. [ 653.127860][T22251] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.6427'. [ 653.147071][T22258] Dead loop on virtual device ip6_vti0, fix it urgently! [ 653.179753][T22252] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 653.246520][T22249] netlink: 'syz.3.6425': attribute type 10 has an invalid length. [ 653.272125][T22249] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6425'. [ 656.848198][T22288] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6437'. [ 656.869125][T22288] bond0: (slave bond_slave_0): Releasing backup interface [ 656.938359][T22288] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 657.163023][T22311] netlink: 'syz.3.6444': attribute type 10 has an invalid length. [ 657.192384][T22311] team0: Port device syz_tun added [ 657.222956][T22309] netlink: 'syz.2.6446': attribute type 1 has an invalid length. [ 657.231857][T22309] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.6446'. [ 657.271602][T22311] netlink: 'syz.3.6444': attribute type 4 has an invalid length. [ 657.281277][T22311] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6444'. [ 657.393470][T22311] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 657.690954][T22329] Dead loop on virtual device ip6_vti0, fix it urgently! [ 657.745471][T22328] netlink: 'syz.3.6452': attribute type 2 has an invalid length. [ 657.769955][T22328] netlink: 'syz.3.6452': attribute type 8 has an invalid length. [ 657.796453][T22328] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6452'. [ 658.041529][T22341] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6456'. [ 658.295101][T22349] netlink: 'syz.4.6460': attribute type 2 has an invalid length. [ 658.330782][T22349] netlink: 'syz.4.6460': attribute type 8 has an invalid length. [ 658.347578][T22349] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6460'. [ 658.623085][T22369] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.6474'. [ 658.834844][T22375] netlink: 'syz.0.6467': attribute type 2 has an invalid length. [ 658.865566][T22375] netlink: 'syz.0.6467': attribute type 8 has an invalid length. [ 658.885759][T22375] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6467'. [ 658.954813][T22378] netlink: 'syz.4.6469': attribute type 1 has an invalid length. [ 658.977256][T22378] netlink: 161700 bytes leftover after parsing attributes in process `syz.4.6469'. [ 659.075859][T22381] netlink: 'syz.2.6470': attribute type 10 has an invalid length. [ 659.105125][T22381] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6470'. [ 659.415462][T22390] netlink: 'syz.2.6484': attribute type 2 has an invalid length. [ 659.447978][T22390] netlink: 'syz.2.6484': attribute type 8 has an invalid length. [ 659.476562][T22390] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6484'. [ 659.694859][T22399] Dead loop on virtual device ip6_vti0, fix it urgently! [ 659.997751][T22414] netlink: 'syz.2.6483': attribute type 10 has an invalid length. [ 660.090900][T22414] team0: Port device syz_tun added [ 660.121868][T22417] netlink: 'syz.2.6483': attribute type 4 has an invalid length. [ 660.137363][T22417] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6483'. [ 660.262907][T22417] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 660.770606][T22433] ': port 1(team0) entered blocking state [ 660.814745][T22433] ': port 1(team0) entered disabled state [ 660.927730][T22433] device team0 entered promiscuous mode [ 660.933540][T22433] device team_slave_0 entered promiscuous mode [ 660.967873][T22433] device team_slave_1 entered promiscuous mode [ 660.975149][T22433] device syz_tun entered promiscuous mode [ 661.007938][T22438] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6488'. [ 661.197001][T22446] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.6491'. [ 661.336338][T22459] device syzkaller0 entered promiscuous mode [ 662.372342][T22511] device syzkaller0 entered promiscuous mode [ 662.753615][T22525] device syzkaller0 entered promiscuous mode [ 663.288439][T22541] __nla_validate_parse: 10 callbacks suppressed [ 663.288458][T22541] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.6524'. [ 663.733886][T22546] netlink: 15743 bytes leftover after parsing attributes in process `syz.3.6527'. [ 663.870083][T22546] validate_nla: 13 callbacks suppressed [ 663.870098][T22546] netlink: 'syz.3.6527': attribute type 10 has an invalid length. [ 663.899220][T22546] device veth0_macvtap left promiscuous mode [ 664.003064][T22552] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6529'. [ 664.063749][T22556] device syzkaller0 entered promiscuous mode [ 664.303154][T22562] netlink: 'syz.4.6536': attribute type 10 has an invalid length. [ 664.312872][T22562] netlink: 156 bytes leftover after parsing attributes in process `syz.4.6536'. [ 664.555771][T22573] netlink: 'syz.3.6539': attribute type 3 has an invalid length. [ 664.607154][T22573] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.6539'. [ 664.634948][T22584] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6544'. [ 664.691230][T22584] bond0: (slave bond_slave_0): Releasing backup interface [ 664.739131][T22584] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 665.045736][T22593] netlink: 'syz.1.6548': attribute type 2 has an invalid length. [ 665.086578][T22593] netlink: 'syz.1.6548': attribute type 8 has an invalid length. [ 665.106484][T22593] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6548'. [ 665.313205][T22604] netlink: 'syz.2.6551': attribute type 10 has an invalid length. [ 665.367400][T22604] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6551'. [ 665.389073][T22607] netlink: 'syz.3.6552': attribute type 11 has an invalid length. [ 665.409123][T22607] netlink: 168 bytes leftover after parsing attributes in process `syz.3.6552'. [ 665.531603][T22615] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6557'. [ 665.628721][T22615] bond0: (slave bond_slave_0): Releasing backup interface [ 665.716697][T22615] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 665.759917][T22622] FAULT_INJECTION: forcing a failure. [ 665.759917][T22622] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 665.808387][T22623] netlink: 'syz.3.6559': attribute type 3 has an invalid length. [ 665.839319][T22622] CPU: 1 PID: 22622 Comm: syz.1.6560 Not tainted syzkaller #0 [ 665.846905][T22622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 665.856988][T22622] Call Trace: [ 665.860291][T22622] [ 665.863243][T22622] dump_stack_lvl+0x188/0x250 [ 665.867955][T22622] ? show_regs_print_info+0x20/0x20 [ 665.873171][T22622] ? load_image+0x400/0x400 [ 665.877697][T22622] ? __lock_acquire+0x7d10/0x7d10 [ 665.882791][T22622] should_fail+0x38c/0x4c0 [ 665.887234][T22622] _copy_from_user+0x2e/0x170 [ 665.891934][T22622] iovec_from_user+0x142/0x370 [ 665.896722][T22622] __import_iovec+0x70/0x490 [ 665.901347][T22622] import_iovec+0x6f/0xa0 [ 665.905709][T22622] ___sys_sendmsg+0x1fd/0x2e0 [ 665.910416][T22622] ? __sys_sendmsg+0x2a0/0x2a0 [ 665.915213][T22622] ? trace_event_raw_event_lock+0x270/0x270 [ 665.921124][T22622] ? vfs_write+0x8b2/0xd60 [ 665.925580][T22622] __se_sys_sendmsg+0x1af/0x290 [ 665.930486][T22622] ? __x64_sys_sendmsg+0x80/0x80 [ 665.935452][T22622] ? syscall_enter_from_user_mode+0x2a/0x70 [ 665.941369][T22622] do_syscall_64+0x4c/0xa0 [ 665.945796][T22622] ? clear_bhb_loop+0x30/0x80 [ 665.950488][T22622] ? clear_bhb_loop+0x30/0x80 [ 665.955205][T22622] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 665.961116][T22622] RIP: 0033:0x7f13be317819 [ 665.965558][T22622] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 665.985198][T22622] RSP: 002b:00007f13bc571028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 665.993628][T22622] RAX: ffffffffffffffda RBX: 00007f13be590fa0 RCX: 00007f13be317819 [ 666.001618][T22622] RDX: 0000000000008810 RSI: 0000200000000000 RDI: 0000000000000006 [ 666.009602][T22622] RBP: 00007f13bc571090 R08: 0000000000000000 R09: 0000000000000000 [ 666.017608][T22622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 666.025611][T22622] R13: 00007f13be591038 R14: 00007f13be590fa0 R15: 00007ffe6d0fa918 [ 666.033616][T22622] [ 666.222777][T22631] netlink: 'syz.4.6563': attribute type 2 has an invalid length. [ 666.256439][T22631] netlink: 'syz.4.6563': attribute type 8 has an invalid length. [ 667.047454][T22654] device syzkaller0 entered promiscuous mode [ 667.171506][T22660] device dummy0 entered promiscuous mode [ 667.207280][T22660] bridge0: port 3(dummy0) entered blocking state [ 667.246567][T22660] bridge0: port 3(dummy0) entered disabled state [ 667.310347][T22660] bridge0: port 3(dummy0) entered blocking state [ 667.316945][T22660] bridge0: port 3(dummy0) entered forwarding state [ 667.570396][T22675] FAULT_INJECTION: forcing a failure. [ 667.570396][T22675] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 667.629602][T22675] CPU: 0 PID: 22675 Comm: syz.3.6580 Not tainted syzkaller #0 [ 667.637124][T22675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 667.647209][T22675] Call Trace: [ 667.650511][T22675] [ 667.653465][T22675] dump_stack_lvl+0x188/0x250 [ 667.658174][T22675] ? show_regs_print_info+0x20/0x20 [ 667.663396][T22675] ? load_image+0x400/0x400 [ 667.667931][T22675] ? __lock_acquire+0x7d10/0x7d10 [ 667.673016][T22675] ? vfs_write+0x8b2/0xd60 [ 667.677485][T22675] should_fail+0x38c/0x4c0 [ 667.681954][T22675] _copy_from_user+0x2e/0x170 [ 667.686664][T22675] __sys_bpf+0x26d/0x6f0 [ 667.690935][T22675] ? bpf_link_show_fdinfo+0x380/0x380 [ 667.696333][T22675] ? vtime_user_exit+0x2c8/0x3e0 [ 667.701291][T22675] __x64_sys_bpf+0x78/0x90 [ 667.705728][T22675] do_syscall_64+0x4c/0xa0 [ 667.710162][T22675] ? clear_bhb_loop+0x30/0x80 [ 667.714857][T22675] ? clear_bhb_loop+0x30/0x80 [ 667.719710][T22675] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 667.725623][T22675] RIP: 0033:0x7fa54e89f819 [ 667.730049][T22675] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 667.749661][T22675] RSP: 002b:00007fa54caf9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 667.758086][T22675] RAX: ffffffffffffffda RBX: 00007fa54eb18fa0 RCX: 00007fa54e89f819 [ 667.766071][T22675] RDX: 0000000000000010 RSI: 00002000000007c0 RDI: 000000000000000f [ 667.774058][T22675] RBP: 00007fa54caf9090 R08: 0000000000000000 R09: 0000000000000000 [ 667.782050][T22675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 667.790061][T22675] R13: 00007fa54eb19038 R14: 00007fa54eb18fa0 R15: 00007fffe88fe688 [ 667.798063][T22675] [ 668.257508][T22692] device syzkaller0 entered promiscuous mode [ 668.455273][T22701] FAULT_INJECTION: forcing a failure. [ 668.455273][T22701] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 668.497252][T22701] CPU: 0 PID: 22701 Comm: syz.0.6592 Not tainted syzkaller #0 [ 668.504832][T22701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 668.514904][T22701] Call Trace: [ 668.518195][T22701] [ 668.521143][T22701] dump_stack_lvl+0x188/0x250 [ 668.525840][T22701] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 668.532024][T22701] ? show_regs_print_info+0x20/0x20 [ 668.537253][T22701] ? load_image+0x400/0x400 [ 668.541786][T22701] should_fail+0x38c/0x4c0 [ 668.546246][T22701] _copy_from_user+0x2e/0x170 [ 668.550948][T22701] __sys_bpf+0x26d/0x6f0 [ 668.555210][T22701] ? bpf_link_show_fdinfo+0x380/0x380 [ 668.560610][T22701] ? vtime_user_exit+0x2c8/0x3e0 [ 668.565583][T22701] __x64_sys_bpf+0x78/0x90 [ 668.570063][T22701] do_syscall_64+0x4c/0xa0 [ 668.574501][T22701] ? clear_bhb_loop+0x30/0x80 [ 668.579211][T22701] ? clear_bhb_loop+0x30/0x80 [ 668.583921][T22701] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 668.589831][T22701] RIP: 0033:0x7fb353644819 [ 668.594276][T22701] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 668.613902][T22701] RSP: 002b:00007fb35189e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 668.622339][T22701] RAX: ffffffffffffffda RBX: 00007fb3538bdfa0 RCX: 00007fb353644819 [ 668.630334][T22701] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 668.638320][T22701] RBP: 00007fb35189e090 R08: 0000000000000000 R09: 0000000000000000 [ 668.646324][T22701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 668.654328][T22701] R13: 00007fb3538be038 R14: 00007fb3538bdfa0 R15: 00007ffc5fcf95c8 [ 668.662347][T22701] [ 668.695998][T22705] __nla_validate_parse: 8 callbacks suppressed [ 668.696012][T22705] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6595'. [ 668.750257][T22705] bond0: (slave bond_slave_0): Releasing backup interface [ 668.956092][T22705] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 669.028183][T22718] validate_nla: 9 callbacks suppressed [ 669.028219][T22718] netlink: 'syz.0.6598': attribute type 3 has an invalid length. [ 669.077430][T22718] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.6598'. [ 669.091904][T22721] netlink: 'syz.4.6599': attribute type 2 has an invalid length. [ 669.104099][T22721] netlink: 'syz.4.6599': attribute type 8 has an invalid length. [ 669.119023][T22721] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6599'. [ 669.182316][T22726] FAULT_INJECTION: forcing a failure. [ 669.182316][T22726] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 669.227402][T22726] CPU: 1 PID: 22726 Comm: syz.3.6601 Not tainted syzkaller #0 [ 669.234980][T22726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 669.245054][T22726] Call Trace: [ 669.248389][T22726] [ 669.251341][T22726] dump_stack_lvl+0x188/0x250 [ 669.256072][T22726] ? show_regs_print_info+0x20/0x20 [ 669.261310][T22726] ? load_image+0x400/0x400 [ 669.265833][T22726] ? __lock_acquire+0x7d10/0x7d10 [ 669.270886][T22726] should_fail+0x38c/0x4c0 [ 669.275335][T22726] _copy_from_user+0x2e/0x170 [ 669.280050][T22726] iovec_from_user+0x142/0x370 [ 669.284857][T22726] __import_iovec+0x70/0x490 [ 669.289490][T22726] import_iovec+0x6f/0xa0 [ 669.293843][T22726] ___sys_recvmsg+0x4e9/0x5c0 [ 669.298568][T22726] ? __sys_recvmsg+0x280/0x280 [ 669.303392][T22726] ? trace_event_raw_event_lock+0x270/0x270 [ 669.309332][T22726] __x64_sys_recvmsg+0x1f9/0x2c0 [ 669.314304][T22726] ? ___sys_recvmsg+0x5c0/0x5c0 [ 669.319173][T22726] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 669.325202][T22726] ? lockdep_hardirqs_on+0x94/0x140 [ 669.330438][T22726] do_syscall_64+0x4c/0xa0 [ 669.334876][T22726] ? clear_bhb_loop+0x30/0x80 [ 669.339581][T22726] ? clear_bhb_loop+0x30/0x80 [ 669.344290][T22726] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 669.350212][T22726] RIP: 0033:0x7fa54e89f819 [ 669.354641][T22726] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 669.374266][T22726] RSP: 002b:00007fa54caf9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 669.382722][T22726] RAX: ffffffffffffffda RBX: 00007fa54eb18fa0 RCX: 00007fa54e89f819 [ 669.390711][T22726] RDX: 0000000040010002 RSI: 00002000000001c0 RDI: 0000000000000004 [ 669.398704][T22726] RBP: 00007fa54caf9090 R08: 0000000000000000 R09: 0000000000000000 [ 669.406706][T22726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 669.414722][T22726] R13: 00007fa54eb19038 R14: 00007fa54eb18fa0 R15: 00007fffe88fe688 [ 669.422727][T22726] [ 669.469738][T22736] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6605'. [ 669.481808][T22736] netlink: 'syz.1.6605': attribute type 28 has an invalid length. [ 669.505903][T22736] netlink: 'syz.1.6605': attribute type 3 has an invalid length. [ 669.527016][T22736] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6605'. [ 669.785778][T22739] netlink: 'syz.2.6607': attribute type 3 has an invalid length. [ 669.805798][T22739] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.6607'. [ 669.854017][T22760] FAULT_INJECTION: forcing a failure. [ 669.854017][T22760] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 669.904265][T22760] CPU: 0 PID: 22760 Comm: syz.4.6613 Not tainted syzkaller #0 [ 669.911847][T22760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 669.921926][T22760] Call Trace: [ 669.925222][T22760] [ 669.928180][T22760] dump_stack_lvl+0x188/0x250 [ 669.932886][T22760] ? show_regs_print_info+0x20/0x20 [ 669.938108][T22760] ? load_image+0x400/0x400 [ 669.942656][T22760] ? __lock_acquire+0x7d10/0x7d10 [ 669.947699][T22760] ? vfs_write+0x8b2/0xd60 [ 669.952242][T22760] should_fail+0x38c/0x4c0 [ 669.956696][T22760] _copy_from_user+0x2e/0x170 [ 669.961397][T22760] __sys_bpf+0x26d/0x6f0 [ 669.965666][T22760] ? bpf_link_show_fdinfo+0x380/0x380 [ 669.971084][T22760] ? vtime_user_exit+0x2c8/0x3e0 [ 669.976047][T22760] __x64_sys_bpf+0x78/0x90 [ 669.980482][T22760] do_syscall_64+0x4c/0xa0 [ 669.984918][T22760] ? clear_bhb_loop+0x30/0x80 [ 669.989613][T22760] ? clear_bhb_loop+0x30/0x80 [ 669.994339][T22760] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 670.000253][T22760] RIP: 0033:0x7ff0e6d1a819 [ 670.004752][T22760] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 670.024408][T22760] RSP: 002b:00007ff0e4f74028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 670.032841][T22760] RAX: ffffffffffffffda RBX: 00007ff0e6f93fa0 RCX: 00007ff0e6d1a819 [ 670.040837][T22760] RDX: 0000000000000008 RSI: 0000200000001300 RDI: 000000000000000c [ 670.048845][T22760] RBP: 00007ff0e4f74090 R08: 0000000000000000 R09: 0000000000000000 [ 670.056836][T22760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 670.064830][T22760] R13: 00007ff0e6f94038 R14: 00007ff0e6f93fa0 R15: 00007ffd3bb58808 [ 670.072836][T22760] [ 670.374206][T22782] netlink: 'syz.0.6623': attribute type 10 has an invalid length. [ 670.558758][T22787] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6625'. [ 670.610851][T22777] netlink: 'syz.1.6621': attribute type 3 has an invalid length. [ 670.623550][T22777] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.6621'. [ 670.992384][T22816] device syzkaller0 entered promiscuous mode [ 671.010799][T22819] netlink: 'syz.2.6638': attribute type 10 has an invalid length. [ 671.046389][T22819] device xfrm0 entered promiscuous mode [ 671.069185][T22819] team0: Device xfrm0 is of different type [ 671.292679][T22831] netlink: 'syz.1.6642': attribute type 10 has an invalid length. [ 671.301934][T22831] netlink: 156 bytes leftover after parsing attributes in process `syz.1.6642'. [ 671.415700][T22847] FAULT_INJECTION: forcing a failure. [ 671.415700][T22847] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 671.448482][T22847] CPU: 1 PID: 22847 Comm: syz.1.6648 Not tainted syzkaller #0 [ 671.456082][T22847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 671.466167][T22847] Call Trace: [ 671.469489][T22847] [ 671.472440][T22847] dump_stack_lvl+0x188/0x250 [ 671.477175][T22847] ? show_regs_print_info+0x20/0x20 [ 671.482421][T22847] ? load_image+0x400/0x400 [ 671.486953][T22847] ? __lock_acquire+0x7d10/0x7d10 [ 671.492009][T22847] ? perf_trace_lock_acquire+0xed/0x3e0 [ 671.497594][T22847] should_fail+0x38c/0x4c0 [ 671.502041][T22847] _copy_from_user+0x2e/0x170 [ 671.506745][T22847] iovec_from_user+0x142/0x370 [ 671.511536][T22847] __import_iovec+0x70/0x490 [ 671.516167][T22847] import_iovec+0x6f/0xa0 [ 671.520517][T22847] ___sys_sendmsg+0x1fd/0x2e0 [ 671.525224][T22847] ? __sys_sendmsg+0x2a0/0x2a0 [ 671.530032][T22847] ? trace_event_raw_event_lock+0x270/0x270 [ 671.535956][T22847] ? vfs_write+0x8b2/0xd60 [ 671.540450][T22847] __se_sys_sendmsg+0x1af/0x290 [ 671.545354][T22847] ? __x64_sys_sendmsg+0x80/0x80 [ 671.550314][T22847] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 671.556329][T22847] ? lockdep_hardirqs_on+0x94/0x140 [ 671.561550][T22847] do_syscall_64+0x4c/0xa0 [ 671.565986][T22847] ? clear_bhb_loop+0x30/0x80 [ 671.570703][T22847] ? clear_bhb_loop+0x30/0x80 [ 671.575398][T22847] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 671.581344][T22847] RIP: 0033:0x7f13be317819 [ 671.585774][T22847] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 671.605396][T22847] RSP: 002b:00007f13bc571028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 671.613858][T22847] RAX: ffffffffffffffda RBX: 00007f13be590fa0 RCX: 00007f13be317819 [ 671.621852][T22847] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003 [ 671.629836][T22847] RBP: 00007f13bc571090 R08: 0000000000000000 R09: 0000000000000000 [ 671.637824][T22847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 671.645811][T22847] R13: 00007f13be591038 R14: 00007f13be590fa0 R15: 00007ffe6d0fa918 [ 671.653830][T22847] [ 671.815289][T22851] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.6649'. [ 671.913632][T22863] device syzkaller0 entered promiscuous mode [ 672.257181][T22881] FAULT_INJECTION: forcing a failure. [ 672.257181][T22881] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 672.291807][T22881] CPU: 0 PID: 22881 Comm: syz.2.6662 Not tainted syzkaller #0 [ 672.299435][T22881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 672.309509][T22881] Call Trace: [ 672.312808][T22881] [ 672.315758][T22881] dump_stack_lvl+0x188/0x250 [ 672.320465][T22881] ? show_regs_print_info+0x20/0x20 [ 672.325690][T22881] ? load_image+0x400/0x400 [ 672.330220][T22881] ? __lock_acquire+0x7d10/0x7d10 [ 672.335280][T22881] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 672.341121][T22881] should_fail+0x38c/0x4c0 [ 672.345577][T22881] _copy_from_user+0x2e/0x170 [ 672.350306][T22881] __copy_msghdr_from_user+0xc9/0x630 [ 672.355713][T22881] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 672.361461][T22881] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 672.366804][T22881] ___sys_sendmsg+0x19a/0x2e0 [ 672.371534][T22881] ? __sys_sendmsg+0x2a0/0x2a0 [ 672.376351][T22881] ? trace_event_raw_event_lock+0x270/0x270 [ 672.382288][T22881] ? vfs_write+0x8b2/0xd60 [ 672.386779][T22881] __se_sys_sendmsg+0x1af/0x290 [ 672.391682][T22881] ? __x64_sys_sendmsg+0x80/0x80 [ 672.396654][T22881] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 672.402688][T22881] ? lockdep_hardirqs_on+0x94/0x140 [ 672.407918][T22881] do_syscall_64+0x4c/0xa0 [ 672.412357][T22881] ? clear_bhb_loop+0x30/0x80 [ 672.417062][T22881] ? clear_bhb_loop+0x30/0x80 [ 672.421774][T22881] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 672.427697][T22881] RIP: 0033:0x7fa0dc9df819 [ 672.432137][T22881] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 672.451763][T22881] RSP: 002b:00007fa0dac39028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 672.460211][T22881] RAX: ffffffffffffffda RBX: 00007fa0dcc58fa0 RCX: 00007fa0dc9df819 [ 672.468219][T22881] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 672.476212][T22881] RBP: 00007fa0dac39090 R08: 0000000000000000 R09: 0000000000000000 [ 672.484211][T22881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 672.492203][T22881] R13: 00007fa0dcc59038 R14: 00007fa0dcc58fa0 R15: 00007ffecd3fa4a8 [ 672.500236][T22881] [ 673.321956][T22937] FAULT_INJECTION: forcing a failure. [ 673.321956][T22937] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 673.399986][T22937] CPU: 1 PID: 22937 Comm: syz.2.6677 Not tainted syzkaller #0 [ 673.407607][T22937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 673.417676][T22937] Call Trace: [ 673.420962][T22937] [ 673.423899][T22937] dump_stack_lvl+0x188/0x250 [ 673.428588][T22937] ? show_regs_print_info+0x20/0x20 [ 673.433793][T22937] ? load_image+0x400/0x400 [ 673.438320][T22937] ? __lock_acquire+0x7d10/0x7d10 [ 673.443357][T22937] ? aa_label_sk_perm+0x3d0/0x530 [ 673.448406][T22937] should_fail+0x38c/0x4c0 [ 673.452847][T22937] _copy_from_user+0x2e/0x170 [ 673.457576][T22937] copy_from_sockptr+0x69/0x80 [ 673.462365][T22937] packet_setsockopt+0xb13/0x1af0 [ 673.467410][T22937] ? __might_sleep+0xf0/0xf0 [ 673.472024][T22937] ? packet_ioctl+0x240/0x240 [ 673.476728][T22937] ? rcu_lock_release+0x9/0x20 [ 673.481500][T22937] ? __lock_acquire+0x7d10/0x7d10 [ 673.486555][T22937] ? aa_sk_perm+0x7dc/0x910 [ 673.491081][T22937] ? aa_af_perm+0x340/0x340 [ 673.495595][T22937] ? __fget_files+0x40f/0x480 [ 673.500288][T22937] ? aa_sock_opt_perm+0x74/0x100 [ 673.505286][T22937] ? bpf_lsm_socket_setsockopt+0x5/0x10 [ 673.510857][T22937] ? security_socket_setsockopt+0x7a/0xa0 [ 673.516588][T22937] ? packet_ioctl+0x240/0x240 [ 673.521277][T22937] __sys_setsockopt+0x2bf/0x3d0 [ 673.526147][T22937] __x64_sys_setsockopt+0xb1/0xc0 [ 673.531191][T22937] do_syscall_64+0x4c/0xa0 [ 673.535625][T22937] ? clear_bhb_loop+0x30/0x80 [ 673.540341][T22937] ? clear_bhb_loop+0x30/0x80 [ 673.545053][T22937] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 673.550987][T22937] RIP: 0033:0x7fa0dc9df819 [ 673.555427][T22937] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 673.575045][T22937] RSP: 002b:00007fa0dac39028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 673.583477][T22937] RAX: ffffffffffffffda RBX: 00007fa0dcc58fa0 RCX: 00007fa0dc9df819 [ 673.591464][T22937] RDX: 0000000000000012 RSI: 0000000000000107 RDI: 0000000000000008 [ 673.599444][T22937] RBP: 00007fa0dac39090 R08: 0000000000000008 R09: 0000000000000000 [ 673.607428][T22937] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 673.615434][T22937] R13: 00007fa0dcc59038 R14: 00007fa0dcc58fa0 R15: 00007ffecd3fa4a8 [ 673.623454][T22937] [ 673.752655][T22943] __nla_validate_parse: 5 callbacks suppressed [ 673.752705][T22943] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6679'. [ 673.935635][T22941] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6678'. [ 673.960874][T22955] netlink: 156 bytes leftover after parsing attributes in process `syz.1.6684'. [ 674.265707][T22975] device syzkaller0 entered promiscuous mode [ 674.430341][T22974] validate_nla: 11 callbacks suppressed [ 674.430392][T22974] netlink: 'syz.3.6689': attribute type 3 has an invalid length. [ 674.484497][T22974] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.6689'. [ 674.924444][T23001] FAULT_INJECTION: forcing a failure. [ 674.924444][T23001] name failslab, interval 1, probability 0, space 0, times 0 [ 674.944931][T23001] CPU: 0 PID: 23001 Comm: syz.2.6702 Not tainted syzkaller #0 [ 674.952429][T23001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 674.962498][T23001] Call Trace: [ 674.965794][T23001] [ 674.968758][T23001] dump_stack_lvl+0x188/0x250 [ 674.973458][T23001] ? show_regs_print_info+0x20/0x20 [ 674.978684][T23001] ? load_image+0x400/0x400 [ 674.983213][T23001] ? __lock_acquire+0x7d10/0x7d10 [ 674.988267][T23001] should_fail+0x38c/0x4c0 [ 674.992715][T23001] should_failslab+0x5/0x20 [ 674.997238][T23001] slab_pre_alloc_hook+0x51/0xc0 [ 675.002197][T23001] __kmalloc+0x6b/0x330 [ 675.006401][T23001] ? ioctl_standard_iw_point+0x516/0xcf0 [ 675.012098][T23001] ioctl_standard_iw_point+0x516/0xcf0 [ 675.017581][T23001] ? wext_ioctl_dispatch+0xaf/0x470 [ 675.022816][T23001] ? __cfg80211_wext_siwencode+0x5d0/0x5d0 [ 675.028676][T23001] ? iw_handler_get_iwstats+0x240/0x240 [ 675.034250][T23001] ? mutex_lock_io_nested+0x60/0x60 [ 675.039478][T23001] ? apparmor_capable+0x12c/0x190 [ 675.044520][T23001] ? full_name_hash+0x8e/0xe0 [ 675.049078][T22987] netlink: 'syz.0.6697': attribute type 3 has an invalid length. [ 675.049226][T23001] ? __cfg80211_wext_siwencode+0x5d0/0x5d0 [ 675.062752][T23001] ioctl_standard_call+0xb3/0x2b0 [ 675.067826][T23001] ? __cfg80211_wext_siwencode+0x5d0/0x5d0 [ 675.073792][T23001] wext_ioctl_dispatch+0x3da/0x470 [ 675.078967][T23001] ? wext_ioctl_dispatch+0x470/0x470 [ 675.082780][T22987] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.6697'. [ 675.084273][T23001] ? iw_handler_get_private+0x1e0/0x1e0 [ 675.084301][T23001] wext_handle_ioctl+0x113/0x1d0 [ 675.084325][T23001] ? call_commit_handler+0xf0/0xf0 [ 675.084362][T23001] sock_ioctl+0x143/0x710 [ 675.084384][T23001] ? sock_poll+0x410/0x410 [ 675.084412][T23001] ? bpf_lsm_file_ioctl+0x5/0x10 [ 675.122987][T23001] ? security_file_ioctl+0x7c/0xa0 [ 675.128125][T23001] ? sock_poll+0x410/0x410 [ 675.132552][T23001] __se_sys_ioctl+0xfa/0x170 [ 675.137146][T23001] do_syscall_64+0x4c/0xa0 [ 675.141600][T23001] ? clear_bhb_loop+0x30/0x80 [ 675.146272][T23001] ? clear_bhb_loop+0x30/0x80 [ 675.150960][T23001] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 675.156887][T23001] RIP: 0033:0x7fa0dc9df819 [ 675.161338][T23001] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 675.180958][T23001] RSP: 002b:00007fa0dac39028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 675.189437][T23001] RAX: ffffffffffffffda RBX: 00007fa0dcc58fa0 RCX: 00007fa0dc9df819 [ 675.197433][T23001] RDX: 0000200000000040 RSI: 0000000000008b2b RDI: 0000000000000004 [ 675.205431][T23001] RBP: 00007fa0dac39090 R08: 0000000000000000 R09: 0000000000000000 [ 675.213417][T23001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 675.221402][T23001] R13: 00007fa0dcc59038 R14: 00007fa0dcc58fa0 R15: 00007ffecd3fa4a8 [ 675.229431][T23001] [ 675.345820][T23012] device syzkaller0 entered promiscuous mode [ 675.558709][T23029] FAULT_INJECTION: forcing a failure. [ 675.558709][T23029] name failslab, interval 1, probability 0, space 0, times 0 [ 675.611516][T23029] CPU: 0 PID: 23029 Comm: syz.2.6713 Not tainted syzkaller #0 [ 675.619124][T23029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 675.629228][T23029] Call Trace: [ 675.632555][T23029] [ 675.635538][T23029] dump_stack_lvl+0x188/0x250 [ 675.640295][T23029] ? show_regs_print_info+0x20/0x20 [ 675.645561][T23029] ? load_image+0x400/0x400 [ 675.650207][T23029] should_fail+0x38c/0x4c0 [ 675.654720][T23029] should_failslab+0x5/0x20 [ 675.659275][T23029] slab_pre_alloc_hook+0x51/0xc0 [ 675.664276][T23029] ? skb_clone+0x1bd/0x350 [ 675.668752][T23029] kmem_cache_alloc+0x3d/0x290 [ 675.673607][T23029] skb_clone+0x1bd/0x350 [ 675.677936][T23029] __netlink_deliver_tap+0x3cd/0x7c0 [ 675.683375][T23029] netlink_deliver_tap+0x16c/0x180 [ 675.688548][T23029] netlink_unicast+0x74f/0x920 [ 675.693436][T23029] netlink_sendmsg+0x8ba/0xbe0 [ 675.698327][T23029] ? netlink_getsockopt+0x570/0x570 [ 675.703605][T23029] ? aa_sock_msg_perm+0x94/0x150 [ 675.708621][T23029] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 675.713961][T23029] ? security_socket_sendmsg+0x7c/0xa0 [ 675.719490][T23029] ? netlink_getsockopt+0x570/0x570 [ 675.724753][T23029] ____sys_sendmsg+0x5b7/0x8f0 [ 675.729647][T23029] ? __sys_sendmsg_sock+0x30/0x30 [ 675.734828][T23029] ? import_iovec+0x6f/0xa0 [ 675.739426][T23029] ___sys_sendmsg+0x236/0x2e0 [ 675.744216][T23029] ? __sys_sendmsg+0x2a0/0x2a0 [ 675.749115][T23029] ? trace_event_raw_event_lock+0x270/0x270 [ 675.755072][T23029] ? vfs_write+0x8b2/0xd60 [ 675.759691][T23029] __se_sys_sendmsg+0x1af/0x290 [ 675.764619][T23029] ? __x64_sys_sendmsg+0x80/0x80 [ 675.769661][T23029] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 675.775783][T23029] ? lockdep_hardirqs_on+0x94/0x140 [ 675.781067][T23029] do_syscall_64+0x4c/0xa0 [ 675.785535][T23029] ? clear_bhb_loop+0x30/0x80 [ 675.790266][T23029] ? clear_bhb_loop+0x30/0x80 [ 675.795007][T23029] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 675.800964][T23029] RIP: 0033:0x7fa0dc9df819 [ 675.805443][T23029] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 675.825109][T23029] RSP: 002b:00007fa0dac39028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 675.833600][T23029] RAX: ffffffffffffffda RBX: 00007fa0dcc58fa0 RCX: 00007fa0dc9df819 [ 675.841620][T23029] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003 [ 675.849651][T23029] RBP: 00007fa0dac39090 R08: 0000000000000000 R09: 0000000000000000 [ 675.857672][T23029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 675.865690][T23029] R13: 00007fa0dcc59038 R14: 00007fa0dcc58fa0 R15: 00007ffecd3fa4a8 [ 675.873830][T23029] [ 676.053078][T23029] netlink: 'syz.2.6713': attribute type 10 has an invalid length. [ 676.107983][T23029] team0: Device hsr_slave_0 failed to register rx_handler [ 676.424616][T23059] netlink: 'syz.4.6723': attribute type 10 has an invalid length. [ 676.466248][T23059] device vxcan1 entered promiscuous mode [ 676.478796][T23059] team0: Device vxcan1 is of different type [ 676.534469][T23057] netlink: 'syz.2.6725': attribute type 10 has an invalid length. [ 676.585599][T23057] device vxcan1 entered promiscuous mode [ 676.597592][T23057] team0: Device vxcan1 is of different type [ 676.619618][T23061] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6723'. [ 676.731278][T23062] netlink: 'syz.3.6724': attribute type 2 has an invalid length. [ 676.767349][T23062] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.6724'. [ 677.077015][T23070] netlink: 'syz.1.6727': attribute type 3 has an invalid length. [ 677.107826][T23070] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.6727'. [ 677.326586][T23090] FAULT_INJECTION: forcing a failure. [ 677.326586][T23090] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 677.359958][T23090] CPU: 0 PID: 23090 Comm: syz.2.6735 Not tainted syzkaller #0 [ 677.367534][T23090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 677.377602][T23090] Call Trace: [ 677.380936][T23090] [ 677.383880][T23090] dump_stack_lvl+0x188/0x250 [ 677.388589][T23090] ? show_regs_print_info+0x20/0x20 [ 677.393821][T23090] ? load_image+0x400/0x400 [ 677.398347][T23090] ? __lock_acquire+0x7d10/0x7d10 [ 677.403405][T23090] should_fail+0x38c/0x4c0 [ 677.407846][T23090] _copy_to_user+0x2e/0x130 [ 677.412361][T23090] simple_read_from_buffer+0xe3/0x150 [ 677.417749][T23090] proc_fail_nth_read+0x1a6/0x220 [ 677.422821][T23090] ? proc_fault_inject_write+0x310/0x310 [ 677.428465][T23090] ? fsnotify_perm+0x254/0x560 [ 677.433236][T23090] ? proc_fault_inject_write+0x310/0x310 [ 677.438884][T23090] vfs_read+0x301/0xd60 [ 677.443055][T23090] ? kernel_read+0x1e0/0x1e0 [ 677.447657][T23090] ? __fget_files+0x40f/0x480 [ 677.452351][T23090] ? mutex_lock_nested+0x17/0x20 [ 677.457300][T23090] ? __fdget_pos+0x2bf/0x370 [ 677.461898][T23090] ? ksys_read+0x71/0x260 [ 677.466233][T23090] ksys_read+0x152/0x260 [ 677.470485][T23090] ? vfs_write+0xd60/0xd60 [ 677.474921][T23090] ? lockdep_hardirqs_on+0x94/0x140 [ 677.480127][T23090] do_syscall_64+0x4c/0xa0 [ 677.484555][T23090] ? clear_bhb_loop+0x30/0x80 [ 677.489235][T23090] ? clear_bhb_loop+0x30/0x80 [ 677.493949][T23090] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 677.499850][T23090] RIP: 0033:0x7fa0dc9a004e [ 677.504280][T23090] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 677.523892][T23090] RSP: 002b:00007fa0dac38fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 677.532317][T23090] RAX: ffffffffffffffda RBX: 00007fa0dac396c0 RCX: 00007fa0dc9a004e [ 677.540314][T23090] RDX: 000000000000000f RSI: 00007fa0dac390a0 RDI: 0000000000000007 [ 677.548302][T23090] RBP: 00007fa0dac39090 R08: 0000000000000000 R09: 0000000000000000 [ 677.556277][T23090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 677.564251][T23090] R13: 00007fa0dcc59038 R14: 00007fa0dcc58fa0 R15: 00007ffecd3fa4a8 [ 677.572246][T23090] [ 677.655730][T23093] netlink: 'syz.0.6737': attribute type 2 has an invalid length. [ 677.674118][T23093] netlink: 'syz.0.6737': attribute type 8 has an invalid length. [ 677.683058][T23093] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6737'. [ 677.786746][T23104] netlink: 'syz.3.6740': attribute type 10 has an invalid length. [ 677.796697][T23108] FAULT_INJECTION: forcing a failure. [ 677.796697][T23108] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 677.818588][T23104] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6740'. [ 677.822773][T23108] CPU: 1 PID: 23108 Comm: syz.2.6742 Not tainted syzkaller #0 [ 677.835132][T23108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 677.845206][T23108] Call Trace: [ 677.848507][T23108] [ 677.851467][T23108] dump_stack_lvl+0x188/0x250 [ 677.856223][T23108] ? show_regs_print_info+0x20/0x20 [ 677.861460][T23108] ? load_image+0x400/0x400 [ 677.866007][T23108] ? __lock_acquire+0x7d10/0x7d10 [ 677.871063][T23108] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 677.876916][T23108] should_fail+0x38c/0x4c0 [ 677.881377][T23108] _copy_from_user+0x2e/0x170 [ 677.886101][T23108] __copy_msghdr_from_user+0xc9/0x630 [ 677.891503][T23108] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 677.897255][T23108] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 677.902636][T23108] ___sys_sendmsg+0x19a/0x2e0 [ 677.907360][T23108] ? __sys_sendmsg+0x2a0/0x2a0 [ 677.912175][T23108] ? trace_event_raw_event_lock+0x270/0x270 [ 677.915722][T23104] batman_adv: batadv0: Adding interface: virt_wifi0 [ 677.918090][T23108] ? vfs_write+0x8b2/0xd60 [ 677.918160][T23108] __se_sys_sendmsg+0x1af/0x290 [ 677.918191][T23108] ? __x64_sys_sendmsg+0x80/0x80 [ 677.925556][T23104] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 677.929214][T23108] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 677.929265][T23108] ? lockdep_hardirqs_on+0x94/0x140 [ 677.929298][T23108] do_syscall_64+0x4c/0xa0 [ 677.929318][T23108] ? clear_bhb_loop+0x30/0x80 [ 677.929339][T23108] ? clear_bhb_loop+0x30/0x80 [ 677.929364][T23108] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 677.929386][T23108] RIP: 0033:0x7fa0dc9df819 [ 677.929406][T23108] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 677.929424][T23108] RSP: 002b:00007fa0dac39028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 677.929449][T23108] RAX: ffffffffffffffda RBX: 00007fa0dcc58fa0 RCX: 00007fa0dc9df819 [ 677.929465][T23108] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 000000000000000b [ 677.929480][T23108] RBP: 00007fa0dac39090 R08: 0000000000000000 R09: 0000000000000000 [ 677.929495][T23108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 677.929509][T23108] R13: 00007fa0dcc59038 R14: 00007fa0dcc58fa0 R15: 00007ffecd3fa4a8 [ 677.929552][T23108] [ 678.126761][T23104] batman_adv: batadv0: Interface activated: virt_wifi0 [ 679.011179][T23163] __nla_validate_parse: 3 callbacks suppressed [ 679.011231][T23163] netlink: 156 bytes leftover after parsing attributes in process `syz.1.6765'. [ 679.540674][T23195] device syzkaller0 entered promiscuous mode [ 679.649204][T23201] FAULT_INJECTION: forcing a failure. [ 679.649204][T23201] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 679.663977][T23201] CPU: 0 PID: 23201 Comm: syz.3.6780 Not tainted syzkaller #0 [ 679.671464][T23201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 679.681529][T23201] Call Trace: [ 679.684834][T23201] [ 679.687779][T23201] dump_stack_lvl+0x188/0x250 [ 679.692520][T23201] ? show_regs_print_info+0x20/0x20 [ 679.697743][T23201] ? load_image+0x400/0x400 [ 679.702273][T23201] ? __lock_acquire+0x7d10/0x7d10 [ 679.707323][T23201] should_fail+0x38c/0x4c0 [ 679.711765][T23201] _copy_from_user+0x2e/0x170 [ 679.716453][T23201] iovec_from_user+0x142/0x370 [ 679.721223][T23201] __import_iovec+0x70/0x490 [ 679.725836][T23201] ? perf_tp_event+0xa92/0xbf0 [ 679.730629][T23201] import_iovec+0x6f/0xa0 [ 679.734970][T23201] ___sys_sendmsg+0x1fd/0x2e0 [ 679.739673][T23201] ? __sys_sendmsg+0x2a0/0x2a0 [ 679.744474][T23201] __se_sys_sendmsg+0x1af/0x290 [ 679.749331][T23201] ? __x64_sys_sendmsg+0x80/0x80 [ 679.754282][T23201] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 679.760292][T23201] ? lockdep_hardirqs_on+0x94/0x140 [ 679.765508][T23201] do_syscall_64+0x4c/0xa0 [ 679.769936][T23201] ? clear_bhb_loop+0x30/0x80 [ 679.774619][T23201] ? clear_bhb_loop+0x30/0x80 [ 679.779308][T23201] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 679.785204][T23201] RIP: 0033:0x7fa54e89f819 [ 679.789623][T23201] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 679.809238][T23201] RSP: 002b:00007fa54caf9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 679.817663][T23201] RAX: ffffffffffffffda RBX: 00007fa54eb18fa0 RCX: 00007fa54e89f819 [ 679.825652][T23201] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 679.833626][T23201] RBP: 00007fa54caf9090 R08: 0000000000000000 R09: 0000000000000000 [ 679.841602][T23201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 679.849582][T23201] R13: 00007fa54eb19038 R14: 00007fa54eb18fa0 R15: 00007fffe88fe688 [ 679.857593][T23201] [ 679.956224][T23200] validate_nla: 2 callbacks suppressed [ 679.956238][T23200] netlink: 'syz.2.6779': attribute type 10 has an invalid length. [ 679.973558][T23200] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6779'. [ 680.022661][T23203] netlink: 'syz.0.6778': attribute type 2 has an invalid length. [ 680.046879][T23203] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.6778'. [ 680.494829][T23231] netlink: 'syz.0.6791': attribute type 2 has an invalid length. [ 680.517313][T23231] netlink: 'syz.0.6791': attribute type 8 has an invalid length. [ 680.541099][T23231] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6791'. [ 680.606862][T23235] device syzkaller0 entered promiscuous mode [ 680.755763][T23245] netlink: 'syz.4.6794': attribute type 3 has an invalid length. [ 680.817695][T23245] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.6794'. [ 681.109909][T23261] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6801'. [ 681.588068][T23270] netlink: 'syz.0.6815': attribute type 10 has an invalid length. [ 681.607484][T23270] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6815'. [ 681.682482][T23279] netlink: 'syz.4.6807': attribute type 2 has an invalid length. [ 681.711660][T23279] netlink: 'syz.4.6807': attribute type 8 has an invalid length. [ 681.742121][T23279] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6807'. [ 681.859906][T23282] netlink: 'syz.2.6806': attribute type 3 has an invalid length. [ 681.875027][T23290] netlink: 'syz.0.6811': attribute type 21 has an invalid length. [ 681.888887][T23282] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.6806'. [ 681.933667][T23292] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6813'. [ 685.520878][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.527316][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 699.311690][T23314] chnl_net:caif_netlink_parms(): no params data found [ 699.544606][T23318] chnl_net:caif_netlink_parms(): no params data found [ 699.580976][T23315] chnl_net:caif_netlink_parms(): no params data found [ 699.656652][T23311] chnl_net:caif_netlink_parms(): no params data found [ 699.788852][T23322] chnl_net:caif_netlink_parms(): no params data found [ 700.188432][T23314] bridge0: port 1(bridge_slave_0) entered blocking state [ 700.195647][T23314] bridge0: port 1(bridge_slave_0) entered disabled state [ 700.213150][T23314] device bridge_slave_0 entered promiscuous mode [ 700.445884][T23314] bridge0: port 2(bridge_slave_1) entered blocking state [ 700.453377][T23314] bridge0: port 2(bridge_slave_1) entered disabled state [ 700.472250][T23314] device bridge_slave_1 entered promiscuous mode [ 700.637265][T23312] Bluetooth: hci7: command 0x0409 tx timeout [ 700.643371][T23312] Bluetooth: hci9: command 0x0409 tx timeout [ 700.658837][T23312] Bluetooth: hci8: command 0x0409 tx timeout [ 700.674935][T23312] Bluetooth: hci6: command 0x0409 tx timeout [ 700.717343][T23312] Bluetooth: hci1: command 0x0409 tx timeout [ 700.779760][T23315] bridge0: port 1(bridge_slave_0) entered blocking state [ 700.786857][T23315] bridge0: port 1(bridge_slave_0) entered disabled state [ 700.809073][T23315] device bridge_slave_0 entered promiscuous mode [ 700.942010][T23314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 700.957318][T23318] bridge0: port 1(bridge_slave_0) entered blocking state [ 700.964414][T23318] bridge0: port 1(bridge_slave_0) entered disabled state [ 700.982501][T23318] device bridge_slave_0 entered promiscuous mode [ 701.003577][T23315] bridge0: port 2(bridge_slave_1) entered blocking state [ 701.022904][T23315] bridge0: port 2(bridge_slave_1) entered disabled state [ 701.036265][T23315] device bridge_slave_1 entered promiscuous mode [ 701.064825][T23314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 701.084221][T23318] bridge0: port 2(bridge_slave_1) entered blocking state [ 701.094458][T23318] bridge0: port 2(bridge_slave_1) entered disabled state [ 701.113367][T23318] device bridge_slave_1 entered promiscuous mode [ 701.125753][T23311] bridge0: port 1(bridge_slave_0) entered blocking state [ 701.143770][T23311] bridge0: port 1(bridge_slave_0) entered disabled state [ 701.154820][T23311] device bridge_slave_0 entered promiscuous mode [ 701.222756][T23311] bridge0: port 2(bridge_slave_1) entered blocking state [ 701.238625][T23311] bridge0: port 2(bridge_slave_1) entered disabled state [ 701.255594][T23311] device bridge_slave_1 entered promiscuous mode [ 701.283544][T23322] bridge0: port 1(bridge_slave_0) entered blocking state [ 701.300901][T23322] bridge0: port 1(bridge_slave_0) entered disabled state [ 701.316942][T23322] device bridge_slave_0 entered promiscuous mode [ 701.345225][T23318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 701.376650][T23315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 701.397510][T23322] bridge0: port 2(bridge_slave_1) entered blocking state [ 701.404698][T23322] bridge0: port 2(bridge_slave_1) entered disabled state [ 701.424232][T23322] device bridge_slave_1 entered promiscuous mode [ 701.439475][T23314] team0: Port device team_slave_0 added [ 701.448797][T23318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 701.481182][T23315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 701.512283][T23314] team0: Port device team_slave_1 added [ 701.538629][T23311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 701.592107][T23311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 701.626353][T23322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 701.658346][T23318] team0: Port device team_slave_0 added [ 701.704976][T23315] team0: Port device team_slave_0 added [ 701.721602][T23322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 701.744352][T23314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 701.751932][T23314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 701.788322][T23314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 701.824829][T23318] team0: Port device team_slave_1 added [ 701.834080][T23315] team0: Port device team_slave_1 added [ 701.854835][T23314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 701.862767][T23314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 701.899737][T23314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 701.928180][T23311] team0: Port device team_slave_0 added [ 701.973734][T23322] team0: Port device team_slave_0 added [ 702.010954][T23311] team0: Port device team_slave_1 added [ 702.040113][T23322] team0: Port device team_slave_1 added [ 702.046414][T23315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 702.055642][T23315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 702.090706][T23315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 702.112340][T23318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 702.120245][T23318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 702.162467][T23318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 702.206573][T23315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 702.215238][T23315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 702.252377][T23315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 702.278063][T23318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 702.285029][T23318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 702.322424][T23318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 702.717308][T23312] Bluetooth: hci6: command 0x041b tx timeout [ 702.724316][T23312] Bluetooth: hci8: command 0x041b tx timeout [ 702.741409][T23312] Bluetooth: hci9: command 0x041b tx timeout [ 702.753759][T23312] Bluetooth: hci7: command 0x041b tx timeout [ 702.797588][T23312] Bluetooth: hci1: command 0x041b tx timeout [ 702.957376][T23312] Bluetooth: hci5: command 0x0406 tx timeout [ 704.797350][T23312] Bluetooth: hci7: command 0x040f tx timeout [ 704.804660][T23312] Bluetooth: hci9: command 0x040f tx timeout [ 704.827264][T23312] Bluetooth: hci8: command 0x040f tx timeout [ 704.834693][T23312] Bluetooth: hci6: command 0x040f tx timeout [ 704.877369][T23312] Bluetooth: hci1: command 0x040f tx timeout [ 706.877249][T23312] Bluetooth: hci6: command 0x0419 tx timeout [ 706.883342][T23312] Bluetooth: hci8: command 0x0419 tx timeout [ 706.901235][T23312] Bluetooth: hci9: command 0x0419 tx timeout [ 706.912862][T23312] Bluetooth: hci7: command 0x0419 tx timeout [ 706.957363][T23312] Bluetooth: hci1: command 0x0419 tx timeout [ 746.961365][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.967821][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 759.917193][T23312] Bluetooth: hci10: command 0x0409 tx timeout [ 760.797331][T23354] Bluetooth: hci11: command 0x0409 tx timeout [ 760.957204][T23354] Bluetooth: hci13: command 0x0409 tx timeout [ 761.037409][T23354] Bluetooth: hci12: command 0x0409 tx timeout [ 761.597370][T23354] Bluetooth: hci14: command 0x0409 tx timeout [ 761.997207][T23354] Bluetooth: hci10: command 0x041b tx timeout [ 762.877367][T23354] Bluetooth: hci11: command 0x041b tx timeout [ 763.037200][T23354] Bluetooth: hci13: command 0x041b tx timeout [ 763.117307][T23354] Bluetooth: hci12: command 0x041b tx timeout [ 763.677240][T23354] Bluetooth: hci14: command 0x041b tx timeout [ 764.077183][T23354] Bluetooth: hci10: command 0x040f tx timeout [ 764.957355][T23354] Bluetooth: hci11: command 0x040f tx timeout [ 765.117197][T23354] Bluetooth: hci13: command 0x040f tx timeout [ 765.197356][T23354] Bluetooth: hci12: command 0x040f tx timeout [ 765.757212][T23312] Bluetooth: hci14: command 0x040f tx timeout [ 766.157251][T23354] Bluetooth: hci10: command 0x0419 tx timeout [ 767.037444][T23354] Bluetooth: hci11: command 0x0419 tx timeout [ 767.197258][T23354] Bluetooth: hci13: command 0x0419 tx timeout [ 767.277336][T23354] Bluetooth: hci12: command 0x0419 tx timeout [ 767.837217][T23312] Bluetooth: hci14: command 0x0419 tx timeout [ 787.047093][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 787.054168][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P23295/1:b..l [ 787.062591][ C1] (detected by 1, t=10502 jiffies, g=95217, q=1818) [ 787.069279][ C1] task:syz.0.6811 state:R running task stack:22640 pid:23295 ppid: 21489 flags:0x00004004 [ 787.080672][ C1] Call Trace: [ 787.083965][ C1] [ 787.086916][ C1] __schedule+0x11ef/0x43c0 [ 787.091457][ C1] ? lock_chain_count+0x20/0x20 [ 787.096331][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 787.102513][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 787.108731][ C1] ? release_firmware_map_entry+0x190/0x190 [ 787.114662][ C1] preempt_schedule_irq+0xbb/0x160 [ 787.119794][ C1] ? __cond_resched+0xd0/0xd0 [ 787.124520][ C1] ? rcu_is_watching+0x11/0xa0 [ 787.129298][ C1] ? rcu_irq_exit_check_preempt+0xdb/0x200 [ 787.135126][ C1] irqentry_exit+0x63/0x70 [ 787.139567][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 787.145565][ C1] RIP: 0010:kasan_poison+0x2e/0x50 [ 787.150700][ C1] Code: 75 36 48 89 f0 a8 07 75 32 48 89 f9 48 c1 e9 03 49 b8 00 00 00 00 00 fc ff df 4c 01 c1 48 01 f8 48 c1 e8 03 0f b6 f2 48 29 c8 <4c> 01 c0 48 89 cf 48 89 c2 e9 94 2e 4c 02 0f 0b c3 0f 0b c3 66 2e [ 787.170314][ C1] RSP: 0018:ffffc90002f3f788 EFLAGS: 00000207 [ 787.176395][ C1] RAX: 2000040000000000 RBX: ffff88805ea3d800 RCX: ffffed100bd47b40 [ 787.184409][ C1] RDX: 00000000000000fc RSI: 00000000000000fc RDI: ffff88805ea3da00 [ 787.192406][ C1] RBP: ffffc90002f3f9b0 R08: dffffc0000000000 R09: ffff88805ea3d800 [ 787.200406][ C1] R10: dffffc0000000000 R11: ffffed1004c73bd4 R12: 0000000000000200 [ 787.208412][ C1] R13: 0000000000000a20 R14: 0000000000082a20 R15: ffff888016c41c80 [ 787.216424][ C1] ? bpf_prog_test_run+0x31e/0x390 [ 787.221587][ C1] __kasan_kmalloc+0x6b/0xf0 [ 787.226196][ C1] ? __x64_sys_bpf+0x78/0x90 [ 787.230796][ C1] ? do_syscall_64+0x4c/0xa0 [ 787.235402][ C1] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 787.241521][ C1] ? slab_post_alloc_hook+0x68/0x380 [ 787.246823][ C1] ? rcu_is_watching+0x11/0xa0 [ 787.251602][ C1] ? __kmalloc_node_track_caller+0x185/0x3a0 [ 787.257593][ C1] ? bpf_clone_redirect+0x1bb/0x470 [ 787.262815][ C1] ? bpf_clone_redirect+0x1bb/0x470 [ 787.268053][ C1] pskb_expand_head+0x127/0x10f0 [ 787.273018][ C1] bpf_clone_redirect+0x1bb/0x470 [ 787.278068][ C1] bpf_prog_adbcbe7ebb50a38f+0x19/0x8f0 [ 787.283625][ C1] bpf_test_run+0x2a8/0x800 [ 787.288161][ C1] ? convert___skb_to_skb+0x4c0/0x4c0 [ 787.293582][ C1] ? eth_get_headlen+0x200/0x200 [ 787.298546][ C1] ? __build_skb+0x1e2/0x2e0 [ 787.303155][ C1] ? convert___skb_to_skb+0x3d/0x4c0 [ 787.308458][ C1] bpf_prog_test_run_skb+0x9cc/0x1180 [ 787.313875][ C1] ? cpu_online+0x60/0x60 [ 787.318221][ C1] bpf_prog_test_run+0x31e/0x390 [ 787.323182][ C1] __sys_bpf+0x5a5/0x6f0 [ 787.327450][ C1] ? bpf_link_show_fdinfo+0x380/0x380 [ 787.332858][ C1] __x64_sys_bpf+0x78/0x90 [ 787.337343][ C1] do_syscall_64+0x4c/0xa0 [ 787.341789][ C1] ? clear_bhb_loop+0x30/0x80 [ 787.346474][ C1] ? clear_bhb_loop+0x30/0x80 [ 787.351167][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 787.357074][ C1] RIP: 0033:0x7fb353644819 [ 787.361503][ C1] RSP: 002b:00007fb35187d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 787.369959][ C1] RAX: ffffffffffffffda RBX: 00007fb3538be090 RCX: 00007fb353644819 [ 787.377946][ C1] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 787.385927][ C1] RBP: 00007fb3536dac91 R08: 0000000000000000 R09: 0000000000000000 [ 787.393922][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 787.401913][ C1] R13: 00007fb3538be128 R14: 00007fb3538be090 R15: 00007ffc5fcf95c8 [ 787.409923][ C1] [ 787.412967][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10481 jiffies! g95217 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 787.425325][ C1] rcu: Possible timer handling issue on cpu=0 timer-softirq=37416 [ 787.433238][ C1] rcu: rcu_preempt kthread starved for 10482 jiffies! g95217 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 787.444629][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 787.454604][ C1] rcu: RCU grace-period kthread stack dump: [ 787.460508][ C1] task:rcu_preempt state:I stack:27504 pid: 15 ppid: 2 flags:0x00004000 [ 787.469725][ C1] Call Trace: [ 787.473019][ C1] [ 787.475966][ C1] __schedule+0x11ef/0x43c0 [ 787.480498][ C1] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 787.486416][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 787.491629][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 787.497546][ C1] ? _raw_spin_unlock+0x40/0x40 [ 787.502410][ C1] ? release_firmware_map_entry+0x190/0x190 [ 787.508320][ C1] ? __mod_timer+0x91e/0xd00 [ 787.512931][ C1] schedule+0x11b/0x1e0 [ 787.517100][ C1] schedule_timeout+0x184/0x2d0 [ 787.521980][ C1] ? console_conditional_schedule+0x40/0x40 [ 787.527890][ C1] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 787.533807][ C1] ? update_process_times+0x200/0x200 [ 787.539206][ C1] ? prepare_to_swait_event+0x331/0x350 [ 787.544771][ C1] rcu_gp_fqs_loop+0x2be/0x11d0 [ 787.549635][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 787.554844][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 787.560098][ C1] ? dyntick_save_progress_counter+0x230/0x230 [ 787.566272][ C1] ? rcu_gp_init+0x10f0/0x10f0 [ 787.571061][ C1] ? finish_swait+0xc0/0x1d0 [ 787.575677][ C1] rcu_gp_kthread+0x9b/0x370 [ 787.580279][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 787.586187][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 787.591312][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 787.597224][ C1] ? __kthread_parkme+0x157/0x1b0 [ 787.602267][ C1] kthread+0x436/0x520 [ 787.606347][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 787.611482][ C1] ? kthread_blkcg+0xd0/0xd0 [ 787.616129][ C1] ret_from_fork+0x1f/0x30 [ 787.620572][ C1] [ 787.623598][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 787.629944][ C1] Sending NMI from CPU 1 to CPUs 0: [ 787.635174][ C0] NMI backtrace for cpu 0 [ 787.635183][ C0] CPU: 0 PID: 23302 Comm: syz.3.6818 Not tainted syzkaller #0 [ 787.635199][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 787.635207][ C0] RIP: 0010:lock_release+0x9f/0x8a0 [ 787.635227][ C0] Code: f3 f3 f3 e9 3e 07 00 00 65 8b 1d d4 81 a4 7e 83 fb 08 0f 83 4e 05 00 00 89 d8 c1 e8 06 48 8d 3c c5 68 f0 89 8d be 08 00 00 00 4c c1 60 00 89 d8 48 0f a3 05 ba 5c 2c 0c 73 0d e8 6b 4c 07 00 [ 787.635240][ C0] RSP: 0018:ffffc900000075a0 EFLAGS: 00000046 [ 787.635258][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: edd7a4b5686e7700 [ 787.635269][ C0] RDX: ffffffff819c2425 RSI: 0000000000000008 RDI: ffffffff8d89f068 [ 787.635280][ C0] RBP: ffffc900000076b0 R08: ffffffff8d89f06f R09: 1ffffffff1b13e0d [ 787.635293][ C0] R10: dffffc0000000000 R11: fffffbfff1b13e0e R12: 1ffff92000000ec0 [ 787.635305][ C0] R13: dffffc0000000000 R14: ffff88806406a818 R15: 1ffff92000000ec0 [ 787.635317][ C0] FS: 00007fa54caf96c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 787.635332][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 787.635343][ C0] CR2: 00007fa54caf8ff8 CR3: 0000000025838000 CR4: 00000000003506f0 [ 787.635357][ C0] DR0: 0000000000000000 DR1: 0000200000000300 DR2: 0000000000000000 [ 787.635368][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 787.635378][ C0] Call Trace: [ 787.635383][ C0] [ 787.635392][ C0] ? rcu_lock_release+0x5/0x40 [ 787.635407][ C0] ? read_lock_is_recursive+0x10/0x10 [ 787.635426][ C0] ? __lock_acquire+0x7d10/0x7d10 [ 787.635452][ C0] perf_output_begin_forward+0x79b/0xa40 [ 787.635467][ C0] ? perf_instruction_pointer+0x191/0x3f0 [ 787.635493][ C0] ? __perf_cgroup_move+0x140/0x140 [ 787.635510][ C0] ? rcu_lock_release+0x9/0x20 [ 787.635532][ C0] perf_event_output_forward+0x19b/0x2e0 [ 787.635550][ C0] ? perf_get_page_size+0x430/0x430 [ 787.635564][ C0] ? __lock_acquire+0x13bc/0x7d10 [ 787.635584][ C0] ? tracing_gen_ctx_irq_test+0xb3/0x130 [ 787.635606][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 787.635624][ C0] __perf_event_overflow+0x364/0x530 [ 787.635644][ C0] perf_tp_event+0x383/0xbf0 [ 787.635663][ C0] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 787.635684][ C0] ? trace_irq_enable_rcuidle+0x108/0x180 [ 787.635726][ C0] perf_trace_run_bpf_submit+0xf3/0x1c0 [ 787.635746][ C0] perf_trace_preemptirq_template+0x2aa/0x360 [ 787.635764][ C0] ? asm_sysvec_irq_work+0x16/0x20 [ 787.635781][ C0] ? trace_event_raw_event_preemptirq_template+0x290/0x290 [ 787.635800][ C0] ? __irq_exit_rcu+0x147/0x230 [ 787.635815][ C0] ? irq_exit_rcu+0x20/0x20 [ 787.635832][ C0] ? asm_sysvec_irq_work+0x16/0x20 [ 787.635848][ C0] trace_irq_enable_rcuidle+0x108/0x180 [ 787.635867][ C0] trace_hardirqs_on+0x57/0x80 [ 787.635882][ C0] asm_sysvec_irq_work+0x16/0x20 [ 787.635897][ C0] RIP: 0010:handle_softirqs+0x1a9/0x830 [ 787.635912][ C0] Code: 24 78 44 89 64 24 28 0f b7 db 48 c7 c7 00 10 2a 8a e8 2b 99 73 08 65 66 c7 05 51 47 ba 7e 00 00 e8 9c 0e 36 00 fb 89 5c 24 34 ff ff ff ff 0f bc 44 24 34 41 89 c5 41 ff c5 0f 85 d2 00 00 00 [ 787.635925][ C0] RSP: 0018:ffffc90000007e20 EFLAGS: 00000282 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 787.635937][ C0] RAX: edd7a4b5686e7700 RBX: 0000000000000200 RCX: edd7a4b5686e7700 [ 787.635949][ C0] RDX: dffffc0000000000 RSI: ffffffff8a2b2800 RDI: ffffffff8a79fe40 [ 787.635961][ C0] RBP: ffffc90000007f30 R08: ffff8880b903b30b R09: 1ffff11017207661 [ 787.635973][ C0] R10: dffffc0000000000 R11: ffffed1017207662 R12: 000000000000000a [ 787.635985][ C0] R13: 0000000000000000 R14: ffff888022c3bb80 R15: dffffc0000000000 [ 787.636011][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 787.636030][ C0] ? do_softirq+0x210/0x210 [ 787.636050][ C0] __irq_exit_rcu+0x13b/0x230 [ 787.636066][ C0] ? irq_exit_rcu+0x20/0x20 [ 787.636088][ C0] irq_exit_rcu+0x5/0x20 [ 787.636101][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 787.636119][ C0] [ 787.636124][ C0] [ 787.636129][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 787.636146][ C0] RIP: 0010:rcu_read_unlock_special+0xbf/0x4a0 [ 787.636162][ C0] Code: 00 00 00 00 65 48 8b 04 25 28 00 00 00 48 3b 84 24 80 00 00 00 0f 85 4e 03 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 <49> 89 ff 42 c6 44 2b 08 00 48 c7 44 24 60 00 00 00 00 9c 8f 44 24 [ 787.636176][ C0] RSP: 0018:ffffc9000302fb60 EFLAGS: 00000246 [ 787.636188][ C0] RAX: f2f2f2f8f1f1f1f1 RBX: 1ffff92000605f70 RCX: 0000000000080000 [ 787.636200][ C0] RDX: ffffc90006311000 RSI: 000000000001c586 RDI: ffff888022c3bb80 [ 787.636211][ C0] RBP: ffffc9000302fc30 R08: dffffc0000000000 R09: 1ffffffff203aa18 [ 787.636223][ C0] R10: dffffc0000000000 R11: fffffbfff203aa19 R12: 1ffff110045877f7 [ 787.636236][ C0] R13: dffffc0000000000 R14: 0000000080000000 R15: dffffc0000000000 [ 787.636264][ C0] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 787.636282][ C0] ? __rcu_read_unlock+0xd0/0xd0 [ 787.636302][ C0] ? lock_is_held_type+0x13a/0x190 [ 787.636321][ C0] __rcu_read_unlock+0x78/0xd0 [ 787.636338][ C0] net_generic+0x1b7/0x200 [ 787.636358][ C0] mptcp_pm_nl_data_init+0x4b/0x2e0 [ 787.636375][ C0] __mptcp_init_sock+0x409/0x510 [ 787.636392][ C0] mptcp_init_sock+0xa2/0x730 [ 787.636409][ C0] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 787.636427][ C0] ? mptcp_accept+0x410/0x410 [ 787.636449][ C0] inet_create+0xc09/0xef0 [ 787.636468][ C0] __sock_create+0x47b/0x900 [ 787.636491][ C0] __sys_socket+0xe2/0x170 [ 787.636510][ C0] __x64_sys_socket+0x76/0x80 [ 787.636528][ C0] do_syscall_64+0x4c/0xa0 [ 787.636542][ C0] ? clear_bhb_loop+0x30/0x80 [ 787.636556][ C0] ? clear_bhb_loop+0x30/0x80 [ 787.636573][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 787.636589][ C0] RIP: 0033:0x7fa54e89f819 [ 787.636603][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 787.636616][ C0] RSP: 002b:00007fa54caf9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 787.636630][ C0] RAX: ffffffffffffffda RBX: 00007fa54eb18fa0 RCX: 00007fa54e89f819 [ 787.636642][ C0] RDX: 0000000000000106 RSI: 0200000000000001 RDI: 0000000000000002 [ 787.636653][ C0] RBP: 00007fa54e935c91 R08: 0000000000000000 R09: 0000000000000000 [ 787.636663][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 787.636673][ C0] R13: 00007fa54eb19038 R14: 00007fa54eb18fa0 R15: 00007fffe88fe688 [ 787.636694][ C0] [ 788.151751][ T8970] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { P23302 P23295 } 10607 jiffies s: 66621 root: 0x0/T [ 788.327125][ T8970] rcu: blocking rcu_node structures (internal RCU debug):