last executing test programs: 4m29.515125554s ago: executing program 3 (id=8864): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) socket$kcm(0x11, 0xa, 0x300) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x28, 0x0, @mcast1, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b3325fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0) 4m29.398429957s ago: executing program 3 (id=8868): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x600, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00410000009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4040) (fail_nth: 8) 4m29.264688751s ago: executing program 3 (id=8870): r0 = perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x80, 0x4, 0x3, 0x5, 0x10, 0x0, 0x7, 0x10, 0xd, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x7, 0x4, @perf_config_ext={0x1, 0x30}, 0x2000, 0x1, 0x1, 0x0, 0x1, 0xb62, 0x5, 0x0, 0x7fffffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x4) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000080)={0x4, 0x80, 0x93, 0x9, 0xf1, 0x7, 0x0, 0x2b, 0x10, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x5, 0x5}, 0x11c0a0, 0x5, 0x0, 0x1, 0xc9, 0x4, 0x3ff, 0x0, 0x4, 0x0, 0x8000000000000001}) 4m29.068987747s ago: executing program 3 (id=8873): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x88) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYRES32=0x0, @ANYRES32], 0x50) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001540), 0x8800, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000280)=0x7) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfe33) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0x1, 0x58, &(0x7f00000002c0)}, 0x10) 4m28.63049049s ago: executing program 3 (id=8875): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x88) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0600000004000000060000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/14, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80800, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000001540), 0x8800, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r0, 0x0, 0xa0028000}, 0x38) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$kcm(0x15, 0x5, 0x0) recvmsg$kcm(r6, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x140) r7 = socket$kcm(0x10, 0x3, 0x10) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000280)=0x7) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90b24fc60", 0x8c0}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x2000300, 0xe, 0xfffffd83, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000560013f16ff28e036afc004a07"], 0xfe33) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002600)={&(0x7f00000004c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000002580)=[{&(0x7f0000000540)="fef94cbbf82e586de8bc8cef4897ea46b6351c762aec68b6d95598432723a168b871b8e78a990b1bb46de89900532f20565cfc7272739dba09b5a7a899c66021cd8ee094524cbe733a5a035d0e2b441352972f722c33c29275d53e5a3bbd75dfd96ad4b08652a34e10bce4f0a3f196c43a424733f250b6a3e1db9eb8f797f17085c572b8a31025ea48aeafe1b83719dd792a4cf05746f341cb255ff66d57a0be79ae3951d3e676e8ea09e446ef04e98770", 0xb1}, {&(0x7f0000000600)="3378f7e9d54481", 0x7}, {&(0x7f0000001580)="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", 0x1000}], 0x3, &(0x7f00000025c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x7fffffff}}, @ip_ttl={{0x14, 0x0, 0x2, 0x40}}], 0x30}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) 4m25.318935118s ago: executing program 3 (id=8882): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000005c0)=r2, 0x12) r5 = openat$cgroup_ro(r3, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000040)=0x1, 0x12) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703320000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r8, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8000000000000000, 0x8000}, 0x4105, 0x0, 0x3}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x5, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000611214000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r9, &(0x7f0000000000), &(0x7f0000000040)=""/63}, 0x20) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r10 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r10, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2c}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000000)='Gb', 0x5dc}], 0x1}, 0x480c0) 4m9.74599358s ago: executing program 32 (id=8882): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000005c0)=r2, 0x12) r5 = openat$cgroup_ro(r3, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000040)=0x1, 0x12) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703320000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r8, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8000000000000000, 0x8000}, 0x4105, 0x0, 0x3}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x5, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000611214000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r9, &(0x7f0000000000), &(0x7f0000000040)=""/63}, 0x20) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r10 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r10, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2c}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000000)='Gb', 0x5dc}], 0x1}, 0x480c0) 3.108507017s ago: executing program 4 (id=10083): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x13, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8b1a, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x2, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x0, 0xc3, &(0x7f0000000140)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, r0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x28100, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2, @perf_config_ext={0xfffffffffffffffc, 0x6}, 0x80, 0x10000, 0x1, 0x1, 0x40, 0x20003, 0xfffc, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x0, r0, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x5d, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90224fc60", 0x14}], 0x1, 0x0, 0x0, 0x10}, 0x0) close(r1) r3 = socket$kcm(0xa, 0x1, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xe, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000085e45f9e4d2593f8e50300000000000000080000ebe57b0000000000950000001079ffe000000000000000"], &(0x7f0000000c40)='GPL\x00', 0x4, 0xffffffffffffff6a, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r4}, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x0, 0x9, 0x12, 0x5, 0xfffffffffff7bbfe, 0x1, 0x0, 0x0, 0x5ff}, 0x0, 0x2000800000, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) sendmsg$kcm(r3, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000002c0)="140000001d000b63d25a80648c2594", 0xf}, {&(0x7f0000000580)="3f1f2725e7", 0x5}], 0x2}, 0xc080) r7 = perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x4, 0x0, 0xfe, 0x0, 0x400000000800, 0x20000, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0, 0x1, 0xffffffffffffffff, 0x0) syz_clone(0x21000000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_RESET(r7, 0x2403, 0x80000000001fe) 3.045406259s ago: executing program 2 (id=10084): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20002, 0x0, @perf_config_ext={0x5, 0x400007ff}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x8, 0x0, 0x8b, 0x0, 0x1, 0x420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x8726, 0xa}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2}, 0x0, 0x4, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x5, 0x47, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xc, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000020000000000000099aa000018150000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000018000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000099f600008500000015000000850000000700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000780)={@fallback=r0, r3, 0xf, 0x4, r1, @void, @value=r1}, 0x20) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8916, 0x0) r5 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@bloom_filter={0x1e, 0x81, 0xec5, 0xde2, 0x40528, 0xffffffffffffffff, 0xe, '\x00', 0x0, r5, 0x1, 0x2, 0x3, 0x7}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r6}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYRES64], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5d31, 0x20300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0}, 0x4102, 0x1, 0x0, 0x9, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x25, 0x1, 0x5, &(0x7f0000000000)) 2.162656045s ago: executing program 4 (id=10086): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f5, &(0x7f0000000080)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x8, [@enum64={0x1, 0x2, 0x0, 0x13, 0x1, 0x2, [{0x3, 0x1, 0x4}, {0x4, 0x1, 0x3b}]}]}, {0x0, [0x5f, 0x5f, 0x5f, 0x61, 0x30, 0x5f]}}, 0x0, 0x44, 0x0, 0x1, 0xfffffff1}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r1) r2 = socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4000000}, 0x2124, 0x6, 0x0, 0x8, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) recvmsg(r1, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x10002) r3 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x39, 0x0, 0xa4) 2.159332016s ago: executing program 1 (id=10087): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="711091000000000095"], &(0x7f0000000200)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x4c2c, 0x3, 0x0, 0x0, 0x10000, 0x800000, 0x9, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000100"/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x11}, 0x20) openat$cgroup(0xffffffffffffffff, &(0x7f0000000300)='syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f0000002280)='tasks\x00', 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x5, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000001000)='cgroup.threads\x00', 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4040004) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x300, &(0x7f00000001c0)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002680)={&(0x7f0000001080)={0x2, 0x4e24, @private=0xa010100}, 0x10, &(0x7f00000022c0)=[{&(0x7f00000010c0)="7816e951f97fdb02616458f8090c2d188d857a266d483266951fc906f698f0adb2e5aeb537fcc4e81baae4318875ee3bcc756ce5b00ef6bf0ab0bde75ae5c5647e65cfd3f7c09cbaf2b222403e5c97989d244f82aca89fc18c767f65e122413d710c8582e1722e168586c506d194d850a5dc037ee9fec36d98a68aa9a64b84db11d7b87ec29524b04607413d8052", 0x8e}, {&(0x7f0000001180)="35dbec22ef2c5f959c0bdbfbc54e412bb7b0655516405913d01de8c05179158dce7dd72e4fd64dcf9750d98b034234baaf948be28718def0133f5039b07d33bc35162b63b6fa68add37bb1024f855e6fbb22f5f3c66f365e676a8a4a5d39c93c6dccf6727a530f13495a16d9e8a858a073b6ec889e262cfc65015fa7142fc18349bff0f50bcceb8ca62dd62c7983d19f8a56560aa3238c46545bfcecb3886edbf23ba55bfef627f439c74eb711ad0e30f9dfb6d4bea2550d67f0bcc2959d4974e04a183513e0fe0a6f8884a9a99a0b2419cf836832da9602c35becd2b2363a97960a89e17cfa57ef", 0xe8}, {&(0x7f0000001280)="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", 0x1000}, {&(0x7f0000002280)}], 0x4, &(0x7f00000026c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ffffffff00000000000000001400000000000000000000000200000005000000000000007400000000000000000000000700000001830773ac1414aa0044444b71e000000100000004ac1414bb0000003e64010101fffffffa6401010100000002000000000000007b00000000000000050a01010200000005ac1414130000000844104980000000030000000e0000008094040100000000000000001c00000000000000000000000700000001830b6ce0000001ffffffff00000000a80000000000000000000000070000004414f911ac14142400000056ffffffff00000bd5831f1fe0000002ac1414bb7f00000100000000ffffffff00000000ac14140c44186e0000000400000000040000020000000007fffffff844242f63e000000200000007ac141425000003ff7f00000100000009ac1414270000007f94040000440c5713ac1414270800000001070bd3ac1e00017f00000100070be164010102ac1414bb00110000000000000000000000010000000600000000000000afb1c90537f69ca87b6bb1533ca1cd5b42a4546437e1e5711e"], 0x298}, 0x40) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080207000000040000a118000200e000000100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 2.045889179s ago: executing program 2 (id=10088): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x104029, 0xb, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0x10, 0x4, 0x8, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x4, &(0x7f0000000240)={{r0}, &(0x7f0000000100), 0x0}, 0x20) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7f}, 0x100904, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0xa, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b904021d080009000200e8fe55a1180015000600142603600e120900210000000401a8001600a400014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0x9}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe69, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x3, 0xc, 0x0, 0x0}, 0x94) 1.976297911s ago: executing program 0 (id=10089): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.930400392s ago: executing program 1 (id=10090): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f00000002c0)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit, @alu={0x7, 0x1, 0xb, 0x0, 0xa}]}, &(0x7f0000000000)='GPL\x00', 0x6, 0xec, &(0x7f00000004c0)=""/236}, 0x80) r0 = perf_event_open$cgroup(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xb}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x9, 0x5, 0x7, 0xc1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000100), 0x3f, r2}, 0x38) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x8000080}, [@call={0x85, 0x0, 0x0, 0x23}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa8}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r4 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000016c0)=ANY=[@ANYBLOB="373e9748a65a9001ca60b23ef9635c9342a11691759ef18ffc24ef42cf73718f5afe604e5e30bf328591f1a714875adeb349f6f327cd56ef1533686af685cc343285ff01ae63dcd01196e24029bae25c40694da25a7efc2c4f2f88699e026212e97c8f3e45de1d720b76c9208a8c7c00fc4747c30363d9b16d2e6e726d54dbde0e39c448461c80d4d936f34b67006e5c112e9caa36d95805247e434338a1aaf2a5c2f61b0b25f57f5cce32c4be4d2d94c60f765b1db57b2fdc7ced99c5072e80f8f9e35b643f5a8beb921e3ee2d655337712", @ANYRES64, @ANYRESOCT, @ANYRESDEC, @ANYRES64=r4, @ANYRES16], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x10000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r7, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0], 0x0, 0x3a, &(0x7f0000000280)=[{}, {}, {}], 0x18, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000840)={0x0, 0x4}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000880)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001cc0)=@bpf_tracing={0x1a, 0x1, &(0x7f00000003c0)=ANY=[@ANYBLOB="3a56f40bffffffff9feabad24649b3b6a9de1112f0159590e1c50b24c57251e4b712df52ce207a"], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x60, &(0x7f0000000740)=""/96, 0x41000, 0x48, '\x00', r8, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000800)={0x1, 0x7, 0x100, 0x5}, 0x10, 0x1e650, r6, 0x1, &(0x7f0000000bc0)=[r9, r10, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000c00)=[{0x2, 0x1, 0x1}], 0x10, 0x6}, 0x94) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000840)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r0, 0x1, 0x0, 0x4}, 0x50) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0x12, 0xc6, 0x4, 0x2}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r12, &(0x7f0000000140), 0x0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000008c0)={0x1, 0xffffffffffffffff}, 0x4) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0x8, 0x6, 0x7, 0x0, 0x1000, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x2}, 0x50) r15 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x3}, 0x50) r16 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000b00)={0x0, 0x7, 0x10}, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000bc0)=@bpf_lsm={0x1d, 0x2e, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3e98ea9c, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xdc}}, @map_fd={0x18, 0xa, 0x1, 0x0, r3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6b}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x10}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xf}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffd}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000740)='syzkaller\x00', 0x6, 0x6, &(0x7f0000000780)=""/6, 0x60d80f6ca2890ce5, 0x66, '\x00', r8, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000800)={0x1, 0x5, 0x5}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000b40)=[r1, r11, r12, r13, r14, r15, 0xffffffffffffffff, r16], &(0x7f0000000b80)=[{0x5, 0x4, 0x6, 0x1}, {0x0, 0x4, 0x8, 0x5}, {0x0, 0x3, 0x9, 0x7}], 0x10, 0xe959}, 0x94) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="d8000000100081046a81f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a8001600a4000140200009002cea19853626feffff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8dcef52a9d7c7c0b7a196e6f66112c88a6bbace80177ccbec4c2ee5a7cef4090000001f3c29643a5ee4ce1b14d6d930dfe1d9d322d4acd9b575730d0080000000000000b5675025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee28a0", 0xd8}], 0x1}, 0x0) 1.867135584s ago: executing program 0 (id=10092): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x10000, 0xca, 0x0, 0x0, 0x0, 0x8, 0x200}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[@ANYRES8=r1, @ANYBLOB="3eca", @ANYRES32=r2], 0x9a) 1.866119524s ago: executing program 2 (id=10093): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x13, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8b1a, &(0x7f0000000400)={'syzkaller0\x00', @random="05f91503f4e1"}) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x28100, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2, @perf_config_ext={0xfffffffffffffffc, 0x6}, 0x80, 0x10000, 0x1, 0x1, 0x40, 0x20003, 0xfffc, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x0, r0, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x5d, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90224fc60", 0x14}], 0x1, 0x0, 0x0, 0x10}, 0x0) close(r1) r3 = socket$kcm(0xa, 0x1, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xe, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000085e45f9e4d2593f8e50300000000000000080000ebe57b0000000000950000001079ffe000000000000000"], &(0x7f0000000c40)='GPL\x00', 0x4, 0xffffffffffffff6a, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r4}, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x0, 0x9, 0x12, 0x5, 0xfffffffffff7bbfe, 0x1, 0x0, 0x0, 0x5ff}, 0x0, 0x2000800000, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) sendmsg$kcm(r3, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000002c0)="140000001d000b63d25a80648c2594", 0xf}, {&(0x7f0000000580)="3f1f2725e7", 0x5}], 0x2}, 0xc080) r7 = perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x4, 0x0, 0xfe, 0x0, 0x400000000800, 0x20000, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0, 0x1, 0xffffffffffffffff, 0x0) syz_clone(0x21000000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_RESET(r7, 0x2403, 0x80000000001fe) 1.751193288s ago: executing program 0 (id=10094): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x13, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8b1a, &(0x7f0000000400)={'syzkaller0\x00', @random="05f91503f4e1"}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x2, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079104800000000006104000000"], &(0x7f0000003ff6)='GPL\x00', 0x0, 0xc3, &(0x7f0000000140)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, r0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x28100, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2, @perf_config_ext={0xfffffffffffffffc, 0x6}, 0x80, 0x10000, 0x1, 0x1, 0x40, 0x20003, 0xfffc, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x0, r0, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x5d, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90224fc60", 0x14}], 0x1, 0x0, 0x0, 0x10}, 0x0) close(r1) r3 = socket$kcm(0xa, 0x1, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xe, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000085e45f9e4d2593f8e50300000000000000080000ebe57b0000000000950000001079ffe000000000000000"], &(0x7f0000000c40)='GPL\x00', 0x4, 0xffffffffffffff6a, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r4}, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x0, 0x9, 0x12, 0x5, 0xfffffffffff7bbfe, 0x1, 0x0, 0x0, 0x5ff}, 0x0, 0x2000800000, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) sendmsg$kcm(r3, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000002c0)="140000001d000b63d25a80648c2594", 0xf}, {&(0x7f0000000580)="3f1f2725e7", 0x5}], 0x2}, 0xc080) r7 = perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x4, 0x0, 0xfe, 0x0, 0x400000000800, 0x20000, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0, 0x1, 0xffffffffffffffff, 0x0) syz_clone(0xc920000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x21000000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_RESET(r7, 0x2403, 0x80000000001fe) 1.749848958s ago: executing program 1 (id=10095): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x13, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8b1a, &(0x7f0000000400)={'syzkaller0\x00', @random="05f91503f4e1"}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x2, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x0, 0xc3, &(0x7f0000000140)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, r0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x28100, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2, @perf_config_ext={0xfffffffffffffffc, 0x6}, 0x80, 0x10000, 0x1, 0x1, 0x40, 0x20003, 0xfffc, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x0, r0, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x5d, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90224fc60", 0x14}], 0x1, 0x0, 0x0, 0x10}, 0x0) close(r1) r3 = socket$kcm(0xa, 0x1, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xe, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000085e45f9e4d2593f8e50300000000000000080000ebe57b0000000000950000001079ffe000000000000000"], &(0x7f0000000c40)='GPL\x00', 0x4, 0xffffffffffffff6a, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r4}, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x0, 0x9, 0x12, 0x5, 0xfffffffffff7bbfe, 0x1, 0x0, 0x0, 0x5ff}, 0x0, 0x2000800000, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) sendmsg$kcm(r3, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000002c0)="140000001d000b63d25a80648c2594", 0xf}, {&(0x7f0000000580)="3f1f2725e7", 0x5}], 0x2}, 0xc080) r7 = perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x4, 0x0, 0xfe, 0x0, 0x400000000800, 0x20000, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0, 0x1, 0xffffffffffffffff, 0x0) syz_clone(0xc920000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x21000000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_RESET(r7, 0x2403, 0x80000000001fe) 1.175209375s ago: executing program 4 (id=10096): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0xa}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000680)="76389e6a65585578f830e9000000", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 999.07956ms ago: executing program 4 (id=10097): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20002, 0x0, @perf_config_ext={0x5, 0x400007ff}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x8, 0x0, 0x8b, 0x0, 0x1, 0x420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x8726, 0xa}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2}, 0x0, 0x4, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x5, 0x47, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xc, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000020000000000000099aa000018150000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000018000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000099f600008500000015000000850000000700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000780)={@fallback=r0, 0xffffffffffffffff, 0xf, 0x4, r1, @void, @value=r1}, 0x20) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8916, 0x0) r4 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@bloom_filter={0x1e, 0x81, 0xec5, 0xde2, 0x40528, 0xffffffffffffffff, 0xe, '\x00', 0x0, r4, 0x1, 0x2, 0x3, 0x7}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r5}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYRES64], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5d31, 0x20300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0}, 0x4102, 0x1, 0x0, 0x9, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x25, 0x1, 0x5, &(0x7f0000000000)) 961.261541ms ago: executing program 2 (id=10098): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x88) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0600000004000000060000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/14, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80800, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000001540), 0x8800, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), 0x0, 0xfff, r0, 0x0, 0xa0028000}, 0x38) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$kcm(0x15, 0x5, 0x0) recvmsg$kcm(r6, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x140) r7 = socket$kcm(0x10, 0x3, 0x10) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000280)=0x7) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90b24fc60", 0x8c0}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x2000300, 0xe, 0xfffffd83, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000560013f16ff28e036afc004a07"], 0xfe33) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002600)={&(0x7f00000004c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000002580)=[{&(0x7f0000000540)="fef94cbbf82e586de8bc8cef4897ea46b6351c762aec68b6d95598432723a168b871b8e78a990b1bb46de89900532f20565cfc7272739dba09b5a7a899c66021cd8ee094524cbe733a5a035d0e2b441352972f722c33c29275d53e5a3bbd75dfd96ad4b08652a34e10bce4f0a3f196c43a424733f250b6a3e1db9eb8f797f17085c572b8a31025ea48aeafe1b83719dd792a4cf05746f341cb255ff66d57a0be79ae3951d3e676e8ea09e446ef04e98770", 0xb1}, {&(0x7f0000000600)="3378f7e9d54481", 0x7}, {&(0x7f0000001580)="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", 0x1000}], 0x3, &(0x7f00000025c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x7fffffff}}, @ip_ttl={{0x14, 0x0, 0x2, 0x40}}], 0x30}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) 789.508566ms ago: executing program 1 (id=10099): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="711091000000000095"], &(0x7f0000000200)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x4c2c, 0x3, 0x0, 0x0, 0x10000, 0x800000, 0x9, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000100"/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x11}, 0x20) openat$cgroup(0xffffffffffffffff, &(0x7f0000000300)='syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f0000002280)='tasks\x00', 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x5, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000001000)='cgroup.threads\x00', 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4040004) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x300, &(0x7f00000001c0)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002680)={&(0x7f0000001080)={0x2, 0x4e24, @private=0xa010100}, 0x10, &(0x7f00000022c0)=[{&(0x7f00000010c0)="7816e951f97fdb02616458f8090c2d188d857a266d483266951fc906f698f0adb2e5aeb537fcc4e81baae4318875ee3bcc756ce5b00ef6bf0ab0bde75ae5c5647e65cfd3f7c09cbaf2b222403e5c97989d244f82aca89fc18c767f65e122413d710c8582e1722e168586c506d194d850a5dc037ee9fec36d98a68aa9a64b84db11d7b87ec29524b04607413d8052", 0x8e}, {&(0x7f0000001180)="35dbec22ef2c5f959c0bdbfbc54e412bb7b0655516405913d01de8c05179158dce7dd72e4fd64dcf9750d98b034234baaf948be28718def0133f5039b07d33bc35162b63b6fa68add37bb1024f855e6fbb22f5f3c66f365e676a8a4a5d39c93c6dccf6727a530f13495a16d9e8a858a073b6ec889e262cfc65015fa7142fc18349bff0f50bcceb8ca62dd62c7983d19f8a56560aa3238c46545bfcecb3886edbf23ba55bfef627f439c74eb711ad0e30f9dfb6d4bea2550d67f0bcc2959d4974e04a183513e0fe0a6f8884a9a99a0b2419cf836832da9602c35becd2b2363a97960a89e17cfa57ef", 0xe8}, {&(0x7f0000001280)="6368321b3c35b9ae304d6b6a620e2ddcd1de146e854974196cf050b43684d5107ec47464d564a506b21186c3a6850187e4700251ef18580431fefb4fdb458f1524316b929b19c2128c8bea0f2d4540baf8a820e05602284e1f0c5874ddcaae2a30b1cb47fc47f1af75d22d38ea86946aaa261731d12610ee517bb1ebc59f8dbb451407499c2d931ee2c021e73406ac33dacd65e2ed2438388b72384e6ee24f7fab1054cb57803f52754aaca9d7b9e7b2857ee298b8d3bd668e4135c9a9b8378a27dcbe1d27716f195c375e4b68393f7970efa01ebe7c24faa30e46ce6a809115816a23155f5e3244971015416362689291d6c228919e3f3ccb9b9970b6ccca5185c260e820454b4285a6651501d32c1bb451a3fe90a91a6abd260d761a1ff688c1964292d3541c6bd909aa436658c4146c155d118825e751ae52d2123a25ebe3a926ae745e749a3a765f1481d5a14c61aafc82116e9f98ac104ff882b6b8efe6057c8432b70f81eae343bc9e7b1f072f7cb91fb37dd834139fa231c3d5f6628f2ff96742e8818b650491d5c4bce2884d0cbe2a94181a05c16eb80ef07f85e037371c011f9182b01bbfa3512861ad328930294410006daca20870b35a7c526aea010adc5154dac8b02dfe789330134282e760a6fb8bf368e293af467294c3501961194740927568ac98ca3b43336cdf382ab02ca65f1f4e274f64fca2e79039940b14a761b3e7f44adfef27e0c511c9b7050e303bda5ceba6407bcd594ec922e32d6260d4f77060ef295f7b1add0adbb81d5ee0b7721e6d527eb908b5b2efdc6dbd0621812b57a9508489e9d5d69612bd96df61450a68fd7cb770b6047c69e0afc9dc17bf47284ec8f97cb95b91e395c0c519ea097c2c28eeda34f8f222512f86f4f11df51823dee7252566d748d77d4700314a575a4186bc6400e0b00a4cf8ac7f7851c6aeda2c914d59c83b35bf3fd8e058fd5822b9d0cf2718182ef310d7633afb704158f11d227536a99de011bc1510183cae7764c8192cdeea3d33bdce8796efa943281f124aa2b4977b7941f62ae6c7fb3465caadf41ed018a92583ec8b497e7c83279f71c472fb0ed35ccf42be13edad5f35704d838b15b8d098fc9bf094c32b58ad497547de9fc736938e4292d2cd811f511b6a03fe702de69b6e205d2340744015a562046294fb6b171b816d44802fb2206b9474eb1df99fa1a1e7987ff6c7818b56aa83221c86b8d8a88594016ddaa86862930cee06f3d47b886b565607acbe5e999701f785775f4ae7659b9b5103a61b00748d39f738a1fd33bb276eaea6a8cbf57bfd1b7982b55256ada2a9018abf6646863de145dc7ef424a64554648ab567a3a4b413e3b6934dfa3f541c5aafee198d05bcc5a7f97f9343a1ec0e785a242f02cacdaa01a2a620bb0bdb46c084c25d2ee08102b0a4160059792e47e8e68db715e56d9870f97956580c1db48d8f7cf1d4427a3525568b26c6b944c9f03e013afd217a8204a9e9e4da7e83503bbeb74c152c08f724115cf9e3a7a4ab1a0e1394bac803ce39b361537ba74a0e50e7d45f64ccb1695f37e2fc50b08d82ebe1e29a15b6746413fdbeb16a59eda6b032a2dd76fdeafeef76d481fb8cb2f76141d218c951bc6c6a21d0df574089b537bf1fdccbeb16bbff3a2a4e275523a2bdd32ffec451f91622cd0e3710f05107cff4b010c971326ed27efe1f3205777ec0c0d1e8b40e80ba9ba16d628ae46b5e3f6e06e18f917fe80bd5d9e47d8034453a4fc811f8742ae12b7e4256118aa21d58cfb566b6bf2fce8bb2acf218688a549886339c89bf2edacaecdad63f3259864440094787e50c85b09eec8a2ebb461925cfe76e0ef6b7b1dec3379ce2dbc95c059eb66502174e596c42dda6b3621473fa7ee7d65f60cebd8e9f8a9df00e8e6ba74f73de41aee7d4e6e3d8e43f06f0c98ad30f73d1293ead773393b23f0fc37b2f4b1653e899428a1de495bb4c5aedb0d209dfec53bedb89c6250963c38d5f80788093ee82cc4f2c9a50bc3fffb464c92a77d5c43ed04eaab66b5245d09599a3d170f49a92393c1610c26eb01fa97048cf507f07bb4c944ff48a56a7a4c706e4596829337cc1fd86ad6f1cf6cee03b730afdcca0799189055f6b1fc149181c8549e06bc88685ad2219cd7c751139f850c3009aabe2b3daa850410403a0bb118bde58ec7923c6a173b649e1ff7c8587bd11f9a7adeb3bf8ef3c43ece7c983d8a0c913e87474cabc5eaa5d567a3ecfe941b72aceb930d0c24ffb126299b18fa9d5f7bcdb16b7e0627f62a5a0e3161e557651340689c4ae4657ce603a30f05dbb7e5807c4e3b54b5e64030359596b83d9b4ba30851475631b463406c87039d0ab286f8a55f5185cb5009b221fed0a6839798f8c144db6869b89dffba337e64ac3b4b1fed63a90f03aade19967a3f55e178585b40a0a51079e5014cf73d8090c4f217a712ef605a64a83c5c90b513457be68262c81f285382d67a87e4e7336579672322ada988b8f4d893f89b947166cbbda5978de30197f9cd0ef28048d666340c8457411631d1421ac264e603608173ad24bb040a188a3803c1424ab6be4e7e3c72b18db373f6b2404c515286a68fec912f09125e1e99eace7ddedb46805e0ec42106d9184785f9e4d01a8057b013be3415b2b5965d6e5bb2d6c3c7be01670a59ab75b7b8e6ed034f6f6bbea68ec3776e14d4075d2da6dfc3d273a9f3c3535dfdf527096882bc3bc878811ac7cd34e43a5a75660b555e71944a025bf0ffb98d3e0c8026a56fb9e5a826cb8dfe33ed7134e88c072a763cf9eb2e0754ca6b2b9d947d09c08f3a39392bb34a98abf33f7bc222a5a5d82b4e13011a9cf2ccfdf93d737e8b91a04bfd565c7b864bd4d289b21c1e908ee1969d93a04f491ce8adcb0108d4a4d1271695696ac925ed92436d7ab1019c47ccdafb16416377df605fe0ffb933b74e3bc62862a2dac311a794c205beec4f8b854c8c870836fe5d67282858312f25c5aab6797c1c6b55a62c6a1fe31b043ab1873385308ee8e06aca53613c7c29948a57d2b775971774d3cf8659d2eb7945f0867ca67c0703ae3a2b4ecc4d83ff535b4ea9d96cba79a7eb5de0b1f7697092029c758ed12b89aebaa5e0b7d233b62836c1895b8667cea4109d62e510f2514cf8c2e0441f528e2a6e9d040fa556c554ca328f3c134a2b53aceb72a8c6d937856b07d56bfdac6c1fd1ac390de202cac804f76de6ae1cb33c8bc3737180d66c4fd06d18a5a5e45c25c9ca498ec50d2c0c0427f09a3871c9d5c34c4e8f43595415557647807a6aa7b0537e23086f8268247bb8173fa352ae043cf2a5cbd7722bfbc6769f590edd2acfaa551d0e3928e189f9144e31552af0c292ceddf3d5fdd8ad18c732a0367b1eebae7c929e2c67625550e35885aff2e3def3db4bc70e51272dae92d20acb46d9522b920e0496459d06f9647d2ee6c8685634d0bb2b5d6c9d11a179e88497ea9944fe6babef86187049ba5a126f63b1461a066ac99eebe7f66bbe842fd50e6d2b865211f46d4ebc680905dfaff3937ece4cd0fd508b7dba2accb1f7d96f0fe5bdc557704ec096bc0030fdedc40124662d76e79ed11d484c7820d35a45df8af82f1f3d7b7d00af9d6692e53026fe5dccbfda23fdb7bab3ad8923268a54fa8556891e902e77ec13b06314a48fbf70bc3db5405c56adaeda82280dfca6f62a30bdef90c12afbd34f560dcdac0263e5a57a5376a48ceecf1a47c9607b8fa1d1e194741dbb4089defcaa92b9d42f6cac0b0fa0fc8de1da0d5f3df3ba122bee7ec7037ac33f43bc4b804208756974cb34bda609fb09c05403b37295288c45e104371db6b5cd5d09136c8c9252bc57e354a0f3303f71588b8f0a9a5321c0edef42fe5c91a0d459cc061b158c70b3914ba56c25d20f55e86bd748b802588f72761c0a972cf8782fb9ae0f7d0d861b5bc14619799d99233822363a075e02dd636c953cbe14e82cc846a350fe64bef25ca5dc37499c3fac90609e02f0ea5f55d5843650ebf72e77380d5d0179024355b5b67834a0aa260a12c74eb55b45ce1c79fbad2d184d96ec95649fa1955a2cf55a8da446f3fa6b6444ac7cb9ab95de3ab4a809d9f1a01d30ee0ba3dc3643cd986c29ea53ab7a376a09dfcd3840cff8301bbfe716b2c0046ab0fa398fb7527f62395b91c16507a7b5d50f93cdbc4ddeec08cdca11e865a44016de9d3c950c8e4cda87463f37e059749b50ef014539ab19ef0829dfbfeedeac13f6b7f66cffa40529638f45e22b958c2020da6732433b1395ac16ec45780d9153ecf21ce5befbcd0ca16cd462fd51c9235b171aac8ebefff3e06920b2ce8c04cf17b85eaa41086cffd2d05672c81b42f667329b576a23332231b43962dffe41a0fdaf4a6b09e02f05c917b51f28d81bc7b38b173c45b44b3f14b65de265f19648e36dfab59c33bbd08b20134a8f2535cdb2acec29c63d774b2a189c660327e6d1555c1a104e7b0e51b305d689dbd41ae8a8cf5155697a57ed66af30dcba1a65d1e5f37d9b557487ef9c6c14cbf32c6b185fd4cbb7b54f1668539c5fa105d8d2b1b85ee9cb79e9d14fee7344755f0a212ee5f8d50605881deebc68eaa345aba9fe7a4d99a3ff0dca769b132970ac7cb0861145e5ea2701cff3982a92c0a55ad9386bb11c6fb7bcafeeda59bce63071cdf5679074b21e4b41ae10e88a9b18cabed246c7a3bcff3b06d348816c60e24fe4905e2242b1cc11f64c32c12cf823ac751efc725827c81db48ec7adda1b6225d6bd7846674cc39962a521c3bee21790f7d575c2f824b251100c753e3ffb8b9939c88f1d7558c869a72875b7de2832bbfd8c71139b50d8c89a2d17616228a5afb8577f584cf46fa440929813e1cda8431c2845ba4853a8bf300e559b4feb02b43d2d10ab4eb36971ee739cb9745262dfb1cfa7f16a25e4aaa9a40c9a804a1c6a2d7f2e61fa7f99a4ae8959b874f4929ff83cd2b23f28d3adf437c9000464daafa579cba29e59ac2f298a5da1c5e985172dbacfa0fd3869994b2b95599faa686b2fe8cc396d5a4ea3b56da8ec32228a80989c82a43581405b15c8f440107af48d560fb1480cdd58192a1efd18315b4f9e53db48448f3255d13b59db88a3488dafcc95f953b49b52ebb35095a3f35218f389b3bf952c2648809614120636ac33e0b452fc906f76d3a244f075a5e10e7790584180edc7c661355979f8cc3aa64375a254cf0c6b05741beacbe150c43216f750b5f6b9b356d49eaa19aa4d230a95c41adfb35ce68e07e3fe44b4b37db5eca8fd109b1b50daf715527993a004038798ad746c942b30536bf5d3cca9009372034b72cb487248eaa806518f304240c8ad78a0fc240798932b8b5ad709dcbe8f30819b6d493df3ce241ec5e6727db915e02f7d8f8b68b28770019eb7e4fa95733b1ce837a5f4e7441ff3a3e0fd51913cbbaf7e9567aa4b195e39c231eef366169e8bd04d4afc0beb229fb5222698edc7f01475212e3eb64425c4d3746e4958a366e8385705c36c4802ca8dba529a33d3e6e8f15434474a619a3eb6fc9c914f66e2b2fb1a904d6eb1ea859d71e216d34e6c30b663c39f83d857719c4b25b46e42b8949ec71734332338aab279cb7c2667fda4c8fc6e0686e04743dbed592f4a9b9d999092ab7198df17f07382f4af094f16718c3e007429449e4dc82171d836bf75151e8807e4f408ed991d452ec1a6333a5abacb183ce1ed3b3a9e6560fdea93d4d5ce5b3477b047d329e0e626f4ef72bc6da236ac0ca", 0x1000}, {&(0x7f0000002280)}], 0x4, &(0x7f00000026c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x298}, 0x40) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080207000000040000a118000200e000000100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 766.489597ms ago: executing program 0 (id=10100): bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0), 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x40000000}, {0x10000002, 0x80000000, 0x0, 0x6}]}, 0x94) socket$kcm(0x2, 0x1, 0x84) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb0100180000000000000050d2f6b69800000002000000090000000000000e0300000001000000"], 0x0, 0x6a, 0x0, 0x0, 0x7fffffff}, 0x28) socketpair$unix(0x1, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b84, 0x2, @perf_bp={0x0}, 0x8000, 0x5, 0x43a1bd76, 0x1, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000400)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x10, &(0x7f0000000600)=ANY=[@ANYRES32=r0], 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x5d, &(0x7f0000000080)=[{&(0x7f0000000c40)="c106020022003505d25a806f8c6394f90435fc60040011000a740100053582c137153e37024801", 0x27}], 0x3b, 0x0, 0xffffffc2}, 0x4000804) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000c00000009000000070000000000000800000000"], 0x0, 0x2d}, 0x28) r2 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000003c0)={&(0x7f0000000000)=@phonet, 0x80, &(0x7f0000000180)=[{0x0, 0xea}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r1, 0x20, &(0x7f00000002c0)}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2000000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x40000) 331.59857ms ago: executing program 0 (id=10101): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x104029, 0xb, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0x10, 0x4, 0x8, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x4, &(0x7f0000000240)={{r0}, &(0x7f0000000100), 0x0}, 0x20) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7f}, 0x100904, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0xa, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b904021d080009000200e8fe55a1180015000600142603600e120900210000000401a8001600a400014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0x9}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe69, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x3, 0xc, 0x0, 0x0}, 0x94) 237.036902ms ago: executing program 2 (id=10102): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x10000, 0xca, 0x0, 0x0, 0x0, 0x8, 0x200}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x21688, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x10000, 0x1, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1) recvmsg$unix(r0, 0x0, 0x1c0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYRES8=r1, @ANYBLOB="3eca", @ANYRES32=r2], 0x9a) 235.790803ms ago: executing program 1 (id=10103): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x1d, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff0000000071107c000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) 174.159635ms ago: executing program 4 (id=10104): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f00000002c0)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit, @alu={0x7, 0x1, 0xb, 0x0, 0xa}]}, &(0x7f0000000000)='GPL\x00', 0x6, 0xec, &(0x7f00000004c0)=""/236}, 0x80) r0 = perf_event_open$cgroup(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xb}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x9, 0x5, 0x7, 0xc1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000100), 0x3f, r2}, 0x38) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x8000080}, [@call={0x85, 0x0, 0x0, 0x23}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa8}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r4 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000016c0)=ANY=[@ANYBLOB="373e9748a65a9001ca60b23ef9635c9342a11691759ef18ffc24ef42cf73718f5afe604e5e30bf328591f1a714875adeb349f6f327cd56ef1533686af685cc343285ff01ae63dcd01196e24029bae25c40694da25a7efc2c4f2f88699e026212e97c8f3e45de1d720b76c9208a8c7c00fc4747c30363d9b16d2e6e726d54dbde0e39c448461c80d4d936f34b67006e5c112e9caa36d95805247e434338a1aaf2a5c2f61b0b25f57f5cce32c4be4d2d94c60f765b1db57b2fdc7ced99c5072e80f8f9e35b643f5a8beb921e3ee2d655337712", @ANYRES64, @ANYRESOCT, @ANYRESDEC, @ANYRES64=r4, @ANYRES16], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x10000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r7, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0], 0x0, 0x3a, &(0x7f0000000280)=[{}, {}, {}], 0x18, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000840)={0x0, 0x4}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000880)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001cc0)=@bpf_tracing={0x1a, 0x1, &(0x7f00000003c0)=ANY=[@ANYBLOB="3a56f40bffffffff9feabad24649b3b6a9de1112f0159590e1c50b24c57251e4b712df52ce207a"], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x60, &(0x7f0000000740)=""/96, 0x41000, 0x48, '\x00', r8, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000800)={0x1, 0x7, 0x100, 0x5}, 0x10, 0x1e650, r6, 0x1, &(0x7f0000000bc0)=[r9, r10, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000c00)=[{0x2, 0x1, 0x1}], 0x10, 0x6}, 0x94) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000840)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r0, 0x1, 0x0, 0x4}, 0x50) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0x12, 0xc6, 0x4, 0x2}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r12, &(0x7f0000000140), 0x0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000008c0)={0x1, 0xffffffffffffffff}, 0x4) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0x8, 0x6, 0x7, 0x0, 0x1000, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x2}, 0x50) r15 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x3}, 0x50) r16 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000b00)={0x0, 0x7, 0x10}, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000bc0)=@bpf_lsm={0x1d, 0x2e, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3e98ea9c, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xdc}}, @map_fd={0x18, 0xa, 0x1, 0x0, r3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6b}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x10}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xf}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffd}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000740)='syzkaller\x00', 0x6, 0x6, &(0x7f0000000780)=""/6, 0x60d80f6ca2890ce5, 0x66, '\x00', r8, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000800)={0x1, 0x5, 0x5}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000b40)=[r1, r11, r12, r13, r14, r15, 0xffffffffffffffff, r16], &(0x7f0000000b80)=[{0x5, 0x4, 0x6, 0x1}, {0x0, 0x4, 0x8, 0x5}, {0x0, 0x3, 0x9, 0x7}], 0x10, 0xe959}, 0x94) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="d8000000100081046a81f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a8001600a4000140200009002cea19853626feffff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8dcef52a9d7c7c0b7a196e6f66112c88a6bbace80177ccbec4c2ee5a7cef4090000001f3c29643a5ee4ce1b14d6d930dfe1d9d322d4acd9b575730d0080000000000000b5675025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee28a0", 0xd8}], 0x1}, 0x0) 76.252958ms ago: executing program 0 (id=10105): socket$kcm(0x2, 0x200000000000001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000000010008500000022000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0xa, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000001bc0), 0x0, &(0x7f0000000700)=[@ip_retopts={{0x64, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x3c, 0xf1, 0x3, 0xa, [{@broadcast}, {@multicast1, 0xa573}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x35}, 0x5}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x2}, {@private=0xa010100}, {@remote, 0x8}]}, @timestamp={0x44, 0x18, 0xc9, 0x0, 0xe, [0x8, 0x0, 0x1, 0x2, 0x960]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}], 0x80}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000200008500000008"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x34, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x1, 0xc, &(0x7f00000001c0)=ANY=[@ANYRESOCT], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x89f0, &(0x7f0000000040)={'bond0\x00', @random='\x00\x00\x00\x00\x00 '}) r5 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r5, &(0x7f00000000c0)={&(0x7f0000001040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000140)="d7", 0x1}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}, 0x2101) 75.577118ms ago: executing program 1 (id=10106): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x13, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8b1a, &(0x7f0000000400)={'syzkaller0\x00', @random="05f91503f4e1"}) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x28100, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2, @perf_config_ext={0xfffffffffffffffc, 0x6}, 0x80, 0x10000, 0x1, 0x1, 0x40, 0x20003, 0xfffc, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x0, r0, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x5d, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90224fc60", 0x14}], 0x1, 0x0, 0x0, 0x10}, 0x0) close(r1) r3 = socket$kcm(0xa, 0x1, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xe, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000085e45f9e4d2593f8e50300000000000000080000ebe57b0000000000950000001079ffe000000000000000"], &(0x7f0000000c40)='GPL\x00', 0x4, 0xffffffffffffff6a, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r4}, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x0, 0x9, 0x12, 0x5, 0xfffffffffff7bbfe, 0x1, 0x0, 0x0, 0x5ff}, 0x0, 0x2000800000, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) sendmsg$kcm(r3, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000002c0)="140000001d000b63d25a80648c2594", 0xf}, {&(0x7f0000000580)="3f1f2725e7", 0x5}], 0x2}, 0xc080) r7 = perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x4, 0x0, 0xfe, 0x0, 0x400000000800, 0x20000, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0, 0x1, 0xffffffffffffffff, 0x0) syz_clone(0x21000000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_RESET(r7, 0x2403, 0x80000000001fe) 950.959µs ago: executing program 2 (id=10107): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20002, 0x0, @perf_config_ext={0x5, 0x400007ff}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x8, 0x0, 0x8b, 0x0, 0x1, 0x420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x8726, 0xa}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2}, 0x0, 0x4, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x5, 0x47, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xc, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000020000000000000099aa000018150000", @ANYRES32, @ANYBLOB="0000000000000000b7080000018000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000099f600008500000015000000850000000700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000780)={@fallback=r0, r3, 0xf, 0x4, r1, @void, @value=r1}, 0x20) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8916, 0x0) r4 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@bloom_filter={0x1e, 0x81, 0xec5, 0xde2, 0x40528, 0xffffffffffffffff, 0xe, '\x00', 0x0, r4, 0x1, 0x2, 0x3, 0x7}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r5}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYRES64], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5d31, 0x20300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0}, 0x4102, 0x1, 0x0, 0x9, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x25, 0x1, 0x5, &(0x7f0000000000)) 0s ago: executing program 4 (id=10108): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x13, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8b1a, &(0x7f0000000400)={'syzkaller0\x00', @random="05f91503f4e1"}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x2, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095"], &(0x7f0000003ff6)='GPL\x00', 0x0, 0xc3, &(0x7f0000000140)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, r0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x28100, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2, @perf_config_ext={0xfffffffffffffffc, 0x6}, 0x80, 0x10000, 0x1, 0x1, 0x40, 0x20003, 0xfffc, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x0, r0, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x5d, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90224fc60", 0x14}], 0x1, 0x0, 0x0, 0x10}, 0x0) close(r1) r3 = socket$kcm(0xa, 0x1, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xe, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000085e45f9e4d2593f8e50300000000000000080000ebe57b0000000000950000001079ffe000000000000000"], &(0x7f0000000c40)='GPL\x00', 0x4, 0xffffffffffffff6a, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r4}, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x0, 0x9, 0x12, 0x5, 0xfffffffffff7bbfe, 0x1, 0x0, 0x0, 0x5ff}, 0x0, 0x2000800000, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) sendmsg$kcm(r3, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000002c0)="140000001d000b63d25a80648c2594", 0xf}, {&(0x7f0000000580)="3f1f2725e7", 0x5}], 0x2}, 0xc080) r7 = perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x4, 0x0, 0xfe, 0x0, 0x400000000800, 0x20000, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0, 0x1, 0xffffffffffffffff, 0x0) syz_clone(0xc920000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x21000000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_RESET(r7, 0x2403, 0x80000000001fe) kernel console output (not intermixed with test programs): 297][ T2330] ? clear_bhb_loop+0x40/0x90 [ 1672.325003][ T2330] ? clear_bhb_loop+0x40/0x90 [ 1672.329709][ T2330] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1672.335649][ T2330] RIP: 0033:0x7f2ed599ce59 [ 1672.340090][ T2330] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1672.359726][ T2330] RSP: 002b:00007f2ed6906028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1672.368170][ T2330] RAX: ffffffffffffffda RBX: 00007f2ed5c15fa0 RCX: 00007f2ed599ce59 [ 1672.376167][ T2330] RDX: 0000200000000080 RSI: 0000000000008b0f RDI: 0000000000000005 [ 1672.384163][ T2330] RBP: 00007f2ed6906090 R08: 0000000000000000 R09: 0000000000000000 [ 1672.392166][ T2330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1672.400177][ T2330] R13: 00007f2ed5c16038 R14: 00007f2ed5c15fa0 R15: 00007ffda63485a8 [ 1672.408187][ T2330] [ 1672.441256][ T2330] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1672.484028][ T2337] netlink: 188 bytes leftover after parsing attributes in process `syz.2.9341'. [ 1672.583212][ T2340] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9342'. [ 1672.597401][ T2340] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9342'. [ 1672.611125][ T2340] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9342'. [ 1672.630263][ T2340] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9342'. [ 1673.038757][ T2353] netlink: 128 bytes leftover after parsing attributes in process `syz.4.9345'. [ 1673.085241][ T2353] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1676.236365][ T2373] bridge_slave_1: left allmulticast mode [ 1676.257429][ T2373] bridge_slave_1: left promiscuous mode [ 1676.263270][ T2373] bridge0: port 2(bridge_slave_1) entered disabled state [ 1676.320020][ T2373] bridge_slave_0: left allmulticast mode [ 1676.336267][ T2373] bridge_slave_0: left promiscuous mode [ 1676.354556][ T2373] bridge0: port 1(bridge_slave_0) entered disabled state [ 1676.737539][ T2380] netlink: 128 bytes leftover after parsing attributes in process `syz.1.9354'. [ 1676.762356][ T2380] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1681.205480][ T2416] netlink: 'syz.1.9364': attribute type 2 has an invalid length. [ 1681.217450][ T2416] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.9364'. [ 1681.290355][ T2424] netlink: 128 bytes leftover after parsing attributes in process `syz.4.9365'. [ 1681.315472][ T2424] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1682.579277][ T2459] netlink: 156 bytes leftover after parsing attributes in process `syz.2.9374'. [ 1682.650217][ T2455] netlink: 'syz.2.9374': attribute type 28 has an invalid length. [ 1682.687421][ T2455] netlink: 'syz.2.9374': attribute type 29 has an invalid length. [ 1682.696197][ T2455] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9374'. [ 1683.287777][ T2474] netlink: 128 bytes leftover after parsing attributes in process `syz.1.9377'. [ 1683.329443][ T2474] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1684.062468][ T2489] FAULT_INJECTION: forcing a failure. [ 1684.062468][ T2489] name failslab, interval 1, probability 0, space 0, times 0 [ 1684.076443][ T2489] CPU: 0 PID: 2489 Comm: syz.1.9381 Not tainted syzkaller #0 [ 1684.083888][ T2489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1684.093997][ T2489] Call Trace: [ 1684.097322][ T2489] [ 1684.100301][ T2489] dump_stack_lvl+0x18c/0x250 [ 1684.105035][ T2489] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1684.111256][ T2489] ? show_regs_print_info+0x20/0x20 [ 1684.116500][ T2489] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1684.122717][ T2489] ? dump_stack+0x9/0x20 [ 1684.127010][ T2489] should_fail_ex+0x39d/0x4d0 [ 1684.131759][ T2489] should_failslab+0x9/0x20 [ 1684.136322][ T2489] slab_pre_alloc_hook+0x59/0x310 [ 1684.141419][ T2489] ? lockdep_hardirqs_on+0x98/0x150 [ 1684.146708][ T2489] ? sctp_add_bind_addr+0x8c/0x360 [ 1684.151875][ T2489] __kmem_cache_alloc_node+0x53/0x250 [ 1684.157304][ T2489] ? sctp_add_bind_addr+0x8c/0x360 [ 1684.162464][ T2489] kmalloc_trace+0x2a/0xe0 [ 1684.166941][ T2489] sctp_add_bind_addr+0x8c/0x360 [ 1684.171933][ T2489] sctp_copy_local_addr_list+0x315/0x4f0 [ 1684.177619][ T2489] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 1684.183390][ T2489] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 1684.189504][ T2489] ? sctp_v4_is_any+0x35/0x60 [ 1684.194210][ T2489] ? sctp_copy_one_addr+0x8c/0x350 [ 1684.199352][ T2489] sctp_bind_addr_copy+0xb3/0x3c0 [ 1684.204419][ T2489] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1684.210805][ T2489] sctp_connect_new_asoc+0x2f9/0x6a0 [ 1684.216139][ T2489] ? __sctp_connect+0xd80/0xd80 [ 1684.221036][ T2489] ? security_sctp_bind_connect+0x4a/0xb0 [ 1684.226799][ T2489] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 1684.232383][ T2489] ? security_sctp_bind_connect+0x89/0xb0 [ 1684.238140][ T2489] sctp_sendmsg+0x15d2/0x2910 [ 1684.242886][ T2489] ? sctp_getsockopt+0xb60/0xb60 [ 1684.247883][ T2489] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1684.254083][ T2489] ? lockdep_hardirqs_on+0x98/0x150 [ 1684.259331][ T2489] ? inet_sendmsg+0x8b/0x2f0 [ 1684.263958][ T2489] ? inet_sendmsg+0xe9/0x2f0 [ 1684.268581][ T2489] ? inet_send_prepare+0x260/0x260 [ 1684.273728][ T2489] ____sys_sendmsg+0x5ba/0x960 [ 1684.278524][ T2489] ? __lock_acquire+0x7d40/0x7d40 [ 1684.283594][ T2489] ? __asan_memset+0x22/0x40 [ 1684.288218][ T2489] ? __sys_sendmsg_sock+0x30/0x30 [ 1684.293303][ T2489] ? __import_iovec+0x5f2/0x850 [ 1684.298194][ T2489] ? import_iovec+0x73/0xa0 [ 1684.302724][ T2489] ___sys_sendmsg+0x2a6/0x360 [ 1684.307433][ T2489] ? __sys_sendmsg+0x2a0/0x2a0 [ 1684.312238][ T2489] ? seqcount_lockdep_reader_access+0x17b/0x1d0 [ 1684.318533][ T2489] __se_sys_sendmsg+0x1c2/0x2b0 [ 1684.323415][ T2489] ? __x64_sys_sendmsg+0x80/0x80 [ 1684.328401][ T2489] ? lockdep_hardirqs_on+0x98/0x150 [ 1684.333641][ T2489] do_syscall_64+0x55/0xb0 [ 1684.338087][ T2489] ? clear_bhb_loop+0x40/0x90 [ 1684.342792][ T2489] ? clear_bhb_loop+0x40/0x90 [ 1684.347502][ T2489] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1684.353434][ T2489] RIP: 0033:0x7f469dd9ce59 [ 1684.357884][ T2489] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1684.377533][ T2489] RSP: 002b:00007f469ed04028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1684.385994][ T2489] RAX: ffffffffffffffda RBX: 00007f469e015fa0 RCX: 00007f469dd9ce59 [ 1684.393996][ T2489] RDX: 0000000000000040 RSI: 00002000000003c0 RDI: 0000000000000006 [ 1684.401999][ T2489] RBP: 00007f469ed04090 R08: 0000000000000000 R09: 0000000000000000 [ 1684.410015][ T2489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1684.418024][ T2489] R13: 00007f469e016038 R14: 00007f469e015fa0 R15: 00007ffc3ea67298 [ 1684.426049][ T2489] [ 1685.317431][ T2497] FAULT_INJECTION: forcing a failure. [ 1685.317431][ T2497] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1685.348040][ T2497] CPU: 1 PID: 2497 Comm: syz.1.9383 Not tainted syzkaller #0 [ 1685.355497][ T2497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1685.365606][ T2497] Call Trace: [ 1685.368931][ T2497] [ 1685.371902][ T2497] dump_stack_lvl+0x18c/0x250 [ 1685.376628][ T2497] ? show_regs_print_info+0x20/0x20 [ 1685.381869][ T2497] ? load_image+0x420/0x420 [ 1685.386429][ T2497] ? __might_fault+0xaa/0x120 [ 1685.391155][ T2497] ? __lock_acquire+0x7d40/0x7d40 [ 1685.396239][ T2497] should_fail_ex+0x39d/0x4d0 [ 1685.401075][ T2497] _copy_to_user+0x2f/0xa0 [ 1685.405545][ T2497] bpf_test_finish+0x25a/0x650 [ 1685.410361][ T2497] ? convert___skb_to_skb+0x590/0x590 [ 1685.415783][ T2497] ? convert_skb_to___skb+0x420/0x420 [ 1685.421216][ T2497] ? slab_build_skb+0x25f/0x3f0 [ 1685.426126][ T2497] bpf_prog_test_run_skb+0xcc3/0x12b0 [ 1685.431556][ T2497] ? cpu_online+0x60/0x60 [ 1685.435924][ T2497] bpf_prog_test_run+0x321/0x390 [ 1685.440915][ T2497] __sys_bpf+0x49d/0x890 [ 1685.445198][ T2497] ? bpf_link_show_fdinfo+0x390/0x390 [ 1685.450654][ T2497] ? lock_chain_count+0x20/0x20 [ 1685.455550][ T2497] __x64_sys_bpf+0x7c/0x90 [ 1685.460001][ T2497] do_syscall_64+0x55/0xb0 [ 1685.464459][ T2497] ? clear_bhb_loop+0x40/0x90 [ 1685.469172][ T2497] ? clear_bhb_loop+0x40/0x90 [ 1685.473883][ T2497] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1685.479804][ T2497] RIP: 0033:0x7f469dd9ce59 [ 1685.484298][ T2497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1685.503930][ T2497] RSP: 002b:00007f469ed04028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1685.512373][ T2497] RAX: ffffffffffffffda RBX: 00007f469e015fa0 RCX: 00007f469dd9ce59 [ 1685.520371][ T2497] RDX: 0000000000000022 RSI: 0000200000000100 RDI: 000000000000000a [ 1685.528373][ T2497] RBP: 00007f469ed04090 R08: 0000000000000000 R09: 0000000000000000 [ 1685.536371][ T2497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1685.544373][ T2497] R13: 00007f469e016038 R14: 00007f469e015fa0 R15: 00007ffc3ea67298 [ 1685.552389][ T2497] [ 1685.983081][ T2510] netlink: 'syz.1.9387': attribute type 10 has an invalid length. [ 1686.028384][ T2510] team0: Device hsr_slave_0 failed to register rx_handler [ 1686.577628][ T5780] Bluetooth: hci1: command 0x0406 tx timeout [ 1686.751020][ T2513] netlink: 128 bytes leftover after parsing attributes in process `syz.0.9388'. [ 1686.778689][ T2513] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1687.672012][ T2556] netlink: 128 bytes leftover after parsing attributes in process `syz.1.9403'. [ 1687.691472][ T2556] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1687.727591][ T2558] netlink: 'syz.2.9402': attribute type 10 has an invalid length. [ 1687.736277][ T2558] team0: Device hsr_slave_0 failed to register rx_handler [ 1687.893682][ T2568] FAULT_INJECTION: forcing a failure. [ 1687.893682][ T2568] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1687.910744][ T2568] CPU: 1 PID: 2568 Comm: syz.0.9406 Not tainted syzkaller #0 [ 1687.918196][ T2568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1687.928291][ T2568] Call Trace: [ 1687.931618][ T2568] [ 1687.934589][ T2568] dump_stack_lvl+0x18c/0x250 [ 1687.939323][ T2568] ? show_regs_print_info+0x20/0x20 [ 1687.944654][ T2568] ? load_image+0x420/0x420 [ 1687.949232][ T2568] ? __might_fault+0xaa/0x120 [ 1687.953971][ T2568] ? __lock_acquire+0x7d40/0x7d40 [ 1687.959060][ T2568] should_fail_ex+0x39d/0x4d0 [ 1687.963817][ T2568] _copy_from_user+0x2f/0xe0 [ 1687.968472][ T2568] ___sys_recvmsg+0x176/0x590 [ 1687.973213][ T2568] ? __sys_recvmsg+0x2a0/0x2a0 [ 1687.978034][ T2568] ? ksys_write+0x1c4/0x260 [ 1687.982608][ T2568] ? __fget_files+0x43d/0x4b0 [ 1687.987361][ T2568] __x64_sys_recvmsg+0x20c/0x2e0 [ 1687.992438][ T2568] ? perf_trace_preemptirq_template+0x269/0x330 [ 1687.998743][ T2568] ? ___sys_recvmsg+0x590/0x590 [ 1688.003697][ T2568] ? lockdep_hardirqs_on+0x98/0x150 [ 1688.008966][ T2568] do_syscall_64+0x55/0xb0 [ 1688.013438][ T2568] ? clear_bhb_loop+0x40/0x90 [ 1688.018171][ T2568] ? clear_bhb_loop+0x40/0x90 [ 1688.022911][ T2568] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1688.028868][ T2568] RIP: 0033:0x7f2ed599ce59 [ 1688.033336][ T2568] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1688.053045][ T2568] RSP: 002b:00007f2ed6906028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1688.061525][ T2568] RAX: ffffffffffffffda RBX: 00007f2ed5c15fa0 RCX: 00007f2ed599ce59 [ 1688.069635][ T2568] RDX: 0000000000004040 RSI: 0000200000000940 RDI: 0000000000000004 [ 1688.077651][ T2568] RBP: 00007f2ed6906090 R08: 0000000000000000 R09: 0000000000000000 [ 1688.085667][ T2568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1688.093685][ T2568] R13: 00007f2ed5c16038 R14: 00007f2ed5c15fa0 R15: 00007ffda63485a8 [ 1688.101726][ T2568] [ 1688.932606][ T2589] Ÿë: port 2(gretap0) entered blocking state [ 1688.943624][ T2589] Ÿë: port 2(gretap0) entered disabled state [ 1688.952242][ T2589] gretap0: entered allmulticast mode [ 1688.967579][ T2589] gretap0: entered promiscuous mode [ 1689.346239][ T2605] netlink: 128 bytes leftover after parsing attributes in process `syz.0.9414'. [ 1689.391767][ T2605] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1689.624817][ T2617] netlink: 'syz.1.9415': attribute type 10 has an invalid length. [ 1689.646811][ T2617] team0: Device hsr_slave_0 failed to register rx_handler [ 1690.831377][ T2649] netlink: 128 bytes leftover after parsing attributes in process `syz.0.9424'. [ 1690.874049][ T2649] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1691.469370][ T2663] netlink: 'syz.0.9427': attribute type 10 has an invalid length. [ 1691.478567][ T2663] team0: Device hsr_slave_0 failed to register rx_handler [ 1691.989149][ T2684] FAULT_INJECTION: forcing a failure. [ 1691.989149][ T2684] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1692.012748][ T2684] CPU: 1 PID: 2684 Comm: syz.0.9433 Not tainted syzkaller #0 [ 1692.020221][ T2684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1692.030325][ T2684] Call Trace: [ 1692.033640][ T2684] [ 1692.036773][ T2684] dump_stack_lvl+0x18c/0x250 [ 1692.041577][ T2684] ? show_regs_print_info+0x20/0x20 [ 1692.046806][ T2684] ? load_image+0x420/0x420 [ 1692.051353][ T2684] ? __might_fault+0xaa/0x120 [ 1692.056054][ T2684] ? __lock_acquire+0x7d40/0x7d40 [ 1692.061111][ T2684] should_fail_ex+0x39d/0x4d0 [ 1692.065836][ T2684] _copy_from_iter+0x1d9/0x12e0 [ 1692.070727][ T2684] ? slab_post_alloc_hook+0x8a/0x4b0 [ 1692.076046][ T2684] ? __virt_addr_valid+0x18c/0x540 [ 1692.081195][ T2684] ? __lock_acquire+0x7d40/0x7d40 [ 1692.086258][ T2684] ? rcu_is_watching+0x15/0xb0 [ 1692.091060][ T2684] ? copyout_mc+0x70/0x70 [ 1692.095426][ T2684] ? __virt_addr_valid+0x18c/0x540 [ 1692.100566][ T2684] ? __virt_addr_valid+0x18c/0x540 [ 1692.105711][ T2684] ? __virt_addr_valid+0x469/0x540 [ 1692.110857][ T2684] ? __check_object_size+0x506/0xa20 [ 1692.116168][ T2684] netlink_sendmsg+0x76b/0xbf0 [ 1692.120978][ T2684] ? netlink_getsockopt+0x590/0x590 [ 1692.126214][ T2684] ? aa_sock_msg_perm+0x94/0x150 [ 1692.131191][ T2684] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1692.136510][ T2684] ? security_socket_sendmsg+0x80/0xa0 [ 1692.141998][ T2684] ? netlink_getsockopt+0x590/0x590 [ 1692.147238][ T2684] ____sys_sendmsg+0x5ba/0x960 [ 1692.152033][ T2684] ? __asan_memset+0x22/0x40 [ 1692.156650][ T2684] ? __sys_sendmsg_sock+0x30/0x30 [ 1692.161697][ T2684] ? __import_iovec+0x5f2/0x850 [ 1692.166577][ T2684] ? import_iovec+0x73/0xa0 [ 1692.171110][ T2684] ___sys_sendmsg+0x2a6/0x360 [ 1692.175820][ T2684] ? get_pid_task+0x20/0x1e0 [ 1692.180446][ T2684] ? __sys_sendmsg+0x2a0/0x2a0 [ 1692.185263][ T2684] ? __lock_acquire+0x7d40/0x7d40 [ 1692.190343][ T2684] __se_sys_sendmsg+0x1c2/0x2b0 [ 1692.195226][ T2684] ? __x64_sys_sendmsg+0x80/0x80 [ 1692.200203][ T2684] ? lockdep_hardirqs_on+0x98/0x150 [ 1692.205437][ T2684] do_syscall_64+0x55/0xb0 [ 1692.209879][ T2684] ? clear_bhb_loop+0x40/0x90 [ 1692.214587][ T2684] ? clear_bhb_loop+0x40/0x90 [ 1692.219293][ T2684] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1692.225219][ T2684] RIP: 0033:0x7f2ed599ce59 [ 1692.229756][ T2684] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1692.249397][ T2684] RSP: 002b:00007f2ed6906028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1692.257853][ T2684] RAX: ffffffffffffffda RBX: 00007f2ed5c15fa0 RCX: 00007f2ed599ce59 [ 1692.265852][ T2684] RDX: 0000000000040840 RSI: 0000200000000040 RDI: 0000000000000003 [ 1692.273852][ T2684] RBP: 00007f2ed6906090 R08: 0000000000000000 R09: 0000000000000000 [ 1692.281853][ T2684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1692.289852][ T2684] R13: 00007f2ed5c16038 R14: 00007f2ed5c15fa0 R15: 00007ffda63485a8 [ 1692.297873][ T2684] [ 1693.148458][ T2687] netlink: 128 bytes leftover after parsing attributes in process `syz.0.9434'. [ 1693.176208][ T2687] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1693.654394][ T5777] Bluetooth: hci0: unexpected subevent 0x05 length: 150 > 12 [ 1694.602148][ T2712] netlink: 'syz.1.9440': attribute type 10 has an invalid length. [ 1694.611879][ T2712] team0: Device hsr_slave_0 failed to register rx_handler [ 1694.877930][ T2727] netlink: 'syz.0.9451': attribute type 10 has an invalid length. [ 1694.904345][ T2727] team0: Device hsr_slave_0 failed to register rx_handler [ 1695.144838][ T2741] netlink: 128 bytes leftover after parsing attributes in process `syz.0.9446'. [ 1695.165488][ T2741] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1695.697391][ T5780] Bluetooth: hci0: command 0x0406 tx timeout [ 1696.669130][ T5780] Bluetooth: hci3: command 0x0406 tx timeout [ 1697.506882][ T5777] Bluetooth: hci4: unexpected subevent 0x05 length: 150 > 12 [ 1698.518567][ T2771] netlink: 'syz.2.9455': attribute type 10 has an invalid length. [ 1698.532740][ T2771] team0: Device hsr_slave_0 failed to register rx_handler [ 1699.537403][ T5777] Bluetooth: hci4: command 0x0406 tx timeout [ 1699.996779][ T2830] netlink: 'syz.1.9467': attribute type 10 has an invalid length. [ 1700.006710][ T2830] team0: Device hsr_slave_0 failed to register rx_handler [ 1701.388356][ T2860] netlink: 'syz.4.9477': attribute type 10 has an invalid length. [ 1701.404719][ T2860] team0: Device hsr_slave_0 failed to register rx_handler [ 1702.562733][ T2884] FAULT_INJECTION: forcing a failure. [ 1702.562733][ T2884] name failslab, interval 1, probability 0, space 0, times 0 [ 1702.576352][ T2884] CPU: 0 PID: 2884 Comm: syz.1.9483 Not tainted syzkaller #0 [ 1702.583821][ T2884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1702.593932][ T2884] Call Trace: [ 1702.597252][ T2884] [ 1702.600227][ T2884] dump_stack_lvl+0x18c/0x250 [ 1702.604983][ T2884] ? verify_lock_unused+0x140/0x140 [ 1702.610237][ T2884] ? show_regs_print_info+0x20/0x20 [ 1702.615485][ T2884] ? load_image+0x420/0x420 [ 1702.620039][ T2884] ? mark_lock+0x94/0x320 [ 1702.624420][ T2884] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1702.630463][ T2884] should_fail_ex+0x39d/0x4d0 [ 1702.635202][ T2884] should_failslab+0x9/0x20 [ 1702.639761][ T2884] slab_pre_alloc_hook+0x59/0x310 [ 1702.644852][ T2884] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1702.651062][ T2884] ? sctp_add_bind_addr+0x8c/0x360 [ 1702.656305][ T2884] __kmem_cache_alloc_node+0x53/0x250 [ 1702.661751][ T2884] ? sctp_add_bind_addr+0x8c/0x360 [ 1702.666918][ T2884] kmalloc_trace+0x2a/0xe0 [ 1702.671396][ T2884] sctp_add_bind_addr+0x8c/0x360 [ 1702.676388][ T2884] sctp_copy_local_addr_list+0x315/0x4f0 [ 1702.682080][ T2884] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 1702.687854][ T2884] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 1702.693983][ T2884] ? sctp_v4_is_any+0x35/0x60 [ 1702.698714][ T2884] ? sctp_copy_one_addr+0x8c/0x350 [ 1702.703889][ T2884] sctp_bind_addr_copy+0xb3/0x3c0 [ 1702.708962][ T2884] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1702.715347][ T2884] sctp_connect_new_asoc+0x2f9/0x6a0 [ 1702.720687][ T2884] ? __sctp_connect+0xd80/0xd80 [ 1702.725588][ T2884] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1702.731010][ T2884] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 1702.736649][ T2884] ? security_sctp_bind_connect+0x89/0xb0 [ 1702.742429][ T2884] sctp_sendmsg+0x15d2/0x2910 [ 1702.747178][ T2884] ? sctp_getsockopt+0xb60/0xb60 [ 1702.752179][ T2884] ? aa_sk_perm+0x83c/0x970 [ 1702.756743][ T2884] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1702.762956][ T2884] ? lockdep_hardirqs_on+0x98/0x150 [ 1702.768210][ T2884] ? aa_af_perm+0x330/0x330 [ 1702.772762][ T2884] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 1702.779318][ T2884] ? sock_rps_record_flow+0x19/0x3f0 [ 1702.784662][ T2884] ? inet_sendmsg+0xe9/0x2f0 [ 1702.789339][ T2884] ? inet_send_prepare+0x260/0x260 [ 1702.794505][ T2884] ____sys_sendmsg+0x5ba/0x960 [ 1702.799326][ T2884] ? __lock_acquire+0x7d40/0x7d40 [ 1702.804412][ T2884] ? __asan_memset+0x22/0x40 [ 1702.809056][ T2884] ? __sys_sendmsg_sock+0x30/0x30 [ 1702.814127][ T2884] ? __import_iovec+0x5f2/0x850 [ 1702.819038][ T2884] ? import_iovec+0x73/0xa0 [ 1702.823587][ T2884] ___sys_sendmsg+0x2a6/0x360 [ 1702.828322][ T2884] ? __sys_sendmsg+0x2a0/0x2a0 [ 1702.833156][ T2884] ? __fget_files+0x3bf/0x4b0 [ 1702.837920][ T2884] __se_sys_sendmsg+0x1c2/0x2b0 [ 1702.842817][ T2884] ? __x64_sys_sendmsg+0x80/0x80 [ 1702.847817][ T2884] ? lockdep_hardirqs_on+0x98/0x150 [ 1702.853076][ T2884] do_syscall_64+0x55/0xb0 [ 1702.857542][ T2884] ? clear_bhb_loop+0x40/0x90 [ 1702.862269][ T2884] ? clear_bhb_loop+0x40/0x90 [ 1702.866998][ T2884] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1702.872942][ T2884] RIP: 0033:0x7f469dd9ce59 [ 1702.877396][ T2884] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1702.897054][ T2884] RSP: 002b:00007f469ed04028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1702.905524][ T2884] RAX: ffffffffffffffda RBX: 00007f469e015fa0 RCX: 00007f469dd9ce59 [ 1702.913544][ T2884] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000005 [ 1702.921561][ T2884] RBP: 00007f469ed04090 R08: 0000000000000000 R09: 0000000000000000 [ 1702.929584][ T2884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1702.937600][ T2884] R13: 00007f469e016038 R14: 00007f469e015fa0 R15: 00007ffc3ea67298 [ 1702.945639][ T2884] [ 1705.094000][ T5780] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1705.104587][ T5780] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1705.124859][ T5780] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1705.169020][ T5780] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1705.188335][ T5780] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1705.195949][ T5780] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1705.355173][ T2895] netlink: 'syz.4.9487': attribute type 10 has an invalid length. [ 1705.372190][ T2895] team0: Device hsr_slave_0 failed to register rx_handler [ 1705.995219][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1706.037735][ T2915] FAULT_INJECTION: forcing a failure. [ 1706.037735][ T2915] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1706.051985][ T2915] CPU: 0 PID: 2915 Comm: syz.4.9492 Not tainted syzkaller #0 [ 1706.059434][ T2915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1706.069540][ T2915] Call Trace: [ 1706.072852][ T2915] [ 1706.075812][ T2915] dump_stack_lvl+0x18c/0x250 [ 1706.080536][ T2915] ? show_regs_print_info+0x20/0x20 [ 1706.085760][ T2915] ? load_image+0x420/0x420 [ 1706.090298][ T2915] ? __might_fault+0xaa/0x120 [ 1706.095002][ T2915] ? __lock_acquire+0x7d40/0x7d40 [ 1706.100150][ T2915] should_fail_ex+0x39d/0x4d0 [ 1706.104864][ T2915] _copy_from_iter+0x1d9/0x12e0 [ 1706.109751][ T2915] ? slab_post_alloc_hook+0x8a/0x4b0 [ 1706.115155][ T2915] ? __virt_addr_valid+0x18c/0x540 [ 1706.120305][ T2915] ? __lock_acquire+0x7d40/0x7d40 [ 1706.125356][ T2915] ? rcu_is_watching+0x15/0xb0 [ 1706.130155][ T2915] ? copyout_mc+0x70/0x70 [ 1706.134521][ T2915] ? __virt_addr_valid+0x18c/0x540 [ 1706.139665][ T2915] ? __virt_addr_valid+0x18c/0x540 [ 1706.144809][ T2915] ? __virt_addr_valid+0x469/0x540 [ 1706.149953][ T2915] ? __check_object_size+0x506/0xa20 [ 1706.155267][ T2915] netlink_sendmsg+0x76b/0xbf0 [ 1706.160073][ T2915] ? netlink_getsockopt+0x590/0x590 [ 1706.165310][ T2915] ? aa_sock_msg_perm+0x94/0x150 [ 1706.170284][ T2915] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1706.175603][ T2915] ? security_socket_sendmsg+0x80/0xa0 [ 1706.181093][ T2915] ? netlink_getsockopt+0x590/0x590 [ 1706.186331][ T2915] ____sys_sendmsg+0x5ba/0x960 [ 1706.191128][ T2915] ? __asan_memset+0x22/0x40 [ 1706.195747][ T2915] ? __sys_sendmsg_sock+0x30/0x30 [ 1706.200799][ T2915] ? __import_iovec+0x5f2/0x850 [ 1706.205692][ T2915] ? import_iovec+0x73/0xa0 [ 1706.210233][ T2915] ___sys_sendmsg+0x2a6/0x360 [ 1706.214943][ T2915] ? get_pid_task+0x20/0x1e0 [ 1706.219567][ T2915] ? __sys_sendmsg+0x2a0/0x2a0 [ 1706.224376][ T2915] ? __lock_acquire+0x7d40/0x7d40 [ 1706.229460][ T2915] __se_sys_sendmsg+0x1c2/0x2b0 [ 1706.234338][ T2915] ? __x64_sys_sendmsg+0x80/0x80 [ 1706.239315][ T2915] ? lockdep_hardirqs_on+0x98/0x150 [ 1706.244636][ T2915] do_syscall_64+0x55/0xb0 [ 1706.249081][ T2915] ? clear_bhb_loop+0x40/0x90 [ 1706.253788][ T2915] ? clear_bhb_loop+0x40/0x90 [ 1706.258496][ T2915] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1706.264424][ T2915] RIP: 0033:0x7fa94339ce59 [ 1706.268876][ T2915] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1706.288510][ T2915] RSP: 002b:00007fa944206028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1706.296953][ T2915] RAX: ffffffffffffffda RBX: 00007fa943615fa0 RCX: 00007fa94339ce59 [ 1706.304953][ T2915] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 1706.313035][ T2915] RBP: 00007fa944206090 R08: 0000000000000000 R09: 0000000000000000 [ 1706.321042][ T2915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1706.329038][ T2915] R13: 00007fa943616038 R14: 00007fa943615fa0 R15: 00007ffcd90458f8 [ 1706.337052][ T2915] [ 1706.382645][ T2897] chnl_net:caif_netlink_parms(): no params data found [ 1706.591366][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1707.217373][ T5780] Bluetooth: hci2: command tx timeout [ 1708.724826][ T2932] netlink: 'syz.2.9495': attribute type 10 has an invalid length. [ 1708.742341][ T2932] team0: Device hsr_slave_0 failed to register rx_handler [ 1708.776324][ T2897] bridge0: port 1(bridge_slave_0) entered blocking state [ 1708.787789][ T2897] bridge0: port 1(bridge_slave_0) entered disabled state [ 1708.795090][ T2897] bridge_slave_0: entered allmulticast mode [ 1708.809393][ T2897] bridge_slave_0: entered promiscuous mode [ 1708.831168][ T2897] bridge0: port 2(bridge_slave_1) entered blocking state [ 1708.842830][ T2897] bridge0: port 2(bridge_slave_1) entered disabled state [ 1708.853144][ T2897] bridge_slave_1: entered allmulticast mode [ 1708.865304][ T2897] bridge_slave_1: entered promiscuous mode [ 1709.288557][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1709.316397][ T5780] Bluetooth: hci2: command tx timeout [ 1709.375464][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1709.394284][ T2897] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1709.419090][ T2897] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1709.476738][ T2897] team0: Port device team_slave_0 added [ 1709.500912][ T2897] team0: Port device team_slave_1 added [ 1709.726102][ T2897] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1709.757148][ T2897] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1709.867159][ T2897] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1709.884997][ T2897] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1709.908779][ T2897] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1709.975551][ T2897] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1710.656303][ T2897] hsr_slave_0: entered promiscuous mode [ 1710.673542][ T2897] hsr_slave_1: entered promiscuous mode [ 1711.377736][ T5780] Bluetooth: hci2: command tx timeout [ 1711.639648][ T35] gretap0 (unregistering): left allmulticast mode [ 1711.646184][ T35] gretap0 (unregistering): left promiscuous mode [ 1711.661584][ T35] Ÿë: port 2(gretap0) entered disabled state [ 1711.801308][ T2994] netlink: 'syz.0.9504': attribute type 10 has an invalid length. [ 1711.820584][ T2994] team0: Device hsr_slave_0 failed to register rx_handler [ 1712.666348][ T3012] netlink: 'syz.0.9508': attribute type 29 has an invalid length. [ 1712.739985][ T5780] Bluetooth: hci3: unexpected subevent 0x05 length: 150 > 12 [ 1712.771545][ T3012] netlink: 'syz.0.9508': attribute type 29 has an invalid length. [ 1712.796926][ T2897] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1712.824373][ T2897] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1712.888741][ T3018] netlink: 'syz.0.9508': attribute type 29 has an invalid length. [ 1712.925564][ T2897] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1712.941497][ T2897] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1712.977540][ T35] veth0_to_team: left allmulticast mode [ 1712.983192][ T35] veth0_to_team: left promiscuous mode [ 1713.007019][ T35] Ÿë: port 1(veth0_to_team) entered disabled state [ 1713.034626][ T35] hsr_slave_0: left promiscuous mode [ 1713.056268][ T35] hsr_slave_1: left promiscuous mode [ 1713.063115][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1713.077317][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1713.085576][ T35] batman_adv: batadv0: Interface deactivated: €Â0 [ 1713.093292][ T35] batman_adv: batadv0: Removing interface: €Â0 [ 1713.134946][ T35] veth0_macvtap: left promiscuous mode [ 1713.147368][ T35] veth1_vlan: left promiscuous mode [ 1713.152794][ T35] veth0_vlan: left promiscuous mode [ 1713.458964][ T5780] Bluetooth: hci2: command tx timeout [ 1713.482237][ T35] geneve1 (unregistering): left promiscuous mode [ 1713.492399][ T35] geneve1 (unregistering): left allmulticast mode [ 1713.503533][ T35] team0 (unregistering): Port device geneve1 removed [ 1714.084143][ T35] team_slave_1 (unregistering): left promiscuous mode [ 1714.094440][ T35] team_slave_1 (unregistering): left allmulticast mode [ 1714.102904][ T35] team0 (unregistering): Port device team_slave_1 removed [ 1714.155776][ T35] C (unregistering): left promiscuous mode [ 1714.164419][ T35] C (unregistering): left allmulticast mode [ 1714.174551][ T35] team0 (unregistering): Port device C removed [ 1714.231374][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1714.291875][ T35] bond0 (unregistering): (slave 5\): Releasing backup interface [ 1714.682751][ T35] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1714.758385][ T35] bond0 (unregistering): Released all slaves [ 1714.803239][ T3020] netlink: 'syz.0.9508': attribute type 29 has an invalid length. [ 1714.817330][ T5780] Bluetooth: hci3: command 0x0406 tx timeout [ 1715.072878][ T2897] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1715.139838][ T2897] 8021q: adding VLAN 0 to HW filter on device team0 [ 1715.190534][T27857] bridge0: port 1(bridge_slave_0) entered blocking state [ 1715.197834][T27857] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1715.214335][T27857] bridge0: port 2(bridge_slave_1) entered blocking state [ 1715.221595][T27857] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1715.246180][ T3049] netlink: 'syz.2.9514': attribute type 10 has an invalid length. [ 1715.255530][ T3049] team0: Device hsr_slave_0 failed to register rx_handler [ 1715.893892][ T2897] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1715.980959][ T2897] veth0_vlan: entered promiscuous mode [ 1716.004401][ T2897] veth1_vlan: entered promiscuous mode [ 1716.106126][ T2897] veth0_macvtap: entered promiscuous mode [ 1716.126854][ T2897] veth1_macvtap: entered promiscuous mode [ 1716.165360][ T2897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1716.182772][ T2897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1716.195998][ T2897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1716.215174][ T2897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1716.225853][ T2897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1716.245137][ T2897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1716.257578][ T2897] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1716.331764][ T2897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1716.350139][ T2897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1716.365091][ T2897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1716.387477][ T2897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1716.412422][ T2897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1716.426992][ T2897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1716.445440][ T2897] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1716.479947][ T2897] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1716.495291][ T2897] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1716.514972][ T2897] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1716.525942][ T2897] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1716.915021][ T3073] netlink: 128 bytes leftover after parsing attributes in process `syz.0.9519'. [ 1716.937552][ T3073] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1717.027755][ T1315] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1717.050747][ T1315] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1717.099231][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1717.113984][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1717.866905][ T3090] netlink: 'syz.0.9523': attribute type 10 has an invalid length. [ 1717.877040][ T3090] team0: Device hsr_slave_0 failed to register rx_handler [ 1717.919930][ T3091] netlink: 'syz.2.9522': attribute type 29 has an invalid length. [ 1717.932647][ T3091] netlink: 'syz.2.9522': attribute type 29 has an invalid length. [ 1717.959484][ T3091] netlink: 'syz.2.9522': attribute type 29 has an invalid length. [ 1717.980287][ T3091] netlink: 'syz.2.9522': attribute type 29 has an invalid length. [ 1718.013276][ T3091] netlink: 'syz.2.9522': attribute type 29 has an invalid length. [ 1718.410215][ T3105] netlink: 'syz.2.9528': attribute type 21 has an invalid length. [ 1718.457475][ T3105] FAULT_INJECTION: forcing a failure. [ 1718.457475][ T3105] name failslab, interval 1, probability 0, space 0, times 0 [ 1718.521858][ T3105] CPU: 1 PID: 3105 Comm: syz.2.9528 Not tainted syzkaller #0 [ 1718.529379][ T3105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1718.539482][ T3105] Call Trace: [ 1718.542802][ T3105] [ 1718.545770][ T3105] dump_stack_lvl+0x18c/0x250 [ 1718.550518][ T3105] ? show_regs_print_info+0x20/0x20 [ 1718.555768][ T3105] ? load_image+0x420/0x420 [ 1718.560336][ T3105] ? __might_sleep+0xe0/0xe0 [ 1718.564978][ T3105] ? __lock_acquire+0x7d40/0x7d40 [ 1718.570057][ T3105] should_fail_ex+0x39d/0x4d0 [ 1718.574797][ T3105] should_failslab+0x9/0x20 [ 1718.579367][ T3105] slab_pre_alloc_hook+0x59/0x310 [ 1718.584455][ T3105] ? lockdep_hardirqs_on+0x98/0x150 [ 1718.589716][ T3105] kmem_cache_alloc_node+0x60/0x320 [ 1718.594971][ T3105] ? __alloc_skb+0x103/0x2c0 [ 1718.599609][ T3105] __alloc_skb+0x103/0x2c0 [ 1718.604074][ T3105] netlink_ack+0x376/0x1180 [ 1718.608630][ T3105] ? __dev_queue_xmit+0x265/0x3660 [ 1718.613813][ T3105] ? netlink_dump+0xe50/0xe50 [ 1718.618547][ T3105] ? ref_tracker_free+0x690/0x840 [ 1718.623629][ T3105] netlink_rcv_skb+0x2c5/0x4d0 [ 1718.628447][ T3105] ? rtnetlink_bind+0x80/0x80 [ 1718.633173][ T3105] ? netlink_ack+0x1180/0x1180 [ 1718.638004][ T3105] ? __lock_acquire+0x7d40/0x7d40 [ 1718.643081][ T3105] ? netlink_deliver_tap+0x2e/0x1b0 [ 1718.648341][ T3105] netlink_unicast+0x751/0x8d0 [ 1718.653164][ T3105] netlink_sendmsg+0x8d0/0xbf0 [ 1718.657987][ T3105] ? netlink_getsockopt+0x590/0x590 [ 1718.663240][ T3105] ? aa_sock_msg_perm+0x94/0x150 [ 1718.668226][ T3105] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1718.673559][ T3105] ? security_socket_sendmsg+0x80/0xa0 [ 1718.679058][ T3105] ? netlink_getsockopt+0x590/0x590 [ 1718.684311][ T3105] ____sys_sendmsg+0x5ba/0x960 [ 1718.689116][ T3105] ? __asan_memset+0x22/0x40 [ 1718.693758][ T3105] ? __sys_sendmsg_sock+0x30/0x30 [ 1718.698908][ T3105] ? __import_iovec+0x5f2/0x850 [ 1718.703804][ T3105] ? import_iovec+0x73/0xa0 [ 1718.708357][ T3105] ___sys_sendmsg+0x2a6/0x360 [ 1718.713083][ T3105] ? get_pid_task+0x20/0x1e0 [ 1718.717733][ T3105] ? __sys_sendmsg+0x2a0/0x2a0 [ 1718.722560][ T3105] ? __lock_acquire+0x7d40/0x7d40 [ 1718.727729][ T3105] __se_sys_sendmsg+0x1c2/0x2b0 [ 1718.732667][ T3105] ? __x64_sys_sendmsg+0x80/0x80 [ 1718.737667][ T3105] ? lockdep_hardirqs_on+0x98/0x150 [ 1718.742915][ T3105] do_syscall_64+0x55/0xb0 [ 1718.747376][ T3105] ? clear_bhb_loop+0x40/0x90 [ 1718.752100][ T3105] ? clear_bhb_loop+0x40/0x90 [ 1718.756822][ T3105] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1718.762771][ T3105] RIP: 0033:0x7f781bd9ce59 [ 1718.767225][ T3105] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1718.786878][ T3105] RSP: 002b:00007f781ccb3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1718.795336][ T3105] RAX: ffffffffffffffda RBX: 00007f781c015fa0 RCX: 00007f781bd9ce59 [ 1718.803352][ T3105] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1718.811454][ T3105] RBP: 00007f781ccb3090 R08: 0000000000000000 R09: 0000000000000000 [ 1718.819460][ T3105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1718.827461][ T3105] R13: 00007f781c016038 R14: 00007f781c015fa0 R15: 00007ffc6eabb788 [ 1718.835514][ T3105] [ 1722.156532][ T3110] netlink: 128 bytes leftover after parsing attributes in process `syz.2.9530'. [ 1722.193859][ T3110] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1722.515946][ T3123] netlink: 'syz.4.9534': attribute type 10 has an invalid length. [ 1722.533105][ T3123] team0: Device hsr_slave_0 failed to register rx_handler [ 1722.722240][ T3132] FAULT_INJECTION: forcing a failure. [ 1722.722240][ T3132] name failslab, interval 1, probability 0, space 0, times 0 [ 1722.736400][ T3132] CPU: 0 PID: 3132 Comm: syz.4.9536 Not tainted syzkaller #0 [ 1722.743843][ T3132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1722.753951][ T3132] Call Trace: [ 1722.757266][ T3132] [ 1722.760411][ T3132] dump_stack_lvl+0x18c/0x250 [ 1722.765133][ T3132] ? show_regs_print_info+0x20/0x20 [ 1722.770371][ T3132] ? load_image+0x420/0x420 [ 1722.774944][ T3132] ? __might_sleep+0xe0/0xe0 [ 1722.779599][ T3132] ? __lock_acquire+0x7d40/0x7d40 [ 1722.784668][ T3132] should_fail_ex+0x39d/0x4d0 [ 1722.789393][ T3132] should_failslab+0x9/0x20 [ 1722.793933][ T3132] slab_pre_alloc_hook+0x59/0x310 [ 1722.798997][ T3132] ? percpu_ref_put+0x12/0x100 [ 1722.803791][ T3132] ? apparmor_sk_alloc_security+0x77/0x100 [ 1722.809640][ T3132] __kmem_cache_alloc_node+0x53/0x250 [ 1722.815056][ T3132] ? apparmor_sk_alloc_security+0x77/0x100 [ 1722.820913][ T3132] kmalloc_trace+0x2a/0xe0 [ 1722.825373][ T3132] apparmor_sk_alloc_security+0x77/0x100 [ 1722.831045][ T3132] security_sk_alloc+0x6e/0xa0 [ 1722.835931][ T3132] sk_prot_alloc+0x101/0x210 [ 1722.840563][ T3132] sk_alloc+0x3a/0x360 [ 1722.844671][ T3132] inet_create+0x7a0/0xfe0 [ 1722.849121][ T3132] ? inet_create+0x9c/0xfe0 [ 1722.853662][ T3132] __sock_create+0x4a6/0x940 [ 1722.858304][ T3132] udp_sock_create4+0xcb/0x480 [ 1722.863104][ T3132] ? erspan_exit_batch_net+0x30/0x30 [ 1722.868430][ T3132] rxrpc_lookup_local+0xd1f/0x1610 [ 1722.873614][ T3132] ? rxrpc_local_dont_fragment+0x70/0x70 [ 1722.879288][ T3132] ? lockdep_hardirqs_on+0x98/0x150 [ 1722.884530][ T3132] ? _local_bh_enable+0xa0/0xa0 [ 1722.889425][ T3132] rxrpc_sendmsg+0x30a/0x5b0 [ 1722.894050][ T3132] ? rxrpc_getsockopt+0x150/0x150 [ 1722.899110][ T3132] ____sys_sendmsg+0x5ba/0x960 [ 1722.903915][ T3132] ? __sys_sendmsg_sock+0x30/0x30 [ 1722.908973][ T3132] ? __import_iovec+0x3fa/0x850 [ 1722.913868][ T3132] ? import_iovec+0x73/0xa0 [ 1722.918401][ T3132] ___sys_sendmsg+0x2a6/0x360 [ 1722.923108][ T3132] ? get_pid_task+0x20/0x1e0 [ 1722.927740][ T3132] ? __sys_sendmsg+0x2a0/0x2a0 [ 1722.932559][ T3132] ? __lock_acquire+0x7d40/0x7d40 [ 1722.937724][ T3132] __se_sys_sendmsg+0x1c2/0x2b0 [ 1722.942605][ T3132] ? __x64_sys_sendmsg+0x80/0x80 [ 1722.947584][ T3132] ? lockdep_hardirqs_on+0x98/0x150 [ 1722.952819][ T3132] do_syscall_64+0x55/0xb0 [ 1722.957262][ T3132] ? clear_bhb_loop+0x40/0x90 [ 1722.961971][ T3132] ? clear_bhb_loop+0x40/0x90 [ 1722.966683][ T3132] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1722.972609][ T3132] RIP: 0033:0x7fa94339ce59 [ 1722.977063][ T3132] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1722.996706][ T3132] RSP: 002b:00007fa944206028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1723.005156][ T3132] RAX: ffffffffffffffda RBX: 00007fa943615fa0 RCX: 00007fa94339ce59 [ 1723.013159][ T3132] RDX: 0000000000000106 RSI: 0000200000000140 RDI: 0000000000000003 [ 1723.021176][ T3132] RBP: 00007fa944206090 R08: 0000000000000000 R09: 0000000000000000 [ 1723.029171][ T3132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1723.037169][ T3132] R13: 00007fa943616038 R14: 00007fa943615fa0 R15: 00007ffcd90458f8 [ 1723.045188][ T3132] [ 1723.259860][ T3134] syzkaller0: entered promiscuous mode [ 1723.265468][ T3134] syzkaller0: entered allmulticast mode [ 1723.536093][ T3142] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.9549'. [ 1723.566617][ T3142] netlink: 3064 bytes leftover after parsing attributes in process `syz.0.9549'. [ 1723.593450][ T3144] netlink: 128 bytes leftover after parsing attributes in process `syz.1.9540'. [ 1723.618126][ T3146] netlink: 'syz.0.9549': attribute type 1 has an invalid length. [ 1723.625940][ T3146] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.9549'. [ 1723.652084][ T3144] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1723.891893][ T3150] netlink: 'syz.0.9543': attribute type 21 has an invalid length. [ 1724.194969][ T3158] netlink: 'syz.0.9544': attribute type 10 has an invalid length. [ 1724.313138][ T3158] team0: Device hsr_slave_0 failed to register rx_handler [ 1725.597543][ T3178] netlink: 'syz.1.9551': attribute type 29 has an invalid length. [ 1725.629697][ T3178] netlink: 'syz.1.9551': attribute type 29 has an invalid length. [ 1725.648999][ T3180] netlink: 'syz.1.9551': attribute type 29 has an invalid length. [ 1725.668485][ T3183] netlink: 'syz.1.9551': attribute type 29 has an invalid length. [ 1725.688438][ T3182] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.9553'. [ 1725.727414][ T3178] netlink: 'syz.1.9551': attribute type 29 has an invalid length. [ 1726.626823][ T3198] netlink: 'syz.1.9558': attribute type 21 has an invalid length. [ 1729.903298][ T3212] netlink: 128 bytes leftover after parsing attributes in process `syz.0.9562'. [ 1729.930151][ T3212] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1730.116989][ T3227] Ÿë: port 1(veth0_to_team) entered blocking state [ 1730.134287][ T3227] FAULT_INJECTION: forcing a failure. [ 1730.134287][ T3227] name failslab, interval 1, probability 0, space 0, times 0 [ 1730.154799][ T3227] CPU: 0 PID: 3227 Comm: syz.4.9564 Not tainted syzkaller #0 [ 1730.162265][ T3227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1730.172372][ T3227] Call Trace: [ 1730.175698][ T3227] [ 1730.178672][ T3227] dump_stack_lvl+0x18c/0x250 [ 1730.183411][ T3227] ? show_regs_print_info+0x20/0x20 [ 1730.188652][ T3227] ? load_image+0x420/0x420 [ 1730.193289][ T3227] ? preempt_schedule+0xc0/0xd0 [ 1730.198183][ T3227] ? tick_nohz_tick_stopped+0x7f/0xc0 [ 1730.203609][ T3227] ? __irq_work_queue_local+0x13a/0x3b0 [ 1730.209203][ T3227] should_fail_ex+0x39d/0x4d0 [ 1730.213937][ T3227] should_failslab+0x9/0x20 [ 1730.218493][ T3227] slab_pre_alloc_hook+0x59/0x310 [ 1730.223571][ T3227] ? printk_sprint+0x460/0x460 [ 1730.228395][ T3227] ? switchdev_deferred_enqueue+0x2d/0x240 [ 1730.234365][ T3227] ? switchdev_deferred_enqueue+0x2d/0x240 [ 1730.240240][ T3227] __kmem_cache_alloc_node+0x53/0x250 [ 1730.245689][ T3227] ? do_raw_spin_unlock+0x121/0x230 [ 1730.250957][ T3227] ? switchdev_deferred_enqueue+0x2d/0x240 [ 1730.256926][ T3227] ? switchdev_deferred_enqueue+0x240/0x240 [ 1730.262878][ T3227] __kmalloc+0xa4/0x230 [ 1730.267091][ T3227] switchdev_deferred_enqueue+0x2d/0x240 [ 1730.272786][ T3227] switchdev_port_attr_set+0xf9/0x2d0 [ 1730.278218][ T3227] ? load_image+0x420/0x420 [ 1730.282773][ T3227] ? switchdev_deferred_process+0x2a0/0x2a0 [ 1730.288719][ T3227] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1730.294669][ T3227] ? _raw_spin_unlock+0x40/0x40 [ 1730.299610][ T3227] __set_ageing_time+0xde/0x170 [ 1730.304527][ T3227] ? br_set_max_age+0x110/0x110 [ 1730.309444][ T3227] ? br_become_designated_port+0x20/0x250 [ 1730.315220][ T3227] br_init_port+0x131/0x200 [ 1730.319781][ T3227] new_nbp+0x2f9/0x430 [ 1730.323904][ T3227] br_add_if+0x28f/0xec0 [ 1730.328192][ T3227] ? apparmor_capable+0x137/0x1a0 [ 1730.333267][ T3227] ? bpf_lsm_capable+0x9/0x10 [ 1730.338002][ T3227] ? security_capable+0x89/0xb0 [ 1730.342918][ T3227] br_ioctl_stub+0x730/0xd50 [ 1730.347566][ T3227] ? rcu_is_watching+0x15/0xb0 [ 1730.352389][ T3227] ? rcu_read_unlock+0xa0/0xa0 [ 1730.357208][ T3227] ? trace_contention_end+0x39/0xe0 [ 1730.362456][ T3227] ? __mutex_lock+0x315/0xcc0 [ 1730.367190][ T3227] ? mutex_lock_nested+0x20/0x20 [ 1730.372191][ T3227] ? rcu_read_unlock+0xa0/0xa0 [ 1730.377010][ T3227] sock_ioctl+0x517/0x7e0 [ 1730.381401][ T3227] ? sock_poll+0x3e0/0x3e0 [ 1730.385880][ T3227] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1730.390862][ T3227] ? security_file_ioctl+0x80/0xa0 [ 1730.396024][ T3227] ? sock_poll+0x3e0/0x3e0 [ 1730.400499][ T3227] __se_sys_ioctl+0xfd/0x170 [ 1730.405151][ T3227] do_syscall_64+0x55/0xb0 [ 1730.409610][ T3227] ? clear_bhb_loop+0x40/0x90 [ 1730.414339][ T3227] ? clear_bhb_loop+0x40/0x90 [ 1730.419076][ T3227] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1730.425019][ T3227] RIP: 0033:0x7fa94339ce59 [ 1730.429476][ T3227] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1730.449128][ T3227] RSP: 002b:00007fa9441e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1730.457596][ T3227] RAX: ffffffffffffffda RBX: 00007fa943616090 RCX: 00007fa94339ce59 [ 1730.465612][ T3227] RDX: 0000200000000080 RSI: 00000000000089a2 RDI: 000000000000000c [ 1730.473624][ T3227] RBP: 00007fa9441e5090 R08: 0000000000000000 R09: 0000000000000000 [ 1730.481656][ T3227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1730.489679][ T3227] R13: 00007fa943616128 R14: 00007fa943616090 R15: 00007ffcd90458f8 [ 1730.497824][ T3227] [ 1730.544259][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.550726][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.560323][ T3227] veth0_to_team: failed to offload ageing time [ 1730.623749][ T3227] Ÿë: port 1(veth0_to_team) entered disabled state [ 1730.654946][ T3227] veth0_to_team: entered allmulticast mode [ 1730.689364][ T3227] veth0_to_team: entered promiscuous mode [ 1730.869320][ T3232] FAULT_INJECTION: forcing a failure. [ 1730.869320][ T3232] name failslab, interval 1, probability 0, space 0, times 0 [ 1730.890365][ T3232] CPU: 0 PID: 3232 Comm: syz.0.9566 Not tainted syzkaller #0 [ 1730.897831][ T3232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1730.907929][ T3232] Call Trace: [ 1730.911235][ T3232] [ 1730.914197][ T3232] dump_stack_lvl+0x18c/0x250 [ 1730.918922][ T3232] ? show_regs_print_info+0x20/0x20 [ 1730.924149][ T3232] ? load_image+0x420/0x420 [ 1730.928689][ T3232] ? __might_sleep+0xe0/0xe0 [ 1730.933311][ T3232] ? __lock_acquire+0x7d40/0x7d40 [ 1730.938371][ T3232] should_fail_ex+0x39d/0x4d0 [ 1730.943097][ T3232] should_failslab+0x9/0x20 [ 1730.947639][ T3232] slab_pre_alloc_hook+0x59/0x310 [ 1730.952703][ T3232] ? allocate_cgrp_cset_links+0xc9/0x320 [ 1730.958371][ T3232] __kmem_cache_alloc_node+0x53/0x250 [ 1730.963786][ T3232] ? allocate_cgrp_cset_links+0xc9/0x320 [ 1730.969447][ T3232] kmalloc_trace+0x2a/0xe0 [ 1730.973901][ T3232] allocate_cgrp_cset_links+0xc9/0x320 [ 1730.979396][ T3232] find_css_set+0xa1e/0x15d0 [ 1730.984051][ T3232] ? cgroup_migrate_prepare_dst+0x6f0/0x6f0 [ 1730.990010][ T3232] ? mark_lock+0x94/0x320 [ 1730.994420][ T3232] cgroup_migrate_prepare_dst+0x130/0x6f0 [ 1731.000298][ T3232] cgroup_attach_task+0x5a6/0x8e0 [ 1731.005424][ T3232] ? proc_nr_inodes+0x230/0x230 [ 1731.010337][ T3232] ? cgroup_attach_task+0x25d/0x8e0 [ 1731.015571][ T3232] ? cgroup_migrate_execute+0xf30/0xf30 [ 1731.021181][ T3232] ? cgroup_attach_permissions+0x4eb/0x9d0 [ 1731.027056][ T3232] ? revert_creds+0xae/0xc0 [ 1731.031600][ T3232] __cgroup_procs_write+0x23a/0x350 [ 1731.036844][ T3232] cgroup_procs_write+0x27/0x50 [ 1731.041734][ T3232] ? cgroup_procs_next+0xa0/0xa0 [ 1731.046702][ T3232] cgroup_file_write+0x2c9/0x690 [ 1731.051677][ T3232] ? read_lock_is_recursive+0x20/0x20 [ 1731.057084][ T3232] ? cgroup_seqfile_stop+0xd0/0xd0 [ 1731.062248][ T3232] ? cgroup_seqfile_stop+0xd0/0xd0 [ 1731.067396][ T3232] kernfs_fop_write_iter+0x3b6/0x520 [ 1731.072729][ T3232] vfs_write+0x46c/0x990 [ 1731.077014][ T3232] ? file_end_write+0x250/0x250 [ 1731.081901][ T3232] ? __fget_files+0x43d/0x4b0 [ 1731.086617][ T3232] ? __fdget_pos+0x2a3/0x330 [ 1731.091247][ T3232] ? ksys_write+0x75/0x260 [ 1731.095713][ T3232] ksys_write+0x150/0x260 [ 1731.100085][ T3232] ? __ia32_sys_read+0x90/0x90 [ 1731.104888][ T3232] ? lockdep_hardirqs_on+0x98/0x150 [ 1731.110123][ T3232] do_syscall_64+0x55/0xb0 [ 1731.114574][ T3232] ? clear_bhb_loop+0x40/0x90 [ 1731.119286][ T3232] ? clear_bhb_loop+0x40/0x90 [ 1731.124083][ T3232] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1731.130012][ T3232] RIP: 0033:0x7f2ed599ce59 [ 1731.134460][ T3232] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1731.154092][ T3232] RSP: 002b:00007f2ed6906028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1731.162537][ T3232] RAX: ffffffffffffffda RBX: 00007f2ed5c15fa0 RCX: 00007f2ed599ce59 [ 1731.170539][ T3232] RDX: 0000000000000012 RSI: 00002000000005c0 RDI: 0000000000000004 [ 1731.178533][ T3232] RBP: 00007f2ed6906090 R08: 0000000000000000 R09: 0000000000000000 [ 1731.186524][ T3232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1731.194526][ T3232] R13: 00007f2ed5c16038 R14: 00007f2ed5c15fa0 R15: 00007ffda63485a8 [ 1731.202549][ T3232] [ 1731.423444][ T3234] netlink: 'syz.2.9567': attribute type 3 has an invalid length. [ 1731.431761][ T3234] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.9567'. [ 1731.744867][ T3250] netlink: 'syz.4.9571': attribute type 10 has an invalid length. [ 1731.843991][ T3250] team0: Port device netdevsim0 added [ 1732.576206][ T3269] FAULT_INJECTION: forcing a failure. [ 1732.576206][ T3269] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1732.594128][ T3269] CPU: 1 PID: 3269 Comm: syz.2.9578 Not tainted syzkaller #0 [ 1732.601755][ T3269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1732.611867][ T3269] Call Trace: [ 1732.615193][ T3269] [ 1732.618171][ T3269] dump_stack_lvl+0x18c/0x250 [ 1732.622903][ T3269] ? show_regs_print_info+0x20/0x20 [ 1732.628185][ T3269] ? load_image+0x420/0x420 [ 1732.632739][ T3269] ? __lock_acquire+0x7d40/0x7d40 [ 1732.637813][ T3269] ? snprintf+0xe9/0x140 [ 1732.642123][ T3269] should_fail_ex+0x39d/0x4d0 [ 1732.646890][ T3269] _copy_to_user+0x2f/0xa0 [ 1732.651361][ T3269] simple_read_from_buffer+0xe7/0x150 [ 1732.656795][ T3269] proc_fail_nth_read+0x1e8/0x260 [ 1732.661875][ T3269] ? proc_fault_inject_write+0x360/0x360 [ 1732.667595][ T3269] ? fsnotify_perm+0x271/0x5e0 [ 1732.672407][ T3269] ? proc_fault_inject_write+0x360/0x360 [ 1732.678101][ T3269] vfs_read+0x28b/0x970 [ 1732.682324][ T3269] ? kernel_read+0x1e0/0x1e0 [ 1732.686966][ T3269] ? __fget_files+0x28/0x4b0 [ 1732.691610][ T3269] ? __fget_files+0x28/0x4b0 [ 1732.696251][ T3269] ? __fget_files+0x43d/0x4b0 [ 1732.700988][ T3269] ? __fdget_pos+0x2a3/0x330 [ 1732.705654][ T3269] ? ksys_read+0x75/0x260 [ 1732.710047][ T3269] ksys_read+0x150/0x260 [ 1732.714354][ T3269] ? vfs_write+0x990/0x990 [ 1732.718834][ T3269] ? lockdep_hardirqs_on+0x98/0x150 [ 1732.724099][ T3269] do_syscall_64+0x55/0xb0 [ 1732.728568][ T3269] ? clear_bhb_loop+0x40/0x90 [ 1732.733297][ T3269] ? clear_bhb_loop+0x40/0x90 [ 1732.738035][ T3269] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1732.743984][ T3269] RIP: 0033:0x7f781bd5d68e [ 1732.748441][ T3269] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1732.768110][ T3269] RSP: 002b:00007f781ccb2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1732.776577][ T3269] RAX: ffffffffffffffda RBX: 00007f781ccb36c0 RCX: 00007f781bd5d68e [ 1732.784595][ T3269] RDX: 000000000000000f RSI: 00007f781ccb30a0 RDI: 0000000000000004 [ 1732.792610][ T3269] RBP: 00007f781ccb3090 R08: 0000000000000000 R09: 0000000000000000 [ 1732.800627][ T3269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1732.808647][ T3269] R13: 00007f781c016038 R14: 00007f781c015fa0 R15: 00007ffc6eabb788 [ 1732.816680][ T3269] [ 1733.015762][ T3277] netlink: 'syz.4.9579': attribute type 10 has an invalid length. [ 1733.024603][ T3277] team0: Device hsr_slave_0 failed to register rx_handler [ 1733.726392][ T3288] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.9583'. [ 1733.849582][ T3283] netlink: 'syz.0.9581': attribute type 3 has an invalid length. [ 1733.868951][ T3283] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.9581'. [ 1734.308211][ T3302] netlink: 'syz.0.9588': attribute type 10 has an invalid length. [ 1734.349701][ T3302] team0: Device hsr_slave_0 failed to register rx_handler [ 1737.222073][ T3308] netlink: 'syz.0.9592': attribute type 10 has an invalid length. [ 1737.231670][ T3308] team0: Device hsr_slave_0 failed to register rx_handler [ 1737.320243][ T3312] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9591'. [ 1737.601092][ T3321] netlink: 60 bytes leftover after parsing attributes in process `syz.4.9595'. [ 1739.085403][ T3335] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.9599'. [ 1739.786605][ T3355] netlink: 'syz.4.9602': attribute type 10 has an invalid length. [ 1739.805156][ T3355] team0: Device hsr_slave_0 failed to register rx_handler [ 1740.861474][ T5780] Bluetooth: hci2: unexpected subevent 0x06 length: 150 > 10 [ 1740.891086][ T3379] FAULT_INJECTION: forcing a failure. [ 1740.891086][ T3379] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1740.957889][ T3379] CPU: 0 PID: 3379 Comm: syz.0.9607 Not tainted syzkaller #0 [ 1740.965362][ T3379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1740.975483][ T3379] Call Trace: [ 1740.978896][ T3379] [ 1740.981906][ T3379] dump_stack_lvl+0x18c/0x250 [ 1740.986639][ T3379] ? show_regs_print_info+0x20/0x20 [ 1740.991889][ T3379] ? load_image+0x420/0x420 [ 1740.996464][ T3379] ? __might_fault+0xaa/0x120 [ 1741.001199][ T3379] should_fail_ex+0x39d/0x4d0 [ 1741.005940][ T3379] copyin+0x1a/0x90 [ 1741.009812][ T3379] _copy_from_iter+0x404/0x12e0 [ 1741.014723][ T3379] ? slab_post_alloc_hook+0x8a/0x4b0 [ 1741.020074][ T3379] ? __virt_addr_valid+0x18c/0x540 [ 1741.025244][ T3379] ? __lock_acquire+0x7d40/0x7d40 [ 1741.030335][ T3379] ? copyout_mc+0x70/0x70 [ 1741.034728][ T3379] ? __virt_addr_valid+0x18c/0x540 [ 1741.039902][ T3379] ? __virt_addr_valid+0x18c/0x540 [ 1741.045077][ T3379] ? __virt_addr_valid+0x469/0x540 [ 1741.050259][ T3379] ? __check_object_size+0x506/0xa20 [ 1741.055598][ T3379] netlink_sendmsg+0x76b/0xbf0 [ 1741.060449][ T3379] ? netlink_getsockopt+0x590/0x590 [ 1741.065716][ T3379] ? aa_sock_msg_perm+0x94/0x150 [ 1741.070720][ T3379] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1741.076077][ T3379] ? security_socket_sendmsg+0x80/0xa0 [ 1741.081691][ T3379] ? netlink_getsockopt+0x590/0x590 [ 1741.086938][ T3379] ____sys_sendmsg+0x5ba/0x960 [ 1741.091744][ T3379] ? __asan_memset+0x22/0x40 [ 1741.096388][ T3379] ? __sys_sendmsg_sock+0x30/0x30 [ 1741.101439][ T3379] ? __import_iovec+0x3fa/0x850 [ 1741.106328][ T3379] ? import_iovec+0x73/0xa0 [ 1741.110888][ T3379] ___sys_sendmsg+0x2a6/0x360 [ 1741.115656][ T3379] ? get_pid_task+0x20/0x1e0 [ 1741.120308][ T3379] ? __sys_sendmsg+0x2a0/0x2a0 [ 1741.125125][ T3379] ? __lock_acquire+0x7d40/0x7d40 [ 1741.130211][ T3379] __se_sys_sendmsg+0x1c2/0x2b0 [ 1741.135096][ T3379] ? __x64_sys_sendmsg+0x80/0x80 [ 1741.140077][ T3379] ? lockdep_hardirqs_on+0x98/0x150 [ 1741.145400][ T3379] do_syscall_64+0x55/0xb0 [ 1741.149849][ T3379] ? clear_bhb_loop+0x40/0x90 [ 1741.154568][ T3379] ? clear_bhb_loop+0x40/0x90 [ 1741.159283][ T3379] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1741.165207][ T3379] RIP: 0033:0x7f2ed599ce59 [ 1741.169652][ T3379] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1741.189555][ T3379] RSP: 002b:00007f2ed6906028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1741.197997][ T3379] RAX: ffffffffffffffda RBX: 00007f2ed5c15fa0 RCX: 00007f2ed599ce59 [ 1741.205996][ T3379] RDX: 0000000000000100 RSI: 0000200000000100 RDI: 0000000000000003 [ 1741.213995][ T3379] RBP: 00007f2ed6906090 R08: 0000000000000000 R09: 0000000000000000 [ 1741.221990][ T3379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1741.229988][ T3379] R13: 00007f2ed5c16038 R14: 00007f2ed5c15fa0 R15: 00007ffda63485a8 [ 1741.238014][ T3379] [ 1741.411573][ T3384] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.9610'. [ 1741.443182][ T3392] netlink: 65051 bytes leftover after parsing attributes in process `syz.1.9613'. [ 1741.542987][ T3398] netlink: 'syz.0.9615': attribute type 10 has an invalid length. [ 1741.576175][ T3392] FAULT_INJECTION: forcing a failure. [ 1741.576175][ T3392] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1741.595754][ T3398] team0: Device hsr_slave_0 failed to register rx_handler [ 1741.633617][ T3392] CPU: 0 PID: 3392 Comm: syz.1.9613 Not tainted syzkaller #0 [ 1741.641097][ T3392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1741.651213][ T3392] Call Trace: [ 1741.654560][ T3392] [ 1741.657538][ T3392] dump_stack_lvl+0x18c/0x250 [ 1741.662284][ T3392] ? show_regs_print_info+0x20/0x20 [ 1741.667569][ T3392] ? load_image+0x420/0x420 [ 1741.672136][ T3392] ? __might_fault+0xaa/0x120 [ 1741.676871][ T3392] ? __lock_acquire+0x7d40/0x7d40 [ 1741.681958][ T3392] ? unix_ioctl+0x261/0x670 [ 1741.686523][ T3392] should_fail_ex+0x39d/0x4d0 [ 1741.691276][ T3392] _copy_from_user+0x2f/0xe0 [ 1741.695928][ T3392] sock_do_ioctl+0x190/0x310 [ 1741.700619][ T3392] ? sock_show_fdinfo+0xb0/0xb0 [ 1741.705553][ T3392] sock_ioctl+0x5ba/0x7e0 [ 1741.709928][ T3392] ? sock_poll+0x3e0/0x3e0 [ 1741.714377][ T3392] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1741.719388][ T3392] ? security_file_ioctl+0x80/0xa0 [ 1741.724522][ T3392] ? sock_poll+0x3e0/0x3e0 [ 1741.728981][ T3392] __se_sys_ioctl+0xfd/0x170 [ 1741.733625][ T3392] do_syscall_64+0x55/0xb0 [ 1741.738074][ T3392] ? clear_bhb_loop+0x40/0x90 [ 1741.742792][ T3392] ? clear_bhb_loop+0x40/0x90 [ 1741.747509][ T3392] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1741.753441][ T3392] RIP: 0033:0x7fdf7e79ce59 [ 1741.757888][ T3392] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1741.777536][ T3392] RSP: 002b:00007fdf7f642028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1741.785995][ T3392] RAX: ffffffffffffffda RBX: 00007fdf7ea15fa0 RCX: 00007fdf7e79ce59 [ 1741.794179][ T3392] RDX: 0000200000000540 RSI: 00000000000089b0 RDI: 0000000000000004 [ 1741.802176][ T3392] RBP: 00007fdf7f642090 R08: 0000000000000000 R09: 0000000000000000 [ 1741.810175][ T3392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1741.818177][ T3392] R13: 00007fdf7ea16038 R14: 00007fdf7ea15fa0 R15: 00007fff12a18498 [ 1741.826282][ T3392] [ 1741.892512][ T3396] netlink: 'syz.4.9614': attribute type 1 has an invalid length. [ 1741.901070][ T3396] netlink: 'syz.4.9614': attribute type 3 has an invalid length. [ 1741.909688][ T3396] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9614'. [ 1742.491932][ T3420] netlink: 'syz.0.9620': attribute type 3 has an invalid length. [ 1742.531843][ T3420] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9620'. [ 1742.897353][ T5780] Bluetooth: hci2: command tx timeout [ 1743.800801][ T3428] FAULT_INJECTION: forcing a failure. [ 1743.800801][ T3428] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1743.815167][ T3428] CPU: 1 PID: 3428 Comm: syz.2.9624 Not tainted syzkaller #0 [ 1743.822604][ T3428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1743.832695][ T3428] Call Trace: [ 1743.836010][ T3428] [ 1743.838976][ T3428] dump_stack_lvl+0x18c/0x250 [ 1743.843698][ T3428] ? show_regs_print_info+0x20/0x20 [ 1743.848931][ T3428] ? load_image+0x420/0x420 [ 1743.853519][ T3428] ? __lock_acquire+0x7d40/0x7d40 [ 1743.858584][ T3428] ? __virt_addr_valid+0x18c/0x540 [ 1743.863747][ T3428] should_fail_ex+0x39d/0x4d0 [ 1743.868485][ T3428] _copy_from_user+0x2f/0xe0 [ 1743.873115][ T3428] bpf_test_init+0xde/0x140 [ 1743.877661][ T3428] bpf_prog_test_run_xdp+0x4d1/0x10e0 [ 1743.883100][ T3428] ? dev_put+0x80/0x80 [ 1743.887229][ T3428] ? dev_put+0x80/0x80 [ 1743.891346][ T3428] bpf_prog_test_run+0x321/0x390 [ 1743.896332][ T3428] __sys_bpf+0x49d/0x890 [ 1743.900620][ T3428] ? bpf_link_show_fdinfo+0x390/0x390 [ 1743.906051][ T3428] ? lock_chain_count+0x20/0x20 [ 1743.910952][ T3428] __x64_sys_bpf+0x7c/0x90 [ 1743.915404][ T3428] do_syscall_64+0x55/0xb0 [ 1743.919855][ T3428] ? clear_bhb_loop+0x40/0x90 [ 1743.924575][ T3428] ? clear_bhb_loop+0x40/0x90 [ 1743.929298][ T3428] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1743.935223][ T3428] RIP: 0033:0x7f781bd9ce59 [ 1743.939755][ T3428] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1743.959394][ T3428] RSP: 002b:00007f781ccb3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1743.967846][ T3428] RAX: ffffffffffffffda RBX: 00007f781c015fa0 RCX: 00007f781bd9ce59 [ 1743.975851][ T3428] RDX: 0000000000000024 RSI: 0000200000000200 RDI: 000000000000000a [ 1743.983853][ T3428] RBP: 00007f781ccb3090 R08: 0000000000000000 R09: 0000000000000000 [ 1743.991905][ T3428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1743.999918][ T3428] R13: 00007f781c016038 R14: 00007f781c015fa0 R15: 00007ffc6eabb788 [ 1744.007942][ T3428] [ 1744.060840][ T3431] FAULT_INJECTION: forcing a failure. [ 1744.060840][ T3431] name failslab, interval 1, probability 0, space 0, times 0 [ 1744.088095][ T3431] CPU: 0 PID: 3431 Comm: syz.1.9625 Not tainted syzkaller #0 [ 1744.095559][ T3431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1744.105668][ T3431] Call Trace: [ 1744.108990][ T3431] [ 1744.111970][ T3431] dump_stack_lvl+0x18c/0x250 [ 1744.116837][ T3431] ? show_regs_print_info+0x20/0x20 [ 1744.122096][ T3431] ? load_image+0x420/0x420 [ 1744.126655][ T3431] ? __might_sleep+0xe0/0xe0 [ 1744.131296][ T3431] ? __lock_acquire+0x7d40/0x7d40 [ 1744.136370][ T3431] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 1744.142149][ T3431] should_fail_ex+0x39d/0x4d0 [ 1744.146889][ T3431] should_failslab+0x9/0x20 [ 1744.151466][ T3431] slab_pre_alloc_hook+0x59/0x310 [ 1744.156553][ T3431] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1744.162595][ T3431] kmem_cache_alloc_lru+0x4d/0x2d0 [ 1744.167761][ T3431] ? __d_alloc+0x31/0x730 [ 1744.172145][ T3431] __d_alloc+0x31/0x730 [ 1744.176340][ T3431] ? lockdep_hardirqs_on+0x98/0x150 [ 1744.181579][ T3431] d_alloc_pseudo+0x1d/0x70 [ 1744.186120][ T3431] alloc_file_pseudo+0xe4/0x210 [ 1744.191002][ T3431] ? alloc_empty_backing_file+0xe0/0xe0 [ 1744.196587][ T3431] anon_inode_getfile+0xc5/0x1a0 [ 1744.201572][ T3431] __se_sys_perf_event_open+0xee7/0x1c50 [ 1744.207262][ T3431] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 1744.212949][ T3431] ? lock_chain_count+0x20/0x20 [ 1744.217841][ T3431] ? lockdep_hardirqs_on+0x98/0x150 [ 1744.223077][ T3431] ? __x64_sys_perf_event_open+0x20/0xc0 [ 1744.228740][ T3431] do_syscall_64+0x55/0xb0 [ 1744.233193][ T3431] ? clear_bhb_loop+0x40/0x90 [ 1744.237995][ T3431] ? clear_bhb_loop+0x40/0x90 [ 1744.242764][ T3431] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1744.248690][ T3431] RIP: 0033:0x7fdf7e79ce59 [ 1744.253130][ T3431] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1744.272764][ T3431] RSP: 002b:00007fdf7f642028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1744.281213][ T3431] RAX: ffffffffffffffda RBX: 00007fdf7ea15fa0 RCX: 00007fdf7e79ce59 [ 1744.289215][ T3431] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 00002000000002c0 [ 1744.297216][ T3431] RBP: 00007fdf7f642090 R08: 0000000000000008 R09: 0000000000000000 [ 1744.305228][ T3431] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 1744.313227][ T3431] R13: 00007fdf7ea16038 R14: 00007fdf7ea15fa0 R15: 00007fff12a18498 [ 1744.321243][ T3431] [ 1744.355995][ T3433] netlink: 'syz.2.9626': attribute type 10 has an invalid length. [ 1744.367036][ T3433] team0: Device hsr_slave_0 failed to register rx_handler [ 1744.579056][ T3441] netlink: 128 bytes leftover after parsing attributes in process `syz.4.9629'. [ 1744.599467][ T3441] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1744.872120][ T5780] Bluetooth: hci3: unexpected subevent 0x06 length: 150 > 10 [ 1746.809611][ T3476] netlink: 65051 bytes leftover after parsing attributes in process `syz.1.9638'. [ 1746.824759][ T3475] netlink: 'syz.4.9639': attribute type 29 has an invalid length. [ 1746.837581][ T3475] netlink: 'syz.4.9639': attribute type 29 has an invalid length. [ 1746.867575][ T3475] netlink: 'syz.4.9639': attribute type 29 has an invalid length. [ 1746.901138][ T5780] Bluetooth: hci3: command 0x0406 tx timeout [ 1746.943985][ T3475] netlink: 'syz.4.9639': attribute type 29 has an invalid length. [ 1746.999534][ T3482] netlink: 128 bytes leftover after parsing attributes in process `syz.0.9641'. [ 1747.017984][ T3482] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1748.589826][ T3516] netlink: 128 bytes leftover after parsing attributes in process `syz.0.9653'. [ 1748.627817][ T3516] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1748.867439][ T3531] netlink: 'syz.0.9658': attribute type 10 has an invalid length. [ 1748.888354][ T3531] team0: Device hsr_slave_0 failed to register rx_handler [ 1749.185985][ T3541] netlink: 'syz.4.9662': attribute type 2 has an invalid length. [ 1749.207200][ T3541] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.9662'. [ 1750.096596][ T3551] FAULT_INJECTION: forcing a failure. [ 1750.096596][ T3551] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1750.131832][ T3551] CPU: 0 PID: 3551 Comm: syz.4.9664 Not tainted syzkaller #0 [ 1750.139310][ T3551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1750.144126][ T3553] netlink: 'syz.0.9665': attribute type 10 has an invalid length. [ 1750.149397][ T3551] Call Trace: [ 1750.149411][ T3551] [ 1750.149423][ T3551] dump_stack_lvl+0x18c/0x250 [ 1750.149456][ T3551] ? show_regs_print_info+0x20/0x20 [ 1750.149487][ T3551] ? load_image+0x420/0x420 [ 1750.173827][ T3553] team0: Device hsr_slave_0 failed to register rx_handler [ 1750.178053][ T3551] ? __might_fault+0xaa/0x120 [ 1750.178088][ T3551] ? __lock_acquire+0x7d40/0x7d40 [ 1750.178122][ T3551] should_fail_ex+0x39d/0x4d0 [ 1750.178162][ T3551] _copy_from_iter+0x1d9/0x12e0 [ 1750.178195][ T3551] ? slab_post_alloc_hook+0x8a/0x4b0 [ 1750.178225][ T3551] ? __virt_addr_valid+0x18c/0x540 [ 1750.178257][ T3551] ? __lock_acquire+0x7d40/0x7d40 [ 1750.178283][ T3551] ? rcu_is_watching+0x15/0xb0 [ 1750.178331][ T3551] ? copyout_mc+0x70/0x70 [ 1750.178362][ T3551] ? __virt_addr_valid+0x18c/0x540 [ 1750.178391][ T3551] ? __virt_addr_valid+0x18c/0x540 [ 1750.178420][ T3551] ? __virt_addr_valid+0x469/0x540 [ 1750.178452][ T3551] ? __check_object_size+0x506/0xa20 [ 1750.178481][ T3551] netlink_sendmsg+0x76b/0xbf0 [ 1750.178536][ T3551] ? netlink_getsockopt+0x590/0x590 [ 1750.178573][ T3551] ? aa_sock_msg_perm+0x94/0x150 [ 1750.178604][ T3551] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1750.178631][ T3551] ? security_socket_sendmsg+0x80/0xa0 [ 1750.276391][ T3551] ? netlink_getsockopt+0x590/0x590 [ 1750.281658][ T3551] ____sys_sendmsg+0x5ba/0x960 [ 1750.286496][ T3551] ? __asan_memset+0x22/0x40 [ 1750.291150][ T3551] ? __sys_sendmsg_sock+0x30/0x30 [ 1750.296224][ T3551] ? __import_iovec+0x5f2/0x850 [ 1750.301145][ T3551] ? import_iovec+0x73/0xa0 [ 1750.305704][ T3551] ___sys_sendmsg+0x2a6/0x360 [ 1750.310437][ T3551] ? get_pid_task+0x20/0x1e0 [ 1750.315087][ T3551] ? __sys_sendmsg+0x2a0/0x2a0 [ 1750.319945][ T3551] ? __lock_acquire+0x7d40/0x7d40 [ 1750.325069][ T3551] __se_sys_sendmsg+0x1c2/0x2b0 [ 1750.329976][ T3551] ? __x64_sys_sendmsg+0x80/0x80 [ 1750.334998][ T3551] ? lockdep_hardirqs_on+0x98/0x150 [ 1750.340264][ T3551] do_syscall_64+0x55/0xb0 [ 1750.344738][ T3551] ? clear_bhb_loop+0x40/0x90 [ 1750.349476][ T3551] ? clear_bhb_loop+0x40/0x90 [ 1750.354209][ T3551] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1750.360167][ T3551] RIP: 0033:0x7fa94339ce59 [ 1750.364640][ T3551] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1750.384305][ T3551] RSP: 002b:00007fa944206028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1750.392799][ T3551] RAX: ffffffffffffffda RBX: 00007fa943615fa0 RCX: 00007fa94339ce59 [ 1750.400840][ T3551] RDX: 0000000000000000 RSI: 0000200000000640 RDI: 0000000000000004 [ 1750.408876][ T3551] RBP: 00007fa944206090 R08: 0000000000000000 R09: 0000000000000000 [ 1750.416897][ T3551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1750.424894][ T3551] R13: 00007fa943616038 R14: 00007fa943615fa0 R15: 00007ffcd90458f8 [ 1750.432930][ T3551] [ 1750.461107][ T3557] netlink: 128 bytes leftover after parsing attributes in process `syz.1.9666'. [ 1750.489863][ T3557] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1750.910668][ T3573] mac80211_hwsim hwsim239 wlan1: entered allmulticast mode [ 1751.862922][ T3592] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1751.877242][ T3592] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1752.253367][ T3592] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1752.267976][ T3592] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1752.396439][ T3599] netlink: 'syz.2.9678': attribute type 10 has an invalid length. [ 1752.412820][ T3599] team0: Device hsr_slave_0 failed to register rx_handler [ 1752.674049][ T5777] Bluetooth: hci1: unexpected subevent 0x04 length: 150 > 11 [ 1754.208172][ T3641] netlink: 'syz.4.9689': attribute type 10 has an invalid length. [ 1754.228379][ T3641] team0: Device hsr_slave_0 failed to register rx_handler [ 1754.523805][ T5777] Bluetooth: hci3: unexpected subevent 0x04 length: 150 > 11 [ 1755.755933][ T3677] netlink: 'syz.2.9701': attribute type 10 has an invalid length. [ 1755.764830][ T3677] team0: Device hsr_slave_0 failed to register rx_handler [ 1756.115947][ T5777] Bluetooth: hci0: unexpected subevent 0x04 length: 150 > 11 [ 1756.882902][ T3715] netlink: 'syz.0.9714': attribute type 10 has an invalid length. [ 1756.915812][ T3715] team0: Device hsr_slave_0 failed to register rx_handler [ 1758.135288][ T3734] netlink: 'syz.2.9718': attribute type 10 has an invalid length. [ 1758.192721][ T3735] netlink: 3575 bytes leftover after parsing attributes in process `syz.4.9719'. [ 1758.358299][ T3734] macvlan1: entered allmulticast mode [ 1758.386551][ T3734] veth1_vlan: entered allmulticast mode [ 1758.402660][ T3734] team0: Port device macvlan1 added [ 1759.012044][ T3753] syzkaller0: entered promiscuous mode [ 1759.054551][ T3753] syzkaller0: entered allmulticast mode [ 1759.101337][ T3761] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1759.110432][ T3761] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1759.693391][ T3761] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1759.700946][ T3761] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1762.032439][ T3766] netlink: 'syz.1.9728': attribute type 10 has an invalid length. [ 1762.054153][ T3766] team0: Device hsr_slave_0 failed to register rx_handler [ 1762.083959][ T3775] netlink: 65051 bytes leftover after parsing attributes in process `syz.4.9731'. [ 1762.728099][ T3804] mac80211_hwsim hwsim237 wlan1: entered allmulticast mode [ 1762.762953][ T3806] netlink: 'syz.4.9740': attribute type 10 has an invalid length. [ 1762.779293][ T3806] team0: Device hsr_slave_0 failed to register rx_handler [ 1763.516639][ T3813] syzkaller0: entered promiscuous mode [ 1763.522480][ T3813] syzkaller0: entered allmulticast mode [ 1763.532711][ T3819] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1763.544891][ T3819] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1763.849279][ T3819] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1763.868490][ T3819] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1764.176388][ T3829] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.9745'. [ 1766.540066][ T3850] netlink: 'syz.1.9749': attribute type 10 has an invalid length. [ 1766.577983][ T3850] team0: Device hsr_slave_0 failed to register rx_handler [ 1767.484390][ T3856] mac80211_hwsim hwsim234 wlan1: entered allmulticast mode [ 1767.753585][ T3882] netlink: 128 bytes leftover after parsing attributes in process `syz.1.9758'. [ 1767.777012][ T3882] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1768.059848][ T3888] syzkaller0: entered promiscuous mode [ 1768.065703][ T3888] syzkaller0: entered allmulticast mode [ 1768.145335][ T3888] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1768.167342][ T3888] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1768.182677][ T3888] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1768.190370][ T3888] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1770.938105][ T3919] netlink: 128 bytes leftover after parsing attributes in process `syz.0.9768'. [ 1770.960891][ T3919] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1772.543270][ T3956] FAULT_INJECTION: forcing a failure. [ 1772.543270][ T3956] name failslab, interval 1, probability 0, space 0, times 0 [ 1772.556822][ T3956] CPU: 1 PID: 3956 Comm: syz.4.9779 Not tainted syzkaller #0 [ 1772.564243][ T3956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1772.574342][ T3956] Call Trace: [ 1772.577674][ T3956] [ 1772.580680][ T3956] dump_stack_lvl+0x18c/0x250 [ 1772.585413][ T3956] ? show_regs_print_info+0x20/0x20 [ 1772.590658][ T3956] ? load_image+0x420/0x420 [ 1772.595372][ T3956] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1772.601452][ T3956] ? __asan_memset+0x22/0x40 [ 1772.606148][ T3956] should_fail_ex+0x39d/0x4d0 [ 1772.610882][ T3956] should_failslab+0x9/0x20 [ 1772.615617][ T3956] slab_pre_alloc_hook+0x59/0x310 [ 1772.620709][ T3956] ? __debug_object_init+0xec/0x450 [ 1772.625984][ T3956] kmem_cache_alloc+0x5a/0x2d0 [ 1772.630822][ T3956] ? slab_build_skb+0x2b/0x3f0 [ 1772.635640][ T3956] slab_build_skb+0x2b/0x3f0 [ 1772.640289][ T3956] bpf_prog_test_run_skb+0x3c8/0x12b0 [ 1772.645709][ T3956] ? __fget_files+0x28/0x4b0 [ 1772.650341][ T3956] ? __fget_files+0x28/0x4b0 [ 1772.654971][ T3956] ? __fget_files+0x43d/0x4b0 [ 1772.659710][ T3956] ? cpu_online+0x60/0x60 [ 1772.664078][ T3956] bpf_prog_test_run+0x321/0x390 [ 1772.669056][ T3956] __sys_bpf+0x49d/0x890 [ 1772.673333][ T3956] ? bpf_link_show_fdinfo+0x390/0x390 [ 1772.678752][ T3956] ? lock_chain_count+0x20/0x20 [ 1772.683641][ T3956] __x64_sys_bpf+0x7c/0x90 [ 1772.688090][ T3956] do_syscall_64+0x55/0xb0 [ 1772.692542][ T3956] ? clear_bhb_loop+0x40/0x90 [ 1772.697270][ T3956] ? clear_bhb_loop+0x40/0x90 [ 1772.701986][ T3956] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1772.707912][ T3956] RIP: 0033:0x7fa94339ce59 [ 1772.712386][ T3956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1772.732027][ T3956] RSP: 002b:00007fa944206028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1772.740509][ T3956] RAX: ffffffffffffffda RBX: 00007fa943615fa0 RCX: 00007fa94339ce59 [ 1772.748515][ T3956] RDX: 0000000000000050 RSI: 0000200000001040 RDI: 000000000000000a [ 1772.756518][ T3956] RBP: 00007fa944206090 R08: 0000000000000000 R09: 0000000000000000 [ 1772.764519][ T3956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1772.772532][ T3956] R13: 00007fa943616038 R14: 00007fa943615fa0 R15: 00007ffcd90458f8 [ 1772.780549][ T3956] [ 1772.876816][ T3958] netlink: 128 bytes leftover after parsing attributes in process `syz.4.9780'. [ 1772.908088][ T3958] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1774.696761][ T4014] netlink: 10 bytes leftover after parsing attributes in process `syz.4.9799'. [ 1774.716198][ T4014] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.9799'. [ 1775.185814][ T4025] netlink: 'syz.1.9803': attribute type 21 has an invalid length. [ 1775.387428][ T4030] netlink: 'syz.2.9805': attribute type 21 has an invalid length. [ 1775.395515][ T4030] netlink: 176 bytes leftover after parsing attributes in process `syz.2.9805'. [ 1775.406733][ T4030] netlink: 172 bytes leftover after parsing attributes in process `syz.2.9805'. [ 1775.426188][ T4032] FAULT_INJECTION: forcing a failure. [ 1775.426188][ T4032] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1775.442321][ T4032] CPU: 1 PID: 4032 Comm: syz.0.9806 Not tainted syzkaller #0 [ 1775.449799][ T4032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1775.459914][ T4032] Call Trace: [ 1775.463246][ T4032] [ 1775.466235][ T4032] dump_stack_lvl+0x18c/0x250 [ 1775.471062][ T4032] ? show_regs_print_info+0x20/0x20 [ 1775.476352][ T4032] ? load_image+0x420/0x420 [ 1775.480946][ T4032] ? __might_fault+0xaa/0x120 [ 1775.485697][ T4032] ? __lock_acquire+0x7d40/0x7d40 [ 1775.490809][ T4032] should_fail_ex+0x39d/0x4d0 [ 1775.495589][ T4032] _copy_from_user+0x2f/0xe0 [ 1775.500279][ T4032] ___sys_sendmsg+0x1c7/0x360 [ 1775.505086][ T4032] ? __sys_sendmsg+0x2a0/0x2a0 [ 1775.509971][ T4032] ? __lock_acquire+0x7d40/0x7d40 [ 1775.515132][ T4032] __se_sys_sendmsg+0x1c2/0x2b0 [ 1775.520060][ T4032] ? __x64_sys_sendmsg+0x80/0x80 [ 1775.525374][ T4032] ? lockdep_hardirqs_on+0x98/0x150 [ 1775.530713][ T4032] do_syscall_64+0x55/0xb0 [ 1775.535237][ T4032] ? clear_bhb_loop+0x40/0x90 [ 1775.540002][ T4032] ? clear_bhb_loop+0x40/0x90 [ 1775.544761][ T4032] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1775.550734][ T4032] RIP: 0033:0x7f2ed599ce59 [ 1775.555228][ T4032] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1775.574992][ T4032] RSP: 002b:00007f2ed6906028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1775.583479][ T4032] RAX: ffffffffffffffda RBX: 00007f2ed5c15fa0 RCX: 00007f2ed599ce59 [ 1775.591549][ T4032] RDX: 0000000000040000 RSI: 0000200000000600 RDI: 000000000000000c [ 1775.599606][ T4032] RBP: 00007f2ed6906090 R08: 0000000000000000 R09: 0000000000000000 [ 1775.607661][ T4032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1775.615707][ T4032] R13: 00007f2ed5c16038 R14: 00007f2ed5c15fa0 R15: 00007ffda63485a8 [ 1775.623790][ T4032] [ 1775.674224][ T4034] bridge_slave_1: left allmulticast mode [ 1775.696092][ T4034] bridge_slave_1: left promiscuous mode [ 1775.717747][ T4034] bridge0: port 2(bridge_slave_1) entered disabled state [ 1775.732449][ T4034] bridge_slave_0: left allmulticast mode [ 1775.740529][ T4034] bridge_slave_0: left promiscuous mode [ 1775.749568][ T4034] bridge0: port 1(bridge_slave_0) entered disabled state [ 1775.913160][ T4038] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.9808'. [ 1776.824989][ T4064] netlink: 'syz.2.9816': attribute type 21 has an invalid length. [ 1776.840382][ T4064] netlink: 128 bytes leftover after parsing attributes in process `syz.2.9816'. [ 1776.933973][ T4064] netlink: 157852 bytes leftover after parsing attributes in process `syz.2.9816'. [ 1777.947568][ T4098] netlink: 830 bytes leftover after parsing attributes in process `syz.1.9829'. [ 1778.562102][ T4112] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.9831'. [ 1779.796494][ T4136] netlink: 128 bytes leftover after parsing attributes in process `syz.4.9841'. [ 1779.817811][ T4136] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1779.923111][ T4142] FAULT_INJECTION: forcing a failure. [ 1779.923111][ T4142] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1779.936700][ T4142] CPU: 0 PID: 4142 Comm: syz.2.9842 Not tainted syzkaller #0 [ 1779.944153][ T4142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1779.954241][ T4142] Call Trace: [ 1779.957554][ T4142] [ 1779.960514][ T4142] dump_stack_lvl+0x18c/0x250 [ 1779.965228][ T4142] ? show_regs_print_info+0x20/0x20 [ 1779.970452][ T4142] ? load_image+0x420/0x420 [ 1779.974994][ T4142] ? __might_fault+0xaa/0x120 [ 1779.979703][ T4142] ? __lock_acquire+0x7d40/0x7d40 [ 1779.984761][ T4142] should_fail_ex+0x39d/0x4d0 [ 1779.989484][ T4142] _copy_to_user+0x2f/0xa0 [ 1779.993941][ T4142] bpf_test_finish+0x25a/0x650 [ 1779.998750][ T4142] ? convert___skb_to_skb+0x590/0x590 [ 1780.004153][ T4142] ? convert_skb_to___skb+0x420/0x420 [ 1780.009651][ T4142] ? slab_build_skb+0x25f/0x3f0 [ 1780.014572][ T4142] bpf_prog_test_run_skb+0xcc3/0x12b0 [ 1780.019995][ T4142] ? cpu_online+0x60/0x60 [ 1780.024354][ T4142] bpf_prog_test_run+0x321/0x390 [ 1780.029324][ T4142] __sys_bpf+0x49d/0x890 [ 1780.033600][ T4142] ? bpf_link_show_fdinfo+0x390/0x390 [ 1780.039029][ T4142] ? lock_chain_count+0x20/0x20 [ 1780.043932][ T4142] __x64_sys_bpf+0x7c/0x90 [ 1780.048392][ T4142] do_syscall_64+0x55/0xb0 [ 1780.052840][ T4142] ? clear_bhb_loop+0x40/0x90 [ 1780.057658][ T4142] ? clear_bhb_loop+0x40/0x90 [ 1780.062381][ T4142] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1780.068322][ T4142] RIP: 0033:0x7f781bd9ce59 [ 1780.072784][ T4142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1780.092419][ T4142] RSP: 002b:00007f781ccb3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1780.100860][ T4142] RAX: ffffffffffffffda RBX: 00007f781c015fa0 RCX: 00007f781bd9ce59 [ 1780.108862][ T4142] RDX: 0000000000000050 RSI: 0000200000000240 RDI: 000000000000000a [ 1780.116855][ T4142] RBP: 00007f781ccb3090 R08: 0000000000000000 R09: 0000000000000000 [ 1780.124942][ T4142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1780.132936][ T4142] R13: 00007f781c016038 R14: 00007f781c015fa0 R15: 00007ffc6eabb788 [ 1780.140958][ T4142] [ 1781.162994][ T4159] FAULT_INJECTION: forcing a failure. [ 1781.162994][ T4159] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1781.174074][ T4161] netlink: 'syz.0.9848': attribute type 25 has an invalid length. [ 1781.198743][ T4159] CPU: 0 PID: 4159 Comm: syz.4.9847 Not tainted syzkaller #0 [ 1781.206213][ T4159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1781.216326][ T4159] Call Trace: [ 1781.219651][ T4159] [ 1781.222624][ T4159] dump_stack_lvl+0x18c/0x250 [ 1781.227360][ T4159] ? show_regs_print_info+0x20/0x20 [ 1781.232612][ T4159] ? load_image+0x420/0x420 [ 1781.237187][ T4159] ? __might_fault+0xaa/0x120 [ 1781.241913][ T4159] ? __lock_acquire+0x7d40/0x7d40 [ 1781.246995][ T4159] should_fail_ex+0x39d/0x4d0 [ 1781.251743][ T4159] _copy_from_iter+0x1d9/0x12e0 [ 1781.256667][ T4159] ? slab_post_alloc_hook+0x8a/0x4b0 [ 1781.262010][ T4159] ? __virt_addr_valid+0x18c/0x540 [ 1781.267208][ T4159] ? __lock_acquire+0x7d40/0x7d40 [ 1781.272277][ T4159] ? rcu_is_watching+0x15/0xb0 [ 1781.277094][ T4159] ? copyout_mc+0x70/0x70 [ 1781.281462][ T4159] ? __virt_addr_valid+0x18c/0x540 [ 1781.286610][ T4159] ? __virt_addr_valid+0x18c/0x540 [ 1781.291758][ T4159] ? __virt_addr_valid+0x469/0x540 [ 1781.296906][ T4159] ? __check_object_size+0x506/0xa20 [ 1781.302221][ T4159] netlink_sendmsg+0x76b/0xbf0 [ 1781.307029][ T4159] ? netlink_getsockopt+0x590/0x590 [ 1781.312268][ T4159] ? aa_sock_msg_perm+0x94/0x150 [ 1781.317240][ T4159] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1781.322560][ T4159] ? security_socket_sendmsg+0x80/0xa0 [ 1781.328058][ T4159] ? netlink_getsockopt+0x590/0x590 [ 1781.333329][ T4159] ____sys_sendmsg+0x5ba/0x960 [ 1781.338128][ T4159] ? __asan_memset+0x22/0x40 [ 1781.342751][ T4159] ? __sys_sendmsg_sock+0x30/0x30 [ 1781.347800][ T4159] ? __import_iovec+0x5f2/0x850 [ 1781.352699][ T4159] ? import_iovec+0x73/0xa0 [ 1781.357237][ T4159] ___sys_sendmsg+0x2a6/0x360 [ 1781.361948][ T4159] ? get_pid_task+0x20/0x1e0 [ 1781.366573][ T4159] ? __sys_sendmsg+0x2a0/0x2a0 [ 1781.371385][ T4159] ? __lock_acquire+0x7d40/0x7d40 [ 1781.376463][ T4159] __se_sys_sendmsg+0x1c2/0x2b0 [ 1781.381346][ T4159] ? __x64_sys_sendmsg+0x80/0x80 [ 1781.386325][ T4159] ? lockdep_hardirqs_on+0x98/0x150 [ 1781.391558][ T4159] do_syscall_64+0x55/0xb0 [ 1781.396011][ T4159] ? clear_bhb_loop+0x40/0x90 [ 1781.400721][ T4159] ? clear_bhb_loop+0x40/0x90 [ 1781.405430][ T4159] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1781.411357][ T4159] RIP: 0033:0x7fa94339ce59 [ 1781.415804][ T4159] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1781.435446][ T4159] RSP: 002b:00007fa944206028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1781.443917][ T4159] RAX: ffffffffffffffda RBX: 00007fa943615fa0 RCX: 00007fa94339ce59 [ 1781.451916][ T4159] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 1781.459914][ T4159] RBP: 00007fa944206090 R08: 0000000000000000 R09: 0000000000000000 [ 1781.467911][ T4159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1781.475905][ T4159] R13: 00007fa943616038 R14: 00007fa943615fa0 R15: 00007ffcd90458f8 [ 1781.483917][ T4159] [ 1781.570367][ T4164] netlink: zone id is out of range [ 1781.575856][ T4164] netlink: set zone limit has 8 unknown bytes [ 1781.884547][ T5777] Bluetooth: hci3: unexpected subevent 0x04 length: 150 > 11 [ 1782.018884][ T4183] netlink: 'syz.0.9858': attribute type 10 has an invalid length. [ 1782.028191][ T4183] team0: Device hsr_slave_0 failed to register rx_handler [ 1783.395401][ T4203] netlink: 128 bytes leftover after parsing attributes in process `syz.0.9863'. [ 1783.417505][ T4203] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1783.469979][ T5777] Bluetooth: hci3: unexpected subevent 0x04 length: 150 > 11 [ 1785.129644][ T4243] netlink: 'syz.2.9876': attribute type 21 has an invalid length. [ 1785.165578][ T4243] netlink: 'syz.2.9876': attribute type 2 has an invalid length. [ 1785.219921][ T4243] netlink: 'syz.2.9876': attribute type 1 has an invalid length. [ 1785.285804][ T4243] netlink: 9 bytes leftover after parsing attributes in process `syz.2.9876'. [ 1785.457278][ T5777] Bluetooth: hci3: unexpected subevent 0x04 length: 150 > 11 [ 1785.931135][ T4250] FAULT_INJECTION: forcing a failure. [ 1785.931135][ T4250] name failslab, interval 1, probability 0, space 0, times 0 [ 1785.947510][ T4248] netlink: 'syz.2.9879': attribute type 10 has an invalid length. [ 1785.956511][ T4248] team0: Device hsr_slave_0 failed to register rx_handler [ 1785.964043][ T4250] CPU: 0 PID: 4250 Comm: syz.1.9878 Not tainted syzkaller #0 [ 1785.971475][ T4250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1785.981579][ T4250] Call Trace: [ 1785.984900][ T4250] [ 1785.987871][ T4250] dump_stack_lvl+0x18c/0x250 [ 1785.992603][ T4250] ? trace_event_raw_event_lock+0x250/0x250 [ 1785.998557][ T4250] ? show_regs_print_info+0x20/0x20 [ 1786.003812][ T4250] ? load_image+0x420/0x420 [ 1786.008390][ T4250] should_fail_ex+0x39d/0x4d0 [ 1786.013140][ T4250] should_failslab+0x9/0x20 [ 1786.017702][ T4250] slab_pre_alloc_hook+0x59/0x310 [ 1786.022806][ T4250] kmem_cache_alloc+0x5a/0x2d0 [ 1786.027618][ T4250] ? __nf_conntrack_alloc+0x99/0x380 [ 1786.032943][ T4250] __nf_conntrack_alloc+0x99/0x380 [ 1786.038090][ T4250] init_conntrack+0x177/0xf10 [ 1786.042805][ T4250] ? early_drop+0x7f0/0x7f0 [ 1786.047349][ T4250] ? nf_conntrack_find_get+0x650/0x650 [ 1786.052838][ T4250] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1786.058244][ T4250] ? __siphash_unaligned+0x22e/0x3a0 [ 1786.063571][ T4250] nf_conntrack_in+0xc06/0x15c0 [ 1786.068477][ T4250] ? nf_ct_pernet+0x270/0x270 [ 1786.073197][ T4250] ? ipt_do_table+0x2c1/0x15e0 [ 1786.078011][ T4250] ? get_random_u32+0x4d1/0x910 [ 1786.082908][ T4250] ? read_lock_is_recursive+0x20/0x20 [ 1786.088319][ T4250] ? ipv4_conntrack_defrag+0x29d/0x5a0 [ 1786.093812][ T4250] ? get_random_u32+0x16f/0x910 [ 1786.098700][ T4250] ? ipv4_conntrack_local+0x123/0x200 [ 1786.104112][ T4250] ? ipv4_conntrack_in+0x20/0x20 [ 1786.109089][ T4250] nf_hook_slow+0xbd/0x200 [ 1786.113541][ T4250] ? nf_hook+0x390/0x390 [ 1786.117817][ T4250] nf_hook+0x228/0x390 [ 1786.121918][ T4250] ? nf_hook+0xa2/0x390 [ 1786.126107][ T4250] ? __ip_local_out+0x5f0/0x5f0 [ 1786.130987][ T4250] ? nf_hook+0x390/0x390 [ 1786.135258][ T4250] ? csum_partial+0x241/0x2c0 [ 1786.139974][ T4250] ? ip_fast_csum+0x1ee/0x2b0 [ 1786.144681][ T4250] __ip_local_out+0x4db/0x5f0 [ 1786.149389][ T4250] ? nf_hook+0x390/0x390 [ 1786.153666][ T4250] ip_send_skb+0x4c/0x1d0 [ 1786.158028][ T4250] udp_send_skb+0xa37/0x13a0 [ 1786.162678][ T4250] udp_sendmsg+0x743/0x23b0 [ 1786.167314][ T4250] ? mark_lock+0x94/0x320 [ 1786.171697][ T4250] ? udp_sendmsg+0x23b0/0x23b0 [ 1786.176502][ T4250] ? udp_cmsg_send+0x350/0x350 [ 1786.181386][ T4250] ? __lock_acquire+0x1273/0x7d40 [ 1786.186470][ T4250] ? verify_lock_unused+0x140/0x140 [ 1786.191713][ T4250] ? aa_label_sk_perm+0x463/0x5c0 [ 1786.196785][ T4250] udpv6_sendmsg+0x93d/0x2390 [ 1786.201506][ T4250] ? udpv6_sendmsg+0x2390/0x2390 [ 1786.206480][ T4250] ? udp_v6_early_demux+0xf80/0xf80 [ 1786.211731][ T4250] ? __lock_acquire+0x1273/0x7d40 [ 1786.216841][ T4250] ? inet_send_prepare+0x5c/0x260 [ 1786.221910][ T4250] ? inet6_sendmsg+0x5f/0xd0 [ 1786.226529][ T4250] ? inet6_compat_ioctl+0x3c0/0x3c0 [ 1786.231762][ T4250] ____sys_sendmsg+0x5ba/0x960 [ 1786.236829][ T4250] ? __asan_memset+0x22/0x40 [ 1786.241458][ T4250] ? __sys_sendmsg_sock+0x30/0x30 [ 1786.246516][ T4250] ? __import_iovec+0x3fa/0x850 [ 1786.251403][ T4250] ? import_iovec+0x73/0xa0 [ 1786.255936][ T4250] ___sys_sendmsg+0x2a6/0x360 [ 1786.260650][ T4250] ? __sys_sendmsg+0x2a0/0x2a0 [ 1786.265461][ T4250] ? __lock_acquire+0x7d40/0x7d40 [ 1786.270544][ T4250] __se_sys_sendmsg+0x1c2/0x2b0 [ 1786.275432][ T4250] ? __x64_sys_sendmsg+0x80/0x80 [ 1786.280414][ T4250] ? lockdep_hardirqs_on+0x98/0x150 [ 1786.285665][ T4250] do_syscall_64+0x55/0xb0 [ 1786.290128][ T4250] ? clear_bhb_loop+0x40/0x90 [ 1786.294838][ T4250] ? clear_bhb_loop+0x40/0x90 [ 1786.299558][ T4250] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1786.305484][ T4250] RIP: 0033:0x7fdf7e79ce59 [ 1786.309929][ T4250] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1786.329566][ T4250] RSP: 002b:00007fdf7f642028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1786.338015][ T4250] RAX: ffffffffffffffda RBX: 00007fdf7ea15fa0 RCX: 00007fdf7e79ce59 [ 1786.346016][ T4250] RDX: 0000000000004000 RSI: 0000200000003700 RDI: 0000000000000003 [ 1786.354032][ T4250] RBP: 00007fdf7f642090 R08: 0000000000000000 R09: 0000000000000000 [ 1786.362049][ T4250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1786.370058][ T4250] R13: 00007fdf7ea16038 R14: 00007fdf7ea15fa0 R15: 00007fff12a18498 [ 1786.378083][ T4250] [ 1788.187941][ T4296] netlink: 'syz.1.9892': attribute type 10 has an invalid length. [ 1788.209338][ T4296] team0: Device hsr_slave_0 failed to register rx_handler [ 1788.536854][ T4313] netlink: 128 bytes leftover after parsing attributes in process `syz.2.9899'. [ 1788.557572][ T4313] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1789.629494][ T4331] FAULT_INJECTION: forcing a failure. [ 1789.629494][ T4331] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1789.645552][ T4331] CPU: 0 PID: 4331 Comm: syz.4.9903 Not tainted syzkaller #0 [ 1789.653019][ T4331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1789.663104][ T4331] Call Trace: [ 1789.666405][ T4331] [ 1789.669465][ T4331] dump_stack_lvl+0x18c/0x250 [ 1789.674207][ T4331] ? show_regs_print_info+0x20/0x20 [ 1789.679513][ T4331] ? load_image+0x420/0x420 [ 1789.684086][ T4331] ? __might_fault+0xaa/0x120 [ 1789.688861][ T4331] ? __lock_acquire+0x7d40/0x7d40 [ 1789.693948][ T4331] should_fail_ex+0x39d/0x4d0 [ 1789.698686][ T4331] _copy_from_user+0x2f/0xe0 [ 1789.703333][ T4331] mptcp_setsockopt+0x15b0/0x3340 [ 1789.708412][ T4331] ? aa_sk_perm+0x83c/0x970 [ 1789.712965][ T4331] ? __fget_files+0x28/0x4b0 [ 1789.717614][ T4331] ? pm_nl_exit_net+0x230/0x230 [ 1789.722516][ T4331] ? aa_af_perm+0x330/0x330 [ 1789.727068][ T4331] ? __fget_files+0x28/0x4b0 [ 1789.731713][ T4331] ? __fget_files+0x28/0x4b0 [ 1789.736363][ T4331] ? sock_common_setsockopt+0x36/0xc0 [ 1789.741805][ T4331] ? sock_common_recvmsg+0x190/0x190 [ 1789.747163][ T4331] do_sock_setsockopt+0x175/0x1a0 [ 1789.752249][ T4331] __x64_sys_setsockopt+0x182/0x200 [ 1789.757514][ T4331] do_syscall_64+0x55/0xb0 [ 1789.761979][ T4331] ? clear_bhb_loop+0x40/0x90 [ 1789.766712][ T4331] ? clear_bhb_loop+0x40/0x90 [ 1789.771460][ T4331] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1789.777421][ T4331] RIP: 0033:0x7fa94339ce59 [ 1789.781894][ T4331] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1789.801829][ T4331] RSP: 002b:00007fa944206028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1789.810484][ T4331] RAX: ffffffffffffffda RBX: 00007fa943615fa0 RCX: 00007fa94339ce59 [ 1789.818505][ T4331] RDX: 0000000000000008 RSI: 0000000000000001 RDI: 0000000000000003 [ 1789.826526][ T4331] RBP: 00007fa944206090 R08: 0000000000000004 R09: 0000000000000000 [ 1789.834560][ T4331] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 1789.842592][ T4331] R13: 00007fa943616038 R14: 00007fa943615fa0 R15: 00007ffcd90458f8 [ 1789.850717][ T4331] [ 1790.030735][ T4337] netlink: 'syz.1.9906': attribute type 10 has an invalid length. [ 1790.057005][ T4337] team0: Device hsr_slave_0 failed to register rx_handler [ 1790.605180][ T4347] netlink: 'syz.1.9909': attribute type 1 has an invalid length. [ 1790.614230][ T4347] netlink: 'syz.1.9909': attribute type 3 has an invalid length. [ 1790.622611][ T4347] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9909'. [ 1791.290837][ T4356] netlink: 14546 bytes leftover after parsing attributes in process `syz.4.9910'. [ 1791.558241][ T4375] netlink: 'syz.2.9917': attribute type 10 has an invalid length. [ 1791.577619][ T4375] team0: Device hsr_slave_0 failed to register rx_handler [ 1791.889933][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.896760][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1792.818056][ T4404] netlink: 128 bytes leftover after parsing attributes in process `syz.2.9926'. [ 1792.843882][ T4404] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1793.097482][ T4411] netlink: 'syz.2.9928': attribute type 10 has an invalid length. [ 1793.126992][ T4411] team0: Device hsr_slave_0 failed to register rx_handler [ 1795.221361][ T4453] netlink: 'syz.0.9938': attribute type 10 has an invalid length. [ 1795.238253][ T4453] team0: Device hsr_slave_0 failed to register rx_handler [ 1797.152123][ T4480] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9947'. [ 1797.253118][ T4488] netlink: 128 bytes leftover after parsing attributes in process `syz.2.9951'. [ 1797.265092][ T4488] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1797.290328][ T4486] netlink: 'syz.4.9950': attribute type 10 has an invalid length. [ 1797.318765][ T4486] team0: Device hsr_slave_0 failed to register rx_handler [ 1797.410939][ T4493] FAULT_INJECTION: forcing a failure. [ 1797.410939][ T4493] name failslab, interval 1, probability 0, space 0, times 0 [ 1797.429414][ T4493] CPU: 1 PID: 4493 Comm: syz.0.9952 Not tainted syzkaller #0 [ 1797.436880][ T4493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1797.447074][ T4493] Call Trace: [ 1797.450400][ T4493] [ 1797.453368][ T4493] dump_stack_lvl+0x18c/0x250 [ 1797.458105][ T4493] ? show_regs_print_info+0x20/0x20 [ 1797.463354][ T4493] ? load_image+0x420/0x420 [ 1797.467922][ T4493] ? __might_sleep+0xe0/0xe0 [ 1797.472562][ T4493] ? __lock_acquire+0x7d40/0x7d40 [ 1797.477645][ T4493] should_fail_ex+0x39d/0x4d0 [ 1797.482404][ T4493] should_failslab+0x9/0x20 [ 1797.486973][ T4493] slab_pre_alloc_hook+0x59/0x310 [ 1797.492072][ T4493] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1797.498320][ T4493] ? sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 1797.504250][ T4493] __kmem_cache_alloc_node+0x53/0x250 [ 1797.509672][ T4493] ? sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 1797.515599][ T4493] kmalloc_trace+0x2a/0xe0 [ 1797.520052][ T4493] sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 1797.525924][ T4493] sctp_association_new+0x15d3/0x25c0 [ 1797.531342][ T4493] sctp_connect_new_asoc+0x2de/0x6a0 [ 1797.536660][ T4493] ? __sctp_connect+0xd80/0xd80 [ 1797.541543][ T4493] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1797.546968][ T4493] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 1797.552570][ T4493] ? security_sctp_bind_connect+0x89/0xb0 [ 1797.558348][ T4493] sctp_sendmsg+0x15d2/0x2910 [ 1797.563076][ T4493] ? sctp_getsockopt+0xb60/0xb60 [ 1797.568051][ T4493] ? aa_sk_perm+0x83c/0x970 [ 1797.572582][ T4493] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1797.578773][ T4493] ? lockdep_hardirqs_on+0x98/0x150 [ 1797.584104][ T4493] ? aa_af_perm+0x330/0x330 [ 1797.588666][ T4493] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 1797.595126][ T4493] ? sock_rps_record_flow+0x19/0x3f0 [ 1797.600461][ T4493] ? inet_sendmsg+0xe9/0x2f0 [ 1797.605082][ T4493] ? inet_send_prepare+0x260/0x260 [ 1797.610228][ T4493] ____sys_sendmsg+0x5ba/0x960 [ 1797.615023][ T4493] ? __lock_acquire+0x7d40/0x7d40 [ 1797.620088][ T4493] ? __asan_memset+0x22/0x40 [ 1797.624715][ T4493] ? __sys_sendmsg_sock+0x30/0x30 [ 1797.629765][ T4493] ? __import_iovec+0x5f2/0x850 [ 1797.634649][ T4493] ? import_iovec+0x73/0xa0 [ 1797.639191][ T4493] ___sys_sendmsg+0x2a6/0x360 [ 1797.643909][ T4493] ? __sys_sendmsg+0x2a0/0x2a0 [ 1797.648725][ T4493] ? trace_call_bpf+0xc3/0x6c0 [ 1797.653531][ T4493] ? seqcount_lockdep_reader_access+0x17b/0x1d0 [ 1797.659941][ T4493] __se_sys_sendmsg+0x1c2/0x2b0 [ 1797.664835][ T4493] ? __x64_sys_sendmsg+0x80/0x80 [ 1797.669816][ T4493] ? lockdep_hardirqs_on+0x98/0x150 [ 1797.675048][ T4493] do_syscall_64+0x55/0xb0 [ 1797.679494][ T4493] ? clear_bhb_loop+0x40/0x90 [ 1797.684207][ T4493] ? clear_bhb_loop+0x40/0x90 [ 1797.688921][ T4493] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1797.694844][ T4493] RIP: 0033:0x7f2ed599ce59 [ 1797.699294][ T4493] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1797.718935][ T4493] RSP: 002b:00007f2ed6906028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1797.727379][ T4493] RAX: ffffffffffffffda RBX: 00007f2ed5c15fa0 RCX: 00007f2ed599ce59 [ 1797.735375][ T4493] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000006 [ 1797.743391][ T4493] RBP: 00007f2ed6906090 R08: 0000000000000000 R09: 0000000000000000 [ 1797.751406][ T4493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1797.759417][ T4493] R13: 00007f2ed5c16038 R14: 00007f2ed5c15fa0 R15: 00007ffda63485a8 [ 1797.767438][ T4493] [ 1798.391004][ T4505] FAULT_INJECTION: forcing a failure. [ 1798.391004][ T4505] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1798.405661][ T4505] CPU: 0 PID: 4505 Comm: syz.4.9956 Not tainted syzkaller #0 [ 1798.413121][ T4505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1798.423234][ T4505] Call Trace: [ 1798.426558][ T4505] [ 1798.429538][ T4505] dump_stack_lvl+0x18c/0x250 [ 1798.434267][ T4505] ? show_regs_print_info+0x20/0x20 [ 1798.439510][ T4505] ? load_image+0x420/0x420 [ 1798.444124][ T4505] ? __lock_acquire+0x7d40/0x7d40 [ 1798.449256][ T4505] should_fail_ex+0x39d/0x4d0 [ 1798.454010][ T4505] prepare_alloc_pages+0x1e2/0x5f0 [ 1798.459195][ T4505] __alloc_pages+0x134/0x460 [ 1798.463848][ T4505] ? zone_statistics+0x170/0x170 [ 1798.468853][ T4505] __folio_alloc+0x10/0x20 [ 1798.473324][ T4505] vma_alloc_folio+0x47a/0x8f0 [ 1798.478152][ T4505] ? mpol_shared_policy_lookup+0x14b/0x1e0 [ 1798.484030][ T4505] shmem_alloc_folio+0x1a9/0x2a0 [ 1798.489035][ T4505] ? folio_put+0xd0/0xd0 [ 1798.493359][ T4505] ? __vm_enough_memory+0x11b/0x370 [ 1798.498615][ T4505] ? shmem_inode_acct_block+0x35e/0x460 [ 1798.504226][ T4505] shmem_alloc_and_acct_folio+0x1e6/0x6d0 [ 1798.510015][ T4505] ? put_swap_device+0x230/0x230 [ 1798.515039][ T4505] ? xas_load+0x12b/0x140 [ 1798.519457][ T4505] ? filemap_get_entry+0xce/0x3f0 [ 1798.524537][ T4505] ? filemap_get_entry+0xce/0x3f0 [ 1798.529621][ T4505] ? filemap_get_entry+0x379/0x3f0 [ 1798.534792][ T4505] ? page_cache_prev_miss+0x390/0x390 [ 1798.540220][ T4505] ? mark_lock+0x94/0x320 [ 1798.544624][ T4505] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1798.550756][ T4505] ? lock_chain_count+0x20/0x20 [ 1798.555670][ T4505] shmem_get_folio_gfp+0xcde/0x2aa0 [ 1798.561042][ T4505] shmem_write_begin+0xf2/0x420 [ 1798.565966][ T4505] generic_perform_write+0x2fe/0x5c0 [ 1798.571325][ T4505] ? generic_file_direct_write+0x3e0/0x3e0 [ 1798.577226][ T4505] ? file_update_time+0x192/0x1a0 [ 1798.582332][ T4505] shmem_file_write_iter+0xfb/0x120 [ 1798.587789][ T4505] vfs_write+0x46c/0x990 [ 1798.592117][ T4505] ? file_end_write+0x250/0x250 [ 1798.597063][ T4505] ? __fget_files+0x43d/0x4b0 [ 1798.601832][ T4505] ? __fdget_pos+0x2a3/0x330 [ 1798.606514][ T4505] ? ksys_write+0x75/0x260 [ 1798.611010][ T4505] ksys_write+0x150/0x260 [ 1798.615417][ T4505] ? __ia32_sys_read+0x90/0x90 [ 1798.620261][ T4505] ? lockdep_hardirqs_on+0x98/0x150 [ 1798.625537][ T4505] do_syscall_64+0x55/0xb0 [ 1798.630021][ T4505] ? clear_bhb_loop+0x40/0x90 [ 1798.634771][ T4505] ? clear_bhb_loop+0x40/0x90 [ 1798.639536][ T4505] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1798.645501][ T4505] RIP: 0033:0x7fa94339ce59 [ 1798.649964][ T4505] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1798.669630][ T4505] RSP: 002b:00007fa944206028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1798.678102][ T4505] RAX: ffffffffffffffda RBX: 00007fa943615fa0 RCX: 00007fa94339ce59 [ 1798.686120][ T4505] RDX: 00000000002a979d RSI: 0000200000000000 RDI: 0000000000000003 [ 1798.694143][ T4505] RBP: 00007fa944206090 R08: 0000000000000000 R09: 0000000000000000 [ 1798.702176][ T4505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1798.710201][ T4505] R13: 00007fa943616038 R14: 00007fa943615fa0 R15: 00007ffcd90458f8 [ 1798.718238][ T4505] [ 1798.847967][ T4516] netlink: 128 bytes leftover after parsing attributes in process `syz.4.9959'. [ 1798.864631][ T4516] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1799.251658][ T4519] netlink: 128 bytes leftover after parsing attributes in process `syz.4.9961'. [ 1799.278344][ T4519] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1799.426699][ T4523] netlink: 64 bytes leftover after parsing attributes in process `syz.0.9962'. [ 1799.502201][ T4526] FAULT_INJECTION: forcing a failure. [ 1799.502201][ T4526] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1799.535727][ T4526] CPU: 1 PID: 4526 Comm: syz.4.9963 Not tainted syzkaller #0 [ 1799.543199][ T4526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1799.554002][ T4526] Call Trace: [ 1799.557341][ T4526] [ 1799.560318][ T4526] dump_stack_lvl+0x18c/0x250 [ 1799.565063][ T4526] ? show_regs_print_info+0x20/0x20 [ 1799.570318][ T4526] ? load_image+0x420/0x420 [ 1799.574891][ T4526] ? __might_fault+0xaa/0x120 [ 1799.579638][ T4526] ? __lock_acquire+0x7d40/0x7d40 [ 1799.584732][ T4526] should_fail_ex+0x39d/0x4d0 [ 1799.589470][ T4526] _copy_to_user+0x2f/0xa0 [ 1799.593931][ T4526] bpf_test_finish+0x25a/0x650 [ 1799.598748][ T4526] ? convert___skb_to_skb+0x590/0x590 [ 1799.604172][ T4526] ? convert_skb_to___skb+0x420/0x420 [ 1799.609610][ T4526] bpf_prog_test_run_skb+0xcc3/0x12b0 [ 1799.615040][ T4526] ? cpu_online+0x60/0x60 [ 1799.619404][ T4526] bpf_prog_test_run+0x321/0x390 [ 1799.624388][ T4526] __sys_bpf+0x49d/0x890 [ 1799.628691][ T4526] ? bpf_link_show_fdinfo+0x390/0x390 [ 1799.634175][ T4526] ? lock_chain_count+0x20/0x20 [ 1799.639101][ T4526] __x64_sys_bpf+0x7c/0x90 [ 1799.643557][ T4526] do_syscall_64+0x55/0xb0 [ 1799.647998][ T4526] ? clear_bhb_loop+0x40/0x90 [ 1799.652714][ T4526] ? clear_bhb_loop+0x40/0x90 [ 1799.657442][ T4526] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1799.663379][ T4526] RIP: 0033:0x7fa94339ce59 [ 1799.667822][ T4526] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1799.687471][ T4526] RSP: 002b:00007fa944206028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1799.695923][ T4526] RAX: ffffffffffffffda RBX: 00007fa943615fa0 RCX: 00007fa94339ce59 [ 1799.703924][ T4526] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 1799.711927][ T4526] RBP: 00007fa944206090 R08: 0000000000000000 R09: 0000000000000000 [ 1799.719932][ T4526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1799.727930][ T4526] R13: 00007fa943616038 R14: 00007fa943615fa0 R15: 00007ffcd90458f8 [ 1799.735943][ T4526] [ 1799.817446][ T4528] FAULT_INJECTION: forcing a failure. [ 1799.817446][ T4528] name failslab, interval 1, probability 0, space 0, times 0 [ 1799.837569][ T4528] CPU: 0 PID: 4528 Comm: syz.0.9964 Not tainted syzkaller #0 [ 1799.845029][ T4528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1799.855141][ T4528] Call Trace: [ 1799.858471][ T4528] [ 1799.861457][ T4528] dump_stack_lvl+0x18c/0x250 [ 1799.866192][ T4528] ? show_regs_print_info+0x20/0x20 [ 1799.871526][ T4528] ? load_image+0x420/0x420 [ 1799.876100][ T4528] ? __lock_acquire+0x7d40/0x7d40 [ 1799.881187][ T4528] should_fail_ex+0x39d/0x4d0 [ 1799.885939][ T4528] should_failslab+0x9/0x20 [ 1799.890510][ T4528] slab_pre_alloc_hook+0x59/0x310 [ 1799.895605][ T4528] ? __lock_acquire+0x7d40/0x7d40 [ 1799.900694][ T4528] kmem_cache_alloc+0x5a/0x2d0 [ 1799.905532][ T4528] ? security_file_alloc+0x34/0x120 [ 1799.910890][ T4528] security_file_alloc+0x34/0x120 [ 1799.915976][ T4528] init_file+0x94/0x1f0 [ 1799.920207][ T4528] alloc_empty_file+0xb7/0x1d0 [ 1799.925039][ T4528] alloc_file+0x5c/0x600 [ 1799.929349][ T4528] alloc_file_pseudo+0x184/0x210 [ 1799.934341][ T4528] ? alloc_empty_backing_file+0xe0/0xe0 [ 1799.939951][ T4528] anon_inode_getfile+0xc5/0x1a0 [ 1799.944946][ T4528] __se_sys_perf_event_open+0xee7/0x1c50 [ 1799.950637][ T4528] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 1799.956315][ T4528] ? lock_chain_count+0x20/0x20 [ 1799.961209][ T4528] ? lockdep_hardirqs_on+0x98/0x150 [ 1799.966448][ T4528] ? __x64_sys_perf_event_open+0x20/0xc0 [ 1799.972207][ T4528] do_syscall_64+0x55/0xb0 [ 1799.976653][ T4528] ? clear_bhb_loop+0x40/0x90 [ 1799.981368][ T4528] ? clear_bhb_loop+0x40/0x90 [ 1799.986087][ T4528] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1799.992018][ T4528] RIP: 0033:0x7f2ed599ce59 [ 1799.996466][ T4528] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1800.016118][ T4528] RSP: 002b:00007f2ed6906028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1800.024575][ T4528] RAX: ffffffffffffffda RBX: 00007f2ed5c15fa0 RCX: 00007f2ed599ce59 [ 1800.032582][ T4528] RDX: ffffffbfffffffff RSI: 0000000000000000 RDI: 0000200000000140 [ 1800.040584][ T4528] RBP: 00007f2ed6906090 R08: 0000000000000002 R09: 0000000000000000 [ 1800.048586][ T4528] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 1800.056589][ T4528] R13: 00007f2ed5c16038 R14: 00007f2ed5c15fa0 R15: 00007ffda63485a8 [ 1800.064610][ T4528] [ 1800.159624][ T5777] Bluetooth: hci3: unexpected subevent 0x04 length: 150 > 11 [ 1800.181445][ T4536] netlink: 'syz.1.9967': attribute type 10 has an invalid length. [ 1801.347611][ T4564] netlink: 128 bytes leftover after parsing attributes in process `syz.1.9973'. [ 1801.379577][ T4564] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1801.544337][ T4570] netlink: 'syz.1.9976': attribute type 10 has an invalid length. [ 1801.567730][ T4570] team0: Device hsr_slave_0 failed to register rx_handler [ 1801.869918][ T5777] Bluetooth: hci2: unexpected subevent 0x04 length: 150 > 11 [ 1803.615001][ T4604] netlink: 'syz.4.9987': attribute type 3 has an invalid length. [ 1803.629683][ T4604] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.9987'. [ 1804.380375][ T4623] netlink: 128 bytes leftover after parsing attributes in process `syz.1.9993'. [ 1804.398744][ T4623] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1804.421370][ T4625] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9994'. [ 1805.096052][ T4632] netlink: 128 bytes leftover after parsing attributes in process `syz.2.10004'. [ 1805.109257][ T4632] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1806.853377][ T4662] netlink: 128 bytes leftover after parsing attributes in process `syz.0.10007'. [ 1806.876510][ T4662] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1806.976476][ T4665] netlink: 'syz.1.10008': attribute type 21 has an invalid length. [ 1806.997884][ T4665] netlink: 156 bytes leftover after parsing attributes in process `syz.1.10008'. [ 1807.396533][ T4680] netlink: 'syz.1.10013': attribute type 2 has an invalid length. [ 1807.405606][ T4680] netlink: 'syz.1.10013': attribute type 1 has an invalid length. [ 1807.980110][ T4689] netlink: 128 bytes leftover after parsing attributes in process `syz.4.10017'. [ 1808.001806][ T4689] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1808.729554][ T4707] netlink: 'syz.4.10025': attribute type 2 has an invalid length. [ 1808.738071][ T4707] netlink: 'syz.4.10025': attribute type 1 has an invalid length. [ 1808.810795][ T4710] FAULT_INJECTION: forcing a failure. [ 1808.810795][ T4710] name failslab, interval 1, probability 0, space 0, times 0 [ 1808.831050][ T4710] CPU: 1 PID: 4710 Comm: syz.2.10026 Not tainted syzkaller #0 [ 1808.838607][ T4710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1808.848785][ T4710] Call Trace: [ 1808.852108][ T4710] [ 1808.855080][ T4710] dump_stack_lvl+0x18c/0x250 [ 1808.859814][ T4710] ? show_regs_print_info+0x20/0x20 [ 1808.865074][ T4710] ? load_image+0x420/0x420 [ 1808.869643][ T4710] ? __might_sleep+0xe0/0xe0 [ 1808.874298][ T4710] ? __lock_acquire+0x7d40/0x7d40 [ 1808.879398][ T4710] should_fail_ex+0x39d/0x4d0 [ 1808.884149][ T4710] should_failslab+0x9/0x20 [ 1808.888708][ T4710] slab_pre_alloc_hook+0x59/0x310 [ 1808.893793][ T4710] ? __lock_acquire+0x7d40/0x7d40 [ 1808.898872][ T4710] ? kvmalloc_node+0x70/0x180 [ 1808.903615][ T4710] ? kvmalloc_node+0x70/0x180 [ 1808.908412][ T4710] __kmem_cache_alloc_node+0x53/0x250 [ 1808.913876][ T4710] ? kvmalloc_node+0x70/0x180 [ 1808.918629][ T4710] __kmalloc_node+0xa4/0x230 [ 1808.923279][ T4710] kvmalloc_node+0x70/0x180 [ 1808.927832][ T4710] bpf_test_run_xdp_live+0x1c2/0x1b20 [ 1808.933280][ T4710] ? 0xffffffffa0004740 [ 1808.937487][ T4710] ? bpf_dispatcher_change_prog+0xcbf/0xf10 [ 1808.943441][ T4710] ? 0xffffffffa0004740 [ 1808.947644][ T4710] ? xdp_convert_md_to_buff+0x330/0x330 [ 1808.953262][ T4710] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 1808.959568][ T4710] ? _copy_from_user+0xa5/0xe0 [ 1808.964396][ T4710] ? bpf_test_init+0x119/0x140 [ 1808.969248][ T4710] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1808.974765][ T4710] bpf_prog_test_run_xdp+0x7ca/0x10e0 [ 1808.980212][ T4710] ? dev_put+0x80/0x80 [ 1808.984346][ T4710] ? dev_put+0x80/0x80 [ 1808.988470][ T4710] bpf_prog_test_run+0x321/0x390 [ 1808.993464][ T4710] __sys_bpf+0x49d/0x890 [ 1808.997765][ T4710] ? bpf_link_show_fdinfo+0x390/0x390 [ 1809.003206][ T4710] ? lock_chain_count+0x20/0x20 [ 1809.008125][ T4710] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1809.014188][ T4710] __x64_sys_bpf+0x7c/0x90 [ 1809.018671][ T4710] do_syscall_64+0x55/0xb0 [ 1809.023145][ T4710] ? clear_bhb_loop+0x40/0x90 [ 1809.027886][ T4710] ? clear_bhb_loop+0x40/0x90 [ 1809.032636][ T4710] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1809.038589][ T4710] RIP: 0033:0x7f781bd9ce59 [ 1809.043077][ T4710] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1809.062737][ T4710] RSP: 002b:00007f781ccb3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1809.071224][ T4710] RAX: ffffffffffffffda RBX: 00007f781c015fa0 RCX: 00007f781bd9ce59 [ 1809.079253][ T4710] RDX: 0000000000000050 RSI: 0000200000000300 RDI: 000000000000000a [ 1809.087451][ T4710] RBP: 00007f781ccb3090 R08: 0000000000000000 R09: 0000000000000000 [ 1809.095478][ T4710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1809.103508][ T4710] R13: 00007f781c016038 R14: 00007f781c015fa0 R15: 00007ffc6eabb788 [ 1809.111559][ T4710] [ 1809.202719][ T4717] netlink: 128 bytes leftover after parsing attributes in process `syz.4.10027'. [ 1809.224396][ T4717] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1809.671352][ T4725] netlink: 'syz.1.10030': attribute type 29 has an invalid length. [ 1809.681281][ T4725] netlink: 'syz.1.10030': attribute type 29 has an invalid length. [ 1809.696799][ T4725] netlink: 'syz.1.10030': attribute type 29 has an invalid length. [ 1809.705935][ T4725] netlink: 'syz.1.10030': attribute type 29 has an invalid length. [ 1810.214674][ T4743] netlink: 'syz.4.10038': attribute type 10 has an invalid length. [ 1810.224055][ T4743] team0: Device hsr_slave_0 failed to register rx_handler [ 1810.324063][ T4747] netlink: 128 bytes leftover after parsing attributes in process `syz.0.10039'. [ 1810.343081][ T4747] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1811.337915][ T4767] FAULT_INJECTION: forcing a failure. [ 1811.337915][ T4767] name failslab, interval 1, probability 0, space 0, times 0 [ 1811.367198][ T4767] CPU: 1 PID: 4767 Comm: syz.2.10045 Not tainted syzkaller #0 [ 1811.374772][ T4767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1811.384890][ T4767] Call Trace: [ 1811.388228][ T4767] [ 1811.391201][ T4767] dump_stack_lvl+0x18c/0x250 [ 1811.395963][ T4767] ? show_regs_print_info+0x20/0x20 [ 1811.401218][ T4767] ? load_image+0x420/0x420 [ 1811.405784][ T4767] ? __might_sleep+0xe0/0xe0 [ 1811.410431][ T4767] ? __lock_acquire+0x7d40/0x7d40 [ 1811.415515][ T4767] should_fail_ex+0x39d/0x4d0 [ 1811.420262][ T4767] should_failslab+0x9/0x20 [ 1811.424827][ T4767] slab_pre_alloc_hook+0x59/0x310 [ 1811.429919][ T4767] ? process_preds+0x47b/0x4b60 [ 1811.434835][ T4767] ? process_preds+0x47b/0x4b60 [ 1811.439738][ T4767] __kmem_cache_alloc_node+0x53/0x250 [ 1811.445175][ T4767] ? process_preds+0x47b/0x4b60 [ 1811.450081][ T4767] __kmalloc+0xa4/0x230 [ 1811.454298][ T4767] process_preds+0x47b/0x4b60 [ 1811.459036][ T4767] ? kasan_set_track+0x4e/0x70 [ 1811.463845][ T4767] ? __kasan_kmalloc+0x8f/0xa0 [ 1811.468653][ T4767] ? ftrace_profile_set_filter+0x10e/0x200 [ 1811.474526][ T4767] ? perf_ioctl+0xa9a/0x24a0 [ 1811.479210][ T4767] ? create_filter_start+0x1e0/0x1e0 [ 1811.484595][ T4767] ftrace_profile_set_filter+0x156/0x200 [ 1811.490313][ T4767] perf_ioctl+0xa9a/0x24a0 [ 1811.494807][ T4767] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1811.500348][ T4767] ? perf_poll+0x1b0/0x1b0 [ 1811.504861][ T4767] ? __fget_files+0x28/0x4b0 [ 1811.509554][ T4767] ? __fget_files+0x28/0x4b0 [ 1811.514226][ T4767] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1811.519211][ T4767] ? security_file_ioctl+0x80/0xa0 [ 1811.524368][ T4767] ? perf_poll+0x1b0/0x1b0 [ 1811.528846][ T4767] __se_sys_ioctl+0xfd/0x170 [ 1811.533506][ T4767] do_syscall_64+0x55/0xb0 [ 1811.537987][ T4767] ? clear_bhb_loop+0x40/0x90 [ 1811.542725][ T4767] ? clear_bhb_loop+0x40/0x90 [ 1811.547480][ T4767] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1811.553607][ T4767] RIP: 0033:0x7f781bd9ce59 [ 1811.558068][ T4767] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1811.577742][ T4767] RSP: 002b:00007f781ccb3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1811.586212][ T4767] RAX: ffffffffffffffda RBX: 00007f781c015fa0 RCX: 00007f781bd9ce59 [ 1811.594232][ T4767] RDX: 0000200000000040 RSI: 0000000040082406 RDI: 0000000000000003 [ 1811.602254][ T4767] RBP: 00007f781ccb3090 R08: 0000000000000000 R09: 0000000000000000 [ 1811.610282][ T4767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1811.618308][ T4767] R13: 00007f781c016038 R14: 00007f781c015fa0 R15: 00007ffc6eabb788 [ 1811.626349][ T4767] [ 1812.067421][ T4774] netlink: 'syz.4.10049': attribute type 10 has an invalid length. [ 1812.087827][ T4774] team0: Device hsr_slave_0 failed to register rx_handler [ 1812.131930][ T4777] netlink: 128 bytes leftover after parsing attributes in process `syz.0.10050'. [ 1812.147874][ T4777] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1813.243971][ T4807] netlink: 128 bytes leftover after parsing attributes in process `syz.0.10060'. [ 1813.260864][ T4807] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1813.543863][ T4811] netlink: 'syz.0.10061': attribute type 10 has an invalid length. [ 1813.563602][ T4811] team0: Device hsr_slave_0 failed to register rx_handler [ 1813.630500][ T4814] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.10062'. [ 1814.851672][ T4818] netlink: 'syz.2.10065': attribute type 2 has an invalid length. [ 1814.877799][ T4818] netlink: 'syz.2.10065': attribute type 1 has an invalid length. [ 1815.101696][ T4832] netlink: 'syz.2.10069': attribute type 21 has an invalid length. [ 1815.129484][ T4832] netlink: 128 bytes leftover after parsing attributes in process `syz.2.10069'. [ 1815.138947][ T4832] netlink: 'syz.2.10069': attribute type 5 has an invalid length. [ 1815.167978][ T4832] netlink: 3 bytes leftover after parsing attributes in process `syz.2.10069'. [ 1815.214701][ T4830] netlink: 128 bytes leftover after parsing attributes in process `syz.0.10070'. [ 1815.228611][ T4830] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1815.386851][ T4841] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.10071'. [ 1816.437985][ T4857] netlink: 'syz.1.10075': attribute type 10 has an invalid length. [ 1816.450235][ T4857] team0: Device hsr_slave_0 failed to register rx_handler [ 1816.499840][ T4860] netlink: 'syz.0.10077': attribute type 2 has an invalid length. [ 1816.519078][ T4860] netlink: 'syz.0.10077': attribute type 1 has an invalid length. [ 1816.718274][ T4872] netlink: 128 bytes leftover after parsing attributes in process `syz.1.10080'. [ 1816.729514][ T4872] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1818.203692][ T4893] netlink: 'syz.1.10087': attribute type 10 has an invalid length. [ 1818.213132][ T4893] team0: Device hsr_slave_0 failed to register rx_handler [ 1818.324862][ T4897] netlink: 'syz.2.10088': attribute type 2 has an invalid length. [ 1818.343423][ T4897] netlink: 'syz.2.10088': attribute type 1 has an invalid length. [ 1818.456680][ T4903] netlink: 128 bytes leftover after parsing attributes in process `syz.1.10090'. [ 1818.479389][ T4903] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1819.910173][ T4931] netlink: 'syz.1.10099': attribute type 10 has an invalid length. [ 1819.921842][ T4931] team0: Device hsr_slave_0 failed to register rx_handler [ 1820.061391][ T4934] netlink: 'syz.0.10101': attribute type 2 has an invalid length. [ 1820.085387][ T4934] netlink: 'syz.0.10101': attribute type 1 has an invalid length. [ 1820.173907][ T4941] netlink: 128 bytes leftover after parsing attributes in process `syz.4.10104'. [ 1820.186848][ T4941] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1820.667485][ T29] INFO: task syz.3.8882:429 blocked for more than 143 seconds. [ 1820.675619][ T29] Not tainted syzkaller #0 [ 1820.681716][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1820.695736][ T29] task:syz.3.8882 state:D stack:25000 pid:429 ppid:27709 flags:0x00004006 [ 1820.705720][ T29] Call Trace: [ 1820.711840][ T29] [ 1820.715026][ T29] __schedule+0x1553/0x45a0 [ 1820.727193][ T29] ? rcu_is_watching+0x15/0xb0 [ 1820.732302][ T29] ? asan.module_dtor+0x20/0x20 [ 1820.737936][ T29] ? trace_contention_end+0x39/0xe0 [ 1820.743466][ T29] ? task_work_cancel+0xa5/0x220 [ 1820.749098][ T29] ? task_work_cancel_func+0x210/0x210 [ 1820.754891][ T29] schedule+0xbd/0x170 [ 1820.765001][ T29] ? _free_event+0xfe/0xf30 [ 1820.775121][ T29] _free_event+0x174/0xf30 [ 1820.782199][ T29] perf_event_release_kernel+0x842/0x8d0 [ 1820.788565][ T29] ? __might_sleep+0xe0/0xe0 [ 1820.793512][ T29] ? calc_timer_values+0x400/0x400 [ 1820.803344][ T29] ? __fput+0x61c/0x970 [ 1820.808688][ T29] ? perf_mmap+0x15c0/0x15c0 [ 1820.813676][ T29] perf_release+0x3b/0x40 [ 1820.821011][ T29] __fput+0x234/0x970 [ 1820.825397][ T29] task_work_run+0x1d4/0x260 [ 1820.830806][ T29] ? task_work_cancel+0x220/0x220 [ 1820.836248][ T29] do_exit+0x95a/0x2460 [ 1820.841304][ T29] ? get_signal+0x1255/0x13f0 [ 1820.846407][ T29] ? put_task_struct+0xc0/0xc0 [ 1820.851998][ T29] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1820.858705][ T29] ? get_signal+0x1255/0x13f0 [ 1820.863760][ T29] ? lock_chain_count+0x20/0x20 [ 1820.870575][ T29] do_group_exit+0x21b/0x2d0 [ 1820.875548][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 1820.881603][ T29] get_signal+0x12fc/0x13f0 [ 1820.886577][ T29] arch_do_signal_or_restart+0xc2/0x800 [ 1820.893002][ T29] ? __ia32_sys_get_robust_list+0x110/0x110 [ 1820.900971][ T29] ? get_sigframe_size+0x20/0x20 [ 1820.906354][ T29] ? exit_to_user_mode_loop+0x3b/0x110 [ 1820.915247][ T29] exit_to_user_mode_loop+0x70/0x110 [ 1820.921362][ T29] exit_to_user_mode_prepare+0xee/0x180 [ 1820.929933][ T29] syscall_exit_to_user_mode+0x1a/0x50 [ 1820.935838][ T29] do_syscall_64+0x61/0xb0 [ 1820.942370][ T29] ? clear_bhb_loop+0x40/0x90 [ 1820.947746][ T29] ? clear_bhb_loop+0x40/0x90 [ 1820.952829][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1820.959569][ T29] RIP: 0033:0x7f1a3e79ce59 [ 1820.964379][ T29] RSP: 002b:00007f1a3f5970e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1820.973694][ T29] RAX: fffffffffffffe00 RBX: 00007f1a3ea15fa8 RCX: 00007f1a3e79ce59 [ 1820.984006][ T29] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f1a3ea15fa8 [ 1820.992657][ T29] RBP: 00007f1a3ea15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1821.002878][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1821.011513][ T29] R13: 00007f1a3ea16038 R14: 00007fff4e40fb60 R15: 00007fff4e40fc48 [ 1821.022835][ T29] [ 1821.026196][ T29] [ 1821.026196][ T29] Showing all locks held in the system: [ 1821.035131][ T29] 2 locks held by rcu_tasks_trace/15: [ 1821.043451][ T29] #0: ffffffff8d132e90 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0xadb/0xdb0 [ 1821.055415][ T29] #1: ffffffff8d137b38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3da/0x880 [ 1821.067436][ T29] 1 lock held by khungtaskd/29: [ 1821.072618][ T29] #0: ffffffff8d132160 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 1821.083581][ T29] 2 locks held by getty/5533: [ 1821.089966][ T29] #0: ffff88802d3370a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1821.104444][ T29] #1: ffffc9000326e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x433/0x1390 [ 1821.132311][ T29] 2 locks held by kworker/1:0/29491: [ 1821.145075][ T29] #0: ffff888017c72538 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 1821.171005][ T29] #1: ffffc90003457d00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 1821.211059][ T29] 4 locks held by syz.2.10107/4947: [ 1821.223484][ T29] 2 locks held by syz.2.10107/4954: [ 1821.238281][ T29] #0: ffff888049388130 (sk_lock-AF_CAIF){+.+.}-{0:0}, at: caif_release+0xf9/0x340 [ 1821.261647][ T29] #1: ffffffff8d137b38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x306/0x880 [ 1821.276697][ T29] [ 1821.279340][ T29] ============================================= [ 1821.279340][ T29] [ 1821.288178][ T29] NMI backtrace for cpu 1 [ 1821.292565][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 1821.299807][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1821.309986][ T29] Call Trace: [ 1821.313324][ T29] [ 1821.316293][ T29] dump_stack_lvl+0x18c/0x250 [ 1821.321020][ T29] ? nmi_cpu_backtrace+0x1b6/0x3e0 [ 1821.326181][ T29] ? show_regs_print_info+0x20/0x20 [ 1821.331425][ T29] ? load_image+0x420/0x420 [ 1821.335989][ T29] nmi_cpu_backtrace+0x3a6/0x3e0 [ 1821.340973][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 1821.347174][ T29] ? _printk+0xde/0x130 [ 1821.351388][ T29] ? load_image+0x420/0x420 [ 1821.355956][ T29] ? load_image+0x420/0x420 [ 1821.360541][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 1821.366675][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 1821.372719][ T29] watchdog+0xf3d/0xf80 [ 1821.376933][ T29] ? watchdog+0x1e1/0xf80 [ 1821.381322][ T29] kthread+0x2fa/0x390 [ 1821.385436][ T29] ? hungtask_pm_notify+0x90/0x90 [ 1821.390516][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1821.395150][ T29] ret_from_fork+0x48/0x80 [ 1821.399612][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1821.404243][ T29] ret_from_fork_asm+0x11/0x20 [ 1821.409077][ T29] [ 1821.413181][ T29] Sending NMI from CPU 1 to CPUs 0: [ 1821.418586][ C0] NMI backtrace for cpu 0 [ 1821.418598][ C0] CPU: 0 PID: 4947 Comm: syz.2.10107 Not tainted syzkaller #0 [ 1821.418637][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1821.418648][ C0] RIP: 0010:native_apic_msr_write+0x39/0x50 [ 1821.418673][ C0] Code: 74 2a 83 ff 30 74 25 eb 10 81 ff d0 00 00 00 74 1b 81 ff e0 00 00 00 74 13 c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <66> 90 c3 89 f6 31 d2 e9 fb 28 24 03 66 2e 0f 1f 84 00 00 00 00 00 [ 1821.418689][ C0] RSP: 0018:ffffc90000007e58 EFLAGS: 00000046 [ 1821.418704][ C0] RAX: 00000000000001f7 RBX: ffff8880b8e28280 RCX: 0000000000000838 [ 1821.418717][ C0] RDX: 0000000000000000 RSI: 00000000000001f7 RDI: 0000000000000838 [ 1821.418728][ C0] RBP: 0000000000000000 R08: ffffffff8e8b2fef R09: 1ffffffff1d165fd [ 1821.418740][ C0] R10: dffffc0000000000 R11: fffffbfff1d165fe R12: dffffc0000000000 [ 1821.418753][ C0] R13: 00000000100064a9 R14: 00000000000001f7 R15: 0000000000000020 [ 1821.418765][ C0] FS: 00007f781ccb36c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1821.418781][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1821.418792][ C0] CR2: 00007f2ed5be8158 CR3: 000000004eb83000 CR4: 00000000003506f0 [ 1821.418807][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000008d24 [ 1821.418817][ C0] DR3: 0000000000008d24 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1821.418828][ C0] Call Trace: [ 1821.418834][ C0] [ 1821.418839][ C0] lapic_next_event+0x11/0x20 [ 1821.418861][ C0] clockevents_program_event+0x1c0/0x310 [ 1821.418887][ C0] hrtimer_interrupt+0x5a1/0x9c0 [ 1821.418921][ C0] __sysvec_apic_timer_interrupt+0xfb/0x3b0 [ 1821.418945][ C0] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 1821.418968][ C0] [ 1821.418973][ C0] [ 1821.418979][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1821.419003][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x8/0x60 [ 1821.419026][ C0] Code: 00 00 f3 0f 1e fa 53 48 89 fb e8 13 00 00 00 48 8b 3d 7c 0a 04 0d 48 89 de 5b e9 f3 6b 57 00 cc cc cc f3 0f 1e fa 48 8b 04 24 <65> 48 8b 0d 10 8e 7c 7e 65 8b 15 11 8e 7c 7e 81 e2 00 01 ff 00 74 [ 1821.419040][ C0] RSP: 0018:ffffc90004b2f1c8 EFLAGS: 00000246 [ 1821.419054][ C0] RAX: ffffffff813ca2da RBX: 00000000317ac8c0 RCX: ffff888027fbda00 [ 1821.419066][ C0] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 1821.419076][ C0] RBP: ffffc90004b2f330 R08: ffff888027fbda00 R09: 0000000000000002 [ 1821.419088][ C0] R10: 0000000000000001 R11: 0000000000000002 R12: 0000000000000002 [ 1821.419098][ C0] R13: ffffc90004b2f2c0 R14: 000000000000002e R15: 0000000000000000 [ 1821.419113][ C0] ? __phys_addr+0xba/0x170 [ 1821.419139][ C0] __phys_addr+0xba/0x170 [ 1821.419161][ C0] ? nf_hook_slow_list+0x368/0x5b0 [ 1821.419183][ C0] kmem_cache_free+0x70/0x270 [ 1821.419212][ C0] nf_hook_slow_list+0x368/0x5b0 [ 1821.419233][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1821.419261][ C0] ? nf_hook_slow+0x200/0x200 [ 1821.419283][ C0] ? ip6_sublist_rcv+0xfbb/0x1150 [ 1821.419311][ C0] ip6_sublist_rcv+0x103e/0x1150 [ 1821.419334][ C0] ? rcu_read_unlock+0x8c/0xa0 [ 1821.419357][ C0] ? ip6_sublist_rcv+0xebd/0x1150 [ 1821.419381][ C0] ? __lock_acquire+0x7d40/0x7d40 [ 1821.419406][ C0] ? ipv6_list_rcv+0x450/0x450 [ 1821.419432][ C0] ? net_zcopy_put_abort+0x90/0x90 [ 1821.419455][ C0] ? ip6_rcv_core+0xc5/0x1740 [ 1821.419483][ C0] ipv6_list_rcv+0x3f5/0x450 [ 1821.419512][ C0] ? NF_HOOK+0x3b0/0x3b0 [ 1821.419544][ C0] ? NF_HOOK+0x3b0/0x3b0 [ 1821.419568][ C0] __netif_receive_skb_list_core+0x583/0x750 [ 1821.419592][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 1821.419616][ C0] ? set_rps_cpu+0x6a0/0x6a0 [ 1821.419635][ C0] ? netif_receive_skb_list_internal+0x5fe/0xca0 [ 1821.419664][ C0] netif_receive_skb_list_internal+0x943/0xca0 [ 1821.419693][ C0] ? netif_receive_skb_list_internal+0x4b1/0xca0 [ 1821.419719][ C0] ? netif_receive_skb_core+0x230/0x230 [ 1821.419742][ C0] ? __phys_addr+0xba/0x170 [ 1821.419764][ C0] ? build_skb_around+0x107/0x230 [ 1821.419783][ C0] ? __xdp_build_skb_from_frame+0x33e/0x850 [ 1821.419813][ C0] netif_receive_skb_list+0x54/0x3f0 [ 1821.419840][ C0] bpf_test_run_xdp_live+0x1831/0x1b20 [ 1821.419872][ C0] ? bpf_test_run_xdp_live+0x4d6/0x1b20 [ 1821.419894][ C0] ? xdp_convert_md_to_buff+0x330/0x330 [ 1821.419933][ C0] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 1821.419957][ C0] ? _copy_from_user+0xa5/0xe0 [ 1821.419980][ C0] ? bpf_test_init+0x119/0x140 [ 1821.419998][ C0] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1821.420020][ C0] bpf_prog_test_run_xdp+0x7ca/0x10e0 [ 1821.420051][ C0] ? dev_put+0x80/0x80 [ 1821.420076][ C0] ? dev_put+0x80/0x80 [ 1821.420095][ C0] bpf_prog_test_run+0x321/0x390 [ 1821.420116][ C0] __sys_bpf+0x49d/0x890 [ 1821.420136][ C0] ? bpf_link_show_fdinfo+0x390/0x390 [ 1821.420161][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1821.420192][ C0] __x64_sys_bpf+0x7c/0x90 [ 1821.420209][ C0] do_syscall_64+0x55/0xb0 [ 1821.420225][ C0] ? clear_bhb_loop+0x40/0x90 [ 1821.420247][ C0] ? clear_bhb_loop+0x40/0x90 [ 1821.420270][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1821.420293][ C0] RIP: 0033:0x7f781bd9ce59 [ 1821.420307][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1821.420321][ C0] RSP: 002b:00007f781ccb3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1821.420338][ C0] RAX: ffffffffffffffda RBX: 00007f781c015fa0 RCX: 00007f781bd9ce59 [ 1821.420350][ C0] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 1821.420361][ C0] RBP: 00007f781be32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1821.420372][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1821.420382][ C0] R13: 00007f781c016038 R14: 00007f781c015fa0 R15: 00007ffc6eabb788 [ 1821.420402][ C0] [ 1821.998523][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 1822.005438][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 1822.012679][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1822.022852][ T29] Call Trace: [ 1822.026156][ T29] [ 1822.029119][ T29] dump_stack_lvl+0x18c/0x250 [ 1822.033836][ T29] ? show_regs_print_info+0x20/0x20 [ 1822.039064][ T29] ? load_image+0x420/0x420 [ 1822.043615][ T29] panic+0x2dc/0x730 [ 1822.047541][ T29] ? schedule_preempt_disabled+0x20/0x20 [ 1822.053206][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 1822.057739][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 1822.063313][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 1822.069501][ T29] watchdog+0xf7c/0xf80 [ 1822.073686][ T29] ? watchdog+0x1e1/0xf80 [ 1822.078049][ T29] kthread+0x2fa/0x390 [ 1822.082140][ T29] ? hungtask_pm_notify+0x90/0x90 [ 1822.087196][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1822.091818][ T29] ret_from_fork+0x48/0x80 [ 1822.096260][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1822.100872][ T29] ret_from_fork_asm+0x11/0x20 [ 1822.105678][ T29] [ 1822.109292][ T29] Kernel Offset: disabled [ 1822.113628][ T29] Rebooting in 86400 seconds..