last executing test programs: 12m49.79603545s ago: executing program 3 (id=4330): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x16, 0x0, 0x0, &(0x7f0000000640)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @flow_dissector}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0000186df4b1768c36153d42", @ANYRES32, @ANYBLOB="1c00000000000300000000000000010045"], 0x0}, 0x90) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="02"], 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x2, 0x3, 0x5, &(0x7f0000000240)) close(0xffffffffffffffff) socket$kcm(0xa, 0x2, 0x73) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="03a0a7e75b833101bd0000000a00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="120000007f0000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r1}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r3, &(0x7f0000000500), 0x0}, 0x20) r4 = socket$kcm(0xa, 0x2, 0x0) close(r4) r5 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x3, @remote, 0x1a, 0x3}, 0x80, 0x0}, 0x26004055) setsockopt$sock_attach_bpf(r4, 0x0, 0x4, 0x0, 0x0) r6 = socket$kcm(0x2b, 0x1, 0x0) close(r6) r7 = socket$kcm(0xa, 0x5, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000040e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r7, &(0x7f00000017c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x80fe, 0x7, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x12, 0x2}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000004c0)="7f", 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000084000000070000007f00000000000000b8"], 0xd0}, 0x480c4) setsockopt$sock_attach_bpf(r6, 0x1, 0xd, &(0x7f00000001c0), 0x45) close(r6) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb9d001800000000000000280600002800000002"], 0x0, 0x42}, 0x28) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d) 12m49.012224095s ago: executing program 3 (id=4334): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f0000000440)}, 0x20) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000540)=@generic={&(0x7f0000000500)='./file0\x00', 0x0, 0x18}, 0x18) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x7fffffff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f0000000640)}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000bc0)={0xffffffffffffffff, 0xe0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xc3, &(0x7f0000000980)=[{}, {}], 0x10, 0x10, &(0x7f00000009c0), &(0x7f0000000a00), 0x8, 0x2f, 0x8, 0x8, &(0x7f0000000a40)}}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x40305828, &(0x7f0000000340)={'lo\x00', @random="3f2f94c100"}) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="1a00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000007126e44ab92fee3e7600"/37], 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r6, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x6, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x23, &(0x7f0000000540)=[{}], 0x8, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0xf8, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000bc0)={r6, 0xe0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000800)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000980)=[0x0, 0x0], 0x0, 0xd, &(0x7f00000009c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000a00), &(0x7f0000000a40), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000a80)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x15, 0xd, &(0x7f00000000c0)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @jmp={0x5, 0x1, 0x0, 0x0, 0x0, 0x40, 0x8}], &(0x7f00000001c0)='syzkaller\x00', 0x5, 0x78, &(0x7f0000000200)=""/120, 0x41100, 0x40, '\x00', r9, @fallback=0x28, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x5, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x1, 0x4, 0x0, 0x8001}, 0x10, r8, 0xffffffffffffffff, 0x3, 0x0, &(0x7f00000007c0)=[{0x2, 0x2, 0xb, 0x6}, {0x1, 0x2, 0x6}, {0x3, 0x4, 0xd, 0xa}], 0x10, 0x4}, 0x94) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000fc0)=@bpf_ext={0x1c, 0x2b, &(0x7f0000000c80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1}, {}, {}, [@tail_call, @tail_call, @btf_id={0x18, 0x6, 0x3, 0x0, 0x4}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @map_fd={0x18, 0x8, 0x1, 0x0, 0x1}, @ldst={0x0, 0x2, 0x2, 0x7, 0x4, 0xffffffffffffffc1, 0x1ad9acfd06f403b9}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x374}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000e00)='syzkaller\x00', 0x0, 0xb9, &(0x7f0000000e40)=""/185, 0x41100, 0x41, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000f00)={0x0, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x185e3, 0xffffffffffffffff, 0x3, &(0x7f0000000f40)=[0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000f80)=[{0x4, 0x3, 0xb, 0xc}, {0x1, 0x1, 0x5, 0xb}, {0x5, 0x4, 0x8, 0x7}], 0x10, 0x5}, 0x94) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40002}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r11}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000001}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x2, 0x23, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x595}, [@printk={@li}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x3}, @map_fd={0x18, 0x6, 0x1, 0x0, r1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffff9}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000880)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x22, '\x00', r4, @fallback=0x29, r5, 0x8, &(0x7f0000000c00)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x2, 0xa, 0x4, 0x4}, 0x10, r8, r10, 0x2, &(0x7f0000001080)=[r11], &(0x7f00000010c0)=[{0x5, 0x1, 0x7, 0x1}, {0x2, 0x4, 0x3, 0xa}], 0x10, 0x8000}, 0x94) r12 = perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x37, 0x40, 0xa, 0x10, 0x0, 0x8, 0x4200, 0x1a8d49fd40d8882b, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x10001, 0x4, @perf_bp={&(0x7f0000000140)}, 0x1, 0x4000000000, 0xfffffff9, 0x4, 0xb13, 0xd9f2, 0x6, 0x0, 0x2e, 0x0, 0x8}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_FILTER(r12, 0x40082406, &(0x7f0000000200)='/\x00') ioctl$PERF_EVENT_IOC_REFRESH(r12, 0x2402, 0x81) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0000000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe0000000085000000a3000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a216798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271fefc583eec8912c37562d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de7368ca69f6f8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a113c38159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b2059ba4b923a1188dd61dc7de058a4dfa7e85a8bdf1d41a2d8bd044d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4ae52066bb5d4045c958549b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9530243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e1dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd040000000000000034137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c5d904408996ec5db6a4d15b71ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd000000000072716bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff42961f8f3b555d9e8aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e8173d3d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f000000000000000000000000000000005519fe545110a9c01d6f0da7b0731b19ae17b64d6eb1a47675aea60371f629ed3446beb20bf2bab80e451b4139dc6c87e6b395edc142e24b596f636f8c248beeb268dbbf120b26693f73a6362e7c6bff6b08514763f6fbe6c914baf7e25ac7e8d36babeb6c58d012cf7b1ffbe996204af87412b9b21da1dfb01aa5a4ff142deb3bd70d11cf71752bdb33f1dfb6ef107ef3cb0016b2b6dcffb0be5a95d56172098ebf6075cc048f94350e2adb108eabccfae942bbca66ea83139ab4062963be6d549907b17d95b248601322cd8cc6540b6e369c7ebd9b98ec00000000"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r13, 0x31, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e, 0x0, 0x0, 0xfffffffffffffe9a, 0x0, 0x0, 0x0, 0x0}}, 0x10) r15 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000004c0)={r14}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r15, 0xffff0000, 0xe, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xe70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) 12m48.71654696s ago: executing program 3 (id=4336): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000070000850000001b"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800006}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 75) 12m48.084679252s ago: executing program 3 (id=4339): r0 = socket$kcm(0x18, 0x7, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffee1, &(0x7f0000000200)}, 0x408c0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xe8001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$TUNSETOFFLOAD(r2, 0x400454c9, 0x19) ioctl$TUNGETVNETHDRSZ(r2, 0x800454d7, &(0x7f0000000a40)) close(r0) 12m46.451985283s ago: executing program 3 (id=4344): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20044000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10c002, 0xac5d, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x770f3639, 0x7}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, 0x0, 0x300, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) 12m46.265513407s ago: executing program 3 (id=4346): r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={0xffffffffffffffff, 0x0, 0x0, 0x4c, 0x0, &(0x7f0000001c40)=""/76, 0x4000, 0x0, 0x47, 0x21, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2", 0x1, 0x0, 0x13}, 0x50) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0x101d0) sendmsg$kcm(r1, &(0x7f00000001c0)={&(0x7f00000000c0)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41}, 0x5}}, 0x80, 0x0, 0x0, &(0x7f0000000900)=ANY=[], 0x1458}, 0x48800) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xa, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1}, @ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0xffffffffffffffe0}]}, &(0x7f0000000100)='GPL\x00', 0x1, 0xd8, &(0x7f0000000300)=""/216}, 0x94) close(0x3) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080207000000040000a118000200e020000100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0xec, 0x7, 0x40, 0x17, 0x0, 0x1, 0x2005f, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={0x0}, 0x11808b, 0x6, 0x3, 0x0, 0x81, 0x2, 0x5, 0x0, 0x7, 0x0, 0x2}, 0x0, 0xf, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000b000000095"], 0x0}, 0x94) r6 = perf_event_open(&(0x7f0000000740)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext={0x6, 0x6}, 0xc650, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36510001ac004000202080002000300010004000600eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 12m31.110498541s ago: executing program 32 (id=4346): r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={0xffffffffffffffff, 0x0, 0x0, 0x4c, 0x0, &(0x7f0000001c40)=""/76, 0x4000, 0x0, 0x47, 0x21, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2", 0x1, 0x0, 0x13}, 0x50) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0x101d0) sendmsg$kcm(r1, &(0x7f00000001c0)={&(0x7f00000000c0)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41}, 0x5}}, 0x80, 0x0, 0x0, &(0x7f0000000900)=ANY=[], 0x1458}, 0x48800) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xa, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1}, @ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0xffffffffffffffe0}]}, &(0x7f0000000100)='GPL\x00', 0x1, 0xd8, &(0x7f0000000300)=""/216}, 0x94) close(0x3) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080207000000040000a118000200e020000100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0xec, 0x7, 0x40, 0x17, 0x0, 0x1, 0x2005f, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={0x0}, 0x11808b, 0x6, 0x3, 0x0, 0x81, 0x2, 0x5, 0x0, 0x7, 0x0, 0x2}, 0x0, 0xf, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000b000000095"], 0x0}, 0x94) r6 = perf_event_open(&(0x7f0000000740)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext={0x6, 0x6}, 0xc650, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36510001ac004000202080002000300010004000600eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 28.004784985s ago: executing program 1 (id=7790): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x50) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x20f42, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'nr0\x00', 0x6132}) write$cgroup_subtree(r1, 0x0, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110c230000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x104007, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x6}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x80086601, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000002f40)=ANY=[@ANYBLOB="05000000040000000c0000000c00000000000000", @ANYRES32, @ANYBLOB="0000000000000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={0xffffffffffffffff, r3}, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x4}, @const={0x0, 0x0, 0x0, 0x4}, @func_proto={0x2, 0x0, 0x0, 0x12, 0x2}, @fwd={0x5}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x50}, 0x28) socket$kcm(0x10, 0x2, 0x0) close(0x3) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b9040a1d080220000000051296a1180002000000000000000e1208000f0100810401a8001600200001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r4 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="0bf600004e"], 0xfe33) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0500000005000000fd0900008500ebff41000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8917, &(0x7f0000000000)={'wlan1\x00', @random="0200ff7fffff"}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 27.392364506s ago: executing program 1 (id=7798): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$sock(r0, &(0x7f0000000740)={&(0x7f00000000c0)=@l2tp={0x2, 0x0, @loopback, 0x2}, 0x80, &(0x7f0000000680)=[{&(0x7f00000001c0)="6a110bc6a31e1a177424329af18d3150a3cee2ddc6a38a5d8f77db1964d814f6a840390ac6628ff4ba42715cc96c6ffbb9bdb5", 0x33}, {&(0x7f0000000500)="47548b59740ca5aa246f37206f14841771d37905945f3175d338e5aa18f029d93dcba9a320d5e7c464ed98ca230da173c76e3b4bf75fe92ee422afe68fe3736a17354950dd2263112977a548c8ad65550f421d53d2a95a838055c4f7f74172bd09a25a4ddf3e4d7c7006d8552750b32de2a7de9619c369649b0cce4a036d85f720072c9a14c094a51daa78e7f3f26e5153d4a8a5d5af9de0f5ef83f25e14201e464aaa298615109a4ffe417cf6c82d12caac5e17584eabf8e1c9c3649fe1c074f866a3ffc79e491353de25b81561f6d6787a0a7b997f63b2f08def4c36df2cbae8a8a3d44de843656c26e13700a22e16dc03326b", 0xf4}, {&(0x7f0000000600)="68b1a707402bcbb5a744135a6bb48c5310fb725a82680d4487ef00dcc04531e654b5909c80be8ec3c42d3a5ba2c21eb1867fa9779ac48fc3886eb49f297fed6c8743704bde8f0d9ab8b9eb4f56fa3fea7a14f5a939596807e9a78299b8ae96870b18a3e9173183f94d1a58e2829a22", 0x6f}], 0x3, &(0x7f00000006c0)=[@timestamping={{0x14, 0x1, 0x25, 0x2da}}, @timestamping={{0x14}}, @mark={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0x80000001}}], 0x60}, 0x8800) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0xd) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x5, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r1}]}, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000060400000000000000000000010500000008000000000000000000000300000000010000000200000004000000000000000000000b"], 0x0, 0x5a}, 0x28) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x88, 0x67, &(0x7f00000002c0)=r2, 0x4) r3 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r3, &(0x7f00000005c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0xd7, &(0x7f0000000080), 0x1}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r5 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe69, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000b00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x2000000, 0x1a, 0xffffffffffffffee, &(0x7f0000000080)="630b008646dc3f0adf398151d9000000000000000000ea1f0000", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x2f) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_bp={0x0}, 0x8061, 0x3, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r8 = socket$kcm(0x10, 0x3, 0x10) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r9, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r10, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000040)="3c00000033000b1229ae3f7f03b261130124fc60100c034008410000002000189215a2681cf6e50400003d490d20b735b16b6a44799406db26a57b35", 0x3c}], 0x1}, 0x0) 26.995384434s ago: executing program 1 (id=7802): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x5, 0x4, 0xfff, 0x9, 0x0, 0xffffffffffffffff, 0x7}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x2000}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3fb, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0xf}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000b00)={0x0, 0xf22fff7f, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929b92a7f64e925bf0ef424c3ef29fcd5fd4721c547fde6abe4d47048b64511693624b0d786711abe4a66e250fcbfe95ac9037e58f331b26b6ed0d08e5c73ba4c49", 0xc00e}], 0x9, &(0x7f00000001c0)=[@ip_tos_int={{0x7ff4d4260000}}, @ip_ttl={{0x14}}, @ip_ttl={{0x14}}, @ip_tos_u8={{0x11}}, @ip_tos_u8={{0x11, 0x2}}, @ip_retopts={{0x0, 0x0, 0x7, {[@lsrr, @generic={0x0, 0x0, "96"}, @generic={0x0, 0x0, "206a77bdd1a004129054e7704a"}]}}}], 0xf}, 0x0) r3 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r3) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r4, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r5, 0x24, 0x0, 0xffff, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x11) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc04", 0x10}], 0x1}, 0x40000) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r6, 0x0, 0x0}, 0x10) r7 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r7, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000800)="e9", 0x1}, {&(0x7f00000017c0)="ea0189bdebb0c16d420ee9b95082abd6431cc7afc22c4a6b8adecef68f76bd81a86e89f9c80e5c868a12b09e", 0x2c}], 0x2, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @loopback}}}], 0x20}, 0xe900) sendmsg$kcm(r7, &(0x7f0000003a00)={&(0x7f0000000140)=@nfc_llcp={0x27, 0x0, 0x1, 0x1, 0x3, 0xf, "598e4bfe0c078870ce62e2f0cc1c34acba32fb6ebc37a49d68f4885c9a2aed072503314f2b767222369b6dffbd0c24d53e6cf6d8f60894381c39c219c24c4f", 0x21}, 0x80, &(0x7f0000000340)=[{&(0x7f00000001c0)="4b330ca384da8eea2eff1583ed15a50aae", 0x11}, {&(0x7f0000000200)="4aae1a16e8efeca90b277a2dfbda1139018d7843a475959f2bf23bb7df78be25239b4923a44e390d4af8cf5bada46358c508549c9f583daf8594d2c56171144e0598f56df2ed7687f006f9d407f99dc76b9c10d169e37fe0c5cda95a19a8e9c9c29a258e67a6bf58fa4fdd92246dae0afa23e5e508985dd6544150ee9db60760b89f18dca996f94d0453c4f102c72172dfcc210b8e01", 0x96}, {&(0x7f00000002c0)="ede0b720fdba0ab5579d6115b5a333b5fc1d17ad00f92685b52f010781a8fe0a6d3ddf77c4e6af162304d5eb13307f8cbf88054131cbe38444c60cc97dd0826c58b58fa364d3cb266479cd5e7619a1438246aa758df94d192c732285153d7338f2f864fe0907ce4ee22c7fa68c926577f147013f9c442d97dde0", 0x7a}], 0x3, &(0x7f0000001800)=[{0xc0, 0x101, 0x40, "33e89ba8948862a3c525c72dabab3d5a2b9c10aef8455985164048568e33fffc47c871db95631991a62fd66aa2c79a5a8ae1fe2d4f0a5612af073e061e5a782d6b80b6319fe7a2be3e01de14882904061f33403ae055bd8c52717aa18e87850ebca60436a5b5f74d4788a805f1de75cbbef4571b696d032c3f8e554574489425eedd140cfeba3cd7db5daf521cf051590c4b9f41da92de2022859f9b7326527889a17b80e9ec22ed42966e"}, {0x1010, 0x102, 0x4, "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"}, {0x58, 0x117, 0x7, "36ee0268ec65e374f0c1528b0b1bcef0ae928643fd28eec94eaf5cccd24a6e6dfae03702966872939578d4b80a658d8bdfbd0ce999076ff28f38c46f976780b4167184377902"}, {0x1010, 0x114, 0x80, "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"}, {0x38, 0x10a, 0x8000, "00ce84b516d0620d3a5df8d7377a081bb6e08c062a217d74a4172d63c931aeda10b6b097f0b3"}, {0x60, 0x107, 0x6, "6eaa715ab5c1dd0a130b4497bc41b83e533540b67cbbcfbe197f916126bf7ade49bbedf2d0a592b99b68cfc4e918740a0123ea75536211e03fccdf5a6a31ab7e68f614b26b580eedac84"}], 0x21d0}, 0x11) 7.46168467s ago: executing program 0 (id=7899): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x94) setsockopt$sock_attach_bpf(r0, 0x88, 0x67, &(0x7f00000002c0)=r1, 0x4) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e1f, @multicast1}, 0x10, &(0x7f0000000100)=[{&(0x7f0000001a40)}], 0x1, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast2}}}], 0x20}, 0x20008020) r2 = socket$kcm(0xa, 0x3, 0x73) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x30a) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$kcm(0x2b, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x5452, &(0x7f0000000100)) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20004810) close(r5) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast}) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz0\x00', 0x200002, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x63, 0x2, 0x0, 0x0, 0x0, 0x2, 0x37a0d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x500}, 0x1075, 0x1, 0x0, 0x0, 0xffffffffffffbbfe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x56}, 0x0, 0x1, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000080)) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xff, @remote}, 0x80, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="10000000f9ffffffffffffff080000009c1b9235bcfcf0265769dec49e678decdc9d88958a7734555b67a529d4a52fae7c3b453d849ce5109b82dff490e72af80af3e4ae77c42f24e19f76ff2aec87349dbcc262e44b9f26c47ac7cd0d4acc3776456a99a41532a95ebfecd488ea605f64699f61d0a899755daa4138a07ed17c3c18e11d08f6a537163faff15d9c66b9c007f3e4bfa5239643bf27"], 0x10}, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 6.96853767s ago: executing program 5 (id=7900): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x1e, 0x4, 0x0) socket$kcm(0x1e, 0x4, 0x0) socket$kcm(0x10, 0x2, 0x10) socket$kcm(0xa, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x80000, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x3, 0x10) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0xf00, &(0x7f0000000040)=[{&(0x7f00000000c0)="5c00000014006b02c84e21100af32c6e0a0675f8d34460400000000600005c1e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d493803792684b71bdd70000b6c0504bb9183132be471b93c91b5d7870743719b4b53cf2", 0x91}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 6.773137344s ago: executing program 4 (id=7901): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x50) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x20f42, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'nr0\x00', 0x6132}) write$cgroup_subtree(r1, 0x0, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110c230000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x104007, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x6}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x80086601, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000002f40)=ANY=[@ANYBLOB="05000000040000000c0000000c00000000000000", @ANYRES32, @ANYBLOB="0000000000000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={0xffffffffffffffff, r3}, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x4}, @const={0x0, 0x0, 0x0, 0x4}, @func_proto={0x2, 0x0, 0x0, 0x12, 0x2}, @fwd={0x5}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x50}, 0x28) socket$kcm(0x10, 0x2, 0x0) close(0x3) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b9040a1d080220000000051296a1180002000000000000000e1208000f0100810401a8001600200001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r4 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="0bf600004e"], 0xfe33) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0500000005000000fd0900008500ebff41000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8917, &(0x7f0000000000)={'wlan1\x00', @random="0200ff7fffff"}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 6.502303789s ago: executing program 5 (id=7904): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000780)={0x3, &(0x7f0000000600)=[{0xb1, 0x0, 0x2, 0x2}, {0x3d}, {0x6, 0x0, 0x0, 0x3000000}]}) 5.797955211s ago: executing program 4 (id=7906): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_clone(0x100000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 85) 5.612780905s ago: executing program 5 (id=7907): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x40009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xffffffffffffffff, 0x3fff8000}, 0x0, 0xff, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0x1000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f00000000c0)=ANY=[@ANYBLOB="180800002d98afeb000000010000000018280000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bf9700000000000007080000fffdffffbfa400000000000007040000f0ffffff740200000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007d9800000000000056080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.602993735s ago: executing program 2 (id=7908): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000a80)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f0000001200)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x4, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5a}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x7}}, [], {{0x6, 0x1, 0x3, 0x8}, {0x6, 0x0, 0x2, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup, 0x34, 0x1, 0x0, &(0x7f0000000500)=[0x0], 0x1, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0], 0x0}, 0x40) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time\x00', 0x26e1, 0x0) r7 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x3e, &(0x7f0000000000)=r6, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000780)={@fallback=r3, r4, 0x1c, 0x2010, 0x0, @value=r6, @void, @void, @void, r5}, 0x20) ioctl$TUNGETFILTER(r6, 0x801054db, &(0x7f00000002c0)=""/203) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce2200302c00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef000100ffffff3c"], 0x280) 4.951133978s ago: executing program 4 (id=7910): r0 = socket$kcm(0xa, 0x2, 0x88) sendmsg$sock(r0, &(0x7f0000000b80)={&(0x7f0000000380)=@in6={0xa, 0x4e02, 0x2, @loopback={0x20}, 0x7f}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12000000}, 0x40001) 4.896689569s ago: executing program 5 (id=7911): unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000020000000000000002000004000000000000000002000000000000000000000002000000000000000100000000000001"], 0x0, 0x4e}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001000)={0x1}, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000010c0)={0xffffffffffffffff, 0x58, &(0x7f0000001040)}, 0x10) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x8, 0x8000000000ca, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0xffffff7e, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0xa, 0x1, 0x106) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e068000000110000000000000000dbc790ad000000fc000000000000001400000000000000290000000100000004000000000000001c"], 0x68}, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f0000000000)=@in6={0xa, 0x41, 0x0, @loopback, 0x2}, 0x80, 0x0}, 0xe07e872424dfefca) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0xf, &(0x7f00000002c0), 0x161) sendmsg$inet(r4, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x31, &(0x7f0000000640), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x2, 0x2, 0xfffffffffffffff4, {0x2, 0x4e23, @local}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x68000000}, 0x0) r5 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r5, 0x84, 0x1f, &(0x7f0000000100), 0x120) close(r4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xfb, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0}, 0x50) recvmsg$kcm(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000100)=""/199, 0xc7}], 0x1}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0xa1, &(0x7f0000001240)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 4.701842372s ago: executing program 4 (id=7912): r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x2, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2, 0x0, 0x2}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={0xffffffffffffffff, 0x0, 0x0, 0x4c, 0x0, &(0x7f0000001c40)=""/76, 0x4000, 0x0, 0x47, 0x21, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2", 0x1, 0x0, 0x13}, 0x50) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0x101d0) sendmsg$kcm(r1, &(0x7f00000001c0)={&(0x7f00000000c0)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41}, 0x5}}, 0x80, 0x0, 0x0, &(0x7f0000000900)=ANY=[], 0x1458}, 0x48800) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xa, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, &(0x7f0000000040), &(0x7f0000000140)=r3}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1}, @ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0xffffffffffffffe0}]}, &(0x7f0000000100)='GPL\x00', 0x1, 0xd8, &(0x7f0000000300)=""/216}, 0x94) close(0x3) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080207000000040000a118000200e020000100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0xec, 0x7, 0x40, 0x17, 0x0, 0x1, 0x2005f, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0x11808b, 0x6, 0x3, 0x0, 0x81, 0x2, 0x5, 0x0, 0x7, 0x0, 0x2}, 0x0, 0xf, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36510001ac004000202080002000300010004000600eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 4.593143684s ago: executing program 0 (id=7913): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001240)={&(0x7f0000000340)=@generic={0xa, "8ab77fa26849ff263ef30c98b353011a5990650042e2dacdc165ececece6be1862e2adacd2737d00ad6f9fa9f3d7145e15dd9fb1a7adc211220963ad5def53b911ba5b9da13641f982757012a7496de0b3a36f5849f260c603dbc317f54b901ee80ea6132ca6e88c776553e1833052ca376304313c5637786a36a4b83857"}, 0x80, 0x0, 0x0, 0x0, 0xbb8}, 0x24004884) 4.592504014s ago: executing program 2 (id=7914): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x9, 0x1, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000a80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x830d}, 0x220, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x7ffffffff002) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000880), &(0x7f0000000000), 0x2}, 0x16) socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400, 0x8}, 0x4202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x0, 0x12, 0x2f, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x18000000000002a0, 0xce8, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x4fe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r6, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.027804925s ago: executing program 0 (id=7915): write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x8}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x200040c4) r0 = socket$kcm(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x0, 0x45, 0x0, 0xfd, 0x0, 0x9c, 0x10803, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400001, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0xffff, 0x5, 0x4, 0x2, 0x200000a, 0x48, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x23, &(0x7f0000000040), 0xcf) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0xfffffeff, &(0x7f0000000000)=[{&(0x7f0000000040)="0212000902000000e4a17c45c85686605e85da4a", 0x10}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000002940)="2000000020008107090f9becdb4cb96b", 0x10}], 0x1, 0x0, 0x0, 0x81000000}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000100)={r2}) socket$kcm(0x10, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a80)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x800, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x3}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000b80)={{0x1, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000b40)='%pK \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x1b, 0x3, &(0x7f00000001c0)=@raw=[@map_idx_val={0x18, 0x4, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1}, @alu={0x7, 0x1, 0x5, 0x5, 0xa, 0x4, 0xfffffffffffffff0}], &(0x7f0000000240)='syzkaller\x00', 0x3, 0x94, &(0x7f0000000280)=""/148, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000480)={0x4, 0x10, 0x4, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f0000000bc0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4, r5], &(0x7f0000000c00)=[{0x0, 0x2, 0x1, 0xa}, {0x3, 0x4, 0xc}, {0x4, 0x5, 0x6, 0x2}, {0x1, 0x2, 0xe, 0xa}], 0x10, 0x4}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB='-'], 0x27) r6 = socket$kcm(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, 0x0, 0x0) socket$kcm(0x10, 0x100000000002, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x103}}], 0x18}, 0x4000001) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x115046, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x79}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3.76418468s ago: executing program 5 (id=7916): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x50) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x20f42, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'nr0\x00', 0x6132}) write$cgroup_subtree(r1, 0x0, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110c230000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x104007, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x6}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x80086601, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000002f40)=ANY=[@ANYBLOB="05000000040000000c0000000c00000000000000", @ANYRES32, @ANYBLOB="0000000000000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={0xffffffffffffffff, r3}, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x4}, @const={0x0, 0x0, 0x0, 0x4}, @func_proto={0x2, 0x0, 0x0, 0x12, 0x2}, @fwd={0x5}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x50}, 0x28) socket$kcm(0x10, 0x2, 0x0) close(0x3) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b9040a1d080220000000051296a1180002000000000000000e1208000f0100810401a8001600200001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r4 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="0bf600004e"], 0xfe33) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0500000005000000fd0900008500ebff41000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8917, &(0x7f0000000000)={'wlan1\x00', @random="0200ff7fffff"}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.324926206s ago: executing program 0 (id=7917): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000100b0000850000000800000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0}, 0x94) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="c1188e19b95d02ff4284860151b0", 0x0, 0xa3d8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001", @ANYBLOB], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x27) 1.280753096s ago: executing program 4 (id=7918): r0 = socket$kcm(0x29, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0x1}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) r1 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r1, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x4000, 0x0, @mcast2, 0x41}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0xfff5) recvmsg$kcm(r1, &(0x7f0000001940)={0x0, 0x0, 0x0}, 0x100) 1.218939478s ago: executing program 2 (id=7919): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x20044000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10c002, 0xac5d, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x770f3639, 0x7}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000050000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) 1.193167638s ago: executing program 5 (id=7920): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x189001, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, 0x0, 0x0}, 0x94) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x13) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="11000000040000000400", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r3, &(0x7f0000000440), 0x0}, 0x20) socket$kcm(0x2, 0x3, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @mcast2, 0xd}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x8000) r4 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r4, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x18, 0x29, 0x36}}, @ip_tos_u8={{0x38, 0x29, 0x3b}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) 1.047989281s ago: executing program 1 (id=7808): perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80005d31, 0x96004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x880, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.net/syz0\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x28, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x28, 0x2, 0x0, 0x0) 984.689132ms ago: executing program 2 (id=7921): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x7, [@restrict={0x6, 0x0, 0x0, 0xb, 0x3}, @const={0xd}, @enum64={0x7, 0x2, 0x0, 0x13, 0x0, 0x6, [{0xf, 0x0, 0x1}, {0x6, 0x9, 0x8}]}, @var={0x7, 0x0, 0x0, 0xe, 0x3, 0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3}}, @float={0xb, 0x0, 0x0, 0x10, 0xc}]}, {0x0, [0x0, 0x1e, 0x5f, 0x2e, 0x61]}}, &(0x7f0000000500)=""/91, 0x8f, 0x5b, 0x0, 0x2, 0x10000, @value=r0}, 0x28) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x1, 0x84) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x11c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socket$kcm(0x10, 0x2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000080000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000180)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x6a) 792.504676ms ago: executing program 1 (id=7922): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x7, [@restrict={0x6, 0x0, 0x0, 0xb, 0x3}, @const={0xd}, @enum64={0x7, 0x2, 0x0, 0x13, 0x0, 0x6, [{0xf, 0x0, 0x1}, {0x6, 0x9, 0x8}]}, @var={0x7, 0x0, 0x0, 0xe, 0x3, 0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3}}, @float={0xb, 0x0, 0x0, 0x10, 0xc}]}, {0x0, [0x0, 0x1e, 0x5f, 0x2e, 0x61]}}, &(0x7f0000000500)=""/91, 0x8f, 0x5b, 0x0, 0x2, 0x10000, @value=r0}, 0x28) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x1, 0x84) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x11c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socket$kcm(0x10, 0x2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000080000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000180)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x6a) (fail_nth: 2) 741.504307ms ago: executing program 2 (id=7923): perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x400, 0x2d, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) (async) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x1}, 0x201, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) (async) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0xb4) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) (async) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x2, 0x20020, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xde, 0x4}, 0xc800, 0x0, 0x2, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) (async) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xb0, 0x0, 0x0, 0x7, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0x88}, 0x0) ioctl$TUNGETVNETLE(r5, 0xc008744c, &(0x7f0000000180)) (async) write$cgroup_pid(r4, &(0x7f00000005c0)=r2, 0x12) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000085000000a0000000180100002025642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000089cdc832850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x6}, 0x48) (rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, r10, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4000000, 0x3, 0x0, 0x0, @void, @value=0xff070000, @void, @value=0xff070000}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r9, 0x18000000000002a0, 0x36, 0x0, &(0x7f00000002c0)="b9df03318944778cb89904f086ddd7f9effdb4cf9f89b173fdbbadeb91a0fe368f5d575db9d7561be81b650b8076b948b8b1ead98629", 0x0, 0x2005, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 199.998097ms ago: executing program 4 (id=7924): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r0) ioctl$TUNGETVNETLE(r0, 0x40107447, &(0x7f0000000180)) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000380)=@base={0xa, 0x1000, 0xb3, 0x7f}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) perf_event_open(0x0, 0x0, 0xfff7fffffffffffd, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r5, &(0x7f0000000180), 0x40001) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='memory.events\x00', 0x100002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x17, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000630a00"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c}, 0x94) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40305829, &(0x7f0000000040)) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x21, 0x2, 0x2) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="5c00000012006b000040017ea608601602f3650400010008000000000002009ee517c356a7b0251e616859ad3a78a76e807c857e21bea297bff435cf01c937e786a6d0bdc7fcf50e4509c5cc68b7ed9c232d786c3500000000000074", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000480)={&(0x7f0000000040)="ad365e75503a3446bfa89bc03460e6e5cea671a02ae4ffacf3d5d1133523f47d1ab81c2fa9c03acbc25c52402b9694c281e15d1eb0942eae860876ec34b2b4197535f0482fa812bb1a68609c9cf793e68cf17dbf7d84de81470a406bb347163e3d32f5bd9598507efab41e2b49fe7817e7daed1294ea37da589f42a13f7d76585c513a7a5bb0e76cf6cdb3c84ed1835c40a946cfd2fca6be196cbd2321d426a324467adf80431afab68ace561213be394eb0be0e2c2d1aeb8752f192988234aa1a37e37a665037954f27dc3eab5595f3503e03db", &(0x7f00000002c0)=""/234, &(0x7f00000003c0)="2e3766814462f795646142fc40e8ca0e393d2418a84d89320cb8e11f3b10ebafd7d48b71d92f1d3cb0c38ba80574543f4af4863632ca2bb2a13d55cc779f203f7d66fc507c872ac254c937b8d3d398d513", &(0x7f0000000440)="0605dbd3959decaab7357888527afaf8e7744a7379ec7c2271dc1436ed8aa7a6af24098cb4733084edeaf33b476e74fb5914741483c812", 0x8, r8, 0x4}, 0x38) r9 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r9, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@timestamp_addr={0x44, 0x14, 0x5, 0x1, 0x7, [{@rand_addr=0x64010101}, {@dev={0xac, 0x14, 0x14, 0x1d}, 0x5}]}]}}}], 0x48}, 0x200040c4) r10 = perf_event_open$cgroup(&(0x7f00000004c0)={0x0, 0x80, 0xdd, 0x0, 0xc0, 0x3, 0x0, 0x7, 0x900, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x4, @perf_config_ext={0xfffffffffffffffe, 0x5}, 0x8, 0xfffffffffffffffc, 0x1, 0x9, 0xfffffffffffffffd, 0xb3b, 0x8, 0x0, 0x3, 0x0, 0x5}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x6) ioctl$PERF_EVENT_IOC_QUERY_BPF(r10, 0xc008240a, &(0x7f0000000540)={0x4, 0x0, [0x0, 0x0, 0x0, 0x0]}) 199.539577ms ago: executing program 2 (id=7925): unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000020000000000000002000004000000000000000002000000000000000000000002000000000000000100000000000001"], 0x0, 0x4e}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001000)={0x1}, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000010c0)={0xffffffffffffffff, 0x58, &(0x7f0000001040)}, 0x10) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x8, 0x8000000000ca, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0xffffff7e, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0xa, 0x1, 0x106) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e068000000110000000000000000dbc790ad000000fc000000000000001400000000000000290000000100000004000000000000001c"], 0x68}, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f0000000000)=@in6={0xa, 0x41, 0x0, @loopback, 0x2}, 0x80, 0x0}, 0xe07e872424dfefca) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0xf, &(0x7f00000002c0), 0x161) sendmsg$inet(r4, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x31, &(0x7f0000000640), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x2, 0x2, 0xfffffffffffffff4, {0x2, 0x4e23, @local}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x68000000}, 0x0) r5 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r5, 0x84, 0x1f, &(0x7f0000000100), 0x120) close(r4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xfb, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f008004be0ffff00124000632f77fbacf01416ac141416440c05114d2f87e5940c05ab940c13f2325f1a39010702038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0}, 0x50) recvmsg$kcm(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000100)=""/199, 0xc7}], 0x1}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0xa1, &(0x7f0000001240)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 169.487068ms ago: executing program 0 (id=7926): openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) socket$kcm(0x23, 0x2, 0x0) close(0x4) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f00000017c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x80fe, 0x7, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x12, 0x2}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000004c0)="7f", 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="18008d000000000084000000070000007f00000000000000b8"], 0xd0}, 0x480c4) 4.08646ms ago: executing program 1 (id=7927): write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x8}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x200040c4) r0 = socket$kcm(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x0, 0x45, 0x0, 0xfd, 0x0, 0x9c, 0x10803, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400001, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0xffff, 0x5, 0x4, 0x2, 0x200000a, 0x48, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x23, &(0x7f0000000040), 0xcf) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0xfffffeff, &(0x7f0000000000)=[{&(0x7f0000000040)="0212000902000000e4a17c45c85686605e85da4a", 0x10}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000002940)="2000000020008107090f9becdb4cb96b", 0x10}], 0x1, 0x0, 0x0, 0x81000000}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000100)={r2}) socket$kcm(0x10, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a80)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x800, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x3}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000b80)={{0x1, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000b40)='%pK \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x1b, 0x3, &(0x7f00000001c0)=@raw=[@map_idx_val={0x18, 0x4, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1}, @alu={0x7, 0x1, 0x5, 0x5, 0xa, 0x4, 0xfffffffffffffff0}], &(0x7f0000000240)='syzkaller\x00', 0x3, 0x94, &(0x7f0000000280)=""/148, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000480)={0x4, 0x10, 0x4, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f0000000bc0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4, r5], &(0x7f0000000c00)=[{0x0, 0x2, 0x1, 0xa}, {0x3, 0x4, 0xc}, {0x4, 0x5, 0x6, 0x2}, {0x1, 0x2, 0xe, 0xa}], 0x10, 0x4}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB='-'], 0x27) r6 = socket$kcm(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, 0x0, 0x0) socket$kcm(0x10, 0x100000000002, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x103}}], 0x18}, 0x4000001) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x115046, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x79}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 0s ago: executing program 0 (id=7937): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000100b0000850000000800000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0}, 0x94) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="c1188e19b95d02ff4284860151b0", 0x0, 0xa3d8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001", @ANYBLOB], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x27) kernel console output (not intermixed with test programs): pressed [ 1578.361797][T27270] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1578.520278][T27270] netlink: 122896 bytes leftover after parsing attributes in process `syz.5.7039'. [ 1579.864838][T27272] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.7040'. [ 1580.181082][T27300] netlink: 'syz.4.7049': attribute type 10 has an invalid length. [ 1580.972136][T27311] netlink: 143932 bytes leftover after parsing attributes in process `syz.1.7047'. [ 1581.047001][T27311] netlink: zone id is out of range [ 1581.052485][T27311] netlink: zone id is out of range [ 1581.075359][T27311] netlink: zone id is out of range [ 1581.095041][T27311] netlink: zone id is out of range [ 1581.108837][T27311] netlink: zone id is out of range [ 1581.136915][T27311] netlink: zone id is out of range [ 1581.142558][T27311] netlink: zone id is out of range [ 1581.156156][T27311] netlink: zone id is out of range [ 1581.162139][T27311] netlink: zone id is out of range [ 1581.440095][T27334] FAULT_INJECTION: forcing a failure. [ 1581.440095][T27334] name failslab, interval 1, probability 0, space 0, times 0 [ 1581.511481][T27334] CPU: 1 PID: 27334 Comm: syz.0.7058 Not tainted syzkaller #0 [ 1581.519166][T27334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1581.529733][T27334] Call Trace: [ 1581.533076][T27334] [ 1581.536060][T27334] dump_stack_lvl+0x188/0x24e [ 1581.540893][T27334] ? show_regs_print_info+0x12/0x12 [ 1581.546248][T27334] ? load_image+0x410/0x410 [ 1581.550841][T27334] ? __might_sleep+0xd0/0xd0 [ 1581.555496][T27334] ? __lock_acquire+0x7c40/0x7c40 [ 1581.560674][T27334] should_fail_ex+0x390/0x4c0 [ 1581.565490][T27334] should_failslab+0x5/0x20 [ 1581.570586][T27334] slab_pre_alloc_hook+0x59/0x300 [ 1581.576393][T27334] ? __get_vm_area_node+0x122/0x330 [ 1581.581836][T27334] __kmem_cache_alloc_node+0x4f/0x270 [ 1581.587275][T27334] ? __get_vm_area_node+0x122/0x330 [ 1581.592543][T27334] kmalloc_node_trace+0x22/0xe0 [ 1581.597629][T27334] __get_vm_area_node+0x122/0x330 [ 1581.602831][T27334] __vmalloc_node_range+0x357/0x1380 [ 1581.608267][T27334] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 1581.614423][T27334] ? aa_get_newest_label+0xf9/0x5b0 [ 1581.619920][T27334] ? free_vm_area+0x50/0x50 [ 1581.624632][T27334] ? end_current_label_crit_section+0x170/0x170 [ 1581.631551][T27334] ? __lock_acquire+0x7c40/0x7c40 [ 1581.636665][T27334] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 1581.642271][T27334] __vmalloc+0x76/0x80 [ 1581.646637][T27334] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 1581.652235][T27334] bpf_prog_alloc_no_stats+0x37/0x3a0 [ 1581.657652][T27334] ? bpf_prog_alloc+0x13/0x1b0 [ 1581.662492][T27334] bpf_prog_alloc+0x1c/0x1b0 [ 1581.667424][T27334] bpf_prog_load+0x7d4/0x1530 [ 1581.672162][T27334] ? map_freeze+0x390/0x390 [ 1581.676815][T27334] ? __might_fault+0xa6/0x120 [ 1581.682157][T27334] ? __might_fault+0xa6/0x120 [ 1581.686904][T27334] ? __might_fault+0xc2/0x120 [ 1581.691609][T27334] ? __might_fault+0xa6/0x120 [ 1581.696450][T27334] ? bpf_lsm_bpf+0x5/0x10 [ 1581.700816][T27334] ? security_bpf+0x7a/0xa0 [ 1581.705447][T27334] __sys_bpf+0x5b8/0x780 [ 1581.709765][T27334] ? bpf_link_show_fdinfo+0x380/0x380 [ 1581.715258][T27334] ? lock_chain_count+0x20/0x20 [ 1581.720158][T27334] __x64_sys_bpf+0x78/0x90 [ 1581.724621][T27334] do_syscall_64+0x4c/0xa0 [ 1581.729103][T27334] ? clear_bhb_loop+0x60/0xb0 [ 1581.733820][T27334] ? clear_bhb_loop+0x60/0xb0 [ 1581.738619][T27334] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1581.744575][T27334] RIP: 0033:0x7f3f5979de59 [ 1581.749043][T27334] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1581.768785][T27334] RSP: 002b:00007f3f5a71f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1581.777241][T27334] RAX: ffffffffffffffda RBX: 00007f3f59a25fa0 RCX: 00007f3f5979de59 [ 1581.785591][T27334] RDX: 0000000000000094 RSI: 0000200000000800 RDI: 0000000000000005 [ 1581.793859][T27334] RBP: 00007f3f5a71f090 R08: 0000000000000000 R09: 0000000000000000 [ 1581.802323][T27334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1581.810338][T27334] R13: 00007f3f59a26038 R14: 00007f3f59a25fa0 R15: 00007ffd16ecf7f8 [ 1581.818379][T27334] [ 1581.832941][T27336] netlink: 129384 bytes leftover after parsing attributes in process `syz.5.7059'. [ 1581.899885][T27332] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.7057'. [ 1581.922559][T27332] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 1582.026913][T27334] syz.0.7058: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 1582.064390][T27334] CPU: 0 PID: 27334 Comm: syz.0.7058 Not tainted syzkaller #0 [ 1582.072047][T27334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1582.082327][T27334] Call Trace: [ 1582.085648][T27334] [ 1582.088619][T27334] dump_stack_lvl+0x188/0x24e [ 1582.093351][T27334] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 1582.099900][T27334] ? show_regs_print_info+0x12/0x12 [ 1582.105179][T27334] ? load_image+0x410/0x410 [ 1582.110213][T27334] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 1582.116929][T27334] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 1582.123928][T27334] warn_alloc+0x242/0x330 [ 1582.128414][T27334] ? __get_vm_area_node+0x122/0x330 [ 1582.133673][T27334] ? zone_watermark_ok_safe+0x270/0x270 [ 1582.139386][T27334] ? rcu_is_watching+0x11/0xa0 [ 1582.144215][T27334] ? __get_vm_area_node+0x318/0x330 [ 1582.149572][T27334] __vmalloc_node_range+0x37c/0x1380 [ 1582.155127][T27334] ? aa_get_newest_label+0xf9/0x5b0 [ 1582.160472][T27334] ? free_vm_area+0x50/0x50 [ 1582.165023][T27334] ? end_current_label_crit_section+0x170/0x170 [ 1582.171331][T27334] ? __lock_acquire+0x7c40/0x7c40 [ 1582.176597][T27334] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 1582.182216][T27334] __vmalloc+0x76/0x80 [ 1582.186427][T27334] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 1582.192039][T27334] bpf_prog_alloc_no_stats+0x37/0x3a0 [ 1582.197479][T27334] ? bpf_prog_alloc+0x13/0x1b0 [ 1582.202332][T27334] bpf_prog_alloc+0x1c/0x1b0 [ 1582.207077][T27334] bpf_prog_load+0x7d4/0x1530 [ 1582.211860][T27334] ? map_freeze+0x390/0x390 [ 1582.216941][T27334] ? __might_fault+0xa6/0x120 [ 1582.221756][T27334] ? __might_fault+0xa6/0x120 [ 1582.226736][T27334] ? __might_fault+0xc2/0x120 [ 1582.231462][T27334] ? __might_fault+0xa6/0x120 [ 1582.236370][T27334] ? bpf_lsm_bpf+0x5/0x10 [ 1582.240769][T27334] ? security_bpf+0x7a/0xa0 [ 1582.245367][T27334] __sys_bpf+0x5b8/0x780 [ 1582.249672][T27334] ? bpf_link_show_fdinfo+0x380/0x380 [ 1582.255129][T27334] ? lock_chain_count+0x20/0x20 [ 1582.260050][T27334] __x64_sys_bpf+0x78/0x90 [ 1582.264524][T27334] do_syscall_64+0x4c/0xa0 [ 1582.268994][T27334] ? clear_bhb_loop+0x60/0xb0 [ 1582.273719][T27334] ? clear_bhb_loop+0x60/0xb0 [ 1582.278621][T27334] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1582.284567][T27334] RIP: 0033:0x7f3f5979de59 [ 1582.289117][T27334] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1582.309045][T27334] RSP: 002b:00007f3f5a71f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1582.317602][T27334] RAX: ffffffffffffffda RBX: 00007f3f59a25fa0 RCX: 00007f3f5979de59 [ 1582.326519][T27334] RDX: 0000000000000094 RSI: 0000200000000800 RDI: 0000000000000005 [ 1582.334892][T27334] RBP: 00007f3f5a71f090 R08: 0000000000000000 R09: 0000000000000000 [ 1582.342915][T27334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1582.350949][T27334] R13: 00007f3f59a26038 R14: 00007f3f59a25fa0 R15: 00007ffd16ecf7f8 [ 1582.358998][T27334] [ 1582.441406][T27334] Mem-Info: [ 1582.444775][T27334] active_anon:9715 inactive_anon:0 isolated_anon:0 [ 1582.444775][T27334] active_file:21358 inactive_file:40536 isolated_file:0 [ 1582.444775][T27334] unevictable:768 dirty:282 writeback:0 [ 1582.444775][T27334] slab_reclaimable:21626 slab_unreclaimable:96295 [ 1582.444775][T27334] mapped:30097 shmem:1373 pagetables:712 [ 1582.444775][T27334] sec_pagetables:0 bounce:0 [ 1582.444775][T27334] kernel_misc_reclaimable:0 [ 1582.444775][T27334] free:1308391 free_pcp:10789 free_cma:0 [ 1582.519719][T27345] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.7059'. [ 1582.590947][T27334] Node 0 active_anon:38560kB inactive_anon:0kB active_file:85432kB inactive_file:161940kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:124388kB dirty:1128kB writeback:0kB shmem:3956kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11016kB pagetables:2648kB sec_pagetables:0kB all_unreclaimable? no [ 1582.766955][T27334] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1582.917317][T27334] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1583.046778][T27334] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 1583.054000][T27334] Node 0 DMA32 free:1309156kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:38860kB inactive_anon:0kB active_file:85432kB inactive_file:161940kB unevictable:1536kB writepending:1128kB present:3129332kB managed:2592912kB mlocked:0kB bounce:0kB free_pcp:33064kB local_pcp:15068kB free_cma:0kB [ 1583.156788][T27334] lowmem_reserve[]: 0 0 1 1 1 [ 1583.161699][T27334] Node 0 Normal free:4kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1583.251933][T27334] lowmem_reserve[]: 0 0 0 0 0 [ 1583.257475][T27334] Node 1 Normal free:3909024kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:9600kB local_pcp:0kB free_cma:0kB [ 1583.304524][T27334] lowmem_reserve[]: 0 0 0 0 0 [ 1583.336827][T27334] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1583.362886][T27334] Node 0 DMA32: 1979*4kB (UME) 1359*8kB (UME) 1720*16kB (UME) 942*32kB (UME) 1497*64kB (UME) 916*128kB (UME) 361*256kB (UME) 117*512kB (UM) 67*1024kB (UM) 6*2048kB (UME) 192*4096kB (UM) = 1309156kB [ 1583.406642][T27334] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1583.434040][T27334] Node 1 Normal: 266*4kB (UME) 65*8kB (UME) 35*16kB (UME) 190*32kB (UME) 70*64kB (UME) 18*128kB (UM) 15*256kB (UE) 2*512kB (UM) 0*1024kB 1*2048kB (E) 949*4096kB (M) = 3909024kB [ 1583.481102][T27334] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1583.491349][T27334] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1583.503027][T27334] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1583.536616][T27334] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1583.546094][T27334] 63267 total pagecache pages [ 1583.576601][T27334] 0 pages in swap cache [ 1583.581031][T27334] Free swap = 124996kB [ 1583.585319][T27334] Total swap = 124996kB [ 1583.609166][T27334] 2097051 pages RAM [ 1583.613066][T27334] 0 pages HighMem/MovableOnly [ 1583.628916][T27334] 415222 pages reserved [ 1583.633170][T27334] 0 pages cma reserved [ 1583.708931][T27336] netlink: 'syz.5.7059': attribute type 25 has an invalid length. [ 1583.721514][T27336] netlink: 'syz.5.7059': attribute type 6 has an invalid length. [ 1583.732297][T27350] netlink: 'syz.4.7062': attribute type 10 has an invalid length. [ 1583.903354][T27361] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.7068'. [ 1584.189163][T27369] netlink: 'syz.1.7072': attribute type 10 has an invalid length. [ 1584.474869][T27380] netlink: 'syz.2.7074': attribute type 11 has an invalid length. [ 1584.526488][T27380] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.7074'. [ 1584.702874][T27390] netlink: 'syz.1.7079': attribute type 10 has an invalid length. [ 1585.923603][T27423] netlink: 'syz.2.7092': attribute type 10 has an invalid length. [ 1585.942725][T27423] netlink: 55 bytes leftover after parsing attributes in process `syz.2.7092'. [ 1585.964115][T27433] netlink: 'syz.0.7093': attribute type 29 has an invalid length. [ 1586.037008][T27433] netlink: 'syz.0.7093': attribute type 29 has an invalid length. [ 1586.097262][T27431] netlink: 'syz.0.7093': attribute type 29 has an invalid length. [ 1586.125174][T27434] netlink: 'syz.0.7093': attribute type 29 has an invalid length. [ 1587.008880][T27452] netlink: 'syz.5.7099': attribute type 10 has an invalid length. [ 1587.024475][T27455] netlink: 'syz.2.7102': attribute type 17 has an invalid length. [ 1587.036006][T27455] netlink: 'syz.2.7102': attribute type 11 has an invalid length. [ 1587.056724][T27455] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.7102'. [ 1587.729802][T27477] netlink: 'syz.4.7111': attribute type 10 has an invalid length. [ 1587.751177][T27477] netlink: 55 bytes leftover after parsing attributes in process `syz.4.7111'. [ 1588.050000][T27490] net_ratelimit: 3548 callbacks suppressed [ 1588.050023][T27490] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1588.329874][T27497] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.7115'. [ 1589.908025][T27497] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 1590.072809][T27508] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7119'. [ 1591.221004][T27522] netlink: 'syz.0.7124': attribute type 153 has an invalid length. [ 1591.263946][T27522] netlink: 69544 bytes leftover after parsing attributes in process `syz.0.7124'. [ 1591.309954][T27526] FAULT_INJECTION: forcing a failure. [ 1591.309954][T27526] name failslab, interval 1, probability 0, space 0, times 0 [ 1591.322257][T27523] netlink: 'syz.0.7124': attribute type 153 has an invalid length. [ 1591.334983][T27526] CPU: 0 PID: 27526 Comm: syz.1.7125 Not tainted syzkaller #0 [ 1591.342885][T27526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1591.353146][T27526] Call Trace: [ 1591.356482][T27526] [ 1591.359580][T27526] dump_stack_lvl+0x188/0x24e [ 1591.364469][T27526] ? show_regs_print_info+0x12/0x12 [ 1591.370000][T27526] ? load_image+0x410/0x410 [ 1591.374761][T27526] ? perf_trace_preemptirq_template+0x268/0x320 [ 1591.381081][T27526] should_fail_ex+0x390/0x4c0 [ 1591.385903][T27526] should_failslab+0x5/0x20 [ 1591.390816][T27526] slab_pre_alloc_hook+0x59/0x300 [ 1591.395979][T27526] ? lock_chain_count+0x20/0x20 [ 1591.400909][T27526] kmem_cache_alloc+0x56/0x2f0 [ 1591.405706][T27526] ? skb_clone+0x1e7/0x370 [ 1591.410253][T27526] skb_clone+0x1e7/0x370 [ 1591.414572][T27526] bpf_clone_redirect+0x169/0x4a0 [ 1591.419651][T27526] bpf_prog_208b094576c80b22+0x56/0x5b [ 1591.425429][T27526] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1591.431566][T27526] ? __lock_acquire+0x7c40/0x7c40 [ 1591.436702][T27526] ? lock_chain_count+0x20/0x20 [ 1591.441639][T27526] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 1591.448278][T27526] ? lockdep_hardirqs_on+0x94/0x140 [ 1591.453526][T27526] ? ktime_get+0x7b/0x270 [ 1591.457992][T27526] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 1591.464396][T27526] ? ktime_get_real_ts64+0x440/0x440 [ 1591.469729][T27526] ? read_lock_is_recursive+0x10/0x10 [ 1591.475397][T27526] ? perf_trace_preemptirq_template+0x268/0x320 [ 1591.481896][T27526] ? __cant_sleep+0x220/0x220 [ 1591.486631][T27526] ? ktime_get+0x247/0x270 [ 1591.491281][T27526] bpf_test_run+0x2b6/0x830 [ 1591.495844][T27526] ? dst_hold+0xb0/0xb0 [ 1591.500229][T27526] ? eth_get_headlen+0x200/0x200 [ 1591.505391][T27526] ? __build_skb+0x24b/0x3b0 [ 1591.510031][T27526] bpf_prog_test_run_skb+0xdaf/0x18e0 [ 1591.515462][T27526] ? cpu_online+0xa0/0xa0 [ 1591.519921][T27526] bpf_prog_test_run+0x31c/0x390 [ 1591.524930][T27526] __sys_bpf+0x62b/0x780 [ 1591.529404][T27526] ? bpf_link_show_fdinfo+0x380/0x380 [ 1591.534947][T27526] ? lock_chain_count+0x20/0x20 [ 1591.539850][T27526] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1591.545893][T27526] __x64_sys_bpf+0x78/0x90 [ 1591.550477][T27526] do_syscall_64+0x4c/0xa0 [ 1591.555044][T27526] ? clear_bhb_loop+0x60/0xb0 [ 1591.559766][T27526] ? clear_bhb_loop+0x60/0xb0 [ 1591.564506][T27526] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1591.570673][T27526] RIP: 0033:0x7f3a1b39de59 [ 1591.575135][T27526] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1591.595055][T27526] RSP: 002b:00007f3a1c230028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1591.603972][T27526] RAX: ffffffffffffffda RBX: 00007f3a1b625fa0 RCX: 00007f3a1b39de59 [ 1591.612597][T27526] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 1591.620602][T27526] RBP: 00007f3a1c230090 R08: 0000000000000000 R09: 0000000000000000 [ 1591.628745][T27526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1591.637121][T27526] R13: 00007f3a1b626038 R14: 00007f3a1b625fa0 R15: 00007ffe02cef9b8 [ 1591.645319][T27526] [ 1591.654618][T27523] netlink: 69544 bytes leftover after parsing attributes in process `syz.0.7124'. [ 1591.698976][T27522] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7124'. [ 1591.718355][T27523] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7124'. [ 1591.773657][T27528] netlink: 146340 bytes leftover after parsing attributes in process `syz.0.7124'. [ 1591.827402][T27531] netlink: 'syz.4.7126': attribute type 10 has an invalid length. [ 1591.853576][T27522] netlink: 146340 bytes leftover after parsing attributes in process `syz.0.7124'. [ 1591.871783][T27528] openvswitch: netlink: Key type 386 is out of range max 32 [ 1591.885180][T27522] openvswitch: netlink: Key type 386 is out of range max 32 [ 1592.329545][T27539] netlink: 'syz.5.7131': attribute type 10 has an invalid length. [ 1592.349723][T27539] netlink: 55 bytes leftover after parsing attributes in process `syz.5.7131'. [ 1593.337051][T27575] netlink: 'syz.4.7144': attribute type 10 has an invalid length. [ 1595.573912][T27593] bond0: (slave bridge_slave_1): Error: Slave has XDP program loaded, please unload before enslaving [ 1595.723907][T27590] netlink: 'syz.4.7151': attribute type 10 has an invalid length. [ 1596.468029][T27602] netlink: 14 bytes leftover after parsing attributes in process `syz.1.7154'. [ 1597.626238][T27602] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1597.660674][T27602] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1597.697844][T27602] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1597.721192][T27602] bond0 (unregistering): Released all slaves [ 1598.009244][T27618] device syzkaller1 entered promiscuous mode [ 1598.030565][T27618] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1598.036488][T27618] syzkaller1: Linktype set failed because interface is up [ 1598.121163][T27623] syzkaller1: tun_chr_ioctl cmd 2147767517 [ 1598.324137][T27631] netlink: 'syz.5.7161': attribute type 10 has an invalid length. [ 1602.135672][T27645] netlink: 'syz.1.7167': attribute type 10 has an invalid length. [ 1602.154314][T27647] netlink: 'syz.5.7170': attribute type 10 has an invalid length. [ 1602.177513][T27647] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7170'. [ 1602.664292][T27671] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7177'. [ 1603.147535][T27684] netlink: 'syz.4.7181': attribute type 10 has an invalid length. [ 1603.219906][T27686] netlink: 'syz.2.7182': attribute type 10 has an invalid length. [ 1603.376702][T27686] team0: Port device geneve1 added [ 1603.520866][T27692] netlink: 'syz.5.7184': attribute type 29 has an invalid length. [ 1603.572572][T27692] netlink: 'syz.5.7184': attribute type 29 has an invalid length. [ 1603.604489][T27695] netlink: 'syz.5.7184': attribute type 29 has an invalid length. [ 1605.052263][T27711] netlink: 'syz.2.7191': attribute type 3 has an invalid length. [ 1605.116751][T27711] netlink: 42732 bytes leftover after parsing attributes in process `syz.2.7191'. [ 1605.203415][T27720] FAULT_INJECTION: forcing a failure. [ 1605.203415][T27720] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1605.356759][T27720] CPU: 0 PID: 27720 Comm: syz.2.7191 Not tainted syzkaller #0 [ 1605.364701][T27720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1605.375437][T27720] Call Trace: [ 1605.378773][T27720] [ 1605.381947][T27720] dump_stack_lvl+0x188/0x24e [ 1605.386714][T27720] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1605.393520][T27720] ? show_regs_print_info+0x12/0x12 [ 1605.399269][T27720] ? load_image+0x410/0x410 [ 1605.404119][T27720] should_fail_ex+0x390/0x4c0 [ 1605.409201][T27720] _copy_from_user+0x2c/0x170 [ 1605.414232][T27720] bpf_prog_test_run_skb+0x263/0x18e0 [ 1605.419767][T27720] ? __fget_files+0x28/0x460 [ 1605.424513][T27720] ? __fget_files+0x3fc/0x460 [ 1605.429453][T27720] ? cpu_online+0xa0/0xa0 [ 1605.433951][T27720] bpf_prog_test_run+0x31c/0x390 [ 1605.439240][T27720] __sys_bpf+0x62b/0x780 [ 1605.443721][T27720] ? bpf_link_show_fdinfo+0x380/0x380 [ 1605.449953][T27720] ? lock_chain_count+0x20/0x20 [ 1605.455212][T27720] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1605.461418][T27720] __x64_sys_bpf+0x78/0x90 [ 1605.466002][T27720] do_syscall_64+0x4c/0xa0 [ 1605.470850][T27720] ? clear_bhb_loop+0x60/0xb0 [ 1605.475663][T27720] ? clear_bhb_loop+0x60/0xb0 [ 1605.480389][T27720] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1605.486335][T27720] RIP: 0033:0x7ffb4e79de59 [ 1605.490782][T27720] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1605.510520][T27720] RSP: 002b:00007ffb4f6a3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1605.519440][T27720] RAX: ffffffffffffffda RBX: 00007ffb4ea26090 RCX: 00007ffb4e79de59 [ 1605.527544][T27720] RDX: 0000000000000050 RSI: 0000200000000540 RDI: 000000000000000a [ 1605.535641][T27720] RBP: 00007ffb4f6a3090 R08: 0000000000000000 R09: 0000000000000000 [ 1605.543785][T27720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1605.551906][T27720] R13: 00007ffb4ea26128 R14: 00007ffb4ea26090 R15: 00007ffd3768dfd8 [ 1605.560054][T27720] [ 1605.704612][T27736] netlink: 'syz.1.7200': attribute type 10 has an invalid length. [ 1605.897582][T27744] netlink: 'syz.0.7203': attribute type 10 has an invalid length. [ 1605.947768][T27744] device hsr0 entered promiscuous mode [ 1605.975987][T27744] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1606.006883][T27744] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 1606.065767][T27744] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1606.096790][T27744] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 1606.358696][T27759] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.7208'. [ 1606.629304][T27766] netlink: 'syz.0.7209': attribute type 3 has an invalid length. [ 1606.658459][T27766] netlink: 42732 bytes leftover after parsing attributes in process `syz.0.7209'. [ 1607.702601][T27786] netlink: 'syz.4.7217': attribute type 3 has an invalid length. [ 1607.714175][T27786] netlink: 42732 bytes leftover after parsing attributes in process `syz.4.7217'. [ 1608.884414][T27791] netlink: 'syz.5.7218': attribute type 7 has an invalid length. [ 1608.954994][T27802] FAULT_INJECTION: forcing a failure. [ 1608.954994][T27802] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1608.980402][T27801] netlink: 'syz.2.7222': attribute type 21 has an invalid length. [ 1608.999040][T27791] netlink: 'syz.5.7218': attribute type 7 has an invalid length. [ 1609.117229][T27791] netlink: 198580 bytes leftover after parsing attributes in process `syz.5.7218'. [ 1609.128073][T27802] CPU: 0 PID: 27802 Comm: syz.4.7221 Not tainted syzkaller #0 [ 1609.135811][T27802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1609.146300][T27802] Call Trace: [ 1609.149641][T27802] [ 1609.152853][T27802] dump_stack_lvl+0x188/0x24e [ 1609.157867][T27802] ? show_regs_print_info+0x12/0x12 [ 1609.163374][T27802] ? load_image+0x410/0x410 [ 1609.168025][T27802] ? __lock_acquire+0x7c40/0x7c40 [ 1609.173105][T27802] should_fail_ex+0x390/0x4c0 [ 1609.178309][T27802] prepare_alloc_pages+0x1e1/0x5b0 [ 1609.183704][T27802] __alloc_pages+0x130/0x4f0 [ 1609.188818][T27802] ? trace_event_raw_event_lock+0x230/0x230 [ 1609.195973][T27802] ? zone_statistics+0x170/0x170 [ 1609.201276][T27802] pte_alloc_one+0x7b/0x310 [ 1609.206011][T27802] ? pfn_modify_allowed+0x560/0x560 [ 1609.211362][T27802] ? __might_sleep+0xd0/0xd0 [ 1609.216084][T27802] ? rcu_is_watching+0x11/0xa0 [ 1609.221083][T27802] __pte_alloc+0x21/0x150 [ 1609.226283][T27802] copy_page_range+0x322f/0x3a60 [ 1609.231479][T27802] ? pfn_valid+0x450/0x450 [ 1609.236177][T27802] ? up_write+0x1b6/0x410 [ 1609.240854][T27802] ? vma_interval_tree_augment_rotate+0x160/0x190 [ 1609.248024][T27802] copy_mm+0xeb0/0x1680 [ 1609.252580][T27802] ? copy_signal+0x640/0x640 [ 1609.257425][T27802] ? lockdep_init_map_type+0x98/0x8d0 [ 1609.263064][T27802] ? __init_rwsem+0x11e/0x160 [ 1609.267809][T27802] ? copy_signal+0x51f/0x640 [ 1609.272555][T27802] copy_process+0x19a6/0x40c0 [ 1609.277751][T27802] ? copy_process+0x974/0x40c0 [ 1609.282760][T27802] ? idle_dummy+0x10/0x10 [ 1609.287193][T27802] kernel_clone+0x24b/0x900 [ 1609.292400][T27802] ? ksys_write+0x1ce/0x260 [ 1609.297143][T27802] ? create_io_thread+0x170/0x170 [ 1609.302433][T27802] __x64_sys_clone+0x1a7/0x220 [ 1609.307246][T27802] ? __fget_files+0x3fc/0x460 [ 1609.311965][T27802] ? __ia32_sys_vfork+0x140/0x140 [ 1609.317053][T27802] ? lock_chain_count+0x20/0x20 [ 1609.321994][T27802] ? lockdep_hardirqs_on+0x94/0x140 [ 1609.327521][T27802] do_syscall_64+0x4c/0xa0 [ 1609.332101][T27802] ? clear_bhb_loop+0x60/0xb0 [ 1609.336933][T27802] ? clear_bhb_loop+0x60/0xb0 [ 1609.341675][T27802] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1609.347964][T27802] RIP: 0033:0x7f4d0e39de59 [ 1609.352839][T27802] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1609.372614][T27802] RSP: 002b:00007f4d0f21efd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1609.381196][T27802] RAX: ffffffffffffffda RBX: 00007f4d0e625fa0 RCX: 00007f4d0e39de59 [ 1609.389319][T27802] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001000000 [ 1609.397329][T27802] RBP: 00007f4d0f21f090 R08: 0000000000000000 R09: 0000000000000000 [ 1609.405440][T27802] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1609.413455][T27802] R13: 00007f4d0e626038 R14: 00007f4d0e625fa0 R15: 00007ffff4554b08 [ 1609.421585][T27802] [ 1609.698403][T27813] netlink: 'syz.2.7223': attribute type 10 has an invalid length. [ 1609.775426][T27815] netlink: 10 bytes leftover after parsing attributes in process `syz.0.7226'. [ 1612.759187][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1612.765928][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1612.887834][T27868] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7241'. [ 1612.966906][T27866] netlink: 'syz.0.7242': attribute type 10 has an invalid length. [ 1613.438953][T27884] FAULT_INJECTION: forcing a failure. [ 1613.438953][T27884] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1613.488868][T27884] CPU: 1 PID: 27884 Comm: syz.0.7248 Not tainted syzkaller #0 [ 1613.496723][T27884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1613.507143][T27884] Call Trace: [ 1613.510583][T27884] [ 1613.513789][T27884] dump_stack_lvl+0x188/0x24e [ 1613.519035][T27884] ? show_regs_print_info+0x12/0x12 [ 1613.524733][T27884] ? load_image+0x410/0x410 [ 1613.529377][T27884] ? __lock_acquire+0x7c40/0x7c40 [ 1613.534552][T27884] should_fail_ex+0x390/0x4c0 [ 1613.539542][T27884] _copy_from_user+0x2c/0x170 [ 1613.544353][T27884] iovec_from_user+0x143/0x360 [ 1613.549605][T27884] __import_iovec+0x6c/0x510 [ 1613.554433][T27884] import_iovec+0x6f/0xa0 [ 1613.558899][T27884] ___sys_sendmsg+0x252/0x360 [ 1613.564241][T27884] ? __sys_sendmsg+0x2a0/0x2a0 [ 1613.569567][T27884] ? __lock_acquire+0x7c40/0x7c40 [ 1613.574884][T27884] __se_sys_sendmsg+0x1c3/0x2b0 [ 1613.579964][T27884] ? __x64_sys_sendmsg+0x80/0x80 [ 1613.585348][T27884] ? lockdep_hardirqs_on+0x94/0x140 [ 1613.591351][T27884] do_syscall_64+0x4c/0xa0 [ 1613.596335][T27884] ? clear_bhb_loop+0x60/0xb0 [ 1613.601198][T27884] ? clear_bhb_loop+0x60/0xb0 [ 1613.606119][T27884] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1613.612291][T27884] RIP: 0033:0x7f3f5979de59 [ 1613.617276][T27884] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1613.638495][T27884] RSP: 002b:00007f3f5a71f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1613.647977][T27884] RAX: ffffffffffffffda RBX: 00007f3f59a25fa0 RCX: 00007f3f5979de59 [ 1613.657076][T27884] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 1613.665113][T27884] RBP: 00007f3f5a71f090 R08: 0000000000000000 R09: 0000000000000000 [ 1613.673234][T27884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1613.681259][T27884] R13: 00007f3f59a26038 R14: 00007f3f59a25fa0 R15: 00007ffd16ecf7f8 [ 1613.689676][T27884] [ 1614.001708][T27877] netlink: 'syz.4.7247': attribute type 3 has an invalid length. [ 1614.034587][T27877] netlink: 42732 bytes leftover after parsing attributes in process `syz.4.7247'. [ 1614.081446][T27888] netlink: 111 bytes leftover after parsing attributes in process `syz.1.7249'. [ 1615.885774][T27926] netlink: 144 bytes leftover after parsing attributes in process `syz.4.7255'. [ 1616.632128][T27941] netlink: 'syz.1.7262': attribute type 4 has an invalid length. [ 1616.661175][T27942] netlink: 'syz.0.7270': attribute type 10 has an invalid length. [ 1617.526210][T27962] FAULT_INJECTION: forcing a failure. [ 1617.526210][T27962] name failslab, interval 1, probability 0, space 0, times 0 [ 1617.545864][T27962] CPU: 1 PID: 27962 Comm: syz.0.7271 Not tainted syzkaller #0 [ 1617.553525][T27962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1617.563814][T27962] Call Trace: [ 1617.567145][T27962] [ 1617.570125][T27962] dump_stack_lvl+0x188/0x24e [ 1617.574999][T27962] ? show_regs_print_info+0x12/0x12 [ 1617.580365][T27962] ? load_image+0x410/0x410 [ 1617.585195][T27962] ? __might_sleep+0xd0/0xd0 [ 1617.589929][T27962] ? __lock_acquire+0x7c40/0x7c40 [ 1617.595014][T27962] ? verify_lock_unused+0x140/0x140 [ 1617.600278][T27962] should_fail_ex+0x390/0x4c0 [ 1617.605019][T27962] should_failslab+0x5/0x20 [ 1617.609570][T27962] slab_pre_alloc_hook+0x59/0x300 [ 1617.614651][T27962] ? __get_vm_area_node+0x122/0x330 [ 1617.619916][T27962] __kmem_cache_alloc_node+0x4f/0x270 [ 1617.625346][T27962] ? __get_vm_area_node+0x122/0x330 [ 1617.630590][T27962] kmalloc_node_trace+0x22/0xe0 [ 1617.635486][T27962] __get_vm_area_node+0x122/0x330 [ 1617.640639][T27962] ? __local_bh_enable_ip+0x136/0x1c0 [ 1617.647124][T27962] __vmalloc_node_range+0x357/0x1380 [ 1617.652563][T27962] ? netlink_sendmsg+0x5ec/0xbd0 [ 1617.657666][T27962] ? netlink_insert+0x28d/0x13b0 [ 1617.662746][T27962] ? free_vm_area+0x50/0x50 [ 1617.667587][T27962] ? netlink_sendmsg+0x5ec/0xbd0 [ 1617.672908][T27962] vmalloc+0x75/0x80 [ 1617.676843][T27962] ? netlink_sendmsg+0x5ec/0xbd0 [ 1617.681833][T27962] netlink_sendmsg+0x5ec/0xbd0 [ 1617.686733][T27962] ? netlink_getsockopt+0x550/0x550 [ 1617.692059][T27962] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1617.697918][T27962] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1617.703409][T27962] ? security_socket_sendmsg+0x7c/0xa0 [ 1617.708911][T27962] sock_write_iter+0x2d5/0x3e0 [ 1617.713773][T27962] ? sock_read_iter+0x3a0/0x3a0 [ 1617.718759][T27962] ? common_file_perm+0x171/0x1c0 [ 1617.723822][T27962] vfs_write+0x482/0x9a0 [ 1617.728203][T27962] ? file_end_write+0x250/0x250 [ 1617.733129][T27962] ? __fget_files+0x3fc/0x460 [ 1617.738215][T27962] ? __fdget_pos+0x1d4/0x360 [ 1617.742863][T27962] ? ksys_write+0x70/0x260 [ 1617.747468][T27962] ksys_write+0x14d/0x260 [ 1617.751956][T27962] ? __ia32_sys_read+0x80/0x80 [ 1617.756885][T27962] ? lockdep_hardirqs_on+0x94/0x140 [ 1617.762303][T27962] do_syscall_64+0x4c/0xa0 [ 1617.766773][T27962] ? clear_bhb_loop+0x60/0xb0 [ 1617.771693][T27962] ? clear_bhb_loop+0x60/0xb0 [ 1617.776407][T27962] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1617.782337][T27962] RIP: 0033:0x7f3f5979de59 [ 1617.787393][T27962] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1617.807746][T27962] RSP: 002b:00007f3f5a71f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1617.816470][T27962] RAX: ffffffffffffffda RBX: 00007f3f59a25fa0 RCX: 00007f3f5979de59 [ 1617.824588][T27962] RDX: 000000000000fe33 RSI: 0000200000000000 RDI: 0000000000000003 [ 1617.832806][T27962] RBP: 00007f3f5a71f090 R08: 0000000000000000 R09: 0000000000000000 [ 1617.840902][T27962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1617.849094][T27962] R13: 00007f3f59a26038 R14: 00007f3f59a25fa0 R15: 00007ffd16ecf7f8 [ 1617.857147][T27962] [ 1617.906382][T27962] syz.0.7271: vmalloc error: size 65408, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 1617.928334][T27962] CPU: 1 PID: 27962 Comm: syz.0.7271 Not tainted syzkaller #0 [ 1617.935949][T27962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1617.946751][T27962] Call Trace: [ 1617.950083][T27962] [ 1617.953113][T27962] dump_stack_lvl+0x188/0x24e [ 1617.957950][T27962] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 1617.964455][T27962] ? show_regs_print_info+0x12/0x12 [ 1617.969715][T27962] ? load_image+0x410/0x410 [ 1617.974336][T27962] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 1617.980845][T27962] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 1617.987486][T27962] warn_alloc+0x242/0x330 [ 1617.991869][T27962] ? __get_vm_area_node+0x122/0x330 [ 1617.997313][T27962] ? zone_watermark_ok_safe+0x270/0x270 [ 1618.002944][T27962] ? rcu_is_watching+0x11/0xa0 [ 1618.007910][T27962] ? __get_vm_area_node+0x318/0x330 [ 1618.013189][T27962] ? __local_bh_enable_ip+0x136/0x1c0 [ 1618.018738][T27962] __vmalloc_node_range+0x37c/0x1380 [ 1618.024209][T27962] ? netlink_insert+0x28d/0x13b0 [ 1618.029256][T27962] ? free_vm_area+0x50/0x50 [ 1618.033852][T27962] ? netlink_sendmsg+0x5ec/0xbd0 [ 1618.038895][T27962] vmalloc+0x75/0x80 [ 1618.042854][T27962] ? netlink_sendmsg+0x5ec/0xbd0 [ 1618.047868][T27962] netlink_sendmsg+0x5ec/0xbd0 [ 1618.052712][T27962] ? netlink_getsockopt+0x550/0x550 [ 1618.057988][T27962] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1618.063779][T27962] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1618.069237][T27962] ? security_socket_sendmsg+0x7c/0xa0 [ 1618.074948][T27962] sock_write_iter+0x2d5/0x3e0 [ 1618.079804][T27962] ? sock_read_iter+0x3a0/0x3a0 [ 1618.084912][T27962] ? common_file_perm+0x171/0x1c0 [ 1618.090011][T27962] vfs_write+0x482/0x9a0 [ 1618.094326][T27962] ? file_end_write+0x250/0x250 [ 1618.099525][T27962] ? __fget_files+0x3fc/0x460 [ 1618.104318][T27962] ? __fdget_pos+0x1d4/0x360 [ 1618.108973][T27962] ? ksys_write+0x70/0x260 [ 1618.113458][T27962] ksys_write+0x14d/0x260 [ 1618.118163][T27962] ? __ia32_sys_read+0x80/0x80 [ 1618.123358][T27962] ? lockdep_hardirqs_on+0x94/0x140 [ 1618.128620][T27962] do_syscall_64+0x4c/0xa0 [ 1618.133373][T27962] ? clear_bhb_loop+0x60/0xb0 [ 1618.138200][T27962] ? clear_bhb_loop+0x60/0xb0 [ 1618.143022][T27962] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1618.148992][T27962] RIP: 0033:0x7f3f5979de59 [ 1618.153915][T27962] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1618.173851][T27962] RSP: 002b:00007f3f5a71f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1618.182330][T27962] RAX: ffffffffffffffda RBX: 00007f3f59a25fa0 RCX: 00007f3f5979de59 [ 1618.190701][T27962] RDX: 000000000000fe33 RSI: 0000200000000000 RDI: 0000000000000003 [ 1618.198906][T27962] RBP: 00007f3f5a71f090 R08: 0000000000000000 R09: 0000000000000000 [ 1618.207184][T27962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1618.215213][T27962] R13: 00007f3f59a26038 R14: 00007f3f59a25fa0 R15: 00007ffd16ecf7f8 [ 1618.224336][T27962] [ 1618.258856][T27962] Mem-Info: [ 1618.262270][T27962] active_anon:9681 inactive_anon:0 isolated_anon:0 [ 1618.262270][T27962] active_file:21434 inactive_file:40548 isolated_file:0 [ 1618.262270][T27962] unevictable:768 dirty:136 writeback:0 [ 1618.262270][T27962] slab_reclaimable:21639 slab_unreclaimable:95893 [ 1618.262270][T27962] mapped:31220 shmem:1373 pagetables:708 [ 1618.262270][T27962] sec_pagetables:0 bounce:0 [ 1618.262270][T27962] kernel_misc_reclaimable:0 [ 1618.262270][T27962] free:1314314 free_pcp:3848 free_cma:0 [ 1618.316263][T27962] Node 0 active_anon:38724kB inactive_anon:0kB active_file:85736kB inactive_file:161988kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:124880kB dirty:540kB writeback:0kB shmem:3956kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10800kB pagetables:2832kB sec_pagetables:0kB all_unreclaimable? no [ 1618.363066][T27962] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1618.401905][T27962] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1618.437071][T27962] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 1618.443229][T27962] Node 0 DMA32 free:1332608kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:38724kB inactive_anon:0kB active_file:85736kB inactive_file:161988kB unevictable:1536kB writepending:540kB present:3129332kB managed:2592912kB mlocked:0kB bounce:0kB free_pcp:5248kB local_pcp:2156kB free_cma:0kB [ 1618.485914][T27962] lowmem_reserve[]: 0 0 1 1 1 [ 1618.492969][T27962] Node 0 Normal free:12kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 1618.536112][T27962] lowmem_reserve[]: 0 0 0 0 0 [ 1618.543001][T27962] Node 1 Normal free:3909024kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:9600kB local_pcp:0kB free_cma:0kB [ 1618.581451][T27962] lowmem_reserve[]: 0 0 0 0 0 [ 1618.593252][T27962] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1618.613374][T27962] Node 0 DMA32: 810*4kB (UME) 1683*8kB (UME) 1780*16kB (UME) 1270*32kB (UME) 1521*64kB (UME) 932*128kB (UME) 392*256kB (UME) 122*512kB (UM) 67*1024kB (UM) 6*2048kB (UME) 192*4096kB (UM) = 1332608kB [ 1618.639940][T27962] Node 0 Normal: 3*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 1618.655928][T27962] Node 1 Normal: 266*4kB (UME) 65*8kB (UME) 35*16kB (UME) 190*32kB (UME) 70*64kB (UME) 18*128kB (UM) 15*256kB (UE) 2*512kB (UM) 0*1024kB 1*2048kB (E) 949*4096kB (M) = 3909024kB [ 1618.681688][T27962] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1618.694258][T27962] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1618.713820][T27962] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1618.731200][T27962] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1618.742537][T27962] 63357 total pagecache pages [ 1618.752960][T27962] 0 pages in swap cache [ 1618.759174][T27962] Free swap = 124996kB [ 1618.764096][T27962] Total swap = 124996kB [ 1618.773582][T27962] 2097051 pages RAM [ 1618.780374][T27962] 0 pages HighMem/MovableOnly [ 1618.785205][T27962] 415222 pages reserved [ 1618.795303][T27962] 0 pages cma reserved [ 1619.637101][T27964] netlink: 'syz.0.7272': attribute type 33 has an invalid length. [ 1619.645110][T27964] netlink: 152 bytes leftover after parsing attributes in process `syz.0.7272'. [ 1619.849159][T27970] netlink: 'syz.5.7273': attribute type 21 has an invalid length. [ 1619.886866][T27970] netlink: 'syz.5.7273': attribute type 15 has an invalid length. [ 1619.920179][T27970] netlink: 156 bytes leftover after parsing attributes in process `syz.5.7273'. [ 1620.000491][T27975] netlink: 'syz.4.7276': attribute type 7 has an invalid length. [ 1620.026735][T27975] netlink: 'syz.4.7276': attribute type 7 has an invalid length. [ 1620.054343][T27975] netlink: 198580 bytes leftover after parsing attributes in process `syz.4.7276'. [ 1620.893888][T28006] netlink: 'syz.4.7285': attribute type 10 has an invalid length. [ 1621.228280][T28017] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.7289'. [ 1621.258605][T28017] netlink: 14 bytes leftover after parsing attributes in process `syz.2.7289'. [ 1626.330107][T28088] netlink: 'syz.2.7314': attribute type 29 has an invalid length. [ 1626.346965][T28088] netlink: 'syz.2.7314': attribute type 29 has an invalid length. [ 1626.391409][T28082] netlink: 'syz.2.7314': attribute type 29 has an invalid length. [ 1626.431844][T28083] delete_channel: no stack [ 1626.445169][T28090] netlink: 'syz.2.7314': attribute type 29 has an invalid length. [ 1627.365551][T28104] netlink: 144 bytes leftover after parsing attributes in process `syz.4.7322'. [ 1629.485424][T28128] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.7332'. [ 1630.141895][T28143] FAULT_INJECTION: forcing a failure. [ 1630.141895][T28143] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1630.158563][T28143] CPU: 0 PID: 28143 Comm: syz.1.7337 Not tainted syzkaller #0 [ 1630.166271][T28143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1630.176555][T28143] Call Trace: [ 1630.180139][T28143] [ 1630.183119][T28143] dump_stack_lvl+0x188/0x24e [ 1630.187976][T28143] ? show_regs_print_info+0x12/0x12 [ 1630.193336][T28143] ? load_image+0x410/0x410 [ 1630.197903][T28143] ? __lock_acquire+0x7c40/0x7c40 [ 1630.203459][T28143] ? lockdep_hardirqs_on+0x94/0x140 [ 1630.208735][T28143] should_fail_ex+0x390/0x4c0 [ 1630.213578][T28143] _copy_from_user+0x2c/0x170 [ 1630.218583][T28143] __sys_bpf+0x2ea/0x780 [ 1630.222894][T28143] ? bpf_link_show_fdinfo+0x380/0x380 [ 1630.228611][T28143] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1630.234862][T28143] __x64_sys_bpf+0x78/0x90 [ 1630.239363][T28143] do_syscall_64+0x4c/0xa0 [ 1630.244171][T28143] ? clear_bhb_loop+0x60/0xb0 [ 1630.248933][T28143] ? clear_bhb_loop+0x60/0xb0 [ 1630.253873][T28143] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1630.259825][T28143] RIP: 0033:0x7f3a1b39de59 [ 1630.264830][T28143] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1630.285294][T28143] RSP: 002b:00007f3a1c230028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1630.293982][T28143] RAX: ffffffffffffffda RBX: 00007f3a1b625fa0 RCX: 00007f3a1b39de59 [ 1630.302110][T28143] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 1630.310397][T28143] RBP: 00007f3a1c230090 R08: 0000000000000000 R09: 0000000000000000 [ 1630.318860][T28143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1630.326970][T28143] R13: 00007f3a1b626038 R14: 00007f3a1b625fa0 R15: 00007ffe02cef9b8 [ 1630.335001][T28143] [ 1635.111973][T28212] netlink: 'syz.2.7358': attribute type 29 has an invalid length. [ 1636.389700][T28212] netlink: 'syz.2.7358': attribute type 29 has an invalid length. [ 1637.438131][T28230] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.7365'. [ 1637.512058][T28233] netlink: 'syz.5.7365': attribute type 25 has an invalid length. [ 1637.716926][T28233] netlink: 'syz.5.7365': attribute type 6 has an invalid length. [ 1638.481257][T28241] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7367'. [ 1638.618524][T28244] netlink: 'syz.1.7367': attribute type 2 has an invalid length. [ 1638.626364][T28244] netlink: 'syz.1.7367': attribute type 4 has an invalid length. [ 1638.655838][T28244] netlink: 'syz.1.7367': attribute type 8 has an invalid length. [ 1638.693885][T28244] netlink: 'syz.1.7367': attribute type 9 has an invalid length. [ 1638.716706][T28244] netlink: 'syz.1.7367': attribute type 10 has an invalid length. [ 1638.724611][T28244] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7367'. [ 1638.847529][T28247] netlink: 'syz.2.7368': attribute type 3 has an invalid length. [ 1638.870650][T28247] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.7368'. [ 1639.292420][T28264] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7376'. [ 1639.420899][T28264] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1641.606092][T28287] validate_nla: 2 callbacks suppressed [ 1641.606132][T28287] netlink: 'syz.2.7383': attribute type 2 has an invalid length. [ 1641.647191][T28287] netlink: 'syz.2.7383': attribute type 4 has an invalid length. [ 1641.655350][T28287] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7383'. [ 1641.705094][T28289] netlink: 130053 bytes leftover after parsing attributes in process `syz.4.7384'. [ 1642.289795][T28303] netlink: 168864 bytes leftover after parsing attributes in process `syz.5.7389'. [ 1642.312933][T28303] netlink: zone id is out of range [ 1642.322607][T28303] netlink: zone id is out of range [ 1642.389632][T28306] netlink: 'syz.0.7388': attribute type 10 has an invalid length. [ 1644.327025][T28322] netlink: 'syz.0.7406': attribute type 10 has an invalid length. [ 1644.816797][T28333] netlink: 'syz.1.7401': attribute type 10 has an invalid length. [ 1645.408131][ T4290] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1645.418489][ T4290] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1645.428005][ T4290] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1645.437788][ T4290] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1645.446011][ T4290] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1645.454436][ T4290] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1645.596146][T28344] device syzkaller0 entered promiscuous mode [ 1647.556833][ T4290] Bluetooth: hci1: command 0x0409 tx timeout [ 1649.638269][ T4290] Bluetooth: hci1: command 0x041b tx timeout [ 1649.777656][T28356] netlink: 'syz.0.7409': attribute type 10 has an invalid length. [ 1649.952264][T28378] FAULT_INJECTION: forcing a failure. [ 1649.952264][T28378] name failslab, interval 1, probability 0, space 0, times 0 [ 1649.978793][T22845] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1650.043934][T28378] CPU: 0 PID: 28378 Comm: syz.2.7417 Not tainted syzkaller #0 [ 1650.051519][T28378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1650.061754][T28378] Call Trace: [ 1650.065074][T28378] [ 1650.068270][T28378] dump_stack_lvl+0x188/0x24e [ 1650.073025][T28378] ? show_regs_print_info+0x12/0x12 [ 1650.078377][T28378] ? load_image+0x410/0x410 [ 1650.082923][T28378] ? __might_sleep+0xd0/0xd0 [ 1650.087586][T28378] ? __lock_acquire+0x7c40/0x7c40 [ 1650.092656][T28378] should_fail_ex+0x390/0x4c0 [ 1650.097374][T28378] should_failslab+0x5/0x20 [ 1650.101994][T28378] slab_pre_alloc_hook+0x59/0x300 [ 1650.107059][T28378] ? mas_next_entry+0xde9/0xe90 [ 1650.111980][T28378] kmem_cache_alloc+0x56/0x2f0 [ 1650.116886][T28378] ? vm_area_dup+0x23/0x1a0 [ 1650.121623][T28378] vm_area_dup+0x23/0x1a0 [ 1650.126009][T28378] copy_mm+0xb13/0x1680 [ 1650.130315][T28378] ? copy_signal+0x640/0x640 [ 1650.134985][T28378] ? lockdep_init_map_type+0x98/0x8d0 [ 1650.140413][T28378] ? __init_rwsem+0x11e/0x160 [ 1650.145166][T28378] ? copy_signal+0x51f/0x640 [ 1650.149890][T28378] copy_process+0x19a6/0x40c0 [ 1650.154702][T28378] ? copy_process+0x974/0x40c0 [ 1650.159943][T28378] ? idle_dummy+0x10/0x10 [ 1650.164310][T28378] kernel_clone+0x24b/0x900 [ 1650.168841][T28378] ? ksys_write+0x1ce/0x260 [ 1650.173472][T28378] ? create_io_thread+0x170/0x170 [ 1650.178549][T28378] __x64_sys_clone+0x1a7/0x220 [ 1650.183343][T28378] ? __fget_files+0x3fc/0x460 [ 1650.188062][T28378] ? __ia32_sys_vfork+0x140/0x140 [ 1650.193409][T28378] ? lock_chain_count+0x20/0x20 [ 1650.198313][T28378] ? lockdep_hardirqs_on+0x94/0x140 [ 1650.203627][T28378] do_syscall_64+0x4c/0xa0 [ 1650.208254][T28378] ? clear_bhb_loop+0x60/0xb0 [ 1650.214677][T28378] ? clear_bhb_loop+0x60/0xb0 [ 1650.221641][T28378] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1650.228299][T28378] RIP: 0033:0x7ffb4e79de59 [ 1650.232839][T28378] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1650.252669][T28378] RSP: 002b:00007ffb4f6c3fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1650.261930][T28378] RAX: ffffffffffffffda RBX: 00007ffb4ea25fa0 RCX: 00007ffb4e79de59 [ 1650.270389][T28378] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000100000 [ 1650.278533][T28378] RBP: 00007ffb4f6c4090 R08: 0000000000000000 R09: 0000000000000000 [ 1650.287670][T28378] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1650.296227][T28378] R13: 00007ffb4ea26038 R14: 00007ffb4ea25fa0 R15: 00007ffd3768dfd8 [ 1650.304560][T28378] [ 1651.716795][ T4290] Bluetooth: hci1: command 0x040f tx timeout [ 1653.796822][ T4290] Bluetooth: hci1: command 0x0419 tx timeout [ 1654.923881][T22845] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1655.165010][T22845] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1655.180522][T28419] netlink: 'syz.4.7429': attribute type 9 has an invalid length. [ 1655.193496][T28419] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.7429'. [ 1655.221499][T28415] netlink: 'syz.2.7427': attribute type 10 has an invalid length. [ 1655.399365][T22845] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1655.420295][T28345] chnl_net:caif_netlink_parms(): no params data found [ 1655.726275][T28437] netlink: 'syz.1.7433': attribute type 10 has an invalid length. [ 1655.763816][T28345] bridge0: port 1(bridge_slave_0) entered blocking state [ 1655.777395][T28345] bridge0: port 1(bridge_slave_0) entered disabled state [ 1655.792557][T28345] device bridge_slave_0 entered promiscuous mode [ 1655.835431][T28345] bridge0: port 2(bridge_slave_1) entered blocking state [ 1655.870262][T28345] bridge0: port 2(bridge_slave_1) entered disabled state [ 1655.895060][T28345] device bridge_slave_1 entered promiscuous mode [ 1656.029116][T28345] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1656.216241][T28345] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1656.673011][T28345] team0: Port device team_slave_0 added [ 1656.732896][T28345] team0: Port device team_slave_1 added [ 1657.497524][T28345] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1657.505114][T28345] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1657.532580][T28345] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1657.553800][T28345] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1657.570074][T28345] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1657.599370][T28345] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1660.428530][T28345] device hsr_slave_0 entered promiscuous mode [ 1663.572445][T28345] device hsr_slave_1 entered promiscuous mode [ 1663.939239][T28515] FAULT_INJECTION: forcing a failure. [ 1663.939239][T28515] name failslab, interval 1, probability 0, space 0, times 0 [ 1664.007350][T28515] CPU: 0 PID: 28515 Comm: syz.0.7453 Not tainted syzkaller #0 [ 1664.017460][T28515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1664.030302][T28515] Call Trace: [ 1664.033913][T28515] [ 1664.037292][T28515] dump_stack_lvl+0x188/0x24e [ 1664.042745][T28515] ? show_regs_print_info+0x12/0x12 [ 1664.048233][T28515] ? load_image+0x410/0x410 [ 1664.052976][T28515] ? __might_sleep+0xd0/0xd0 [ 1664.057845][T28515] ? __lock_acquire+0x7c40/0x7c40 [ 1664.063344][T28515] ? __lock_acquire+0x1465/0x7c40 [ 1664.068597][T28515] should_fail_ex+0x390/0x4c0 [ 1664.075263][T28515] should_failslab+0x5/0x20 [ 1664.081332][T28515] slab_pre_alloc_hook+0x59/0x300 [ 1664.087948][T28515] ? aa_sk_perm+0x950/0x950 [ 1664.093245][T28515] kmem_cache_alloc_node+0x5a/0x310 [ 1664.101172][T28515] ? __alloc_skb+0xf9/0x7d0 [ 1664.106247][T28515] __alloc_skb+0xf9/0x7d0 [ 1664.111202][T28515] pfkey_sendmsg+0x19e/0x1140 [ 1664.116192][T28515] ? pfkey_release+0x340/0x340 [ 1664.121064][T28515] ? aa_sk_perm+0x81f/0x950 [ 1664.125707][T28515] ? aa_af_perm+0x340/0x340 [ 1664.130476][T28515] ? __might_fault+0xa6/0x120 [ 1664.135323][T28515] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 1664.142026][T28515] ? aa_sock_msg_perm+0x94/0x150 [ 1664.147089][T28515] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1664.152952][T28515] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1664.158431][T28515] ? security_socket_sendmsg+0x7c/0xa0 [ 1664.164002][T28515] ? pfkey_release+0x340/0x340 [ 1664.169131][T28515] ____sys_sendmsg+0x5ed/0x9a0 [ 1664.174160][T28515] ? __sys_sendmsg_sock+0x30/0x30 [ 1664.179281][T28515] ? __import_iovec+0x306/0x510 [ 1664.184910][T28515] ? import_iovec+0x6f/0xa0 [ 1664.189698][T28515] ___sys_sendmsg+0x2a2/0x360 [ 1664.195183][T28515] ? __sys_sendmsg+0x2a0/0x2a0 [ 1664.200121][T28515] ? __lock_acquire+0x7c40/0x7c40 [ 1664.205464][T28515] __se_sys_sendmsg+0x1c3/0x2b0 [ 1664.211997][T28515] ? __x64_sys_sendmsg+0x80/0x80 [ 1664.218435][T28515] ? lockdep_hardirqs_on+0x94/0x140 [ 1664.224269][T28515] do_syscall_64+0x4c/0xa0 [ 1664.228975][T28515] ? clear_bhb_loop+0x60/0xb0 [ 1664.234229][T28515] ? clear_bhb_loop+0x60/0xb0 [ 1664.239110][T28515] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1664.246487][T28515] RIP: 0033:0x7f3f5979de59 [ 1664.251350][T28515] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1664.272284][T28515] RSP: 002b:00007f3f5a71f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1664.281073][T28515] RAX: ffffffffffffffda RBX: 00007f3f59a25fa0 RCX: 00007f3f5979de59 [ 1664.289809][T28515] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 1664.298750][T28515] RBP: 00007f3f5a71f090 R08: 0000000000000000 R09: 0000000000000000 [ 1664.307712][T28515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1664.316636][T28515] R13: 00007f3f59a26038 R14: 00007f3f59a25fa0 R15: 00007ffd16ecf7f8 [ 1664.325544][T28515] [ 1665.330340][T28531] netlink: 'syz.2.7455': attribute type 11 has an invalid length. [ 1665.425161][T28534] netlink: 'syz.0.7457': attribute type 10 has an invalid length. [ 1672.156797][T28588] netlink: 'syz.1.7471': attribute type 10 has an invalid length. [ 1672.179181][T22845] device hsr_slave_0 left promiscuous mode [ 1672.207245][T22845] device hsr_slave_1 left promiscuous mode [ 1672.231771][T22845] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1672.246813][T22845] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1672.263657][T22845] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1672.274075][T22845] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1672.328256][T22845] device batadv0 left promiscuous mode [ 1672.334135][T22845] bridge0: port 2(batadv0) entered disabled state [ 1672.340998][T22845] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1672.416597][T22845] device bridge_slave_0 left promiscuous mode [ 1672.422942][T22845] bridge0: port 1(bridge_slave_0) entered disabled state [ 1674.208962][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1674.215768][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1674.534870][T22845] team0 (unregistering): Port device geneve1 removed [ 1675.015657][T22845] team0 (unregistering): Port device team_slave_1 removed [ 1675.069693][T22845] team0 (unregistering): Port device team_slave_0 removed [ 1675.124118][T22845] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1675.192714][T22845] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1675.264771][T22845] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1675.677289][T22845] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1675.686452][T22845] bond0 (unregistering): Released all slaves [ 1676.075407][T28345] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1676.139884][T28345] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1676.179214][T28642] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1676.226770][T28644] netlink: 'syz.2.7484': attribute type 10 has an invalid length. [ 1676.234984][T28345] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1676.282963][T28345] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1676.357760][T28642] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.7485'. [ 1676.778971][T28345] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1676.840094][T15090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1676.858471][T15090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1676.883207][T28345] 8021q: adding VLAN 0 to HW filter on device team0 [ 1677.054235][T15090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1677.077659][T15090] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1677.137866][T15090] bridge0: port 1(bridge_slave_0) entered blocking state [ 1677.145210][T15090] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1677.206166][T15090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1677.235110][T15090] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1677.254885][T15090] bridge0: port 2(bridge_slave_1) entered blocking state [ 1677.262152][T15090] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1677.347031][T15090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1677.503344][T15090] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1677.560746][T15090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1677.570343][T15090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1677.631942][T15090] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1681.719092][T15090] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1681.727887][T15090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1681.736977][T15090] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1681.746105][T15090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1681.755810][T15090] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1681.770775][T28345] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1681.784888][T28345] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1681.794466][T28683] netlink: 10 bytes leftover after parsing attributes in process `syz.0.7493'. [ 1681.806624][T28687] netlink: 'syz.2.7494': attribute type 10 has an invalid length. [ 1681.815192][T28694] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7498'. [ 1681.838936][T15096] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1681.868977][T15096] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1682.111902][T28703] netlink: 'syz.2.7499': attribute type 10 has an invalid length. [ 1682.138474][T28704] FAULT_INJECTION: forcing a failure. [ 1682.138474][T28704] name failslab, interval 1, probability 0, space 0, times 0 [ 1682.151838][T28704] CPU: 0 PID: 28704 Comm: syz.0.7502 Not tainted syzkaller #0 [ 1682.159360][T28704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1682.170052][T28704] Call Trace: [ 1682.173472][T28704] [ 1682.176460][T28704] dump_stack_lvl+0x188/0x24e [ 1682.181412][T28704] ? show_regs_print_info+0x12/0x12 [ 1682.186738][T28704] ? load_image+0x410/0x410 [ 1682.191695][T28704] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1682.198020][T28704] ? lock_chain_count+0x20/0x20 [ 1682.203079][T28704] should_fail_ex+0x390/0x4c0 [ 1682.207849][T28704] should_failslab+0x5/0x20 [ 1682.212502][T28704] slab_pre_alloc_hook+0x59/0x300 [ 1682.217774][T28704] kmem_cache_alloc+0x56/0x2f0 [ 1682.223304][T28704] ? dst_alloc+0x101/0x160 [ 1682.228237][T28704] dst_alloc+0x101/0x160 [ 1682.232633][T28704] ip_route_output_key_hash_rcu+0x14e4/0x23f0 [ 1682.239167][T28704] ? ip_route_output_key_hash+0x139/0x330 [ 1682.245309][T28704] ip_route_output_key_hash+0x1ef/0x330 [ 1682.250925][T28704] ? ip_route_input_rcu+0x30a0/0x30a0 [ 1682.256372][T28704] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1682.262588][T28704] ip_route_output_flow+0x26/0x150 [ 1682.267754][T28704] ip_tunnel_xmit+0x9a2/0x25d0 [ 1682.272669][T28704] ? perf_trace_preemptirq_template+0x268/0x320 [ 1682.279069][T28704] ? ip_tunnel_xmit+0xf0/0x25d0 [ 1682.284052][T28704] ? ip4_dst_hoplimit+0x2d0/0x2d0 [ 1682.289489][T28704] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1682.296069][T28704] ? lockdep_hardirqs_on+0x94/0x140 [ 1682.301809][T28704] ? skb_push+0x8a/0xd0 [ 1682.306133][T28704] ? gre_build_header+0x251/0x9a0 [ 1682.311211][T28704] ipgre_xmit+0x7e4/0xb60 [ 1682.315820][T28704] dev_hard_start_xmit+0x292/0x8b0 [ 1682.321631][T28704] ? validate_xmit_skb_list+0x120/0x120 [ 1682.327404][T28704] __dev_queue_xmit+0x1b4b/0x3810 [ 1682.332486][T28704] ? perf_trace_preemptirq_template+0x268/0x320 [ 1682.339252][T28704] ? __dev_queue_xmit+0x281/0x3810 [ 1682.344704][T28704] ? netdev_core_pick_tx+0x360/0x360 [ 1682.350344][T28704] ? lock_chain_count+0x20/0x20 [ 1682.355733][T28704] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1682.362023][T28704] ? lockdep_hardirqs_on+0x94/0x140 [ 1682.367347][T28704] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1682.373660][T28704] __bpf_redirect+0x8c7/0x1110 [ 1682.378645][T28704] bpf_clone_redirect+0x311/0x4a0 [ 1682.383732][T28704] bpf_prog_208b094576c80b22+0x56/0x5b [ 1682.389447][T28704] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1682.395567][T28704] ? __lock_acquire+0x7c40/0x7c40 [ 1682.400653][T28704] ? lock_chain_count+0x20/0x20 [ 1682.405665][T28704] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 1682.412157][T28704] ? lockdep_hardirqs_on+0x94/0x140 [ 1682.417404][T28704] ? ktime_get+0x7b/0x270 [ 1682.421777][T28704] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 1682.428336][T28704] ? ktime_get_real_ts64+0x440/0x440 [ 1682.433701][T28704] ? read_lock_is_recursive+0x10/0x10 [ 1682.439641][T28704] ? __cant_sleep+0x220/0x220 [ 1682.444730][T28704] ? ktime_get+0x247/0x270 [ 1682.449510][T28704] bpf_test_run+0x2b6/0x830 [ 1682.454086][T28704] ? dst_hold+0xb0/0xb0 [ 1682.458304][T28704] ? eth_get_headlen+0x200/0x200 [ 1682.463322][T28704] ? __build_skb+0x24b/0x3b0 [ 1682.468045][T28704] bpf_prog_test_run_skb+0xdaf/0x18e0 [ 1682.473608][T28704] ? cpu_online+0xa0/0xa0 [ 1682.477997][T28704] bpf_prog_test_run+0x31c/0x390 [ 1682.482979][T28704] __sys_bpf+0x62b/0x780 [ 1682.487366][T28704] ? bpf_link_show_fdinfo+0x380/0x380 [ 1682.492892][T28704] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1682.499209][T28704] __x64_sys_bpf+0x78/0x90 [ 1682.503697][T28704] do_syscall_64+0x4c/0xa0 [ 1682.508276][T28704] ? clear_bhb_loop+0x60/0xb0 [ 1682.513180][T28704] ? clear_bhb_loop+0x60/0xb0 [ 1682.518177][T28704] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1682.524312][T28704] RIP: 0033:0x7f3f5979de59 [ 1682.528797][T28704] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1682.548826][T28704] RSP: 002b:00007f3f5a71f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1682.557814][T28704] RAX: ffffffffffffffda RBX: 00007f3f59a25fa0 RCX: 00007f3f5979de59 [ 1682.565931][T28704] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 1682.574126][T28704] RBP: 00007f3f5a71f090 R08: 0000000000000000 R09: 0000000000000000 [ 1682.582438][T28704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1682.590508][T28704] R13: 00007f3f59a26038 R14: 00007f3f59a25fa0 R15: 00007ffd16ecf7f8 [ 1682.598979][T28704] [ 1682.615209][T28708] netlink: 'syz.4.7501': attribute type 1 has an invalid length. [ 1682.625802][T28708] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.7501'. [ 1683.036136][T28715] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.7503'. [ 1683.495177][T22845] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1683.507120][T22845] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1683.572820][T28345] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1685.469936][T28776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1685.490869][T28776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1685.587431][T28782] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1685.617323][T28782] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1685.649118][T28345] device veth0_vlan entered promiscuous mode [ 1685.663392][T28782] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1685.692504][T28782] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1685.735965][T28345] device veth1_vlan entered promiscuous mode [ 1685.873242][T28776] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1685.905447][T28776] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1685.914001][T28776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1685.967844][T28776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1685.985872][T28345] device veth0_macvtap entered promiscuous mode [ 1686.022819][T28345] device veth1_macvtap entered promiscuous mode [ 1686.251485][T28345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1686.299437][T28345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1686.363279][T28345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1686.412816][T28345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1686.423499][T28345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1686.444444][T28345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1686.484418][T28345] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1686.534437][T28804] netlink: 'syz.4.7510': attribute type 10 has an invalid length. [ 1686.589358][T28773] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1686.618638][T28773] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1686.665683][T28773] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1686.716067][T28773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1686.759020][T28345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1686.797480][T28345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1686.833394][T28345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1686.855610][T28345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1686.872798][T28345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1686.884328][T28345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1686.898251][T28345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1686.911503][T28345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1686.924347][T28345] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1686.958546][T28773] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1686.977741][T28773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1687.009700][T28345] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1687.028168][T28345] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1687.043763][T28345] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1687.054071][T28345] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1687.073025][T28819] netlink: 'syz.0.7514': attribute type 10 has an invalid length. [ 1687.337661][T28826] netlink: 'syz.2.7516': attribute type 10 has an invalid length. [ 1687.710062][T28774] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1687.745214][T28774] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1687.780044][T28773] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1687.882691][T28773] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1687.928379][T28773] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1691.137248][T28841] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7519'. [ 1691.154997][T28773] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1691.174243][T28843] netlink: 128 bytes leftover after parsing attributes in process `syz.0.7519'. [ 1691.198012][T28843] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1691.220401][T28852] netlink: 'syz.4.7521': attribute type 10 has an invalid length. [ 1691.246980][T28852] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7521'. [ 1691.651019][T28862] netlink: 'syz.0.7525': attribute type 20 has an invalid length. [ 1692.058895][T28869] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.7528'. [ 1692.077400][T28869] netlink: zone id is out of range [ 1692.094226][T28869] netlink: zone id is out of range [ 1692.269928][T28873] netlink: 'syz.0.7529': attribute type 3 has an invalid length. [ 1692.299531][T28873] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.7529'. [ 1694.090596][T28894] netlink: 830 bytes leftover after parsing attributes in process `syz.4.7536'. [ 1694.768008][T28921] FAULT_INJECTION: forcing a failure. [ 1694.768008][T28921] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1694.859818][T28921] CPU: 1 PID: 28921 Comm: syz.4.7542 Not tainted syzkaller #0 [ 1694.867565][T28921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1694.877766][T28921] Call Trace: [ 1694.881089][T28921] [ 1694.884054][T28921] dump_stack_lvl+0x188/0x24e [ 1694.888810][T28921] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1694.895022][T28921] ? show_regs_print_info+0x12/0x12 [ 1694.900273][T28921] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1694.906621][T28921] should_fail_ex+0x390/0x4c0 [ 1694.911454][T28921] _copy_from_user+0x2c/0x170 [ 1694.916471][T28921] __sys_bpf+0x2ea/0x780 [ 1694.920862][T28921] ? bpf_link_show_fdinfo+0x380/0x380 [ 1694.926304][T28921] ? lock_chain_count+0x20/0x20 [ 1694.931472][T28921] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1694.937881][T28921] __x64_sys_bpf+0x78/0x90 [ 1694.942482][T28921] do_syscall_64+0x4c/0xa0 [ 1694.947070][T28921] ? clear_bhb_loop+0x60/0xb0 [ 1694.952101][T28921] ? clear_bhb_loop+0x60/0xb0 [ 1694.956845][T28921] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1694.962810][T28921] RIP: 0033:0x7f4d0e39de59 [ 1694.967646][T28921] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1694.987498][T28921] RSP: 002b:00007f4d0f21f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1694.995985][T28921] RAX: ffffffffffffffda RBX: 00007f4d0e625fa0 RCX: 00007f4d0e39de59 [ 1695.004011][T28921] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1695.012038][T28921] RBP: 00007f4d0f21f090 R08: 0000000000000000 R09: 0000000000000000 [ 1695.020326][T28921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1695.028439][T28921] R13: 00007f4d0e626038 R14: 00007f4d0e625fa0 R15: 00007ffff4554b08 [ 1695.036916][T28921] [ 1695.198083][T28928] netlink: 'syz.2.7544': attribute type 10 has an invalid length. [ 1695.465758][T28932] FAULT_INJECTION: forcing a failure. [ 1695.465758][T28932] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1695.489482][T28932] CPU: 1 PID: 28932 Comm: syz.5.7547 Not tainted syzkaller #0 [ 1695.497061][T28932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1695.507891][T28932] Call Trace: [ 1695.511219][T28932] [ 1695.514192][T28932] dump_stack_lvl+0x188/0x24e [ 1695.519194][T28932] ? show_regs_print_info+0x12/0x12 [ 1695.524455][T28932] ? load_image+0x410/0x410 [ 1695.529029][T28932] ? __lock_acquire+0x7c40/0x7c40 [ 1695.534526][T28932] ? is_bpf_text_address+0x22/0x2a0 [ 1695.539911][T28932] should_fail_ex+0x390/0x4c0 [ 1695.544677][T28932] prepare_alloc_pages+0x1e1/0x5b0 [ 1695.549966][T28932] __alloc_pages+0x130/0x4f0 [ 1695.554621][T28932] ? zone_statistics+0x170/0x170 [ 1695.559638][T28932] pte_alloc_one+0x7b/0x310 [ 1695.564327][T28932] ? pfn_modify_allowed+0x560/0x560 [ 1695.569584][T28932] ? __might_sleep+0xd0/0xd0 [ 1695.574233][T28932] ? rcu_is_watching+0x11/0xa0 [ 1695.579089][T28932] __pte_alloc+0x21/0x150 [ 1695.583491][T28932] copy_page_range+0x322f/0x3a60 [ 1695.588718][T28932] ? pfn_valid+0x450/0x450 [ 1695.593206][T28932] ? up_write+0x1b6/0x410 [ 1695.597578][T28932] ? vma_interval_tree_augment_rotate+0x160/0x190 [ 1695.604043][T28932] copy_mm+0xeb0/0x1680 [ 1695.608276][T28932] ? copy_signal+0x640/0x640 [ 1695.612929][T28932] ? lockdep_init_map_type+0x98/0x8d0 [ 1695.618401][T28932] ? __init_rwsem+0x11e/0x160 [ 1695.623144][T28932] ? copy_signal+0x51f/0x640 [ 1695.627806][T28932] copy_process+0x19a6/0x40c0 [ 1695.632551][T28932] ? copy_process+0x974/0x40c0 [ 1695.637397][T28932] ? idle_dummy+0x10/0x10 [ 1695.641804][T28932] kernel_clone+0x24b/0x900 [ 1695.646381][T28932] ? ksys_write+0x1ce/0x260 [ 1695.651141][T28932] ? create_io_thread+0x170/0x170 [ 1695.656282][T28932] __x64_sys_clone+0x1a7/0x220 [ 1695.661661][T28932] ? __fget_files+0x3fc/0x460 [ 1695.666506][T28932] ? __ia32_sys_vfork+0x140/0x140 [ 1695.672449][T28932] ? lock_chain_count+0x20/0x20 [ 1695.677588][T28932] ? lockdep_hardirqs_on+0x94/0x140 [ 1695.682859][T28932] do_syscall_64+0x4c/0xa0 [ 1695.687430][T28932] ? clear_bhb_loop+0x60/0xb0 [ 1695.692177][T28932] ? clear_bhb_loop+0x60/0xb0 [ 1695.696931][T28932] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1695.703012][T28932] RIP: 0033:0x7ff0ddf9de59 [ 1695.707618][T28932] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1695.727424][T28932] RSP: 002b:00007ff0deeaefd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1695.735960][T28932] RAX: ffffffffffffffda RBX: 00007ff0de225fa0 RCX: 00007ff0ddf9de59 [ 1695.744120][T28932] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000100000 [ 1695.752208][T28932] RBP: 00007ff0deeaf090 R08: 0000000000000000 R09: 0000000000000000 [ 1695.760522][T28932] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1695.768748][T28932] R13: 00007ff0de226038 R14: 00007ff0de225fa0 R15: 00007ffd405c2bc8 [ 1695.776953][T28932] [ 1697.571493][T28962] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7551'. [ 1697.602486][T28959] netlink: 'syz.2.7552': attribute type 39 has an invalid length. [ 1697.836693][T28959] device hsr_slave_1 left promiscuous mode [ 1697.847225][T28976] FAULT_INJECTION: forcing a failure. [ 1697.847225][T28976] name failslab, interval 1, probability 0, space 0, times 0 [ 1697.939081][T28976] CPU: 1 PID: 28976 Comm: syz.5.7557 Not tainted syzkaller #0 [ 1697.947011][T28976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1697.957630][T28976] Call Trace: [ 1697.961119][T28976] [ 1697.964240][T28976] dump_stack_lvl+0x188/0x24e [ 1697.968979][T28976] ? show_regs_print_info+0x12/0x12 [ 1697.974326][T28976] ? load_image+0x410/0x410 [ 1697.979079][T28976] ? __lock_acquire+0x7c40/0x7c40 [ 1697.984174][T28976] ? percpu_ref_put+0x12/0x100 [ 1697.988985][T28976] should_fail_ex+0x390/0x4c0 [ 1697.993789][T28976] should_failslab+0x5/0x20 [ 1697.998320][T28976] slab_pre_alloc_hook+0x59/0x300 [ 1698.003414][T28976] kmem_cache_alloc+0x56/0x2f0 [ 1698.008511][T28976] ? anon_vma_fork+0xe1/0x520 [ 1698.013244][T28976] anon_vma_fork+0xe1/0x520 [ 1698.017794][T28976] ? dup_userfaultfd+0x131/0x630 [ 1698.023243][T28976] ? vm_area_dup+0x11f/0x1a0 [ 1698.027920][T28976] copy_mm+0xc1d/0x1680 [ 1698.032281][T28976] ? copy_signal+0x640/0x640 [ 1698.036921][T28976] ? lockdep_init_map_type+0x98/0x8d0 [ 1698.042481][T28976] ? __init_rwsem+0x11e/0x160 [ 1698.047210][T28976] ? copy_signal+0x51f/0x640 [ 1698.052289][T28976] copy_process+0x19a6/0x40c0 [ 1698.057023][T28976] ? copy_process+0x974/0x40c0 [ 1698.061943][T28976] ? idle_dummy+0x10/0x10 [ 1698.066329][T28976] kernel_clone+0x24b/0x900 [ 1698.070915][T28976] ? ksys_write+0x1ce/0x260 [ 1698.075482][T28976] ? create_io_thread+0x170/0x170 [ 1698.080611][T28976] __x64_sys_clone+0x1a7/0x220 [ 1698.085446][T28976] ? __fget_files+0x3fc/0x460 [ 1698.090255][T28976] ? __ia32_sys_vfork+0x140/0x140 [ 1698.095437][T28976] ? lock_chain_count+0x20/0x20 [ 1698.100377][T28976] ? lockdep_hardirqs_on+0x94/0x140 [ 1698.106235][T28976] do_syscall_64+0x4c/0xa0 [ 1698.110830][T28976] ? clear_bhb_loop+0x60/0xb0 [ 1698.115641][T28976] ? clear_bhb_loop+0x60/0xb0 [ 1698.120428][T28976] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1698.126919][T28976] RIP: 0033:0x7ff0ddf9de59 [ 1698.131947][T28976] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1698.151957][T28976] RSP: 002b:00007ff0deeaefd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1698.160594][T28976] RAX: ffffffffffffffda RBX: 00007ff0de225fa0 RCX: 00007ff0ddf9de59 [ 1698.168691][T28976] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001000000 [ 1698.177307][T28976] RBP: 00007ff0deeaf090 R08: 0000000000000000 R09: 0000000000000000 [ 1698.185478][T28976] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1698.193666][T28976] R13: 00007ff0de226038 R14: 00007ff0de225fa0 R15: 00007ffd405c2bc8 [ 1698.202127][T28976] [ 1698.478899][T28962] netlink: 128 bytes leftover after parsing attributes in process `syz.1.7551'. [ 1698.497190][T28962] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1698.661593][T28984] netlink: 'syz.5.7558': attribute type 3 has an invalid length. [ 1698.690853][T28984] netlink: 42732 bytes leftover after parsing attributes in process `syz.5.7558'. [ 1699.726176][T29004] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.7565'. [ 1699.784985][T29003] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.7565'. [ 1702.751861][T29027] delete_channel: no stack [ 1702.931013][T29037] netlink: 'syz.4.7573': attribute type 10 has an invalid length. [ 1704.609588][T29079] netlink: 'syz.0.7586': attribute type 11 has an invalid length. [ 1704.640700][T29079] netlink: 168 bytes leftover after parsing attributes in process `syz.0.7586'. [ 1706.250618][T29096] netlink: 'syz.4.7587': attribute type 3 has an invalid length. [ 1706.289293][T29096] netlink: 152 bytes leftover after parsing attributes in process `syz.4.7587'. [ 1706.321599][T29100] netlink: 'syz.5.7589': attribute type 2 has an invalid length. [ 1706.813162][T29100] device 0 entered promiscuous mode [ 1706.878200][T29112] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7592'. [ 1706.944636][T29116] netlink: 'syz.0.7593': attribute type 10 has an invalid length. [ 1707.097801][T29120] netlink: 'syz.1.7594': attribute type 39 has an invalid length. [ 1708.202500][T29140] netlink: 'syz.1.7601': attribute type 33 has an invalid length. [ 1708.211100][T29140] netlink: 152 bytes leftover after parsing attributes in process `syz.1.7601'. [ 1708.470783][T29154] netlink: 'syz.0.7604': attribute type 29 has an invalid length. [ 1708.480709][T29152] netlink: 'syz.2.7605': attribute type 10 has an invalid length. [ 1708.560396][T29154] netlink: 'syz.0.7604': attribute type 3 has an invalid length. [ 1708.605019][T29154] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7604'. [ 1709.736471][T29165] netlink: 'syz.2.7608': attribute type 33 has an invalid length. [ 1709.746438][T29165] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7608'. [ 1709.998350][T29174] netlink: 'syz.0.7613': attribute type 39 has an invalid length. [ 1710.694754][T29174] device hsr_slave_1 left promiscuous mode [ 1710.900850][T29195] netlink: 'syz.2.7618': attribute type 10 has an invalid length. [ 1713.613469][T29222] netlink: 156 bytes leftover after parsing attributes in process `syz.2.7627'. [ 1713.640395][T29222] netlink: 'syz.2.7627': attribute type 10 has an invalid length. [ 1713.677234][T29222] team0: Device hsr_slave_0 is up. Set it down before adding it as a team port [ 1714.095716][T29232] netlink: 'syz.5.7631': attribute type 39 has an invalid length. [ 1714.644034][T29232] device hsr_slave_1 left promiscuous mode [ 1714.730901][T29243] netlink: 'syz.0.7633': attribute type 10 has an invalid length. [ 1714.799700][T29251] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.7637'. [ 1715.154291][T29263] netlink: 'syz.1.7642': attribute type 1 has an invalid length. [ 1715.197016][T29263] netlink: 5 bytes leftover after parsing attributes in process `syz.1.7642'. [ 1718.931158][ T4290] Bluetooth: hci1: unexpected event 0x08 length: 15 > 4 [ 1720.752918][T29358] netlink: 'syz.4.7673': attribute type 2 has an invalid length. [ 1720.806066][T29358] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.7673'. [ 1720.996684][ T4278] Bluetooth: hci1: command 0x0406 tx timeout [ 1722.465655][T29381] tc_dump_action: action bad kind [ 1722.646748][T29395] netlink: 'syz.1.7687': attribute type 10 has an invalid length. [ 1722.708683][T29395] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7687'. [ 1722.754385][T29395] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1723.437474][T29411] netlink: 128 bytes leftover after parsing attributes in process `syz.4.7692'. [ 1723.452369][T29411] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1723.774090][T29421] device syzkaller0 entered promiscuous mode [ 1723.803957][T29428] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7698'. [ 1723.836242][T29429] netlink: 'syz.4.7699': attribute type 1 has an invalid length. [ 1723.851415][T29425] netlink: 'syz.5.7700': attribute type 3 has an invalid length. [ 1723.876652][T29429] netlink: 5 bytes leftover after parsing attributes in process `syz.4.7699'. [ 1723.888089][T29425] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.7700'. [ 1727.192456][T29447] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1727.231796][T29447] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1727.251810][T29449] netlink: 'syz.1.7707': attribute type 2 has an invalid length. [ 1727.266586][T29449] netlink: 'syz.1.7707': attribute type 4 has an invalid length. [ 1727.274398][T29449] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7707'. [ 1727.338368][T29456] netlink: 'syz.5.7709': attribute type 10 has an invalid length. [ 1727.356747][T29456] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7709'. [ 1727.406702][T29456] bridge0: port 3(veth0_vlan) entered blocking state [ 1727.413608][T29456] bridge0: port 3(veth0_vlan) entered disabled state [ 1727.426276][T29456] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1727.511534][T29462] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7710'. [ 1727.621563][T29466] mac80211_hwsim hwsim88 ªªªªªªõUÁMVµ"˜: renamed from wlan0 [ 1727.815414][T29474] netlink: 'syz.2.7714': attribute type 10 has an invalid length. [ 1727.857809][T29474] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7714'. [ 1727.887154][T29477] netlink: 'syz.5.7715': attribute type 10 has an invalid length. [ 1727.926774][T29477] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1728.391899][T29494] netlink: 168864 bytes leftover after parsing attributes in process `syz.5.7721'. [ 1728.449395][T29494] netlink: zone id is out of range [ 1728.477233][T29494] netlink: zone id is out of range [ 1728.634904][T29501] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.7724'. [ 1728.652691][T29499] FAULT_INJECTION: forcing a failure. [ 1728.652691][T29499] name failslab, interval 1, probability 0, space 0, times 0 [ 1728.713122][T29499] CPU: 1 PID: 29499 Comm: syz.2.7723 Not tainted syzkaller #0 [ 1728.720794][T29499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1728.731173][T29499] Call Trace: [ 1728.734516][T29499] [ 1728.737498][T29499] dump_stack_lvl+0x188/0x24e [ 1728.742285][T29499] ? show_regs_print_info+0x12/0x12 [ 1728.747953][T29499] ? load_image+0x410/0x410 [ 1728.752492][T29499] ? __might_sleep+0xd0/0xd0 [ 1728.757215][T29499] ? __lock_acquire+0x7c40/0x7c40 [ 1728.762283][T29499] should_fail_ex+0x390/0x4c0 [ 1728.767360][T29499] should_failslab+0x5/0x20 [ 1728.771980][T29499] slab_pre_alloc_hook+0x59/0x300 [ 1728.777036][T29499] ? tomoyo_encode+0x28a/0x550 [ 1728.781864][T29499] __kmem_cache_alloc_node+0x4f/0x270 [ 1728.788417][T29499] ? tomoyo_encode+0x28a/0x550 [ 1728.793827][T29499] __kmalloc+0xa3/0x240 [ 1728.799138][T29499] tomoyo_encode+0x28a/0x550 [ 1728.803967][T29499] tomoyo_realpath_from_path+0x578/0x5c0 [ 1728.809764][T29499] ? tomoyo_domain+0xd2/0x120 [ 1728.814484][T29499] ? tomoyo_path_number_perm+0x205/0x650 [ 1728.820231][T29499] tomoyo_path_number_perm+0x22f/0x650 [ 1728.827326][T29499] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1728.832975][T29499] ? __fget_files+0x28/0x460 [ 1728.837624][T29499] security_file_ioctl+0x6c/0xa0 [ 1728.842722][T29499] __se_sys_ioctl+0x48/0x170 [ 1728.847453][T29499] do_syscall_64+0x4c/0xa0 [ 1728.852082][T29499] ? clear_bhb_loop+0x60/0xb0 [ 1728.856893][T29499] ? clear_bhb_loop+0x60/0xb0 [ 1728.861620][T29499] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1728.868164][T29499] RIP: 0033:0x7ffb4e79de59 [ 1728.872611][T29499] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1728.892709][T29499] RSP: 002b:00007ffb4f6c4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1728.901250][T29499] RAX: ffffffffffffffda RBX: 00007ffb4ea25fa0 RCX: 00007ffb4e79de59 [ 1728.909427][T29499] RDX: 0000200000000080 RSI: 0000000000008983 RDI: 000000000000000a [ 1728.917427][T29499] RBP: 00007ffb4f6c4090 R08: 0000000000000000 R09: 0000000000000000 [ 1728.925621][T29499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1728.933631][T29499] R13: 00007ffb4ea26038 R14: 00007ffb4ea25fa0 R15: 00007ffd3768dfd8 [ 1728.942034][T29499] [ 1728.965874][T29499] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1729.185262][T29509] netlink: 'syz.4.7726': attribute type 10 has an invalid length. [ 1729.238959][T29509] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7726'. [ 1729.283717][T29515] FAULT_INJECTION: forcing a failure. [ 1729.283717][T29515] name failslab, interval 1, probability 0, space 0, times 0 [ 1729.298027][T29512] netlink: 'syz.2.7728': attribute type 21 has an invalid length. [ 1729.352216][T29515] CPU: 0 PID: 29515 Comm: syz.0.7729 Not tainted syzkaller #0 [ 1729.359817][T29515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1729.370020][T29515] Call Trace: [ 1729.373358][T29515] [ 1729.376327][T29515] dump_stack_lvl+0x188/0x24e [ 1729.381065][T29515] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1729.387367][T29515] ? show_regs_print_info+0x12/0x12 [ 1729.392631][T29515] ? load_image+0x410/0x410 [ 1729.397298][T29515] should_fail_ex+0x390/0x4c0 [ 1729.402215][T29515] should_failslab+0x5/0x20 [ 1729.406769][T29515] slab_pre_alloc_hook+0x59/0x300 [ 1729.411862][T29515] ? verify_lock_unused+0x140/0x140 [ 1729.417216][T29515] ? bpf_test_init+0x9f/0x140 [ 1729.421952][T29515] __kmem_cache_alloc_node+0x4f/0x270 [ 1729.427584][T29515] ? bpf_test_init+0x9f/0x140 [ 1729.432595][T29515] __kmalloc+0xa3/0x240 [ 1729.436823][T29515] bpf_test_init+0x9f/0x140 [ 1729.441385][T29515] bpf_prog_test_run_xdp+0x488/0xf80 [ 1729.446910][T29515] ? __lock_acquire+0x7c40/0x7c40 [ 1729.452100][T29515] ? dev_put+0x80/0x80 [ 1729.456236][T29515] ? dev_put+0x80/0x80 [ 1729.460364][T29515] bpf_prog_test_run+0x31c/0x390 [ 1729.465552][T29515] __sys_bpf+0x62b/0x780 [ 1729.469862][T29515] ? bpf_link_show_fdinfo+0x380/0x380 [ 1729.475310][T29515] ? lock_chain_count+0x20/0x20 [ 1729.480231][T29515] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1729.486289][T29515] __x64_sys_bpf+0x78/0x90 [ 1729.490777][T29515] do_syscall_64+0x4c/0xa0 [ 1729.495368][T29515] ? clear_bhb_loop+0x60/0xb0 [ 1729.500193][T29515] ? clear_bhb_loop+0x60/0xb0 [ 1729.505116][T29515] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1729.511243][T29515] RIP: 0033:0x7f3f5979de59 [ 1729.515974][T29515] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1729.536058][T29515] RSP: 002b:00007f3f5a71f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1729.544631][T29515] RAX: ffffffffffffffda RBX: 00007f3f59a25fa0 RCX: 00007f3f5979de59 [ 1729.552945][T29515] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1729.561422][T29515] RBP: 00007f3f5a71f090 R08: 0000000000000000 R09: 0000000000000000 [ 1729.569816][T29515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1729.578029][T29515] R13: 00007f3f59a26038 R14: 00007f3f59a25fa0 R15: 00007ffd16ecf7f8 [ 1729.586352][T29515] [ 1729.636819][T29512] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7728'. [ 1729.988922][T29517] netlink: 'syz.2.7728': attribute type 33 has an invalid length. [ 1730.006709][T29517] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7728'. [ 1730.415491][T29539] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.7738'. [ 1730.495688][T29539] delete_channel: no stack [ 1730.532850][T29539] openvswitch: netlink: Key type 386 is out of range max 32 [ 1730.560129][T29547] FAULT_INJECTION: forcing a failure. [ 1730.560129][T29547] name failslab, interval 1, probability 0, space 0, times 0 [ 1730.599245][T29547] CPU: 1 PID: 29547 Comm: syz.5.7740 Not tainted syzkaller #0 [ 1730.606859][T29547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1730.617230][T29547] Call Trace: [ 1730.620549][T29547] [ 1730.623519][T29547] dump_stack_lvl+0x188/0x24e [ 1730.628708][T29547] ? show_regs_print_info+0x12/0x12 [ 1730.633981][T29547] ? load_image+0x410/0x410 [ 1730.638637][T29547] ? __lock_acquire+0x7c40/0x7c40 [ 1730.643729][T29547] ? percpu_ref_put+0x12/0x100 [ 1730.648558][T29547] should_fail_ex+0x390/0x4c0 [ 1730.653303][T29547] should_failslab+0x5/0x20 [ 1730.658036][T29547] slab_pre_alloc_hook+0x59/0x300 [ 1730.663206][T29547] kmem_cache_alloc+0x56/0x2f0 [ 1730.668015][T29547] ? anon_vma_fork+0x1eb/0x520 [ 1730.672860][T29547] anon_vma_fork+0x1eb/0x520 [ 1730.678097][T29547] copy_mm+0xc1d/0x1680 [ 1730.682384][T29547] ? copy_signal+0x640/0x640 [ 1730.687383][T29547] ? lockdep_init_map_type+0x98/0x8d0 [ 1730.692894][T29547] ? __init_rwsem+0x11e/0x160 [ 1730.697931][T29547] ? copy_signal+0x51f/0x640 [ 1730.702566][T29547] copy_process+0x19a6/0x40c0 [ 1730.707464][T29547] ? copy_process+0x974/0x40c0 [ 1730.712303][T29547] ? idle_dummy+0x10/0x10 [ 1730.716687][T29547] kernel_clone+0x24b/0x900 [ 1730.721221][T29547] ? ksys_write+0x1ce/0x260 [ 1730.725946][T29547] ? create_io_thread+0x170/0x170 [ 1730.731191][T29547] __x64_sys_clone+0x1a7/0x220 [ 1730.735993][T29547] ? __fget_files+0x3fc/0x460 [ 1730.740721][T29547] ? __ia32_sys_vfork+0x140/0x140 [ 1730.745990][T29547] ? lock_chain_count+0x20/0x20 [ 1730.751526][T29547] ? lockdep_hardirqs_on+0x94/0x140 [ 1730.756860][T29547] do_syscall_64+0x4c/0xa0 [ 1730.761502][T29547] ? clear_bhb_loop+0x60/0xb0 [ 1730.766217][T29547] ? clear_bhb_loop+0x60/0xb0 [ 1730.771192][T29547] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1730.777217][T29547] RIP: 0033:0x7ff0ddf9de59 [ 1730.781682][T29547] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1730.802114][T29547] RSP: 002b:00007ff0deeaefd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1730.810890][T29547] RAX: ffffffffffffffda RBX: 00007ff0de225fa0 RCX: 00007ff0ddf9de59 [ 1730.818911][T29547] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001000000 [ 1730.826909][T29547] RBP: 00007ff0deeaf090 R08: 0000000000000000 R09: 0000000000000000 [ 1730.835020][T29547] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1730.843115][T29547] R13: 00007ff0de226038 R14: 00007ff0de225fa0 R15: 00007ffd405c2bc8 [ 1730.851136][T29547] [ 1730.939644][T29553] netlink: 'syz.4.7743': attribute type 3 has an invalid length. [ 1731.018975][T29551] netlink: 'syz.2.7742': attribute type 10 has an invalid length. [ 1731.439636][T29567] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1731.482350][T29567] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1732.622560][T29577] validate_nla: 1 callbacks suppressed [ 1732.622594][T29577] netlink: 'syz.0.7749': attribute type 10 has an invalid length. [ 1732.660621][T29577] __nla_validate_parse: 4 callbacks suppressed [ 1732.660676][T29577] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7749'. [ 1732.906428][T29577] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1735.343986][T29608] netlink: 'syz.1.7760': attribute type 10 has an invalid length. [ 1735.644981][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1735.651429][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1736.137928][T29630] netlink: 'syz.0.7768': attribute type 11 has an invalid length. [ 1736.176432][T29630] netlink: 168 bytes leftover after parsing attributes in process `syz.0.7768'. [ 1737.090298][T29653] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7775'. [ 1737.412406][T29659] netlink: 'syz.0.7778': attribute type 10 has an invalid length. [ 1737.690920][ T4278] Bluetooth: hci2: ISO packet for unknown connection handle 2622 [ 1738.636061][T29702] netlink: 'syz.4.7796': attribute type 33 has an invalid length. [ 1738.661988][T29702] netlink: 152 bytes leftover after parsing attributes in process `syz.4.7796'. [ 1738.729122][T29710] netlink: 188 bytes leftover after parsing attributes in process `syz.0.7799'. [ 1738.788834][T29710] ksmbd: Unknown IPC event: 10, ignore. [ 1738.809699][T29707] netlink: 'syz.1.7798': attribute type 10 has an invalid length. [ 1739.765097][T29735] device macsec0 entered promiscuous mode [ 1739.805077][T29735] netlink: 'syz.5.7805': attribute type 21 has an invalid length. [ 1739.853184][T29735] netlink: 132 bytes leftover after parsing attributes in process `syz.5.7805'. [ 1739.977590][T29740] netlink: 'syz.0.7806': attribute type 21 has an invalid length. [ 1740.017426][T29740] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7806'. [ 1740.909416][ T4290] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1740.920876][ T4290] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1740.946790][ T4290] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1740.965648][ T4290] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1740.974623][ T4290] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1740.983943][ T4290] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1741.090037][T29768] netlink: 60 bytes leftover after parsing attributes in process `syz.5.7815'. [ 1741.237392][T28771] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1741.420897][T28771] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1741.569486][T28771] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1741.710319][T28771] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1741.927026][T28771] tipc: Left network mode [ 1742.347369][T29805] FAULT_INJECTION: forcing a failure. [ 1742.347369][T29805] name failslab, interval 1, probability 0, space 0, times 0 [ 1742.371116][T29805] CPU: 1 PID: 29805 Comm: syz.2.7827 Not tainted syzkaller #0 [ 1742.378759][T29805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1742.388961][T29805] Call Trace: [ 1742.392554][T29805] [ 1742.395885][T29805] dump_stack_lvl+0x188/0x24e [ 1742.401101][T29805] ? show_regs_print_info+0x12/0x12 [ 1742.406392][T29805] ? load_image+0x410/0x410 [ 1742.411090][T29805] ? __might_sleep+0xd0/0xd0 [ 1742.415753][T29805] ? __lock_acquire+0x7c40/0x7c40 [ 1742.421001][T29805] should_fail_ex+0x390/0x4c0 [ 1742.425747][T29805] should_failslab+0x5/0x20 [ 1742.430373][T29805] slab_pre_alloc_hook+0x59/0x300 [ 1742.435437][T29805] ? fib_create_info+0xa78/0x2370 [ 1742.440501][T29805] __kmem_cache_alloc_node+0x4f/0x270 [ 1742.445912][T29805] ? fib_create_info+0xa78/0x2370 [ 1742.450974][T29805] __kmalloc+0xa3/0x240 [ 1742.455358][T29805] fib_create_info+0xa78/0x2370 [ 1742.460263][T29805] fib_table_insert+0xc2/0x1af0 [ 1742.465330][T29805] ? rtm_to_fib_config+0xfe5/0x1370 [ 1742.470791][T29805] ? fib_new_table+0x106/0x2d0 [ 1742.475696][T29805] inet_rtm_newroute+0x147/0x230 [ 1742.480679][T29805] ? __mutex_lock+0x3ba/0xae0 [ 1742.485508][T29805] ? rcu_read_unlock+0xa0/0xa0 [ 1742.490521][T29805] ? rcu_read_unlock+0xa0/0xa0 [ 1742.495339][T29805] rtnetlink_rcv_msg+0x863/0xfb0 [ 1742.500322][T29805] ? rtnetlink_rcv_msg+0x220/0xfb0 [ 1742.505573][T29805] ? rtnetlink_bind+0x80/0x80 [ 1742.510460][T29805] ? __local_bh_enable_ip+0x136/0x1c0 [ 1742.516008][T29805] ? lockdep_hardirqs_on+0x94/0x140 [ 1742.521276][T29805] ? __local_bh_enable_ip+0x136/0x1c0 [ 1742.526710][T29805] ? _local_bh_enable+0xa0/0xa0 [ 1742.531806][T29805] ? __dev_queue_xmit+0x281/0x3810 [ 1742.537147][T29805] ? __dev_queue_xmit+0x281/0x3810 [ 1742.542421][T29805] ? __dev_queue_xmit+0x1d84/0x3810 [ 1742.547682][T29805] ? __dev_queue_xmit+0x281/0x3810 [ 1742.552871][T29805] ? ref_tracker_free+0x682/0x830 [ 1742.558036][T29805] ? refcount_inc+0x70/0x70 [ 1742.562590][T29805] ? memcpy+0x3c/0x60 [ 1742.566636][T29805] ? __copy_skb_header+0x3ba/0x4f0 [ 1742.572446][T29805] ? __skb_clone+0x446/0x6c0 [ 1742.577092][T29805] netlink_rcv_skb+0x1ef/0x440 [ 1742.581936][T29805] ? rtnetlink_bind+0x80/0x80 [ 1742.586683][T29805] ? netlink_ack+0x1160/0x1160 [ 1742.591682][T29805] ? netlink_deliver_tap+0x2e/0x1b0 [ 1742.597028][T29805] netlink_unicast+0x7ad/0x920 [ 1742.601862][T29805] netlink_sendmsg+0x8ad/0xbd0 [ 1742.606729][T29805] ? netlink_getsockopt+0x550/0x550 [ 1742.612166][T29805] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1742.617955][T29805] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1742.623381][T29805] ? security_socket_sendmsg+0x7c/0xa0 [ 1742.628972][T29805] ? netlink_getsockopt+0x550/0x550 [ 1742.634307][T29805] ____sys_sendmsg+0x5ed/0x9a0 [ 1742.639317][T29805] ? __sys_sendmsg_sock+0x30/0x30 [ 1742.644394][T29805] ? __import_iovec+0x306/0x510 [ 1742.649551][T29805] ? import_iovec+0x6f/0xa0 [ 1742.654097][T29805] ___sys_sendmsg+0x2a2/0x360 [ 1742.658822][T29805] ? __sys_sendmsg+0x2a0/0x2a0 [ 1742.663728][T29805] ? __lock_acquire+0x7c40/0x7c40 [ 1742.668815][T29805] __se_sys_sendmsg+0x1c3/0x2b0 [ 1742.673791][T29805] ? __x64_sys_sendmsg+0x80/0x80 [ 1742.678774][T29805] ? lockdep_hardirqs_on+0x94/0x140 [ 1742.684214][T29805] do_syscall_64+0x4c/0xa0 [ 1742.688678][T29805] ? clear_bhb_loop+0x60/0xb0 [ 1742.693686][T29805] ? clear_bhb_loop+0x60/0xb0 [ 1742.698485][T29805] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1742.704522][T29805] RIP: 0033:0x7ffb4e79de59 [ 1742.708984][T29805] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1742.729000][T29805] RSP: 002b:00007ffb4f6c4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1742.737648][T29805] RAX: ffffffffffffffda RBX: 00007ffb4ea25fa0 RCX: 00007ffb4e79de59 [ 1742.745655][T29805] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1742.753653][T29805] RBP: 00007ffb4f6c4090 R08: 0000000000000000 R09: 0000000000000000 [ 1742.761656][T29805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1742.769673][T29805] R13: 00007ffb4ea26038 R14: 00007ffb4ea25fa0 R15: 00007ffd3768dfd8 [ 1742.777964][T29805] [ 1742.806968][T29760] chnl_net:caif_netlink_parms(): no params data found [ 1742.838731][T29810] netlink: 'syz.5.7828': attribute type 6 has an invalid length. [ 1742.896858][T29810] netlink: 164 bytes leftover after parsing attributes in process `syz.5.7828'. [ 1742.997002][ T4290] Bluetooth: hci0: command 0x0409 tx timeout [ 1743.076831][T29813] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7829'. [ 1743.089815][T29816] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.7830'. [ 1743.476677][T29834] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.7842'. [ 1743.509065][T29835] netlink: 'syz.5.7832': attribute type 3 has an invalid length. [ 1743.595305][T29760] bridge0: port 1(bridge_slave_0) entered blocking state [ 1743.606286][T29841] netlink: 'syz.5.7832': attribute type 3 has an invalid length. [ 1743.647023][T29835] netlink: 'syz.5.7832': attribute type 4 has an invalid length. [ 1743.665517][T29760] bridge0: port 1(bridge_slave_0) entered disabled state [ 1743.666290][T29835] netlink: 9067 bytes leftover after parsing attributes in process `syz.5.7832'. [ 1743.694288][T29760] device bridge_slave_0 entered promiscuous mode [ 1743.704314][T29841] netlink: 'syz.5.7832': attribute type 4 has an invalid length. [ 1743.723579][T29841] netlink: 9067 bytes leftover after parsing attributes in process `syz.5.7832'. [ 1743.829962][T29760] bridge0: port 2(bridge_slave_1) entered blocking state [ 1743.863749][T29760] bridge0: port 2(bridge_slave_1) entered disabled state [ 1743.872629][T29760] device bridge_slave_1 entered promiscuous mode [ 1744.075217][T29760] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1744.169180][T29851] netlink: 10 bytes leftover after parsing attributes in process `syz.4.7837'. [ 1744.255289][T29760] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1744.723526][T29760] team0: Port device team_slave_0 added [ 1744.745799][T29868] netlink: 'syz.4.7841': attribute type 29 has an invalid length. [ 1744.867782][T29760] team0: Port device team_slave_1 added [ 1744.873852][T29868] netlink: 'syz.4.7841': attribute type 29 has an invalid length. [ 1744.947174][T29865] netlink: 'syz.4.7841': attribute type 29 has an invalid length. [ 1744.967268][T29869] netlink: 'syz.4.7841': attribute type 29 has an invalid length. [ 1745.034790][T29760] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1745.076990][ T4290] Bluetooth: hci0: command 0x041b tx timeout [ 1745.084650][T29760] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1745.213365][T29760] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1745.273403][T29875] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7843'. [ 1745.337124][T29760] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1745.355103][T29760] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1745.462366][T29760] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1746.370796][T29760] device hsr_slave_0 entered promiscuous mode [ 1746.437850][T29760] device hsr_slave_1 entered promiscuous mode [ 1746.467308][T29760] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1746.475468][T29760] Cannot create hsr debugfs directory [ 1746.974777][T29916] netlink: 'syz.0.7856': attribute type 3 has an invalid length. [ 1747.260847][ T4290] Bluetooth: hci0: command 0x040f tx timeout [ 1749.335732][ T4290] Bluetooth: hci0: command 0x0419 tx timeout [ 1749.606033][T28771] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1749.655479][T28771] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1749.677393][T28771] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1749.705341][T28771] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1749.798717][T28771] device veth1_vlan left promiscuous mode [ 1753.362459][T28771] team0 (unregistering): Port device team_slave_1 removed [ 1753.418293][T28771] team0 (unregistering): Port device team_slave_0 removed [ 1753.924218][T29968] netlink: 'syz.5.7868': attribute type 10 has an invalid length. [ 1753.958462][T29968] bridge0: port 2(bridge_slave_1) entered disabled state [ 1753.966432][T29968] bridge0: port 1(bridge_slave_0) entered disabled state [ 1754.020230][T29968] bridge0: port 2(bridge_slave_1) entered blocking state [ 1754.027586][T29968] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1754.035203][T29968] bridge0: port 1(bridge_slave_0) entered blocking state [ 1754.042624][T29968] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1754.082626][T29968] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1754.287392][T29975] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7871'. [ 1754.989563][T29984] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7874'. [ 1755.165531][T29760] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1755.202213][T29760] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1755.225386][T29760] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1755.249886][T29760] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1755.547955][T30006] netlink: 212168 bytes leftover after parsing attributes in process `syz.2.7880'. [ 1755.623797][T29760] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1755.775132][T28767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1755.797651][T28767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1755.838581][T29760] 8021q: adding VLAN 0 to HW filter on device team0 [ 1755.988201][T30017] netlink: 'syz.5.7881': attribute type 10 has an invalid length. [ 1756.014134][T30017] bridge0: port 2(bridge_slave_1) entered disabled state [ 1756.021573][T30017] bridge0: port 1(bridge_slave_0) entered disabled state [ 1756.069740][T28771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1756.092266][T28771] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1756.115230][T28771] bridge0: port 1(bridge_slave_0) entered blocking state [ 1756.122698][T28771] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1756.150213][T28771] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1756.159687][T28771] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1756.170357][T28771] bridge0: port 2(bridge_slave_1) entered blocking state [ 1756.177807][T28771] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1756.201269][T28771] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1756.217467][T28771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1756.283243][T28771] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1756.307890][T28771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1756.397362][T28771] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1756.411027][T28771] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1756.431832][T28771] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1756.515175][T29760] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1756.771974][T29760] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1756.844668][T28771] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1756.856982][T28771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1756.878196][T28771] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1756.907220][T28771] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1756.947444][T28771] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1756.970735][T28771] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1757.062473][T30032] netlink: 'syz.5.7885': attribute type 2 has an invalid length. [ 1757.086825][T30032] netlink: 'syz.5.7885': attribute type 4 has an invalid length. [ 1757.094960][T30032] netlink: 132 bytes leftover after parsing attributes in process `syz.5.7885'. [ 1757.640136][T30049] netlink: 'syz.0.7889': attribute type 10 has an invalid length. [ 1757.706349][T30049] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1757.786513][T30049] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 1757.837272][T30049] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1757.885028][T30056] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.7892'. [ 1757.907455][T30049] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 1757.924948][T30056] netlink: zone id is out of range [ 1757.937415][T30056] netlink: zone id is out of range [ 1758.348384][T30074] netlink: 'syz.4.7895': attribute type 10 has an invalid length. [ 1758.452745][T30076] netlink: 'syz.2.7897': attribute type 27 has an invalid length. [ 1758.477167][T30077] netlink: 'syz.2.7897': attribute type 27 has an invalid length. [ 1758.518282][T30076] netlink: 164 bytes leftover after parsing attributes in process `syz.2.7897'. [ 1758.547460][T29760] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1758.571725][T30077] netlink: 164 bytes leftover after parsing attributes in process `syz.2.7897'. [ 1758.587302][T28767] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1758.598684][T28767] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1758.631101][T30082] FAULT_INJECTION: forcing a failure. [ 1758.631101][T30082] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1758.675420][T28768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1758.685473][T30082] CPU: 0 PID: 30082 Comm: syz.5.7898 Not tainted syzkaller #0 [ 1758.693099][T30082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1758.703210][T30082] Call Trace: [ 1758.706548][T30082] [ 1758.709547][T30082] dump_stack_lvl+0x188/0x24e [ 1758.714295][T30082] ? show_regs_print_info+0x12/0x12 [ 1758.719736][T30082] ? load_image+0x410/0x410 [ 1758.724311][T30082] ? __lock_acquire+0x7c40/0x7c40 [ 1758.729429][T30082] should_fail_ex+0x390/0x4c0 [ 1758.734230][T30082] _copy_from_user+0x2c/0x170 [ 1758.739069][T30082] bpf_test_init+0xde/0x140 [ 1758.743910][T30082] bpf_prog_test_run_xdp+0x488/0xf80 [ 1758.749262][T30082] ? __lock_acquire+0x7c40/0x7c40 [ 1758.754365][T30082] ? dev_put+0x80/0x80 [ 1758.758508][T30082] ? dev_put+0x80/0x80 [ 1758.762788][T30082] bpf_prog_test_run+0x31c/0x390 [ 1758.767885][T30082] __sys_bpf+0x62b/0x780 [ 1758.772191][T30082] ? bpf_link_show_fdinfo+0x380/0x380 [ 1758.777640][T30082] ? lock_chain_count+0x20/0x20 [ 1758.782590][T30082] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1758.788744][T30082] __x64_sys_bpf+0x78/0x90 [ 1758.793253][T30082] do_syscall_64+0x4c/0xa0 [ 1758.797733][T30082] ? clear_bhb_loop+0x60/0xb0 [ 1758.802595][T30082] ? clear_bhb_loop+0x60/0xb0 [ 1758.807351][T30082] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1758.813623][T30082] RIP: 0033:0x7ff0ddf9de59 [ 1758.818189][T30082] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1758.838850][T30082] RSP: 002b:00007ff0deeaf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1758.847859][T30082] RAX: ffffffffffffffda RBX: 00007ff0de225fa0 RCX: 00007ff0ddf9de59 [ 1758.856167][T30082] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1758.864336][T30082] RBP: 00007ff0deeaf090 R08: 0000000000000000 R09: 0000000000000000 [ 1758.872541][T30082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1758.880655][T30082] R13: 00007ff0de226038 R14: 00007ff0de225fa0 R15: 00007ffd405c2bc8 [ 1758.888883][T30082] [ 1758.897360][T28768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1758.959027][T28768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1758.974155][T28768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1759.004394][T29760] device veth0_vlan entered promiscuous mode [ 1759.074298][T28768] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1759.092751][T28768] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1759.152905][T29760] device veth1_vlan entered promiscuous mode [ 1759.161828][T30086] __sock_release: fasync list not empty! [ 1759.245006][T30095] device pim6reg1 entered promiscuous mode [ 1759.505625][T28774] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1759.547275][T28774] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1760.037058][T29760] device veth0_macvtap entered promiscuous mode [ 1760.076938][T28768] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1760.115833][T29760] device veth1_macvtap entered promiscuous mode [ 1760.174161][T29760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1760.226834][T29760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1760.251212][T29760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1760.292584][T29760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1760.326555][T29760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1760.376740][T29760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1760.409269][T29760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1760.424210][T30119] FAULT_INJECTION: forcing a failure. [ 1760.424210][T30119] name failslab, interval 1, probability 0, space 0, times 0 [ 1760.440556][T29760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1760.482042][T30119] CPU: 1 PID: 30119 Comm: syz.4.7906 Not tainted syzkaller #0 [ 1760.489600][T30119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1760.491668][T29760] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1760.499712][T30119] Call Trace: [ 1760.499724][T30119] [ 1760.499734][T30119] dump_stack_lvl+0x188/0x24e [ 1760.499773][T30119] ? show_regs_print_info+0x12/0x12 [ 1760.499803][T30119] ? load_image+0x410/0x410 [ 1760.499830][T30119] ? __might_sleep+0xd0/0xd0 [ 1760.499852][T30119] ? __lock_acquire+0x7c40/0x7c40 [ 1760.499886][T30119] should_fail_ex+0x390/0x4c0 [ 1760.499921][T30119] should_failslab+0x5/0x20 [ 1760.499941][T30119] slab_pre_alloc_hook+0x59/0x300 [ 1760.499973][T30119] kmem_cache_alloc+0x56/0x2f0 [ 1760.499996][T30119] ? ptlock_alloc+0x1c/0x60 [ 1760.500025][T30119] ptlock_alloc+0x1c/0x60 [ 1760.500048][T30119] pte_alloc_one+0xc0/0x310 [ 1760.500078][T30119] ? pfn_modify_allowed+0x560/0x560 [ 1760.500109][T30119] ? __might_sleep+0xd0/0xd0 [ 1760.500134][T30119] ? rcu_is_watching+0x11/0xa0 [ 1760.586662][T30119] __pte_alloc+0x21/0x150 [ 1760.591064][T30119] copy_page_range+0x322f/0x3a60 [ 1760.596290][T30119] ? pfn_valid+0x450/0x450 [ 1760.600962][T30119] ? up_write+0x1b6/0x410 [ 1760.605367][T30119] ? vma_interval_tree_augment_rotate+0x160/0x190 [ 1760.611897][T29760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1760.611939][T29760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1760.611954][T29760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1760.622546][T30119] copy_mm+0xeb0/0x1680 [ 1760.622592][T30119] ? copy_signal+0x640/0x640 [ 1760.622615][T30119] ? lockdep_init_map_type+0x98/0x8d0 [ 1760.622664][T30119] ? __init_rwsem+0x11e/0x160 [ 1760.622690][T30119] ? copy_signal+0x51f/0x640 [ 1760.622718][T30119] copy_process+0x19a6/0x40c0 [ 1760.671956][T30119] ? copy_process+0x974/0x40c0 [ 1760.676790][T30119] ? idle_dummy+0x10/0x10 [ 1760.681184][T30119] kernel_clone+0x24b/0x900 [ 1760.685744][T30119] ? ksys_write+0x1ce/0x260 [ 1760.690483][T30119] ? create_io_thread+0x170/0x170 [ 1760.695580][T30119] __x64_sys_clone+0x1a7/0x220 [ 1760.700393][T30119] ? __fget_files+0x3fc/0x460 [ 1760.705133][T30119] ? __ia32_sys_vfork+0x140/0x140 [ 1760.710232][T30119] ? lock_chain_count+0x20/0x20 [ 1760.715150][T30119] ? lockdep_hardirqs_on+0x94/0x140 [ 1760.717135][T29760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1760.720388][T30119] do_syscall_64+0x4c/0xa0 [ 1760.734841][T30119] ? clear_bhb_loop+0x60/0xb0 [ 1760.739582][T30119] ? clear_bhb_loop+0x60/0xb0 [ 1760.744679][T30119] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1760.750920][T30119] RIP: 0033:0x7f4d0e39de59 [ 1760.755477][T30119] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1760.766890][T29760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1760.775125][T30119] RSP: 002b:00007f4d0f21efd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1760.775160][T30119] RAX: ffffffffffffffda RBX: 00007f4d0e625fa0 RCX: 00007f4d0e39de59 [ 1760.775177][T30119] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000100000 [ 1760.775192][T30119] RBP: 00007f4d0f21f090 R08: 0000000000000000 R09: 0000000000000000 [ 1760.775206][T30119] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1760.816772][T29760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1760.818300][T30119] R13: 00007f4d0e626038 R14: 00007f4d0e625fa0 R15: 00007ffff4554b08 [ 1760.836777][T29760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1760.844324][T30119] [ 1760.916069][T29760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1760.961929][T29760] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1760.998283][T28771] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1761.022204][T28771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1761.062706][T28771] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1761.123133][T28771] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1761.175740][T29760] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1761.206577][T29760] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1761.266592][T29760] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1761.275772][T29760] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1761.347750][T30136] netlink: 'syz.5.7911': attribute type 10 has an invalid length. [ 1761.643259][T30144] netlink: 'syz.4.7912': attribute type 2 has an invalid length. [ 1761.769103][T30144] netlink: 'syz.4.7912': attribute type 8 has an invalid length. [ 1761.815929][T30144] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7912'. [ 1764.551688][T28771] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1764.624087][T28771] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1764.642815][T28771] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1764.745834][T28771] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1764.762323][T28771] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1764.864940][T28769] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1765.383283][T30175] FAULT_INJECTION: forcing a failure. [ 1765.383283][T30175] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1765.441082][T30175] CPU: 1 PID: 30175 Comm: syz.1.7922 Not tainted syzkaller #0 [ 1765.448749][T30175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1765.459138][T30175] Call Trace: [ 1765.462475][T30175] [ 1765.465480][T30175] dump_stack_lvl+0x188/0x24e [ 1765.470243][T30175] ? show_regs_print_info+0x12/0x12 [ 1765.475525][T30175] ? load_image+0x410/0x410 [ 1765.480217][T30175] ? __lock_acquire+0x7c40/0x7c40 [ 1765.485337][T30175] should_fail_ex+0x390/0x4c0 [ 1765.490106][T30175] _copy_from_iter+0x1c0/0x1130 [ 1765.495051][T30175] ? copyout_mc+0x110/0x110 [ 1765.499633][T30175] ? __virt_addr_valid+0x188/0x540 [ 1765.504906][T30175] ? __virt_addr_valid+0x188/0x540 [ 1765.510103][T30175] ? __virt_addr_valid+0x467/0x540 [ 1765.515299][T30175] ? __phys_addr_symbol+0x2b/0x70 [ 1765.520405][T30175] ? __check_object_size+0x4f6/0xa70 [ 1765.525870][T30175] kernfs_fop_write_iter+0x19a/0x520 [ 1765.531304][T30175] vfs_write+0x482/0x9a0 [ 1765.535680][T30175] ? file_end_write+0x250/0x250 [ 1765.540646][T30175] ? __fget_files+0x3fc/0x460 [ 1765.545462][T30175] ? __fdget_pos+0x2ae/0x360 [ 1765.550779][T30175] ? ksys_write+0x70/0x260 [ 1765.555396][T30175] ksys_write+0x14d/0x260 [ 1765.559848][T30175] ? __ia32_sys_read+0x80/0x80 [ 1765.564870][T30175] ? lockdep_hardirqs_on+0x94/0x140 [ 1765.570201][T30175] do_syscall_64+0x4c/0xa0 [ 1765.574799][T30175] ? clear_bhb_loop+0x60/0xb0 [ 1765.579564][T30175] ? clear_bhb_loop+0x60/0xb0 [ 1765.584408][T30175] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1765.590462][T30175] RIP: 0033:0x7faf6739de59 [ 1765.595054][T30175] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1765.614846][T30175] RSP: 002b:00007faf68316028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1765.623348][T30175] RAX: ffffffffffffffda RBX: 00007faf67625fa0 RCX: 00007faf6739de59 [ 1765.631484][T30175] RDX: 000000000000006a RSI: 0000200000000100 RDI: 0000000000000009 [ 1765.639664][T30175] RBP: 00007faf68316090 R08: 0000000000000000 R09: 0000000000000000 [ 1765.647726][T30175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1765.655794][T30175] R13: 00007faf67626038 R14: 00007faf67625fa0 R15: 00007fff0eedeb28 [ 1765.663881][T30175] [ 1766.357721][ T4278] ------------[ cut here ]------------ [ 1766.363831][ T4278] WARNING: CPU: 0 PID: 4278 at net/bluetooth/hci_conn.c:668 hci_conn_timeout+0x24f/0x450 [ 1766.374080][ T4278] Modules linked in: [ 1766.378115][ T4278] CPU: 0 PID: 4278 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 1766.385724][ T4278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1766.396054][ T4278] Workqueue: hci1 hci_conn_timeout [ 1766.401316][ T4278] RIP: 0010:hci_conn_timeout+0x24f/0x450 [ 1766.407377][ T4278] Code: 21 8e e8 84 33 9b f8 48 8b 35 c5 0d e9 04 bf 08 00 00 00 48 89 da 5b 41 5c 41 5d 41 5e 41 5f 5d e9 76 0d 1c f8 e8 71 0d 4a f8 <0f> 0b e9 35 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c dd fd [ 1766.427803][ T4278] RSP: 0018:ffffc90003eb7c08 EFLAGS: 00010293 [ 1766.434030][ T4278] RAX: ffffffff8938142f RBX: ffff888080b8a330 RCX: ffff88802fc43c00 [ 1766.442144][ T4278] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 1766.450402][ T4278] RBP: 00000000ffffffff R08: ffff888080b8a013 R09: 1ffff11010171402 [ 1766.458588][ T4278] R10: dffffc0000000000 R11: ffffed1010171403 R12: ffffffff81557724 [ 1766.466887][ T4278] R13: dffffc0000000000 R14: ffff888080b8a000 R15: ffff888080b8a010 [ 1766.475017][ T4278] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1766.484301][ T4278] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1766.491006][ T4278] CR2: 00007f3f597eb540 CR3: 0000000056142000 CR4: 00000000003506f0 [ 1766.499107][ T4278] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1766.507193][ T4278] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1766.515318][ T4278] Call Trace: [ 1766.518748][ T4278] [ 1766.521781][ T4278] ? process_one_work+0x7b4/0x1160 [ 1766.527101][ T4278] process_one_work+0x8ab/0x1160 [ 1766.532219][ T4278] ? worker_detach_from_pool+0x240/0x240 [ 1766.537968][ T4278] ? _raw_spin_lock_irq+0x86/0xf0 [ 1766.543234][ T4278] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1766.548371][ T4278] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1766.554080][ T4278] ? wq_worker_running+0x97/0x190 [ 1766.559336][ T4278] worker_thread+0xaf5/0x12a0 [ 1766.564215][ T4278] kthread+0x29d/0x330 [ 1766.568582][ T4278] ? worker_clr_flags+0x1a0/0x1a0 [ 1766.573678][ T4278] ? kthread_blkcg+0xd0/0xd0 [ 1766.578480][ T4278] ret_from_fork+0x1f/0x30 [ 1766.583026][ T4278] [ 1766.586116][ T4278] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1766.593536][ T4278] CPU: 0 PID: 4278 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 1766.601175][ T4278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1766.611364][ T4278] Workqueue: hci1 hci_conn_timeout [ 1766.616594][ T4278] Call Trace: [ 1766.619922][ T4278] [ 1766.622911][ T4278] dump_stack_lvl+0x188/0x24e [ 1766.627787][ T4278] ? memcpy+0x3c/0x60 [ 1766.631855][ T4278] ? show_regs_print_info+0x12/0x12 [ 1766.637202][ T4278] ? load_image+0x410/0x410 [ 1766.641772][ T4278] panic+0x2d3/0x710 [ 1766.645779][ T4278] ? bpf_jit_dump+0xd0/0xd0 [ 1766.650351][ T4278] ? ret_from_fork+0x1f/0x30 [ 1766.655012][ T4278] __warn+0x2f8/0x4f0 [ 1766.659040][ T4278] ? hci_conn_timeout+0x24f/0x450 [ 1766.664160][ T4278] ? hci_conn_timeout+0x24f/0x450 [ 1766.669502][ T4278] report_bug+0x2ba/0x4f0 [ 1766.673969][ T4278] ? hci_conn_timeout+0x24f/0x450 [ 1766.679084][ T4278] handle_bug+0x3a/0x70 [ 1766.683305][ T4278] exc_invalid_op+0x16/0x40 [ 1766.687874][ T4278] asm_exc_invalid_op+0x16/0x20 [ 1766.692777][ T4278] RIP: 0010:hci_conn_timeout+0x24f/0x450 [ 1766.698466][ T4278] Code: 21 8e e8 84 33 9b f8 48 8b 35 c5 0d e9 04 bf 08 00 00 00 48 89 da 5b 41 5c 41 5d 41 5e 41 5f 5d e9 76 0d 1c f8 e8 71 0d 4a f8 <0f> 0b e9 35 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c dd fd [ 1766.718373][ T4278] RSP: 0018:ffffc90003eb7c08 EFLAGS: 00010293 [ 1766.724647][ T4278] RAX: ffffffff8938142f RBX: ffff888080b8a330 RCX: ffff88802fc43c00 [ 1766.732652][ T4278] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 1766.740654][ T4278] RBP: 00000000ffffffff R08: ffff888080b8a013 R09: 1ffff11010171402 [ 1766.748884][ T4278] R10: dffffc0000000000 R11: ffffed1010171403 R12: ffffffff81557724 [ 1766.756903][ T4278] R13: dffffc0000000000 R14: ffff888080b8a000 R15: ffff888080b8a010 [ 1766.764918][ T4278] ? process_one_work+0x7b4/0x1160 [ 1766.770372][ T4278] ? hci_conn_timeout+0x24f/0x450 [ 1766.775711][ T4278] ? hci_conn_timeout+0x24f/0x450 [ 1766.780807][ T4278] ? process_one_work+0x7b4/0x1160 [ 1766.785979][ T4278] process_one_work+0x8ab/0x1160 [ 1766.791141][ T4278] ? worker_detach_from_pool+0x240/0x240 [ 1766.796820][ T4278] ? _raw_spin_lock_irq+0x86/0xf0 [ 1766.801875][ T4278] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1766.806933][ T4278] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1766.812591][ T4278] ? wq_worker_running+0x97/0x190 [ 1766.817784][ T4278] worker_thread+0xaf5/0x12a0 [ 1766.822622][ T4278] kthread+0x29d/0x330 [ 1766.826725][ T4278] ? worker_clr_flags+0x1a0/0x1a0 [ 1766.831802][ T4278] ? kthread_blkcg+0xd0/0xd0 [ 1766.836522][ T4278] ret_from_fork+0x1f/0x30 [ 1766.841007][ T4278] [ 1766.844711][ T4278] Kernel Offset: disabled [ 1766.849453][ T4278] Rebooting in 86400 seconds..