last executing test programs: 30.893139562s ago: executing program 2 (id=2909): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x2, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x2505, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0xfffffffffffffffd}, 0x0, 0x4, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x0, 0x3ff78000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000060000000600000000000000", @ANYRES32, @ANYBLOB="001d000000000000080000000000000000000200", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x66) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r1, r2}, 0xc) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, r2}, 0x38) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xe, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x1ffffffff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz1\x00', 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r6, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x2, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x16}, @multicast1}}}], 0x20}, 0x8000) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1) sendmsg$inet(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001640)="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", 0x4f9}], 0x1}, 0x48800) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37080c188001ac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x4, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000008000000b704000000000020850000000100000018010000202070250000000000202020630af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 29.869328194s ago: executing program 2 (id=2914): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00'}, 0x94) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000100)={0x1, 0x0, [0x0]}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004080000000000000002000000000000000000000002000000000000000000000000000002000000000000000000000004"], 0x0, 0x56, 0x0, 0xb00}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r2, &(0x7f0000000200)={0x0, 0x600, &(0x7f0000000080)=[{&(0x7f0000000340)="1c0000005e007f029e3b470d647dead6a9369022b88a3e378c88efcf", 0x1c}], 0x1}, 0x880) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 29.558102937s ago: executing program 2 (id=2917): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a118", 0x1d}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}, 0x4, 0x0, 0xffff}}, 0x80, 0x0}, 0x408c5) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x33fe0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000680)={'team_slave_1\x00'}) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10a194, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4}, 0x0, 0xffffffffffffffff, r2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000097420018000000000200000000000000000000001c0000000000000000000000ef080000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32=0x0, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000640)="2e00000011008188040f80ec59acbc04005e140602000000000e0027001000004556df17f9000200000000000000", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030017000b63d25a80648c2594f93824fc60100c024002000009053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="fe000100aaaaaaaaaa47"]) 29.129338042s ago: executing program 2 (id=2919): r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0xc4fea534d284fe21, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, &(0x7f0000000180), 0x0}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, &(0x7f0000000180), 0x0}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @multicast1}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ced4fbd44e24eb0d34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3a06d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c411055585"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x0, 0x1, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x0, 0x1, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000180), 0x800, r3}, 0x38) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e23, @multicast2}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0}, 0x0, 0x4, 0x0, 0x3, 0x0, 0x10, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0}, 0x0, 0x4, 0x0, 0x3, 0x0, 0x10, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb60000000000000000850000007500000095"], 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x2a649, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xffffffff, 0x7fffffff}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000000000000000000000000085000000500000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) recvmsg$unix(r1, &(0x7f0000000ec0)={&(0x7f00000006c0), 0x6e, &(0x7f0000000ac0)=[{&(0x7f0000000740)=""/237, 0xed}, {&(0x7f0000000840)=""/76, 0x4c}, {&(0x7f00000008c0)=""/49, 0x31}, {&(0x7f0000000900)=""/252, 0xfc}, {&(0x7f0000000a00)=""/148, 0x94}], 0x5, &(0x7f0000000e00)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}, 0x140) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x33fe0) (async) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x33fe0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r8) socket$kcm(0x10, 0x3, 0x10) (async) r9 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000037000b63446a80648c2594f90b24fc60", 0x14}], 0x1}, 0x5006) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x7d, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000028004b05d260027960b70d0003000900", 0x14}], 0x1}, 0x24000000) 29.014091784s ago: executing program 1 (id=2920): bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001580)={0xffffffffffffffff, 0x58, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000015c0), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001700)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000018000000000000023000000180000000000000000000000090000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x3ff, 0x1000, &(0x7f0000000500)=""/4096, 0x41100, 0x40, '\x00', r0, 0x0, r1, 0x8, &(0x7f0000001600)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000001640)={0x2, 0xb, 0x6, 0x100}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000001680)=[{0x2, 0x4, 0x0, 0xc}, {0x2, 0x1, 0x2, 0x4}, {0x4, 0x5, 0xc, 0x4}, {0x2, 0x4, 0x9, 0x8}, {0x1, 0x5, 0xa, 0x5}, {0x0, 0x2, 0x1, 0xb}], 0x10, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x22}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 28.749995886s ago: executing program 1 (id=2925): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000380)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe8, &(0x7f0000000580)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0x4b, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000ff808500000004"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r2}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x17, 0xb, &(0x7f00000000c0)=@raw=[@jmp={0x5, 0x0, 0x0, 0x2, 0x4, 0x80, 0xfffffffffffffff0}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x2}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0x6d, &(0x7f00000001c0)=""/109, 0xc2e00, 0x12, '\x00', 0x0, @fallback=0xb, r0, 0x8, &(0x7f0000000280)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x3, 0x4, 0x8, 0x9df2}, 0x10, r1, r2, 0x4, 0x0, &(0x7f0000000880)=[{0x5, 0x2, 0xc, 0x8}, {0x5, 0x3, 0x8, 0x1}, {0x4, 0x2, 0x4, 0x4}, {0x5, 0x5, 0x4, 0x8}], 0x10, 0x1}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x10, &(0x7f0000000040), 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r4 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000e00)="39000000140081ae00002c000500015601618575e285af01800000000d1300883795c04a31ba377a1b2cc37fffffffffffffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x2000c814) socket$kcm(0x11, 0xa, 0x300) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000680)={0x3, 0x80, 0x5, 0xfb, 0x50, 0x8, 0x0, 0x8, 0xb0, 0x6, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xfffffff8, 0x4, @perf_config_ext={0x3, 0x2}, 0x0, 0x200, 0x3, 0x9, 0x803, 0x3, 0x606, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x2, r5, 0x1) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000000)={r3}) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) sendmsg$sock(r6, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="7a6eca88ca428c8d4f36c8b8fc2047659bdcb41a9ebe5ac0bed120663c7a3c234c937452515eae867806e58adcd922e70fa89f0e436ab6", 0x37}, {&(0x7f0000000100), 0xfffffeda}], 0x2}, 0x4804) 28.749145547s ago: executing program 3 (id=2926): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00'}, 0x94) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000100)={0x1, 0x0, [0x0]}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004080000000000000002000000000000000000000002000000000000000000000000000002000000000000000000000004"], 0x0, 0x56, 0x0, 0x1200}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r2, &(0x7f0000000200)={0x0, 0x600, &(0x7f0000000080)=[{&(0x7f0000000340)="1c0000005e007f029e3b470d647dead6a9369022b88a3e378c88efcf", 0x1c}], 0x1}, 0x880) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 28.748870457s ago: executing program 0 (id=2927): ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x4, 0x4, 0xc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000001800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 28.700390287s ago: executing program 0 (id=2928): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20040000) r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x4098, 0x0, 0x2, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000c40)}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="7c00000000000000000000000700000044140001ac1414aa00000000ac1414000000000000441c0003e0000001000000007f000001000000000000000000000000442c00000000000000000f883816814100000000000000000000000000000000000000000000000000000000000000000000440c0001000000000000000000000000000000a400000000000000000000000700000044280000000000000000000000000000000000000000000000000000000000000000000000000000071700e0000002ac1414bb00000000e0000002ac1414bb018616000000000010c986d78e6c4b9394b247217b87cb00830b00000000007f000001861f0000000000020010421487f84baabcbcfb42a4d90bab000748c68c4c31001089ca45d9612e5b5c11f12bc78a41000000000000006c000000000000000000000007000000441c0003ffffffff000000000000000000000000e00000010000000044340001ac1414bb0000000000000000000000000000000000000000ac1414aa00000000ac1414aa00000000ac1e000100000000830b0000000000e000000200000000001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32, @ANYBLOB="7f0000017f00000a000000", @ANYRES32, @ANYBLOB], 0x230}, 0x0) socket$kcm(0x10, 0x3, 0x10) r1 = perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0xa2, 0x5, 0x8, 0x5, 0x0, 0xa00000, 0x20000, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0xf4fc, 0x2}, 0x1a00a, 0x3, 0xffffff23, 0x9, 0x100000000, 0x5, 0x1, 0x0, 0x0, 0x0, 0x537}, 0xffffffffffffffff, 0xd, r0, 0xf) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe8e}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, r1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_clone(0x290000, &(0x7f00000003c0)="b4cc93cd448b1bf77b10c83ce45138390f45bc46bc23b9ee1c0c23c802fe0857ebf3de3bc7bfad7b6f246ca36f97f7253f1e5b67fae9204315f7f8eef1f1216cf840212eeeec7cb9051b5bf45508e3db6dc5b14daf9f4de0280a4700a39f8f9a267b50c47aeb422aa13fab77715f1031fc3e0c14102adc4d0f4446c4ebbb295ff95115162e3b3688ac4b23682cfc7f92436cb2501497aab4171d19b4a66824c9d2f35490b9e3b5dfa323456e45fb2cdcb1ed12006ddad62480103a283700cf", 0xbf, &(0x7f0000000600), &(0x7f00000006c0), &(0x7f0000000700)="2e6afc056435e6014ed71df1ee383c07205b50cdacca0240c7") r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="d8000000180081064e81f782db00b904021d0800fd007c05e8fe55a10a000140014002020a0e1888caa971afff00060411000000160026000a0003000248035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43dbb19703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="1400000024000b94f0184528828c3d153136af46", 0x14}], 0x1}, 0x0) r6 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r6, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) perf_event_open(&(0x7f0000000cc0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x3, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x17, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0xfffffffffffffd45, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r7, &(0x7f00000002c0)={0x0, 0x6000, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000010008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000100020400bf050005001201", 0x67}], 0x1}, 0x0) 28.661572448s ago: executing program 2 (id=2929): getpid() perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000060000850000001b000000b70000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071043e000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 28.605907048s ago: executing program 1 (id=2930): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.stat\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x7, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xfdef) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xec}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001500)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="000000000000002bf138ee0000000000000010427b07abe8ad1056e5c41586170000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800f39046933ac93ea808169dc9b3", @ANYRES32=r2, @ANYBLOB="000000000000000079000c00000000009500000000000000"], &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x20000042) r5 = socket$kcm(0x1e, 0x5, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8002fffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x3ff}, 0x0, 0xfff, 0x0, 0x2, 0x0, 0x0, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000021000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) close(0xffffffffffffffff) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) write$cgroup_int(r8, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x11, 0x1c, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000900000000000000810c000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000df0200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300006bc4399913fb8aa4f3756177b587685c5c229d89db5f3e35ca565029b51d3f71d8997f5d43944954dbe951f50773793d22340fe3b1b23eb22edfb60f87c158bf44ef65f7b048c148502f76e4bb5a986752971430a19927167ac6b18f4fae38896894fff9cb735ff4fb8865bbebc2555a9e33d1f7e9bd7677b7e2f2fecb0292e7a48ff1011ee2bd3e47bc53ace1dd9cb8eefb082e256a50cd09696a7737e36f1ff8828462c138c3bcc44e0df3ae598459e738a47becb9002ea2a5c08299f067855a828657259a95a3fee768f19fd4679edf019d4e4cd5fb190f1a32069a0f1024fc", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000800000085000000a5000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r8}, 0x94) 28.562244159s ago: executing program 3 (id=2931): getpid() r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x8, 0xf7, 0x51, 0x80, 0x0, 0x6, 0x80004, 0x6, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x5, 0x2, @perf_config_ext={0x1, 0x9}, 0xc18326b3b22b5d2, 0xff, 0x6, 0x4, 0x8, 0x7, 0x4, 0x0, 0x6, 0x0, 0x3}, 0xffffffffffffffff, 0x6, r0, 0x9) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={r0, 0x58, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000400)=ANY=[@ANYRESDEC=r1, @ANYBLOB="449d08d22848931ff573ed54ea4727f1543210bff54e6588d210e399", @ANYRES64=r3], &(0x7f0000000240)='GPL\x00', 0x200000, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x6, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) syz_clone(0x4000, &(0x7f0000001000), 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x15, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fcffffff000000000900000018010000", @ANYRES16=r2, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94) r6 = socket$kcm(0x10, 0x2, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000003c0)=@o_path={&(0x7f0000000200)='./file0\x00', r0, 0x4000, r5}, 0x18) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) close(0x3) perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x1, @perf_config_ext={0xff, 0x4}, 0x100410, 0x200, 0x2, 0x1, 0x9, 0x1000009, 0x8, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x48, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_config_ext={0x8, 0x2}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xd0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x5c441, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x1}, 0x2098, 0x3, 0x9, 0x0, 0x10, 0x2, 0x4007, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, r10, 0x0) recvmsg(r8, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)="9f", 0x1}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x801c581f, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="e03f03002a000b27c105d25a806c8c6f94f90424fc6004", 0x17}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe35, 0x0, 0x0, 0x0}, 0xffffffffffffff88) write$cgroup_subtree(r6, &(0x7f00000004c0)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d", @ANYRESHEX=0x0, @ANYRES16=r0], 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 28.257825382s ago: executing program 2 (id=2932): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x60, 0x76}, [@call={0x27}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x23) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000000000000000001050000001000000000000000010000850000000000000000010000"], 0x0, 0x42}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRESDEC=r0], 0x48) syz_clone(0x10eb22f000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x20800000, 0x0, 0x4b, 0x0, 0x0, 0x0) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) 25.369566775s ago: executing program 1 (id=2933): ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='/\x00') openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x80) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x4) sendmsg$inet(r3, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}, 0x3e8) 25.369295715s ago: executing program 0 (id=2934): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x100e64, 0xc74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xd040, 0x10000}, 0x14403, 0xfffc, 0x0, 0x5, 0x582, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000640)={&(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000380)="ec12826303f16874b0e4f9896ce4b554da8e156082ef0cb13cfcc538a04b851634323d7f1e65c0700ec4156cbd2bc780bbb4ad92db38997f2cb9569fda7ef5819734c1c018dc01b3a55730e80bf9e7db509bfd5be35d84648b237ffaed25f9e5b8e119f126f2c68489a5469d329885959a1259df13", 0x75}, {&(0x7f0000000540)="bbcca7ddd386ec3de2c14794b1ef455beee2fe19e82d0cc3a19c69947432ee472a7f7dc2703dcc071446977f6c3efb4a2c2c082bfa9f14c42ada8fd48f2ba6b4c32a28132c53d85f5405b80e88621062f9d8b9279cf56fbb7acc6bb77556b47c918f06c51c61272c0e5cff70975f80f505670502b45d6a912e936e17709fe197ad6b5eecab", 0x85}], 0x2, 0x0, 0x0, 0x24004084}, 0x40010) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x400040, 0x0) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x2f9, 0x543, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) 25.368155495s ago: executing program 3 (id=2935): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x40}, [@call={0x85, 0x0, 0x0, 0x27}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x25}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000008000000006a73126cad130752a7a9918e"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x37}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x40, 0x0, &(0x7f0000000240)="e0b9547ed387dbe9abc89b6f5bec62ed86919f4c14de92a4eaead82d1fa1b3dcf4da9c37f50a62e170bb2071ff564a74d98d5dc2c0f5e42c1513b7e4c8c96787", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 25.181018677s ago: executing program 3 (id=2936): r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x1, 0x18}, 0xc) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@fallback=r0, 0x36, 0x1, 0x8, &(0x7f0000000000)=[0x0], 0x1, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0]}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000001d7118ba000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fcffffff0000000007000000850000007b0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000400000095"], 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400000000000400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext={0x7, 0x7}, 0x40, 0x1, 0x0, 0x0, 0xa, 0x20000000, 0xffff, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, &(0x7f0000000080), &(0x7f0000000180)=r4}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r4, r3}, 0xc) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000200)={0x80}, 0x8) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000001080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0xa7}}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r6}, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) 25.180301107s ago: executing program 1 (id=2937): r0 = socket$kcm(0xa, 0x2, 0x3a) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0xd, 0x590f}, 0x2920, 0x0, 0x6, 0x8, 0x80000000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) (async) r1 = socket$kcm(0x2, 0x3, 0x106) (async) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) (async) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 32) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0xa, 0x2, 0x73) close(r5) (async) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.sectors\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000100)={r1}) setsockopt$sock_attach_bpf(r2, 0x107, 0x2, 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0e00009bd029ef8020ab070011000523a608463a3f", @ANYRES16=r7], 0xfe33) (async, rerun: 32) sendmsg$inet(r1, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000700)="fbd2", 0x2}, {&(0x7f0000000680)="660f829e3add48b05d82", 0xa}, {&(0x7f0000000800)="adb34727cc508abe1092fb01d95f9d", 0xf}], 0x3}, 0x0) (async, rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) (async, rerun: 32) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x9, 0x0, 0x0, 0xfffffffffff7bbfe, 0x1, 0x0, 0x0, 0x5ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 32) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x746f2f51, &(0x7f0000000080)=[{&(0x7f0000000040)="3f0400001d00810ce00f80ecdb4cb9f207c804a01f000000030006fb0a0002000a0ada1b40d80300000000000000", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)) (async) socket$kcm(0x10, 0x400000002, 0x0) (async) close(0x3) (async) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async, rerun: 64) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) (async, rerun: 64) recvmsg$unix(0xffffffffffffffff, 0x0, 0xc2d1cde420b68cde) 24.88539481s ago: executing program 3 (id=2938): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0xd1, 0xfc, 0x0, 0x0, 0x0, 0x8, 0x8602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0, 0x2}, 0x12280, 0x2, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x48, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_config_ext={0x8, 0x2}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x1) recvmsg(r2, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)="9f", 0x1}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0xfe) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="d8000000200081044e81f782db44b90402000000e8fe450f55a1180015000600142603600e120900100000000401a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8cbf7a7ff4841ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4d180a54f14f00004d9db22fe7c9f8775730d16a4683f1aea4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce3bb9ad809d561cace91ed0bffd6e4edef3d93452a92954b43370e00"/216, 0xd8}], 0x1}, 0x0) 24.87548852s ago: executing program 0 (id=2939): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00'}, 0x94) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000100)={0x1, 0x0, [0x0]}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004080000000000000002000000000000000000000002000000000000000000000000000002000000000000000000000004"], 0x0, 0x56, 0x0, 0x2000}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r2, &(0x7f0000000200)={0x0, 0x600, &(0x7f0000000080)=[{&(0x7f0000000340)="1c0000005e007f029e3b470d647dead6a9369022b88a3e378c88efcf", 0x1c}], 0x1}, 0x880) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 24.837495991s ago: executing program 1 (id=2940): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x808e}, 0x40000100) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000380)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x5, 0x9c, &(0x7f0000000000)=""/156}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, &(0x7f0000000000)={r2}) r3 = syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)="aeb8b149371165b311dc8ff010ff5996036e0de7ec5735905298bad492f80d54b609e7c2df8388a462c3ae9b4add1e94813a94787af7a185864ac62c22b4b1adfe0ca005d786119ccc427d97f6978bba4ee631604c8d34ddb1e0") perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x80000001, 0x2, 0x0, 0x0, 0x0, 0x2009}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000026c0)={r3, r0, 0x0, 0x0, 0x0}, 0x30) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x5452, &(0x7f0000000000)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdf\x85\xaac{\x8c\x8ffp`-\xcd\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\t\xed\x13q2\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\xcb\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca\x04\x00\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x03\x00\x00\x00\x00\x00\x00\x00\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\xf3\xcf\x17\xf5\x86\xae\xa5\xea?\xc5E\x00\xb2e\xa8\xf1<\xb2\xc82\xbf=o\x00\x00\x00\x00E\x00\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x922A\x95\x8e\xbc\xc80xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="fbe6bd8dfcdda5a210b8cfefbd66f459c7261b927d25d3cf74d2f7c97735eba47f606a290d184925922333211d168ab0f6e1081fdbd921ed4db0e67c9d5ab1452445a1e0da5ac68b13f4afe2712eeaad35ef06", 0x53}], 0x1, 0x0, 0x3298}, 0x0) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000008c0)=r4, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00"/11], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x5, 0x0, &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r6, r5}, 0xc) r7 = perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffffffffff8, 0x3}, 0x0, 0x0, 0x2, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = gettid() r9 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_bp={&(0x7f00000001c0), 0x2}, 0x0, 0xffffffffffffff7f, 0x43a1bd76, 0x7, 0x1ff, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, r8, 0x0, 0xffffffffffffffff, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080), 0xc) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f0000000640)='\x00') bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r11, 0x20e, 0xe40, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb01201800000000000000c6c51c800c0000000c00000002000000000000000000006a108fdb711f3ca05c16ea5833f5c01aebfe00625354b94a8872adb61f4f890d157f37a9f5f9d7cf20b47cf136c4e9c625dedf9888d197f91e584521e4d6fd4e10068213af8d183a6a87ffd2eece3de06d7fad0720272c07a122521e771edd289d08ab521403f8e89272b01517da6b5f76389ba13310787cc002a6a5ef1be199e9ab7857e9fc4d12b49800602bfa67c21409dcd26ceec105c6510567a24e7aaf470f00000000000000a14098b03a5df576ef2b9a14c2f9e4cd2a0c301a0f60316f9400"/244], 0x0, 0x26, 0x0, 0x1}, 0x28) r12 = socket$kcm(0x11, 0x2, 0x300) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$tipc(r13, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00), 0x101d0}], 0x4}, 0x0) recvmsg(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000b80)=""/4096, 0x1000}], 0x8}, 0x0) 23.500288016s ago: executing program 0 (id=2943): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0xe900) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x30, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="0207000902", 0x5}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa35f022eb"], 0xcfa4) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa35f022eb"], 0xcfa4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21}, 0x50) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xf, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000300)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) (async) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xcfa4) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0x10) (async) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_pressure(r3, &(0x7f0000000140)='cpu.pressure\x00', 0x2, 0x0) close(r4) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000300)={0x5, 0x80, 0x9, 0xc8, 0xfe, 0x3, 0x0, 0x6, 0x0, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7f, 0x1, @perf_config_ext={0x9, 0x5e}, 0x20, 0x5, 0x7, 0x3, 0x5, 0x8, 0x7, 0x0, 0x9, 0x0, 0x3}) 1.231106856s ago: executing program 32 (id=2943): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0xe900) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x30, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="0207000902", 0x5}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa35f022eb"], 0xcfa4) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa35f022eb"], 0xcfa4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21}, 0x50) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xf, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000300)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) (async) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xcfa4) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0x10) (async) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_pressure(r3, &(0x7f0000000140)='cpu.pressure\x00', 0x2, 0x0) close(r4) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000300)={0x5, 0x80, 0x9, 0xc8, 0xfe, 0x3, 0x0, 0x6, 0x0, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7f, 0x1, @perf_config_ext={0x9, 0x5e}, 0x20, 0x5, 0x7, 0x3, 0x5, 0x8, 0x7, 0x0, 0x9, 0x0, 0x3}) 688.296802ms ago: executing program 33 (id=2940): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x808e}, 0x40000100) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000380)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x5, 0x9c, &(0x7f0000000000)=""/156}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, &(0x7f0000000000)={r2}) r3 = syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)="aeb8b149371165b311dc8ff010ff5996036e0de7ec5735905298bad492f80d54b609e7c2df8388a462c3ae9b4add1e94813a94787af7a185864ac62c22b4b1adfe0ca005d786119ccc427d97f6978bba4ee631604c8d34ddb1e0") perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x80000001, 0x2, 0x0, 0x0, 0x0, 0x2009}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000026c0)={r3, r0, 0x0, 0x0, 0x0}, 0x30) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x5452, &(0x7f0000000000)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdf\x85\xaac{\x8c\x8ffp`-\xcd\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\t\xed\x13q2\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\xcb\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca\x04\x00\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x03\x00\x00\x00\x00\x00\x00\x00\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\xf3\xcf\x17\xf5\x86\xae\xa5\xea?\xc5E\x00\xb2e\xa8\xf1<\xb2\xc82\xbf=o\x00\x00\x00\x00E\x00\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x922A\x95\x8e\xbc\xc80xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="fbe6bd8dfcdda5a210b8cfefbd66f459c7261b927d25d3cf74d2f7c97735eba47f606a290d184925922333211d168ab0f6e1081fdbd921ed4db0e67c9d5ab1452445a1e0da5ac68b13f4afe2712eeaad35ef06", 0x53}], 0x1, 0x0, 0x3298}, 0x0) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000008c0)=r4, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00"/11], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x5, 0x0, &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r6, r5}, 0xc) r7 = perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffffffffff8, 0x3}, 0x0, 0x0, 0x2, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = gettid() r9 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_bp={&(0x7f00000001c0), 0x2}, 0x0, 0xffffffffffffff7f, 0x43a1bd76, 0x7, 0x1ff, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, r8, 0x0, 0xffffffffffffffff, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080), 0xc) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f0000000640)='\x00') bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r11, 0x20e, 0xe40, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb01201800000000000000c6c51c800c0000000c00000002000000000000000000006a108fdb711f3ca05c16ea5833f5c01aebfe00625354b94a8872adb61f4f890d157f37a9f5f9d7cf20b47cf136c4e9c625dedf9888d197f91e584521e4d6fd4e10068213af8d183a6a87ffd2eece3de06d7fad0720272c07a122521e771edd289d08ab521403f8e89272b01517da6b5f76389ba13310787cc002a6a5ef1be199e9ab7857e9fc4d12b49800602bfa67c21409dcd26ceec105c6510567a24e7aaf470f00000000000000a14098b03a5df576ef2b9a14c2f9e4cd2a0c301a0f60316f9400"/244], 0x0, 0x26, 0x0, 0x1}, 0x28) r12 = socket$kcm(0x11, 0x2, 0x300) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$tipc(r13, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00), 0x101d0}], 0x4}, 0x0) recvmsg(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000b80)=""/4096, 0x1000}], 0x8}, 0x0) kernel console output (not intermixed with test programs): b20 [ 393.100289][T13392] dev_hard_start_xmit+0x246/0x740 [ 393.105450][T13392] __dev_queue_xmit+0x19a3/0x3660 [ 393.110566][T13392] ? __dev_queue_xmit+0x265/0x3660 [ 393.115730][T13392] ? __kmem_cache_alloc_node+0x13a/0x250 [ 393.121408][T13392] ? netdev_core_pick_tx+0x340/0x340 [ 393.126735][T13392] ? skb_release_data+0x1d1/0x7b0 [ 393.131827][T13392] __bpf_tx_skb+0x189/0x250 [ 393.136387][T13392] bpf_clone_redirect+0x30f/0x4a0 [ 393.141459][T13392] bpf_prog_da1e0ee5f8d5c8f5+0x5d/0x62 [ 393.147004][T13392] ? perf_swevent_event+0x240/0x570 [ 393.152245][T13392] ? perf_trace_preemptirq_template+0x269/0x330 [ 393.158554][T13392] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 393.164578][T13392] ? lockdep_softirqs_on+0x580/0x580 [ 393.169917][T13392] ? lock_chain_count+0x20/0x20 [ 393.173438][T13184] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 393.174816][T13392] ? __local_bh_disable_ip+0x108/0x1a0 [ 393.185655][T13184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 393.190600][T13392] ? __cant_sleep+0x220/0x220 [ 393.190626][T13392] ? __local_bh_enable_ip+0x13a/0x1c0 [ 393.190644][T13392] ? _local_bh_enable+0xa0/0xa0 [ 393.190671][T13392] ? bpf_test_timer_continue+0x135/0x380 [ 393.190694][T13392] ? bpf_test_run+0x174/0x870 [ 393.226357][T13392] bpf_test_run+0x2df/0x870 [ 393.230920][T13392] ? bpf_test_run+0x174/0x870 [ 393.235642][T13392] ? convert___skb_to_skb+0x590/0x590 [ 393.241065][T13392] ? eth_get_headlen+0x210/0x210 [ 393.246051][T13392] ? bpf_prog_test_run_skb+0x7ad/0x12b0 [ 393.251660][T13392] ? convert___skb_to_skb+0x3d/0x590 [ 393.256985][T13392] bpf_prog_test_run_skb+0xad2/0x12b0 [ 393.262460][T13392] ? cpu_online+0x60/0x60 [ 393.266827][T13392] bpf_prog_test_run+0x321/0x390 [ 393.271803][T13392] __sys_bpf+0x49d/0x890 [ 393.276079][T13392] ? bpf_link_show_fdinfo+0x390/0x390 [ 393.281497][T13392] ? lock_chain_count+0x20/0x20 [ 393.286401][T13392] __x64_sys_bpf+0x7c/0x90 [ 393.290878][T13392] do_syscall_64+0x55/0xa0 [ 393.295346][T13392] ? clear_bhb_loop+0x40/0x90 [ 393.300058][T13392] ? clear_bhb_loop+0x40/0x90 [ 393.304787][T13392] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 393.310736][T13392] RIP: 0033:0x7f7ca219cdd9 [ 393.315187][T13392] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 393.334853][T13392] RSP: 002b:00007f7ca2f91028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 393.343339][T13392] RAX: ffffffffffffffda RBX: 00007f7ca2415fa0 RCX: 00007f7ca219cdd9 [ 393.351337][T13392] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 000000000000000a [ 393.359344][T13392] RBP: 00007f7ca2f91090 R08: 0000000000000000 R09: 0000000000000000 [ 393.367343][T13392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 393.375366][T13392] R13: 00007f7ca2416038 R14: 00007f7ca2415fa0 R15: 00007ffec74e4148 [ 393.383389][T13392] [ 393.465648][ T166] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.472912][ T166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 393.489347][ T166] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.496583][ T166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 393.651401][ T5784] Bluetooth: hci1: command tx timeout [ 393.785984][T13404] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2351'. [ 393.812442][T13404] net_ratelimit: 3 callbacks suppressed [ 393.812454][T13404] openvswitch: netlink: Tunnel attr 8192 out of range max 16 [ 393.862857][T13184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 394.024639][T13184] veth0_vlan: entered promiscuous mode [ 394.042655][T13184] veth1_vlan: entered promiscuous mode [ 394.092292][T13184] veth0_macvtap: entered promiscuous mode [ 394.256177][T13184] veth1_macvtap: entered promiscuous mode [ 394.331358][T13184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.349139][T13184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.388863][T13184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 394.407383][T13423] netlink: 'syz.1.2353': attribute type 19 has an invalid length. [ 394.415467][T13423] netlink: 14532 bytes leftover after parsing attributes in process `syz.1.2353'. [ 394.592273][T13184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 394.605605][T13436] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.2357'. [ 394.619980][T13184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.637447][T13184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 394.738235][T13184] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.756091][T13184] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.764832][T13184] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.799510][T13184] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.875675][T13444] FAULT_INJECTION: forcing a failure. [ 394.875675][T13444] name failslab, interval 1, probability 0, space 0, times 0 [ 394.888486][T13444] CPU: 0 PID: 13444 Comm: syz.3.2358 Not tainted syzkaller #0 [ 394.895979][T13444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 394.906060][T13444] Call Trace: [ 394.909372][T13444] [ 394.912333][T13444] dump_stack_lvl+0x18c/0x250 [ 394.917059][T13444] ? show_regs_print_info+0x20/0x20 [ 394.922320][T13444] ? load_image+0x420/0x420 [ 394.926863][T13444] ? mark_lock+0x94/0x320 [ 394.931237][T13444] should_fail_ex+0x39d/0x4d0 [ 394.935962][T13444] should_failslab+0x9/0x20 [ 394.940502][T13444] slab_pre_alloc_hook+0x59/0x310 [ 394.945565][T13444] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 394.951593][T13444] kmem_cache_alloc+0x5a/0x2d0 [ 394.956400][T13444] ? dst_alloc+0x105/0x170 [ 394.960860][T13444] dst_alloc+0x105/0x170 [ 394.965158][T13444] ip_route_output_key_hash_rcu+0x14f6/0x2370 [ 394.971288][T13444] ? ip_route_output_key_hash+0x13d/0x330 [ 394.977051][T13444] ip_route_output_key_hash+0x1f3/0x330 [ 394.982641][T13444] ? ip_route_input_rcu+0x30f0/0x30f0 [ 394.988066][T13444] ? __asan_memset+0x22/0x40 [ 394.992704][T13444] ip_route_output_flow+0x2a/0x150 [ 394.997865][T13444] ip_tunnel_xmit+0x9b1/0x2410 [ 395.002685][T13444] ? ip4_dst_hoplimit+0x2d0/0x2d0 [ 395.007741][T13444] ? validate_xmit_xfrm+0xbc/0x12c0 [ 395.012985][T13444] ? gre_build_header+0x25b/0x990 [ 395.018056][T13444] ipgre_xmit+0x7a6/0xb20 [ 395.022436][T13444] dev_hard_start_xmit+0x246/0x740 [ 395.027604][T13444] __dev_queue_xmit+0x19a3/0x3660 [ 395.032705][T13444] ? __dev_queue_xmit+0x265/0x3660 [ 395.037962][T13444] ? __kmem_cache_alloc_node+0x13a/0x250 [ 395.043662][T13444] ? netdev_core_pick_tx+0x340/0x340 [ 395.048995][T13444] ? skb_release_data+0x1d1/0x7b0 [ 395.054073][T13444] __bpf_tx_skb+0x189/0x250 [ 395.058626][T13444] bpf_clone_redirect+0x30f/0x4a0 [ 395.063685][T13444] bpf_prog_da1e0ee5f8d5c8f5+0x5d/0x62 [ 395.069162][T13444] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 395.075160][T13444] ? perf_trace_preemptirq_template+0x269/0x330 [ 395.081429][T13444] ? lock_chain_count+0x20/0x20 [ 395.086299][T13444] ? lockdep_softirqs_on+0x580/0x580 [ 395.091603][T13444] ? lockdep_hardirqs_on+0x98/0x150 [ 395.096855][T13444] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 395.103051][T13444] ? __local_bh_disable_ip+0x108/0x1a0 [ 395.108527][T13444] ? __cant_sleep+0x220/0x220 [ 395.113216][T13444] ? bpf_test_timer_continue+0x56/0x380 [ 395.118793][T13444] ? bpf_test_timer_continue+0x135/0x380 [ 395.124451][T13444] ? bpf_test_run+0x174/0x870 [ 395.129150][T13444] bpf_test_run+0x2df/0x870 [ 395.133681][T13444] ? bpf_test_run+0x174/0x870 [ 395.138385][T13444] ? convert___skb_to_skb+0x590/0x590 [ 395.143777][T13444] ? eth_get_headlen+0x210/0x210 [ 395.148743][T13444] ? bpf_prog_test_run_skb+0x7ad/0x12b0 [ 395.154360][T13444] ? convert___skb_to_skb+0x3d/0x590 [ 395.159689][T13444] bpf_prog_test_run_skb+0xad2/0x12b0 [ 395.165123][T13444] ? cpu_online+0x60/0x60 [ 395.169485][T13444] bpf_prog_test_run+0x321/0x390 [ 395.174456][T13444] __sys_bpf+0x49d/0x890 [ 395.178724][T13444] ? bpf_link_show_fdinfo+0x390/0x390 [ 395.184138][T13444] ? lock_chain_count+0x20/0x20 [ 395.189026][T13444] __x64_sys_bpf+0x7c/0x90 [ 395.193470][T13444] do_syscall_64+0x55/0xa0 [ 395.197917][T13444] ? clear_bhb_loop+0x40/0x90 [ 395.202617][T13444] ? clear_bhb_loop+0x40/0x90 [ 395.207310][T13444] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 395.213219][T13444] RIP: 0033:0x7f39b519cdd9 [ 395.217643][T13444] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 395.237260][T13444] RSP: 002b:00007f39b610f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 395.245684][T13444] RAX: ffffffffffffffda RBX: 00007f39b5415fa0 RCX: 00007f39b519cdd9 [ 395.253669][T13444] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 000000000000000a [ 395.261655][T13444] RBP: 00007f39b610f090 R08: 0000000000000000 R09: 0000000000000000 [ 395.269655][T13444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 395.277642][T13444] R13: 00007f39b5416038 R14: 00007f39b5415fa0 R15: 00007ffcbb60ffa8 [ 395.285640][T13444] [ 395.500378][ T166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.503433][T13456] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.2361'. [ 395.515551][ T166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.534549][T13456] netlink: 6324 bytes leftover after parsing attributes in process `syz.3.2361'. [ 395.612783][ T166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.636770][ T166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 396.083700][T13467] vcan0: entered allmulticast mode [ 396.108070][T13467] netlink: 'syz.2.2303': attribute type 10 has an invalid length. [ 396.151533][T13467] veth0_macvtap: left promiscuous mode [ 396.414642][T13473] netlink: 176 bytes leftover after parsing attributes in process `syz.2.2303'. [ 397.041055][ T5782] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 397.050226][ T5782] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 397.059076][ T5782] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 397.134888][ T5782] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 397.210214][ T5782] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 397.226704][ T5782] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 398.517169][T13491] chnl_net:caif_netlink_parms(): no params data found [ 398.597904][T13491] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.605027][T13491] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.612565][T13491] bridge_slave_0: entered allmulticast mode [ 398.623030][T13491] bridge_slave_0: entered promiscuous mode [ 398.631849][T13491] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.639340][T13491] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.646728][T13491] bridge_slave_1: entered allmulticast mode [ 398.653899][T13491] bridge_slave_1: entered promiscuous mode [ 398.684584][T13491] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 398.696253][T13491] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 398.730281][T13491] team0: Port device team_slave_0 added [ 398.739531][T13491] team0: Port device team_slave_1 added [ 398.765513][T13491] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 398.777412][T13491] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 398.808955][T13491] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 398.829843][T13491] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 398.836980][T13491] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 398.882878][T13491] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 398.931354][T13514] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.2368'. [ 398.962050][T13491] hsr_slave_0: entered promiscuous mode [ 398.968763][T13491] hsr_slave_1: entered promiscuous mode [ 398.974980][T13491] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 398.983895][T13491] Cannot create hsr debugfs directory [ 399.183847][T12903] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.257879][T12903] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.338939][T12903] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.410509][T12903] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.429478][T13526] netlink: 209832 bytes leftover after parsing attributes in process `syz.1.2371'. [ 399.779671][T13536] netlink: 'syz.1.2375': attribute type 9 has an invalid length. [ 399.799952][T13536] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2375'. [ 399.845504][T12903] ip6gretap0 (unregistering): left allmulticast mode [ 399.854364][T12903] ip6gretap0 (unregistering): left promiscuous mode [ 399.874218][T12903] Ÿë: port 1(ip6gretap0) entered disabled state [ 399.930311][T13542] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.2376'. [ 399.982176][T13542] netlink: 'syz.0.2376': attribute type 10 has an invalid length. [ 399.992357][T13542] netdevsim netdevsim0 ÿÿÿÿÿÿ: entered promiscuous mode [ 400.099889][T13538] netlink: 'syz.1.2375': attribute type 9 has an invalid length. [ 400.132339][T13538] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2375'. [ 400.172703][T13552] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2378'. [ 400.286177][ T5784] Bluetooth: hci4: command tx timeout [ 400.738885][T13491] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 400.761062][T13491] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 400.777048][T13491] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 400.832943][T13491] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 401.348892][T13599] netlink: 'syz.2.2389': attribute type 4 has an invalid length. [ 401.395843][T13599] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2389'. [ 401.508689][T13491] 8021q: adding VLAN 0 to HW filter on device bond0 [ 401.645107][T13491] 8021q: adding VLAN 0 to HW filter on device team0 [ 401.718477][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.725670][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 401.783979][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.791206][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 402.367722][ T5784] Bluetooth: hci4: command tx timeout [ 402.546741][T12903] bridge_slave_1: left allmulticast mode [ 402.558094][T12903] bridge_slave_1: left promiscuous mode [ 402.563904][T12903] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.641954][T12903] bridge_slave_0: left allmulticast mode [ 402.656180][T12903] bridge_slave_0: left promiscuous mode [ 402.661945][T12903] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.690343][T12903] veth1_vlan: left promiscuous mode [ 403.774011][T13638] netlink: 'syz.2.2396': attribute type 10 has an invalid length. [ 403.840558][T13638] team0 (unregistering): Port device team_slave_0 removed [ 403.863454][T13638] team0 (unregistering): Port device team_slave_1 removed [ 403.942480][T13491] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 404.045390][T13491] veth0_vlan: entered promiscuous mode [ 404.109215][T13491] veth1_vlan: entered promiscuous mode [ 404.163942][T13646] netlink: 'syz.1.2398': attribute type 3 has an invalid length. [ 404.172490][T13646] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2398'. [ 404.204887][T13491] veth0_macvtap: entered promiscuous mode [ 404.221621][T13491] veth1_macvtap: entered promiscuous mode [ 404.294870][T13491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 404.326189][T13491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.341762][T13491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 404.366490][T13491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.388377][T13491] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 404.429919][T13491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 404.440673][T13491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.451198][T13491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 404.460172][ T5784] Bluetooth: hci4: command tx timeout [ 404.462508][T13491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.489592][T13491] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 404.524017][T13491] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.549159][T13491] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.558897][T13491] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.567690][T13491] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.616701][T13656] FAULT_INJECTION: forcing a failure. [ 404.616701][T13656] name failslab, interval 1, probability 0, space 0, times 0 [ 404.629631][T13656] CPU: 0 PID: 13656 Comm: syz.1.2402 Not tainted syzkaller #0 [ 404.637125][T13656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 404.647228][T13656] Call Trace: [ 404.650534][T13656] [ 404.653485][T13656] dump_stack_lvl+0x18c/0x250 [ 404.658209][T13656] ? perf_tp_event+0x1520/0x1520 [ 404.663174][T13656] ? show_regs_print_info+0x20/0x20 [ 404.668396][T13656] ? load_image+0x420/0x420 [ 404.672919][T13656] ? perf_tp_event+0x13d7/0x1520 [ 404.677885][T13656] should_fail_ex+0x39d/0x4d0 [ 404.682596][T13656] should_failslab+0x9/0x20 [ 404.687127][T13656] slab_pre_alloc_hook+0x59/0x310 [ 404.692175][T13656] kmem_cache_alloc_node+0x60/0x320 [ 404.697399][T13656] ? __alloc_skb+0x103/0x2c0 [ 404.702012][T13656] __alloc_skb+0x103/0x2c0 [ 404.706447][T13656] alloc_skb_with_frags+0xca/0x7b0 [ 404.711574][T13656] ? mark_lock+0x94/0x320 [ 404.715927][T13656] ? __lock_acquire+0x1273/0x7d40 [ 404.720968][T13656] sock_alloc_send_pskb+0x883/0x9a0 [ 404.726198][T13656] ? sock_kzfree_s+0x50/0x50 [ 404.730803][T13656] ? lock_chain_count+0x20/0x20 [ 404.735669][T13656] ? perf_trace_lock+0xfc/0x3b0 [ 404.740537][T13656] __ip6_append_data+0x29f3/0x3c50 [ 404.745692][T13656] ? ip6_mtu+0x7d/0x3f0 [ 404.749869][T13656] ? __in6_dev_get+0xd0/0xd0 [ 404.754489][T13656] ? ip6_mtu+0x7d/0x3f0 [ 404.758674][T13656] ? ip6_setup_cork+0xfe0/0xfe0 [ 404.763550][T13656] ip6_append_data+0x1b0/0x350 [ 404.768335][T13656] ? __in6_dev_get+0xd0/0xd0 [ 404.772947][T13656] icmp6_send+0x136a/0x1b40 [ 404.777485][T13656] ? perf_trace_preemptirq_template+0x269/0x330 [ 404.783769][T13656] ? icmp6_send+0x233/0x1b40 [ 404.788392][T13656] ? icmpv6_push_pending_frames+0x400/0x400 [ 404.794309][T13656] ? perf_trace_lock+0xfc/0x3b0 [ 404.799182][T13656] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 404.805374][T13656] ? trace_event_raw_event_lock+0x250/0x250 [ 404.811298][T13656] ? ip_route_output_key_hash+0x13d/0x330 [ 404.817054][T13656] icmpv6_ndo_send+0x1b9/0x520 [ 404.821848][T13656] ? __asan_memset+0x22/0x40 [ 404.826471][T13656] ? xfrm_lookup_with_ifid+0x17b2/0x1aa0 [ 404.832132][T13656] ? udp6_set_csum+0xef0/0xef0 [ 404.836974][T13656] ? ipv4_mtu+0x2cf/0x3f0 [ 404.841335][T13656] tnl_update_pmtu+0xd33/0x1070 [ 404.846226][T13656] ip_tunnel_xmit+0xd1d/0x2410 [ 404.851020][T13656] ? ip4_dst_hoplimit+0x2d0/0x2d0 [ 404.856060][T13656] ? validate_xmit_xfrm+0xbc/0x12c0 [ 404.861286][T13656] ? gre_build_header+0x25b/0x990 [ 404.866343][T13656] ipgre_xmit+0x7a6/0xb20 [ 404.870700][T13656] dev_hard_start_xmit+0x246/0x740 [ 404.875843][T13656] __dev_queue_xmit+0x19a3/0x3660 [ 404.880914][T13656] ? __dev_queue_xmit+0x265/0x3660 [ 404.886061][T13656] ? lock_chain_count+0x20/0x20 [ 404.890941][T13656] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 404.897112][T13656] ? netdev_core_pick_tx+0x340/0x340 [ 404.902416][T13656] ? skb_release_data+0x1d1/0x7b0 [ 404.907469][T13656] __bpf_tx_skb+0x189/0x250 [ 404.912010][T13656] bpf_clone_redirect+0x30f/0x4a0 [ 404.917069][T13656] bpf_prog_da1e0ee5f8d5c8f5+0x5d/0x62 [ 404.922544][T13656] ? perf_swevent_event+0x240/0x570 [ 404.927764][T13656] ? perf_trace_preemptirq_template+0x269/0x330 [ 404.934030][T13656] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 404.940049][T13656] ? lock_chain_count+0x20/0x20 [ 404.944932][T13656] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 404.951117][T13656] ? lockdep_hardirqs_on+0x98/0x150 [ 404.956334][T13656] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 404.962506][T13656] ? bpf_test_run+0x174/0x870 [ 404.967201][T13656] ? bpf_test_run+0x2c2/0x870 [ 404.971893][T13656] bpf_test_run+0x2df/0x870 [ 404.976469][T13656] ? bpf_test_run+0x174/0x870 [ 404.981185][T13656] ? convert___skb_to_skb+0x590/0x590 [ 404.986612][T13656] ? eth_get_headlen+0x210/0x210 [ 404.991582][T13656] ? bpf_prog_test_run_skb+0x7ad/0x12b0 [ 404.997141][T13656] ? convert___skb_to_skb+0x3d/0x590 [ 405.002460][T13656] bpf_prog_test_run_skb+0xad2/0x12b0 [ 405.007877][T13656] ? cpu_online+0x60/0x60 [ 405.012221][T13656] bpf_prog_test_run+0x321/0x390 [ 405.017310][T13656] __sys_bpf+0x49d/0x890 [ 405.021573][T13656] ? bpf_link_show_fdinfo+0x390/0x390 [ 405.026986][T13656] ? lock_chain_count+0x20/0x20 [ 405.031889][T13656] __x64_sys_bpf+0x7c/0x90 [ 405.036327][T13656] do_syscall_64+0x55/0xa0 [ 405.040796][T13656] ? clear_bhb_loop+0x40/0x90 [ 405.045486][T13656] ? clear_bhb_loop+0x40/0x90 [ 405.050180][T13656] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 405.056108][T13656] RIP: 0033:0x7f7ca219cdd9 [ 405.060545][T13656] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 405.080164][T13656] RSP: 002b:00007f7ca2f91028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 405.088596][T13656] RAX: ffffffffffffffda RBX: 00007f7ca2415fa0 RCX: 00007f7ca219cdd9 [ 405.096598][T13656] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 000000000000000a [ 405.104585][T13656] RBP: 00007f7ca2f91090 R08: 0000000000000000 R09: 0000000000000000 [ 405.112574][T13656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 405.120560][T13656] R13: 00007f7ca2416038 R14: 00007f7ca2415fa0 R15: 00007ffec74e4148 [ 405.128555][T13656] [ 405.346723][T12578] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.360335][T12578] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 405.418108][T12903] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.436137][T12903] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 405.610562][T13667] netlink: 'syz.3.2365': attribute type 3 has an invalid length. [ 405.618604][T13667] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2365'. [ 406.431503][ T5782] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 406.440450][ T5782] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 406.449738][ T5782] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 406.460603][ T5782] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 406.473092][ T5782] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 406.481396][ T5782] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 406.526178][ T5782] Bluetooth: hci4: command tx timeout [ 406.549314][T12568] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.595791][T13685] netlink: 14589 bytes leftover after parsing attributes in process `syz.0.2405'. [ 406.610772][T13687] FAULT_INJECTION: forcing a failure. [ 406.610772][T13687] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 406.637314][T13687] CPU: 0 PID: 13687 Comm: syz.2.2412 Not tainted syzkaller #0 [ 406.644909][T13687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 406.654997][T13687] Call Trace: [ 406.658308][T13687] [ 406.661264][T13687] dump_stack_lvl+0x18c/0x250 [ 406.665987][T13687] ? show_regs_print_info+0x20/0x20 [ 406.671218][T13687] ? load_image+0x420/0x420 [ 406.675733][T13687] ? __might_fault+0xaa/0x120 [ 406.680449][T13687] ? __lock_acquire+0x7d40/0x7d40 [ 406.685516][T13687] should_fail_ex+0x39d/0x4d0 [ 406.690241][T13687] _copy_from_user+0x2f/0xe0 [ 406.694879][T13687] ___sys_recvmsg+0x176/0x590 [ 406.699603][T13687] ? __sys_recvmsg+0x2a0/0x2a0 [ 406.704398][T13687] ? __fget_files+0x28/0x4b0 [ 406.709025][T13687] ? __fget_files+0x43d/0x4b0 [ 406.713737][T13687] __x64_sys_recvmsg+0x20c/0x2e0 [ 406.718689][T13687] ? ___sys_recvmsg+0x590/0x590 [ 406.723560][T13687] ? lockdep_hardirqs_on+0x98/0x150 [ 406.728786][T13687] do_syscall_64+0x55/0xa0 [ 406.733247][T13687] ? clear_bhb_loop+0x40/0x90 [ 406.737941][T13687] ? clear_bhb_loop+0x40/0x90 [ 406.742637][T13687] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 406.748548][T13687] RIP: 0033:0x7f3de3d9cdd9 [ 406.752972][T13687] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 406.772599][T13687] RSP: 002b:00007f3de4cce028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 406.781041][T13687] RAX: ffffffffffffffda RBX: 00007f3de4015fa0 RCX: 00007f3de3d9cdd9 [ 406.789032][T13687] RDX: 0000000000000000 RSI: 0000200000003580 RDI: 0000000000000006 [ 406.797025][T13687] RBP: 00007f3de4cce090 R08: 0000000000000000 R09: 0000000000000000 [ 406.805025][T13687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 406.813015][T13687] R13: 00007f3de4016038 R14: 00007f3de4015fa0 R15: 00007fffc5010f18 [ 406.821013][T13687] [ 406.845063][T12568] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.953292][T12568] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.048777][T13694] FAULT_INJECTION: forcing a failure. [ 407.048777][T13694] name failslab, interval 1, probability 0, space 0, times 0 [ 407.061697][T13694] CPU: 1 PID: 13694 Comm: syz.2.2414 Not tainted syzkaller #0 [ 407.069178][T13694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 407.079268][T13694] Call Trace: [ 407.082583][T13694] [ 407.085541][T13694] dump_stack_lvl+0x18c/0x250 [ 407.090274][T13694] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 407.096464][T13694] ? show_regs_print_info+0x20/0x20 [ 407.101708][T13694] ? load_image+0x420/0x420 [ 407.106260][T13694] should_fail_ex+0x39d/0x4d0 [ 407.110964][T13694] should_failslab+0x9/0x20 [ 407.115485][T13694] slab_pre_alloc_hook+0x59/0x310 [ 407.120551][T13694] kmem_cache_alloc+0x5a/0x2d0 [ 407.125377][T13694] ? skb_clone+0x1eb/0x370 [ 407.129807][T13694] skb_clone+0x1eb/0x370 [ 407.134066][T13694] bpf_clone_redirect+0x167/0x4a0 [ 407.139137][T13694] bpf_prog_da1e0ee5f8d5c8f5+0x5d/0x62 [ 407.144629][T13694] ? lock_chain_count+0x20/0x20 [ 407.149505][T13694] ? preempt_schedule+0xc0/0xd0 [ 407.154395][T13694] ? bpf_test_run+0x174/0x870 [ 407.159118][T13694] ? preempt_schedule_common+0x82/0xc0 [ 407.164593][T13694] ? schedule_preempt_disabled+0x20/0x20 [ 407.170243][T13694] ? lockdep_softirqs_on+0x580/0x580 [ 407.175540][T13694] ? bpf_test_run+0x174/0x870 [ 407.180241][T13694] ? preempt_schedule_thunk+0x1a/0x30 [ 407.185634][T13694] ? __local_bh_disable_ip+0x108/0x1a0 [ 407.191123][T13694] ? __cant_sleep+0x220/0x220 [ 407.195838][T13694] ? __local_bh_enable_ip+0x14b/0x1c0 [ 407.201222][T13694] ? _local_bh_enable+0xa0/0xa0 [ 407.206114][T13694] ? bpf_test_timer_continue+0x135/0x380 [ 407.211768][T13694] ? bpf_test_run+0x174/0x870 [ 407.216464][T13694] bpf_test_run+0x2df/0x870 [ 407.220987][T13694] ? bpf_test_run+0x174/0x870 [ 407.225713][T13694] ? convert___skb_to_skb+0x590/0x590 [ 407.231109][T13694] ? eth_get_headlen+0x210/0x210 [ 407.236097][T13694] ? bpf_prog_test_run_skb+0x7ad/0x12b0 [ 407.241667][T13694] ? convert___skb_to_skb+0x3d/0x590 [ 407.246990][T13694] bpf_prog_test_run_skb+0xad2/0x12b0 [ 407.252388][T13694] ? cpu_online+0x60/0x60 [ 407.256732][T13694] bpf_prog_test_run+0x321/0x390 [ 407.261693][T13694] __sys_bpf+0x49d/0x890 [ 407.265968][T13694] ? bpf_link_show_fdinfo+0x390/0x390 [ 407.271364][T13694] ? lock_chain_count+0x20/0x20 [ 407.276235][T13694] __x64_sys_bpf+0x7c/0x90 [ 407.280662][T13694] do_syscall_64+0x55/0xa0 [ 407.285104][T13694] ? clear_bhb_loop+0x40/0x90 [ 407.289849][T13694] ? clear_bhb_loop+0x40/0x90 [ 407.294549][T13694] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 407.300467][T13694] RIP: 0033:0x7f3de3d9cdd9 [ 407.304900][T13694] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 407.324528][T13694] RSP: 002b:00007f3de4cce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 407.332968][T13694] RAX: ffffffffffffffda RBX: 00007f3de4015fa0 RCX: 00007f3de3d9cdd9 [ 407.340952][T13694] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 000000000000000a [ 407.348935][T13694] RBP: 00007f3de4cce090 R08: 0000000000000000 R09: 0000000000000000 [ 407.356916][T13694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 407.364905][T13694] R13: 00007f3de4016038 R14: 00007f3de4015fa0 R15: 00007fffc5010f18 [ 407.372907][T13694] [ 407.548400][T12568] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.057724][T13681] chnl_net:caif_netlink_parms(): no params data found [ 408.208761][T13728] FAULT_INJECTION: forcing a failure. [ 408.208761][T13728] name failslab, interval 1, probability 0, space 0, times 0 [ 408.235462][T13728] CPU: 1 PID: 13728 Comm: syz.0.2422 Not tainted syzkaller #0 [ 408.242990][T13728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 408.253103][T13728] Call Trace: [ 408.256404][T13728] [ 408.259353][T13728] dump_stack_lvl+0x18c/0x250 [ 408.264065][T13728] ? show_regs_print_info+0x20/0x20 [ 408.269318][T13728] ? load_image+0x420/0x420 [ 408.273846][T13728] ? __might_sleep+0xe0/0xe0 [ 408.278453][T13728] ? __lock_acquire+0x7d40/0x7d40 [ 408.283494][T13728] ? rcu_is_watching+0x15/0xb0 [ 408.288287][T13728] should_fail_ex+0x39d/0x4d0 [ 408.292988][T13728] should_failslab+0x9/0x20 [ 408.297529][T13728] slab_pre_alloc_hook+0x59/0x310 [ 408.302575][T13728] ? do_syscall_64+0x55/0xa0 [ 408.307178][T13728] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 408.313265][T13728] kmem_cache_alloc_node+0x60/0x320 [ 408.318490][T13728] ? __alloc_skb+0x103/0x2c0 [ 408.323127][T13728] __alloc_skb+0x103/0x2c0 [ 408.327561][T13728] netlink_dump+0x1ec/0xe50 [ 408.332091][T13728] ? lock_chain_count+0x20/0x20 [ 408.336956][T13728] ? netlink_lookup+0x200/0x200 [ 408.341836][T13728] ? slab_free_freelist_hook+0x130/0x1a0 [ 408.347484][T13728] ? netlink_recvmsg+0x5e7/0xe60 [ 408.352440][T13728] ? kmem_cache_free+0xf8/0x270 [ 408.357322][T13728] netlink_recvmsg+0x693/0xe60 [ 408.362110][T13728] ? netlink_sendmsg+0xbf0/0xbf0 [ 408.367071][T13728] ? aa_af_perm+0x330/0x330 [ 408.371604][T13728] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 408.377799][T13728] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 408.383116][T13728] ? security_socket_recvmsg+0x89/0xb0 [ 408.388598][T13728] ? netlink_sendmsg+0xbf0/0xbf0 [ 408.393568][T13728] ____sys_recvmsg+0x2ce/0x5e0 [ 408.398357][T13728] ? __sys_recvmsg_sock+0x50/0x50 [ 408.403411][T13728] ? import_iovec+0x73/0xa0 [ 408.407931][T13728] ___sys_recvmsg+0x216/0x590 [ 408.412628][T13728] ? __sys_recvmsg+0x2a0/0x2a0 [ 408.417413][T13728] ? ksys_write+0x1c4/0x260 [ 408.421943][T13728] ? __fget_files+0x43d/0x4b0 [ 408.426649][T13728] __x64_sys_recvmsg+0x20c/0x2e0 [ 408.431599][T13728] ? ___sys_recvmsg+0x590/0x590 [ 408.436472][T13728] ? lockdep_hardirqs_on+0x98/0x150 [ 408.441699][T13728] do_syscall_64+0x55/0xa0 [ 408.446145][T13728] ? clear_bhb_loop+0x40/0x90 [ 408.450844][T13728] ? clear_bhb_loop+0x40/0x90 [ 408.455541][T13728] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 408.461551][T13728] RIP: 0033:0x7f2c1dd9cdd9 [ 408.465976][T13728] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 408.485596][T13728] RSP: 002b:00007f2c1eccd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 408.494022][T13728] RAX: ffffffffffffffda RBX: 00007f2c1e015fa0 RCX: 00007f2c1dd9cdd9 [ 408.502011][T13728] RDX: 0000000000000000 RSI: 0000200000003580 RDI: 0000000000000006 [ 408.509996][T13728] RBP: 00007f2c1eccd090 R08: 0000000000000000 R09: 0000000000000000 [ 408.517982][T13728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 408.525965][T13728] R13: 00007f2c1e016038 R14: 00007f2c1e015fa0 R15: 00007fffa60f0da8 [ 408.533967][T13728] [ 408.607314][ T5782] Bluetooth: hci2: command tx timeout [ 408.688331][T13738] AþÿÙ: renamed from bond_slave_1 (while UP) [ 408.875651][T13744] FAULT_INJECTION: forcing a failure. [ 408.875651][T13744] name failslab, interval 1, probability 0, space 0, times 0 [ 408.888489][T13744] CPU: 1 PID: 13744 Comm: syz.0.2426 Not tainted syzkaller #0 [ 408.895972][T13744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 408.906051][T13744] Call Trace: [ 408.909354][T13744] [ 408.912308][T13744] dump_stack_lvl+0x18c/0x250 [ 408.917030][T13744] ? show_regs_print_info+0x20/0x20 [ 408.922268][T13744] ? load_image+0x420/0x420 [ 408.926912][T13744] should_fail_ex+0x39d/0x4d0 [ 408.931656][T13744] should_failslab+0x9/0x20 [ 408.936201][T13744] slab_pre_alloc_hook+0x59/0x310 [ 408.941261][T13744] kmem_cache_alloc+0x5a/0x2d0 [ 408.946065][T13744] ? skb_clone+0x1eb/0x370 [ 408.950496][T13744] skb_clone+0x1eb/0x370 [ 408.954759][T13744] bpf_clone_redirect+0x167/0x4a0 [ 408.959811][T13744] ? perf_trace_preemptirq_template+0x269/0x330 [ 408.966082][T13744] bpf_prog_da1e0ee5f8d5c8f5+0x5d/0x62 [ 408.971573][T13744] ? lock_chain_count+0x20/0x20 [ 408.976445][T13744] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 408.982623][T13744] ? lockdep_hardirqs_on+0x98/0x150 [ 408.987875][T13744] ? lockdep_softirqs_on+0x580/0x580 [ 408.993173][T13744] ? bpf_test_run+0x174/0x870 [ 408.997899][T13744] ? __local_bh_disable_ip+0x108/0x1a0 [ 409.003382][T13744] ? __cant_sleep+0x220/0x220 [ 409.008087][T13744] ? _local_bh_enable+0xa0/0xa0 [ 409.012951][T13744] ? bpf_test_timer_continue+0x135/0x380 [ 409.018603][T13744] ? bpf_test_run+0x174/0x870 [ 409.023294][T13744] bpf_test_run+0x2df/0x870 [ 409.027821][T13744] ? bpf_test_run+0x174/0x870 [ 409.032560][T13744] ? convert___skb_to_skb+0x590/0x590 [ 409.037955][T13744] ? eth_get_headlen+0x210/0x210 [ 409.042914][T13744] ? bpf_prog_test_run_skb+0x7ad/0x12b0 [ 409.048471][T13744] ? convert___skb_to_skb+0x3d/0x590 [ 409.053770][T13744] bpf_prog_test_run_skb+0xad2/0x12b0 [ 409.059166][T13744] ? cpu_online+0x60/0x60 [ 409.063517][T13744] bpf_prog_test_run+0x321/0x390 [ 409.068524][T13744] __sys_bpf+0x49d/0x890 [ 409.072792][T13744] ? bpf_link_show_fdinfo+0x390/0x390 [ 409.078222][T13744] ? lock_chain_count+0x20/0x20 [ 409.083083][T13744] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 409.089087][T13744] __x64_sys_bpf+0x7c/0x90 [ 409.093521][T13744] do_syscall_64+0x55/0xa0 [ 409.097950][T13744] ? clear_bhb_loop+0x40/0x90 [ 409.102649][T13744] ? clear_bhb_loop+0x40/0x90 [ 409.107343][T13744] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 409.113264][T13744] RIP: 0033:0x7f2c1dd9cdd9 [ 409.117703][T13744] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 409.137320][T13744] RSP: 002b:00007f2c1ecac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 409.145743][T13744] RAX: ffffffffffffffda RBX: 00007f2c1e016090 RCX: 00007f2c1dd9cdd9 [ 409.153723][T13744] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 000000000000000a [ 409.161709][T13744] RBP: 00007f2c1ecac090 R08: 0000000000000000 R09: 0000000000000000 [ 409.169696][T13744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 409.177691][T13744] R13: 00007f2c1e016128 R14: 00007f2c1e016090 R15: 00007fffa60f0da8 [ 409.185689][T13744] [ 409.245327][T13681] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.256642][T13681] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.263827][T13681] bridge_slave_0: entered allmulticast mode [ 409.278442][T13681] bridge_slave_0: entered promiscuous mode [ 409.302591][T13681] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.309881][T13681] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.331742][T13681] bridge_slave_1: entered allmulticast mode [ 409.347362][T13681] bridge_slave_1: entered promiscuous mode [ 409.388601][T13681] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 409.401794][T13681] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 409.460666][T13681] team0: Port device team_slave_0 added [ 409.641715][T13681] team0: Port device team_slave_1 added [ 409.839205][T13769] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2429'. [ 409.869136][T13769] netlink: 16054 bytes leftover after parsing attributes in process `syz.2.2429'. [ 410.229777][T13681] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 410.243958][T13681] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 410.272579][T13681] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 410.284121][T13774] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2434'. [ 410.355176][T13681] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 410.363264][T13681] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 410.390787][T13681] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 410.402522][T13782] netlink: 'syz.3.2436': attribute type 13 has an invalid length. [ 410.412853][T13782] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2436'. [ 410.422727][T13782] : renamed from team_slave_0 (while UP) [ 410.687024][ T5782] Bluetooth: hci2: command tx timeout [ 410.779499][T13681] hsr_slave_0: entered promiscuous mode [ 410.796449][T13681] hsr_slave_1: entered promiscuous mode [ 410.809472][T13681] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 410.824020][T13681] Cannot create hsr debugfs directory [ 410.921892][T13799] FAULT_INJECTION: forcing a failure. [ 410.921892][T13799] name failslab, interval 1, probability 0, space 0, times 0 [ 410.934796][T13799] CPU: 0 PID: 13799 Comm: syz.3.2439 Not tainted syzkaller #0 [ 410.942295][T13799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 410.952386][T13799] Call Trace: [ 410.955692][T13799] [ 410.958645][T13799] dump_stack_lvl+0x18c/0x250 [ 410.963368][T13799] ? show_regs_print_info+0x20/0x20 [ 410.968605][T13799] ? load_image+0x420/0x420 [ 410.973142][T13799] ? mark_lock+0x94/0x320 [ 410.977521][T13799] should_fail_ex+0x39d/0x4d0 [ 410.982271][T13799] should_failslab+0x9/0x20 [ 410.986811][T13799] slab_pre_alloc_hook+0x59/0x310 [ 410.991879][T13799] kmem_cache_alloc+0x5a/0x2d0 [ 410.996676][T13799] ? dst_alloc+0x105/0x170 [ 411.001134][T13799] dst_alloc+0x105/0x170 [ 411.005420][T13799] ip_route_output_key_hash_rcu+0x14f6/0x2370 [ 411.011537][T13799] ? ip_route_output_key_hash+0x13d/0x330 [ 411.017294][T13799] ip_route_output_key_hash+0x1f3/0x330 [ 411.022883][T13799] ? ip_route_input_rcu+0x30f0/0x30f0 [ 411.028307][T13799] ? __asan_memset+0x22/0x40 [ 411.032951][T13799] ip_route_output_flow+0x2a/0x150 [ 411.038119][T13799] ip_tunnel_xmit+0x9b1/0x2410 [ 411.042939][T13799] ? ip4_dst_hoplimit+0x2d0/0x2d0 [ 411.047999][T13799] ? validate_xmit_xfrm+0xbc/0x12c0 [ 411.053235][T13799] ? gre_build_header+0x25b/0x990 [ 411.058313][T13799] ipgre_xmit+0x7a6/0xb20 [ 411.062704][T13799] dev_hard_start_xmit+0x246/0x740 [ 411.067882][T13799] __dev_queue_xmit+0x19a3/0x3660 [ 411.072964][T13799] ? __dev_queue_xmit+0x265/0x3660 [ 411.078126][T13799] ? lock_chain_count+0x20/0x20 [ 411.083019][T13799] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 411.089213][T13799] ? netdev_core_pick_tx+0x340/0x340 [ 411.094544][T13799] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 411.100746][T13799] ? pskb_expand_head+0x9d7/0x1190 [ 411.105938][T13799] __bpf_tx_skb+0x189/0x250 [ 411.110483][T13799] bpf_clone_redirect+0x30f/0x4a0 [ 411.115562][T13799] bpf_prog_da1e0ee5f8d5c8f5+0x5d/0x62 [ 411.121056][T13799] ? perf_swevent_event+0x240/0x570 [ 411.126296][T13799] ? perf_trace_preemptirq_template+0x269/0x330 [ 411.132587][T13799] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 411.138604][T13799] ? lockdep_softirqs_on+0x580/0x580 [ 411.143938][T13799] ? lock_chain_count+0x20/0x20 [ 411.148831][T13799] ? __local_bh_disable_ip+0x108/0x1a0 [ 411.154326][T13799] ? __cant_sleep+0x220/0x220 [ 411.159050][T13799] ? __local_bh_enable_ip+0x13a/0x1c0 [ 411.164470][T13799] ? _local_bh_enable+0xa0/0xa0 [ 411.169377][T13799] ? bpf_test_timer_continue+0x135/0x380 [ 411.175060][T13799] ? bpf_test_run+0x174/0x870 [ 411.179787][T13799] bpf_test_run+0x2df/0x870 [ 411.184353][T13799] ? bpf_test_run+0x174/0x870 [ 411.189082][T13799] ? convert___skb_to_skb+0x590/0x590 [ 411.194501][T13799] ? eth_get_headlen+0x210/0x210 [ 411.199517][T13799] ? bpf_prog_test_run_skb+0x7ad/0x12b0 [ 411.205117][T13799] ? convert___skb_to_skb+0x3d/0x590 [ 411.210465][T13799] bpf_prog_test_run_skb+0xad2/0x12b0 [ 411.215892][T13799] ? cpu_online+0x60/0x60 [ 411.220268][T13799] bpf_prog_test_run+0x321/0x390 [ 411.225271][T13799] __sys_bpf+0x49d/0x890 [ 411.229581][T13799] ? bpf_link_show_fdinfo+0x390/0x390 [ 411.235024][T13799] ? lock_chain_count+0x20/0x20 [ 411.239915][T13799] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 411.245933][T13799] __x64_sys_bpf+0x7c/0x90 [ 411.250385][T13799] do_syscall_64+0x55/0xa0 [ 411.254853][T13799] ? clear_bhb_loop+0x40/0x90 [ 411.259580][T13799] ? clear_bhb_loop+0x40/0x90 [ 411.264304][T13799] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 411.270248][T13799] RIP: 0033:0x7f4165d9cdd9 [ 411.274696][T13799] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 411.294352][T13799] RSP: 002b:00007f4166ba5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 411.302812][T13799] RAX: ffffffffffffffda RBX: 00007f4166015fa0 RCX: 00007f4165d9cdd9 [ 411.310813][T13799] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 000000000000000a [ 411.318813][T13799] RBP: 00007f4166ba5090 R08: 0000000000000000 R09: 0000000000000000 [ 411.326811][T13799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 411.334822][T13799] R13: 00007f4166016038 R14: 00007f4166015fa0 R15: 00007ffc5156cff8 [ 411.342849][T13799] [ 412.493694][T13838] FAULT_INJECTION: forcing a failure. [ 412.493694][T13838] name failslab, interval 1, probability 0, space 0, times 0 [ 412.506412][T13838] CPU: 1 PID: 13838 Comm: syz.0.2448 Not tainted syzkaller #0 [ 412.513901][T13838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 412.524007][T13838] Call Trace: [ 412.527307][T13838] [ 412.530261][T13838] dump_stack_lvl+0x18c/0x250 [ 412.534995][T13838] ? show_regs_print_info+0x20/0x20 [ 412.540236][T13838] ? load_image+0x420/0x420 [ 412.544771][T13838] ? __kmem_cache_alloc_node+0x13a/0x250 [ 412.550453][T13838] ? netdev_core_pick_tx+0x340/0x340 [ 412.555761][T13838] should_fail_ex+0x39d/0x4d0 [ 412.560469][T13838] should_failslab+0x9/0x20 [ 412.564996][T13838] slab_pre_alloc_hook+0x59/0x310 [ 412.570065][T13838] kmem_cache_alloc+0x5a/0x2d0 [ 412.574856][T13838] ? skb_clone+0x1eb/0x370 [ 412.579299][T13838] skb_clone+0x1eb/0x370 [ 412.583612][T13838] bpf_clone_redirect+0x167/0x4a0 [ 412.588682][T13838] bpf_prog_da1e0ee5f8d5c8f5+0x5d/0x62 [ 412.594231][T13838] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 412.600237][T13838] ? perf_trace_preemptirq_template+0xac/0x330 [ 412.606409][T13838] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 412.612408][T13838] ? lockdep_softirqs_on+0x580/0x580 [ 412.617710][T13838] ? lock_chain_count+0x20/0x20 [ 412.622569][T13838] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 412.628829][T13838] ? __local_bh_disable_ip+0x108/0x1a0 [ 412.634398][T13838] ? __cant_sleep+0x220/0x220 [ 412.639114][T13838] ? __local_bh_enable_ip+0x13a/0x1c0 [ 412.644505][T13838] ? _local_bh_enable+0xa0/0xa0 [ 412.649384][T13838] ? bpf_test_timer_continue+0x135/0x380 [ 412.655047][T13838] ? bpf_test_run+0x174/0x870 [ 412.659748][T13838] bpf_test_run+0x2df/0x870 [ 412.664292][T13838] ? bpf_test_run+0x174/0x870 [ 412.668997][T13838] ? convert___skb_to_skb+0x590/0x590 [ 412.674401][T13838] ? eth_get_headlen+0x210/0x210 [ 412.679375][T13838] ? bpf_prog_test_run_skb+0x7ad/0x12b0 [ 412.684937][T13838] ? convert___skb_to_skb+0x3d/0x590 [ 412.690258][T13838] bpf_prog_test_run_skb+0xad2/0x12b0 [ 412.695686][T13838] ? cpu_online+0x60/0x60 [ 412.700029][T13838] bpf_prog_test_run+0x321/0x390 [ 412.704991][T13838] __sys_bpf+0x49d/0x890 [ 412.709259][T13838] ? bpf_link_show_fdinfo+0x390/0x390 [ 412.714662][T13838] ? lock_chain_count+0x20/0x20 [ 412.719538][T13838] __x64_sys_bpf+0x7c/0x90 [ 412.723969][T13838] do_syscall_64+0x55/0xa0 [ 412.728391][T13838] ? clear_bhb_loop+0x40/0x90 [ 412.733124][T13838] ? clear_bhb_loop+0x40/0x90 [ 412.737832][T13838] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 412.743740][T13838] RIP: 0033:0x7f2c1dd9cdd9 [ 412.748167][T13838] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 412.767784][T13838] RSP: 002b:00007f2c1ecac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 412.776211][T13838] RAX: ffffffffffffffda RBX: 00007f2c1e016090 RCX: 00007f2c1dd9cdd9 [ 412.784217][T13838] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 000000000000000a [ 412.792213][T13838] RBP: 00007f2c1ecac090 R08: 0000000000000000 R09: 0000000000000000 [ 412.800196][T13838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 412.808176][T13838] R13: 00007f2c1e016128 R14: 00007f2c1e016090 R15: 00007fffa60f0da8 [ 412.816170][T13838] [ 412.845421][ T5782] Bluetooth: hci2: command tx timeout [ 413.090253][T13853] FAULT_INJECTION: forcing a failure. [ 413.090253][T13853] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 413.128017][T13853] CPU: 1 PID: 13853 Comm: syz.3.2452 Not tainted syzkaller #0 [ 413.135535][T13853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 413.145618][T13853] Call Trace: [ 413.148922][T13853] [ 413.151904][T13853] dump_stack_lvl+0x18c/0x250 [ 413.156628][T13853] ? show_regs_print_info+0x20/0x20 [ 413.161868][T13853] ? load_image+0x420/0x420 [ 413.166429][T13853] ? __lock_acquire+0x7d40/0x7d40 [ 413.171490][T13853] ? snprintf+0xe9/0x140 [ 413.175780][T13853] should_fail_ex+0x39d/0x4d0 [ 413.180504][T13853] _copy_to_user+0x2f/0xa0 [ 413.184970][T13853] simple_read_from_buffer+0xe7/0x150 [ 413.190404][T13853] proc_fail_nth_read+0x1e8/0x260 [ 413.195462][T13853] ? proc_fault_inject_write+0x360/0x360 [ 413.201141][T13853] ? fsnotify_perm+0x271/0x5e0 [ 413.205945][T13853] ? proc_fault_inject_write+0x360/0x360 [ 413.211616][T13853] vfs_read+0x28b/0x970 [ 413.215823][T13853] ? kernel_read+0x1e0/0x1e0 [ 413.220450][T13853] ? __fget_files+0x28/0x4b0 [ 413.225079][T13853] ? __fget_files+0x28/0x4b0 [ 413.229724][T13853] ? __fget_files+0x43d/0x4b0 [ 413.234472][T13853] ? __fdget_pos+0x2a3/0x330 [ 413.239113][T13853] ? ksys_read+0x75/0x260 [ 413.243481][T13853] ksys_read+0x150/0x260 [ 413.247765][T13853] ? vfs_write+0x990/0x990 [ 413.252240][T13853] ? lockdep_hardirqs_on+0x98/0x150 [ 413.257488][T13853] do_syscall_64+0x55/0xa0 [ 413.261934][T13853] ? clear_bhb_loop+0x40/0x90 [ 413.266639][T13853] ? clear_bhb_loop+0x40/0x90 [ 413.271356][T13853] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 413.277284][T13853] RIP: 0033:0x7f4165d5d60e [ 413.281779][T13853] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 413.301416][T13853] RSP: 002b:00007f4166ba4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 413.309860][T13853] RAX: ffffffffffffffda RBX: 00007f4166ba56c0 RCX: 00007f4165d5d60e [ 413.317860][T13853] RDX: 000000000000000f RSI: 00007f4166ba50a0 RDI: 0000000000000007 [ 413.325853][T13853] RBP: 00007f4166ba5090 R08: 0000000000000000 R09: 0000000000000000 [ 413.333859][T13853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 413.341856][T13853] R13: 00007f4166016038 R14: 00007f4166015fa0 R15: 00007ffc5156cff8 [ 413.349875][T13853] [ 413.489805][T13860] netlink: 'syz.0.2454': attribute type 64 has an invalid length. [ 413.612504][T13681] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 413.650606][T13863] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2455'. [ 413.683526][T13681] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 413.731073][T13866] netlink: 'syz.3.2455': attribute type 13 has an invalid length. [ 413.739773][T13866] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2455'. [ 413.753751][T13866] syz_tun: refused to change device tx_queue_len [ 413.764593][T13866] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 413.782912][T13681] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 413.819290][T13681] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 413.871187][T12568] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 413.900591][T12568] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 413.919961][T12568] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 413.936135][T12568] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 413.944891][T12568] batman_adv: batadv0: Interface deactivated: ipvlan1 [ 413.951814][T12568] batman_adv: batadv0: Removing interface: ipvlan1 [ 413.959976][T12568] Lè+߬ç³Õ: left promiscuous mode [ 413.965261][T12568] bridge0: port 1(Lè+߬ç³Õ) entered disabled state [ 413.995803][T12568] veth1_vlan: left promiscuous mode [ 414.005961][T12568] veth0_vlan: left promiscuous mode [ 414.230945][T13873] FAULT_INJECTION: forcing a failure. [ 414.230945][T13873] name failslab, interval 1, probability 0, space 0, times 0 [ 414.243642][T13873] CPU: 0 PID: 13873 Comm: syz.2.2458 Not tainted syzkaller #0 [ 414.251124][T13873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 414.261210][T13873] Call Trace: [ 414.264528][T13873] [ 414.267494][T13873] dump_stack_lvl+0x18c/0x250 [ 414.272218][T13873] ? show_regs_print_info+0x20/0x20 [ 414.277462][T13873] ? load_image+0x420/0x420 [ 414.282008][T13873] ? mark_lock+0x94/0x320 [ 414.286386][T13873] should_fail_ex+0x39d/0x4d0 [ 414.291200][T13873] should_failslab+0x9/0x20 [ 414.295744][T13873] slab_pre_alloc_hook+0x59/0x310 [ 414.300817][T13873] kmem_cache_alloc+0x5a/0x2d0 [ 414.305622][T13873] ? dst_alloc+0x105/0x170 [ 414.310072][T13873] dst_alloc+0x105/0x170 [ 414.314340][T13873] ip_route_output_key_hash_rcu+0x14f6/0x2370 [ 414.320444][T13873] ? ip_route_output_key_hash+0x13d/0x330 [ 414.326187][T13873] ip_route_output_key_hash+0x1f3/0x330 [ 414.331758][T13873] ? ip_route_input_rcu+0x30f0/0x30f0 [ 414.337155][T13873] ? __asan_memset+0x22/0x40 [ 414.341764][T13873] ip_route_output_flow+0x2a/0x150 [ 414.346900][T13873] ip_tunnel_xmit+0x9b1/0x2410 [ 414.351689][T13873] ? ip4_dst_hoplimit+0x2d0/0x2d0 [ 414.356722][T13873] ? validate_xmit_xfrm+0xbc/0x12c0 [ 414.361940][T13873] ? gre_build_header+0x25b/0x990 [ 414.366996][T13873] ipgre_xmit+0x7a6/0xb20 [ 414.371350][T13873] dev_hard_start_xmit+0x246/0x740 [ 414.376500][T13873] __dev_queue_xmit+0x19a3/0x3660 [ 414.381551][T13873] ? __dev_queue_xmit+0x265/0x3660 [ 414.386701][T13873] ? __kmem_cache_alloc_node+0x13a/0x250 [ 414.392373][T13873] ? netdev_core_pick_tx+0x340/0x340 [ 414.397676][T13873] ? skb_release_data+0x1d1/0x7b0 [ 414.402732][T13873] __bpf_tx_skb+0x189/0x250 [ 414.407259][T13873] bpf_clone_redirect+0x30f/0x4a0 [ 414.412336][T13873] bpf_prog_da1e0ee5f8d5c8f5+0x5d/0x62 [ 414.417814][T13873] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 414.423808][T13873] ? perf_trace_preemptirq_template+0xac/0x330 [ 414.429996][T13873] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 414.436002][T13873] ? lockdep_softirqs_on+0x580/0x580 [ 414.441310][T13873] ? lock_chain_count+0x20/0x20 [ 414.446177][T13873] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 414.452445][T13873] ? __local_bh_disable_ip+0x108/0x1a0 [ 414.457915][T13873] ? __cant_sleep+0x220/0x220 [ 414.462608][T13873] ? __local_bh_enable_ip+0x13a/0x1c0 [ 414.467991][T13873] ? _local_bh_enable+0xa0/0xa0 [ 414.472852][T13873] ? bpf_test_timer_continue+0x135/0x380 [ 414.478497][T13873] ? bpf_test_run+0x174/0x870 [ 414.483185][T13873] bpf_test_run+0x2df/0x870 [ 414.487713][T13873] ? bpf_test_run+0x174/0x870 [ 414.492402][T13873] ? convert___skb_to_skb+0x590/0x590 [ 414.497793][T13873] ? eth_get_headlen+0x210/0x210 [ 414.502762][T13873] ? bpf_prog_test_run_skb+0x7ad/0x12b0 [ 414.508329][T13873] ? convert___skb_to_skb+0x3d/0x590 [ 414.513636][T13873] bpf_prog_test_run_skb+0xad2/0x12b0 [ 414.519038][T13873] ? cpu_online+0x60/0x60 [ 414.523387][T13873] bpf_prog_test_run+0x321/0x390 [ 414.528373][T13873] __sys_bpf+0x49d/0x890 [ 414.532647][T13873] ? bpf_link_show_fdinfo+0x390/0x390 [ 414.538076][T13873] ? lock_chain_count+0x20/0x20 [ 414.542949][T13873] __x64_sys_bpf+0x7c/0x90 [ 414.547381][T13873] do_syscall_64+0x55/0xa0 [ 414.551814][T13873] ? clear_bhb_loop+0x40/0x90 [ 414.556517][T13873] ? clear_bhb_loop+0x40/0x90 [ 414.561213][T13873] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 414.567118][T13873] RIP: 0033:0x7f3de3d9cdd9 [ 414.571554][T13873] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 414.591173][T13873] RSP: 002b:00007f3de4cad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 414.599630][T13873] RAX: ffffffffffffffda RBX: 00007f3de4016090 RCX: 00007f3de3d9cdd9 [ 414.607614][T13873] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 000000000000000a [ 414.615593][T13873] RBP: 00007f3de4cad090 R08: 0000000000000000 R09: 0000000000000000 [ 414.623576][T13873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 414.631560][T13873] R13: 00007f3de4016128 R14: 00007f3de4016090 R15: 00007fffc5010f18 [ 414.639585][T13873] [ 414.939542][ T5782] Bluetooth: hci2: command tx timeout [ 415.550808][T13878] netlink: 'syz.3.2462': attribute type 16 has an invalid length. [ 415.576171][T13878] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2462'. [ 415.595653][T13878] veth1_macvtap: entered allmulticast mode [ 415.829692][T13681] 8021q: adding VLAN 0 to HW filter on device bond0 [ 415.880766][T13681] 8021q: adding VLAN 0 to HW filter on device team0 [ 415.930827][ T166] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.938037][ T166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 415.951182][ T166] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.958379][ T166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 416.858707][T13681] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 417.059680][T13681] veth0_vlan: entered promiscuous mode [ 417.109437][T13681] veth1_vlan: entered promiscuous mode [ 417.118080][T13927] FAULT_INJECTION: forcing a failure. [ 417.118080][T13927] name failslab, interval 1, probability 0, space 0, times 0 [ 417.130923][T13927] CPU: 1 PID: 13927 Comm: syz.2.2472 Not tainted syzkaller #0 [ 417.138412][T13927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 417.148491][T13927] Call Trace: [ 417.151796][T13927] [ 417.154776][T13927] dump_stack_lvl+0x18c/0x250 [ 417.159516][T13927] ? perf_tp_event+0x1520/0x1520 [ 417.164502][T13927] ? show_regs_print_info+0x20/0x20 [ 417.169756][T13927] ? load_image+0x420/0x420 [ 417.174314][T13927] ? perf_tp_event+0x13d7/0x1520 [ 417.179294][T13927] should_fail_ex+0x39d/0x4d0 [ 417.184026][T13927] should_failslab+0x9/0x20 [ 417.188569][T13927] slab_pre_alloc_hook+0x59/0x310 [ 417.193619][T13927] kmem_cache_alloc_node+0x60/0x320 [ 417.198834][T13927] ? __alloc_skb+0x103/0x2c0 [ 417.203439][T13927] __alloc_skb+0x103/0x2c0 [ 417.207872][T13927] alloc_skb_with_frags+0xca/0x7b0 [ 417.213003][T13927] ? mark_lock+0x94/0x320 [ 417.217351][T13927] ? __lock_acquire+0x1273/0x7d40 [ 417.222387][T13927] sock_alloc_send_pskb+0x883/0x9a0 [ 417.227615][T13927] ? sock_kzfree_s+0x50/0x50 [ 417.232220][T13927] ? lock_chain_count+0x20/0x20 [ 417.237090][T13927] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 417.243282][T13927] __ip6_append_data+0x29f3/0x3c50 [ 417.248425][T13927] ? ip6_mtu+0x7d/0x3f0 [ 417.252619][T13927] ? __in6_dev_get+0xd0/0xd0 [ 417.257234][T13927] ? ip6_mtu+0x7d/0x3f0 [ 417.261407][T13927] ? ip6_setup_cork+0xfe0/0xfe0 [ 417.266282][T13927] ip6_append_data+0x1b0/0x350 [ 417.271100][T13927] ? __in6_dev_get+0xd0/0xd0 [ 417.275715][T13927] icmp6_send+0x136a/0x1b40 [ 417.280244][T13927] ? icmp6_send+0x233/0x1b40 [ 417.284870][T13927] ? icmpv6_push_pending_frames+0x400/0x400 [ 417.290813][T13927] ? __local_bh_enable_ip+0x142/0x1c0 [ 417.296226][T13927] icmpv6_ndo_send+0x1b9/0x520 [ 417.301029][T13927] ? __asan_memset+0x22/0x40 [ 417.305657][T13927] ? xfrm_lookup_with_ifid+0x17b2/0x1aa0 [ 417.311306][T13927] ? udp6_set_csum+0xef0/0xef0 [ 417.316102][T13927] ? ipv4_mtu+0x2cf/0x3f0 [ 417.320448][T13927] tnl_update_pmtu+0xd33/0x1070 [ 417.325318][T13927] ip_tunnel_xmit+0xd1d/0x2410 [ 417.330131][T13927] ? ip4_dst_hoplimit+0x2d0/0x2d0 [ 417.335169][T13927] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 417.341361][T13927] ? lockdep_hardirqs_on+0x98/0x150 [ 417.346580][T13927] ? gre_build_header+0x25b/0x990 [ 417.351633][T13927] ipgre_xmit+0x7a6/0xb20 [ 417.355994][T13927] dev_hard_start_xmit+0x246/0x740 [ 417.361150][T13927] __dev_queue_xmit+0x19a3/0x3660 [ 417.366204][T13927] ? __dev_queue_xmit+0x265/0x3660 [ 417.371338][T13927] ? __kmem_cache_alloc_node+0x13a/0x250 [ 417.376996][T13927] ? netdev_core_pick_tx+0x340/0x340 [ 417.382311][T13927] ? skb_release_data+0x1d1/0x7b0 [ 417.387368][T13927] __bpf_tx_skb+0x189/0x250 [ 417.391891][T13927] bpf_clone_redirect+0x30f/0x4a0 [ 417.396942][T13927] bpf_prog_da1e0ee5f8d5c8f5+0x5d/0x62 [ 417.402417][T13927] ? perf_swevent_event+0x240/0x570 [ 417.407631][T13927] ? preempt_schedule+0xc0/0xd0 [ 417.412510][T13927] ? bpf_test_run+0x174/0x870 [ 417.417212][T13927] ? preempt_schedule_common+0x82/0xc0 [ 417.422683][T13927] ? schedule_preempt_disabled+0x20/0x20 [ 417.428327][T13927] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 417.434327][T13927] ? lockdep_softirqs_on+0x580/0x580 [ 417.439635][T13927] ? lock_chain_count+0x20/0x20 [ 417.444502][T13927] ? preempt_schedule_thunk+0x1a/0x30 [ 417.449902][T13927] ? __local_bh_disable_ip+0x108/0x1a0 [ 417.455379][T13927] ? __cant_sleep+0x220/0x220 [ 417.460096][T13927] ? __local_bh_enable_ip+0x14b/0x1c0 [ 417.465480][T13927] ? _local_bh_enable+0xa0/0xa0 [ 417.470343][T13927] ? bpf_test_timer_continue+0x135/0x380 [ 417.475989][T13927] ? bpf_test_run+0x174/0x870 [ 417.480691][T13927] bpf_test_run+0x2df/0x870 [ 417.485238][T13927] ? bpf_test_run+0x174/0x870 [ 417.489936][T13927] ? convert___skb_to_skb+0x590/0x590 [ 417.495337][T13927] ? eth_get_headlen+0x210/0x210 [ 417.500308][T13927] ? bpf_prog_test_run_skb+0x7ad/0x12b0 [ 417.505863][T13927] ? convert___skb_to_skb+0x3d/0x590 [ 417.511164][T13927] bpf_prog_test_run_skb+0xad2/0x12b0 [ 417.516571][T13927] ? cpu_online+0x60/0x60 [ 417.520917][T13927] bpf_prog_test_run+0x321/0x390 [ 417.525874][T13927] __sys_bpf+0x49d/0x890 [ 417.530128][T13927] ? bpf_link_show_fdinfo+0x390/0x390 [ 417.535537][T13927] ? lock_chain_count+0x20/0x20 [ 417.540450][T13927] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 417.546459][T13927] __x64_sys_bpf+0x7c/0x90 [ 417.550897][T13927] do_syscall_64+0x55/0xa0 [ 417.555358][T13927] ? clear_bhb_loop+0x40/0x90 [ 417.560056][T13927] ? clear_bhb_loop+0x40/0x90 [ 417.564755][T13927] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 417.570670][T13927] RIP: 0033:0x7f3de3d9cdd9 [ 417.575105][T13927] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 417.594740][T13927] RSP: 002b:00007f3de4cce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 417.603176][T13927] RAX: ffffffffffffffda RBX: 00007f3de4015fa0 RCX: 00007f3de3d9cdd9 [ 417.611158][T13927] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 000000000000000a [ 417.619139][T13927] RBP: 00007f3de4cce090 R08: 0000000000000000 R09: 0000000000000000 [ 417.627122][T13927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 417.635108][T13927] R13: 00007f3de4016038 R14: 00007f3de4015fa0 R15: 00007fffc5010f18 [ 417.643110][T13927] [ 417.700808][T13681] veth0_macvtap: entered promiscuous mode [ 417.711043][T13681] veth1_macvtap: entered promiscuous mode [ 417.809212][T13681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 417.836520][T13681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.856099][T13681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 417.869307][T13681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.881001][T13681] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 417.898969][T13681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 417.911587][T13681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.925620][T13681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 417.940606][T13681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.952242][T13681] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 417.969284][T13681] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.982705][T13681] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.999400][T13681] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.008447][T13681] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.326920][ T166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.334791][ T166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.434009][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.473893][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.621376][T13986] netlink: 'syz.1.2484': attribute type 29 has an invalid length. [ 419.662659][T13986] netlink: 'syz.1.2484': attribute type 29 has an invalid length. [ 419.691655][T13987] netlink: 'syz.1.2484': attribute type 29 has an invalid length. [ 419.790478][T13986] netlink: 'syz.1.2484': attribute type 29 has an invalid length. [ 419.896494][T13986] netlink: 'syz.1.2484': attribute type 29 has an invalid length. [ 420.319589][T14002] netlink: 13695 bytes leftover after parsing attributes in process `syz.2.2488'. [ 420.367640][T14002] netlink: 'syz.2.2488': attribute type 1 has an invalid length. [ 420.380911][T14002] netlink: 'syz.2.2488': attribute type 2 has an invalid length. [ 420.396092][T14002] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2488'. [ 420.469936][ T5784] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 420.479591][ T5784] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 420.495398][ T5784] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 420.508901][ T5784] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 420.524019][ T5784] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 420.540156][ T5784] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 420.679404][ T49] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.819800][ T49] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.998219][ T49] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.198207][ T49] netdevsim netdevsim0 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.399226][T14054] netlink: 202920 bytes leftover after parsing attributes in process `syz.3.2499'. [ 421.404026][T14057] netlink: 'syz.1.2501': attribute type 9 has an invalid length. [ 421.417861][T14057] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2501'. [ 421.553990][T14058] netlink: 'syz.1.2501': attribute type 9 has an invalid length. [ 421.586193][T14058] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2501'. [ 421.648838][T14013] chnl_net:caif_netlink_parms(): no params data found [ 422.378002][T14013] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.385391][T14013] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.403159][T14013] bridge_slave_0: entered allmulticast mode [ 422.421761][T14013] bridge_slave_0: entered promiscuous mode [ 422.447017][T14013] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.463337][T14013] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.488681][T14013] bridge_slave_1: entered allmulticast mode [ 422.504365][T14013] bridge_slave_1: entered promiscuous mode [ 422.610899][ T5782] Bluetooth: hci0: command tx timeout [ 422.861330][T14013] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 422.959590][T14013] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 422.999585][T14105] netlink: 'syz.3.2511': attribute type 10 has an invalid length. [ 423.037962][T14105] hsr_slave_0: left promiscuous mode [ 423.062881][T14105] hsr_slave_1: left promiscuous mode [ 424.687108][ T5782] Bluetooth: hci0: command tx timeout [ 426.550533][T14013] team0: Port device team_slave_0 added [ 426.581339][T14013] team0: Port device team_slave_1 added [ 426.644257][T14126] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2515'. [ 426.766533][ T5782] Bluetooth: hci0: command tx timeout [ 426.789604][T14013] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 426.832261][T14013] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 426.901723][T14013] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 426.934842][T14013] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 426.950670][T14013] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 427.038282][T14013] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 427.069390][T14144] netlink: 'syz.3.2519': attribute type 29 has an invalid length. [ 427.120352][T14154] netlink: 209820 bytes leftover after parsing attributes in process `syz.1.2520'. [ 427.163329][T14144] netlink: 'syz.3.2519': attribute type 29 has an invalid length. [ 427.450573][T14013] hsr_slave_0: entered promiscuous mode [ 427.472663][T14013] hsr_slave_1: entered promiscuous mode [ 427.483741][T14013] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 427.514532][T14013] Cannot create hsr debugfs directory [ 427.919256][ T49] hsr_slave_0: left promiscuous mode [ 427.941657][ T49] hsr_slave_1: left promiscuous mode [ 427.952870][ T49] bridge_slave_1: left allmulticast mode [ 427.966240][ T49] bridge_slave_1: left promiscuous mode [ 427.978463][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.992050][ T49] bridge_slave_0: left allmulticast mode [ 427.999207][ T49] bridge_slave_0: left promiscuous mode [ 428.005050][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.287961][ T49] veth1_vlan: left promiscuous mode [ 428.293734][ T49] veth0_vlan: left promiscuous mode [ 428.422735][T14199] netlink: 'syz.1.2531': attribute type 1 has an invalid length. [ 428.433300][T14200] netlink: 'syz.1.2531': attribute type 1 has an invalid length. [ 428.446812][T14199] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.2531'. [ 428.469974][T14200] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.2531'. [ 428.857026][ T5782] Bluetooth: hci0: command tx timeout [ 429.160758][ T49] team0 (unregistering): Port device team_slave_1 removed [ 429.212553][ T49] team0 (unregistering): Port device team_slave_0 removed [ 430.544851][T14257] netlink: 1042 bytes leftover after parsing attributes in process `syz.2.2543'. [ 430.555457][T14258] netlink: 1042 bytes leftover after parsing attributes in process `syz.2.2543'. [ 430.677012][T14258] mac80211_hwsim hwsim51 wlan0: entered promiscuous mode [ 430.685698][T14258] mac80211_hwsim hwsim51 wlan0: entered allmulticast mode [ 430.899609][T14013] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 430.932267][T14013] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 430.969605][T14013] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 430.983910][T14272] netlink: 'syz.1.2546': attribute type 3 has an invalid length. [ 431.000377][T14013] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 431.027224][T14272] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.2546'. [ 431.075937][T14280] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2548'. [ 431.212120][T14013] 8021q: adding VLAN 0 to HW filter on device bond0 [ 431.279537][T14013] 8021q: adding VLAN 0 to HW filter on device team0 [ 431.355860][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.363074][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 431.400940][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.408251][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 431.753295][T14306] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2554'. [ 431.796156][T14306] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2554'. [ 431.829927][T14310] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2554'. [ 432.081151][T14013] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 432.392885][T14013] veth0_vlan: entered promiscuous mode [ 432.564252][T14013] veth1_vlan: entered promiscuous mode [ 432.745198][T14013] veth0_macvtap: entered promiscuous mode [ 432.789421][T14013] veth1_macvtap: entered promiscuous mode [ 433.058522][T14013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 433.102306][T14013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.142520][T14013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 433.153356][T14013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.163503][T14013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 433.174933][T14013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.239368][T14013] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 433.284478][T14350] mac80211_hwsim hwsim55 wlan0: entered promiscuous mode [ 433.293866][T14350] mac80211_hwsim hwsim55 wlan0: entered allmulticast mode [ 433.380068][T14013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 433.406188][T14013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.436117][T14013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 433.460359][T14013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.490798][T14013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 433.516122][T14013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.543962][T14013] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 433.600619][T14013] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.636370][T14013] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.645209][T14013] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.706092][T14013] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.967851][T12568] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.975727][T12568] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 434.100106][T12903] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 434.115108][T12903] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 434.366746][T14389] FAULT_INJECTION: forcing a failure. [ 434.366746][T14389] name failslab, interval 1, probability 0, space 0, times 0 [ 434.379561][T14389] CPU: 1 PID: 14389 Comm: syz.0.2483 Not tainted syzkaller #0 [ 434.387056][T14389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 434.397156][T14389] Call Trace: [ 434.400471][T14389] [ 434.403429][T14389] dump_stack_lvl+0x18c/0x250 [ 434.408164][T14389] ? show_regs_print_info+0x20/0x20 [ 434.413410][T14389] ? load_image+0x420/0x420 [ 434.417948][T14389] ? perf_tp_event+0x13d7/0x1520 [ 434.422935][T14389] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 434.428806][T14389] should_fail_ex+0x39d/0x4d0 [ 434.433546][T14389] should_failslab+0x9/0x20 [ 434.438098][T14389] slab_pre_alloc_hook+0x59/0x310 [ 434.443192][T14389] kmem_cache_alloc+0x5a/0x2d0 [ 434.448009][T14389] ? skb_clone+0x1eb/0x370 [ 434.452478][T14389] skb_clone+0x1eb/0x370 [ 434.456772][T14389] bpf_clone_redirect+0x167/0x4a0 [ 434.461866][T14389] bpf_prog_da1e0ee5f8d5c8f5+0x5d/0x62 [ 434.467380][T14389] ? perf_swevent_event+0x240/0x570 [ 434.472638][T14389] ? perf_trace_preemptirq_template+0x269/0x330 [ 434.478948][T14389] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 434.484983][T14389] ? lockdep_softirqs_on+0x580/0x580 [ 434.490319][T14389] ? lock_chain_count+0x20/0x20 [ 434.495253][T14389] ? __local_bh_disable_ip+0x108/0x1a0 [ 434.500757][T14389] ? __cant_sleep+0x220/0x220 [ 434.505476][T14389] ? __local_bh_enable_ip+0x13a/0x1c0 [ 434.510893][T14389] ? _local_bh_enable+0xa0/0xa0 [ 434.515799][T14389] ? bpf_test_timer_continue+0x135/0x380 [ 434.521482][T14389] ? bpf_test_run+0x174/0x870 [ 434.526219][T14389] bpf_test_run+0x2df/0x870 [ 434.530793][T14389] ? bpf_test_run+0x174/0x870 [ 434.535530][T14389] ? convert___skb_to_skb+0x590/0x590 [ 434.540964][T14389] ? eth_get_headlen+0x210/0x210 [ 434.545964][T14389] ? bpf_prog_test_run_skb+0x7ad/0x12b0 [ 434.551561][T14389] ? convert___skb_to_skb+0x3d/0x590 [ 434.556897][T14389] bpf_prog_test_run_skb+0xad2/0x12b0 [ 434.562342][T14389] ? cpu_online+0x60/0x60 [ 434.566739][T14389] bpf_prog_test_run+0x321/0x390 [ 434.571739][T14389] __sys_bpf+0x49d/0x890 [ 434.576037][T14389] ? bpf_link_show_fdinfo+0x390/0x390 [ 434.581475][T14389] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 434.587705][T14389] __x64_sys_bpf+0x7c/0x90 [ 434.592167][T14389] do_syscall_64+0x55/0xa0 [ 434.596637][T14389] ? clear_bhb_loop+0x40/0x90 [ 434.601369][T14389] ? clear_bhb_loop+0x40/0x90 [ 434.606103][T14389] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 434.612053][T14389] RIP: 0033:0x7fa53b39cdd9 [ 434.616515][T14389] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 434.636165][T14389] RSP: 002b:00007fa53c322028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 434.644636][T14389] RAX: ffffffffffffffda RBX: 00007fa53b615fa0 RCX: 00007fa53b39cdd9 [ 434.652655][T14389] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 000000000000000a [ 434.660673][T14389] RBP: 00007fa53c322090 R08: 0000000000000000 R09: 0000000000000000 [ 434.668690][T14389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 434.676708][T14389] R13: 00007fa53b616038 R14: 00007fa53b615fa0 R15: 00007ffec4eaf578 [ 434.684748][T14389] [ 435.004004][T14401] netlink: 'syz.2.2573': attribute type 15 has an invalid length. [ 435.033159][T14401] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2573'. [ 435.063509][T14399] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2571'. [ 435.473162][T14424] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2577'. [ 435.768100][T14437] FAULT_INJECTION: forcing a failure. [ 435.768100][T14437] name failslab, interval 1, probability 0, space 0, times 0 [ 435.780998][T14437] CPU: 0 PID: 14437 Comm: syz.0.2580 Not tainted syzkaller #0 [ 435.788494][T14437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 435.798551][T14437] Call Trace: [ 435.801838][T14437] [ 435.804810][T14437] dump_stack_lvl+0x18c/0x250 [ 435.809522][T14437] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 435.815730][T14437] ? show_regs_print_info+0x20/0x20 [ 435.820971][T14437] ? load_image+0x420/0x420 [ 435.825520][T14437] should_fail_ex+0x39d/0x4d0 [ 435.830251][T14437] should_failslab+0x9/0x20 [ 435.834793][T14437] slab_pre_alloc_hook+0x59/0x310 [ 435.839855][T14437] kmem_cache_alloc+0x5a/0x2d0 [ 435.844660][T14437] ? skb_clone+0x1eb/0x370 [ 435.849116][T14437] skb_clone+0x1eb/0x370 [ 435.853384][T14437] bpf_clone_redirect+0x167/0x4a0 [ 435.858440][T14437] ? bpf_test_run+0x174/0x870 [ 435.863130][T14437] bpf_prog_da1e0ee5f8d5c8f5+0x5d/0x62 [ 435.868607][T14437] ? lock_chain_count+0x20/0x20 [ 435.873475][T14437] ? preempt_schedule+0xc0/0xd0 [ 435.878341][T14437] ? bpf_test_run+0x174/0x870 [ 435.883032][T14437] ? preempt_schedule_common+0x82/0xc0 [ 435.888506][T14437] ? schedule_preempt_disabled+0x20/0x20 [ 435.894172][T14437] ? lockdep_softirqs_on+0x580/0x580 [ 435.899491][T14437] ? bpf_test_run+0x174/0x870 [ 435.904191][T14437] ? preempt_schedule_thunk+0x1a/0x30 [ 435.909600][T14437] ? __local_bh_disable_ip+0x108/0x1a0 [ 435.915085][T14437] ? __cant_sleep+0x220/0x220 [ 435.919792][T14437] ? __local_bh_enable_ip+0x14b/0x1c0 [ 435.925190][T14437] ? _local_bh_enable+0xa0/0xa0 [ 435.930087][T14437] ? bpf_test_run+0x174/0x870 [ 435.934792][T14437] ? kvm_sched_clock_read+0x11/0x20 [ 435.940017][T14437] bpf_test_run+0x4fa/0x870 [ 435.944553][T14437] ? bpf_test_run+0x174/0x870 [ 435.949283][T14437] ? convert___skb_to_skb+0x590/0x590 [ 435.954680][T14437] ? eth_get_headlen+0x210/0x210 [ 435.959650][T14437] ? bpf_prog_test_run_skb+0x7ad/0x12b0 [ 435.965219][T14437] ? convert___skb_to_skb+0x3d/0x590 [ 435.970550][T14437] bpf_prog_test_run_skb+0xad2/0x12b0 [ 435.975953][T14437] ? cpu_online+0x60/0x60 [ 435.980295][T14437] bpf_prog_test_run+0x321/0x390 [ 435.985261][T14437] __sys_bpf+0x49d/0x890 [ 435.989547][T14437] ? bpf_link_show_fdinfo+0x390/0x390 [ 435.994948][T14437] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 436.001137][T14437] __x64_sys_bpf+0x7c/0x90 [ 436.005565][T14437] do_syscall_64+0x55/0xa0 [ 436.009997][T14437] ? clear_bhb_loop+0x40/0x90 [ 436.014702][T14437] ? clear_bhb_loop+0x40/0x90 [ 436.019407][T14437] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 436.025332][T14437] RIP: 0033:0x7fa53b39cdd9 [ 436.029779][T14437] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 436.049416][T14437] RSP: 002b:00007fa53c322028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 436.057858][T14437] RAX: ffffffffffffffda RBX: 00007fa53b615fa0 RCX: 00007fa53b39cdd9 [ 436.065844][T14437] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 000000000000000a [ 436.073842][T14437] RBP: 00007fa53c322090 R08: 0000000000000000 R09: 0000000000000000 [ 436.081841][T14437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 436.089842][T14437] R13: 00007fa53b616038 R14: 00007fa53b615fa0 R15: 00007ffec4eaf578 [ 436.097849][T14437] [ 436.409216][T14449] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.2584'. [ 436.734179][T14462] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.2590'. [ 436.744353][T14462] netlink: 'syz.0.2590': attribute type 1 has an invalid length. [ 436.753086][T14462] netlink: 21820 bytes leftover after parsing attributes in process `syz.0.2590'. [ 437.092842][T14460] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 437.635227][T14467] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2591'. [ 437.779550][T14476] tun0: tun_chr_ioctl cmd 1074025675 [ 437.784998][T14476] tun0: persist enabled [ 437.789948][T14476] tun0: tun_chr_ioctl cmd 1074025675 [ 437.795402][T14476] tun0: persist disabled [ 438.433204][T14497] netlink: 'syz.3.2601': attribute type 10 has an invalid length. [ 438.452165][T14497] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2601'. [ 438.461901][T14483] syzkaller0: entered promiscuous mode [ 438.470577][T14483] syzkaller0: entered allmulticast mode [ 438.480963][T14497] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 440.055062][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.061995][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 443.500004][T14527] FAULT_INJECTION: forcing a failure. [ 443.500004][T14527] name failslab, interval 1, probability 0, space 0, times 0 [ 443.512842][T14527] CPU: 0 PID: 14527 Comm: syz.0.2610 Not tainted syzkaller #0 [ 443.520352][T14527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 443.530454][T14527] Call Trace: [ 443.533747][T14527] [ 443.536693][T14527] dump_stack_lvl+0x18c/0x250 [ 443.541393][T14527] ? show_regs_print_info+0x20/0x20 [ 443.546620][T14527] ? load_image+0x420/0x420 [ 443.551160][T14527] ? rcu_is_watching+0x5a/0xb0 [ 443.555950][T14527] should_fail_ex+0x39d/0x4d0 [ 443.560652][T14527] should_failslab+0x9/0x20 [ 443.565183][T14527] slab_pre_alloc_hook+0x59/0x310 [ 443.570268][T14527] kmem_cache_alloc+0x5a/0x2d0 [ 443.575054][T14527] ? dst_alloc+0x105/0x170 [ 443.579494][T14527] dst_alloc+0x105/0x170 [ 443.583794][T14527] ip_route_output_key_hash_rcu+0x14f6/0x2370 [ 443.589890][T14527] ? ip_route_output_key_hash+0x13d/0x330 [ 443.595624][T14527] ip_route_output_key_hash+0x1f3/0x330 [ 443.601197][T14527] ? ip_route_input_rcu+0x30f0/0x30f0 [ 443.606591][T14527] ? __asan_memset+0x22/0x40 [ 443.611203][T14527] ip_route_output_flow+0x2a/0x150 [ 443.616342][T14527] ip_tunnel_xmit+0x9b1/0x2410 [ 443.621131][T14527] ? ip4_dst_hoplimit+0x2d0/0x2d0 [ 443.626167][T14527] ? validate_xmit_xfrm+0xbc/0x12c0 [ 443.631385][T14527] ? gre_build_header+0x25b/0x990 [ 443.636431][T14527] ipgre_xmit+0x7a6/0xb20 [ 443.640803][T14527] dev_hard_start_xmit+0x246/0x740 [ 443.645946][T14527] __dev_queue_xmit+0x19a3/0x3660 [ 443.650998][T14527] ? __dev_queue_xmit+0x265/0x3660 [ 443.656122][T14527] ? lock_chain_count+0x20/0x20 [ 443.660989][T14527] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 443.667160][T14527] ? netdev_core_pick_tx+0x340/0x340 [ 443.672469][T14527] ? skb_release_data+0x1d1/0x7b0 [ 443.677539][T14527] __bpf_tx_skb+0x189/0x250 [ 443.682069][T14527] bpf_clone_redirect+0x30f/0x4a0 [ 443.687119][T14527] bpf_prog_da1e0ee5f8d5c8f5+0x5d/0x62 [ 443.692590][T14527] ? perf_swevent_event+0x240/0x570 [ 443.697806][T14527] ? perf_trace_preemptirq_template+0x269/0x330 [ 443.704068][T14527] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 443.710080][T14527] ? lockdep_softirqs_on+0x580/0x580 [ 443.715404][T14527] ? lock_chain_count+0x20/0x20 [ 443.720269][T14527] ? __local_bh_disable_ip+0x108/0x1a0 [ 443.725757][T14527] ? __cant_sleep+0x220/0x220 [ 443.730451][T14527] ? __local_bh_enable_ip+0x13a/0x1c0 [ 443.735840][T14527] ? _local_bh_enable+0xa0/0xa0 [ 443.740706][T14527] ? bpf_test_timer_continue+0x135/0x380 [ 443.746355][T14527] ? bpf_test_run+0x174/0x870 [ 443.751043][T14527] bpf_test_run+0x2df/0x870 [ 443.755561][T14527] ? lock_chain_count+0x20/0x20 [ 443.760444][T14527] ? bpf_test_run+0x174/0x870 [ 443.765146][T14527] ? convert___skb_to_skb+0x590/0x590 [ 443.770548][T14527] ? bpf_prog_test_run_skb+0x7ad/0x12b0 [ 443.776129][T14527] ? convert___skb_to_skb+0x3d/0x590 [ 443.781426][T14527] bpf_prog_test_run_skb+0xad2/0x12b0 [ 443.786818][T14527] ? cpu_online+0x60/0x60 [ 443.791168][T14527] bpf_prog_test_run+0x321/0x390 [ 443.796143][T14527] __sys_bpf+0x49d/0x890 [ 443.800427][T14527] ? bpf_link_show_fdinfo+0x390/0x390 [ 443.805844][T14527] ? lock_chain_count+0x20/0x20 [ 443.810721][T14527] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 443.816724][T14527] __x64_sys_bpf+0x7c/0x90 [ 443.821154][T14527] do_syscall_64+0x55/0xa0 [ 443.825584][T14527] ? clear_bhb_loop+0x40/0x90 [ 443.830303][T14527] ? clear_bhb_loop+0x40/0x90 [ 443.835002][T14527] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 443.840930][T14527] RIP: 0033:0x7fa53b39cdd9 [ 443.845379][T14527] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 443.865005][T14527] RSP: 002b:00007fa53c322028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 443.873442][T14527] RAX: ffffffffffffffda RBX: 00007fa53b615fa0 RCX: 00007fa53b39cdd9 [ 443.881425][T14527] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 000000000000000a [ 443.889405][T14527] RBP: 00007fa53c322090 R08: 0000000000000000 R09: 0000000000000000 [ 443.897382][T14527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 443.905374][T14527] R13: 00007fa53b616038 R14: 00007fa53b615fa0 R15: 00007ffec4eaf578 [ 443.913377][T14527] [ 444.107931][T14541] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2616'. [ 444.121554][T14541] openvswitch: netlink: Key 32 has unexpected len 3064 expected 2 [ 444.442648][T14559] tap0: tun_chr_ioctl cmd 1074025675 [ 444.460240][T14559] tap0: persist enabled [ 444.464808][T14559] tap0: tun_chr_ioctl cmd 21731 [ 444.470422][T14559] tap0: tun_chr_ioctl cmd 1074025675 [ 444.493841][T14559] tap0: persist enabled [ 444.499054][ T5782] Bluetooth: hci4: ACL packet for unknown connection handle 1380 [ 444.862341][T14582] FAULT_INJECTION: forcing a failure. [ 444.862341][T14582] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 444.886152][T14582] CPU: 0 PID: 14582 Comm: syz.2.2632 Not tainted syzkaller #0 [ 444.893663][T14582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 444.903747][T14582] Call Trace: [ 444.907049][T14582] [ 444.910006][T14582] dump_stack_lvl+0x18c/0x250 [ 444.914738][T14582] ? show_regs_print_info+0x20/0x20 [ 444.919983][T14582] ? load_image+0x420/0x420 [ 444.924525][T14582] ? __might_fault+0xaa/0x120 [ 444.929245][T14582] ? __lock_acquire+0x7d40/0x7d40 [ 444.934313][T14582] should_fail_ex+0x39d/0x4d0 [ 444.939043][T14582] _copy_from_user+0x2f/0xe0 [ 444.943672][T14582] __sys_bpf+0x23e/0x890 [ 444.947953][T14582] ? bpf_link_show_fdinfo+0x390/0x390 [ 444.953369][T14582] ? lock_chain_count+0x20/0x20 [ 444.958253][T14582] __x64_sys_bpf+0x7c/0x90 [ 444.962682][T14582] do_syscall_64+0x55/0xa0 [ 444.967123][T14582] ? clear_bhb_loop+0x40/0x90 [ 444.971819][T14582] ? clear_bhb_loop+0x40/0x90 [ 444.976512][T14582] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 444.982421][T14582] RIP: 0033:0x7f3de3d9cdd9 [ 444.986845][T14582] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 445.006464][T14582] RSP: 002b:00007f3de4cce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 445.014896][T14582] RAX: ffffffffffffffda RBX: 00007f3de4015fa0 RCX: 00007f3de3d9cdd9 [ 445.022884][T14582] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 445.030867][T14582] RBP: 00007f3de4cce090 R08: 0000000000000000 R09: 0000000000000000 [ 445.038851][T14582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 445.046838][T14582] R13: 00007f3de4016038 R14: 00007f3de4015fa0 R15: 00007fffc5010f18 [ 445.054846][T14582] [ 446.200221][T14620] FAULT_INJECTION: forcing a failure. [ 446.200221][T14620] name failslab, interval 1, probability 0, space 0, times 0 [ 446.219457][T14618] FAULT_INJECTION: forcing a failure. [ 446.219457][T14618] name failslab, interval 1, probability 0, space 0, times 0 [ 446.232224][T14618] CPU: 1 PID: 14618 Comm: syz.3.2644 Not tainted syzkaller #0 [ 446.239710][T14618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 446.249791][T14618] Call Trace: [ 446.253099][T14618] [ 446.256056][T14618] dump_stack_lvl+0x18c/0x250 [ 446.260779][T14618] ? show_regs_print_info+0x20/0x20 [ 446.266049][T14618] ? load_image+0x420/0x420 [ 446.270597][T14618] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 446.276611][T14618] ? lock_chain_count+0x20/0x20 [ 446.281498][T14618] should_fail_ex+0x39d/0x4d0 [ 446.286221][T14618] should_failslab+0x9/0x20 [ 446.290763][T14618] slab_pre_alloc_hook+0x59/0x310 [ 446.295838][T14618] kmem_cache_alloc_node+0x60/0x320 [ 446.301073][T14618] ? __alloc_skb+0x103/0x2c0 [ 446.305688][T14618] __alloc_skb+0x103/0x2c0 [ 446.310132][T14618] alloc_skb_with_frags+0xca/0x7b0 [ 446.315311][T14618] ? mark_lock+0x94/0x320 [ 446.319694][T14618] ? __lock_acquire+0x1273/0x7d40 [ 446.324755][T14618] sock_alloc_send_pskb+0x883/0x9a0 [ 446.329998][T14618] ? sock_kzfree_s+0x50/0x50 [ 446.334617][T14618] ? verify_lock_unused+0x140/0x140 [ 446.339849][T14618] __ip6_append_data+0x29f3/0x3c50 [ 446.345009][T14618] ? ip6_mtu+0x7d/0x3f0 [ 446.349191][T14618] ? __in6_dev_get+0xd0/0xd0 [ 446.353800][T14618] ? ip6_mtu+0x7d/0x3f0 [ 446.357981][T14618] ? ip6_setup_cork+0xfe0/0xfe0 [ 446.362864][T14618] ip6_append_data+0x1b0/0x350 [ 446.367649][T14618] ? __in6_dev_get+0xd0/0xd0 [ 446.372256][T14618] icmp6_send+0x136a/0x1b40 [ 446.376780][T14618] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 446.382509][T14618] ? icmp6_send+0x233/0x1b40 [ 446.387126][T14618] ? icmpv6_push_pending_frames+0x400/0x400 [ 446.393039][T14618] ? perf_trace_preemptirq_template+0x269/0x330 [ 446.399407][T14618] ? lockdep_hardirqs_on+0x98/0x150 [ 446.404632][T14618] icmpv6_ndo_send+0x1b9/0x520 [ 446.409429][T14618] ? __asan_memset+0x22/0x40 [ 446.414039][T14618] ? xfrm_lookup_with_ifid+0x17b2/0x1aa0 [ 446.419684][T14618] ? udp6_set_csum+0xef0/0xef0 [ 446.424475][T14618] ? perf_trace_buf_update+0xac/0x230 [ 446.429878][T14618] ? ipv4_mtu+0x2cf/0x3f0 [ 446.434236][T14618] tnl_update_pmtu+0xd33/0x1070 [ 446.439114][T14618] ip_tunnel_xmit+0xd1d/0x2410 [ 446.443906][T14618] ? ip4_dst_hoplimit+0x2d0/0x2d0 [ 446.448953][T14618] ? validate_xmit_xfrm+0xbc/0x12c0 [ 446.454190][T14618] ? gre_build_header+0x25b/0x990 [ 446.459346][T14618] ipgre_xmit+0x7a6/0xb20 [ 446.463705][T14618] dev_hard_start_xmit+0x246/0x740 [ 446.468865][T14618] __dev_queue_xmit+0x19a3/0x3660 [ 446.473916][T14618] ? __dev_queue_xmit+0x265/0x3660 [ 446.479043][T14618] ? skb_release_data+0x1/0x7b0 [ 446.483902][T14618] ? skb_release_data+0x104/0x7b0 [ 446.488935][T14618] ? netdev_core_pick_tx+0x340/0x340 [ 446.494241][T14618] ? skb_release_data+0x1d1/0x7b0 [ 446.499300][T14618] __bpf_tx_skb+0x189/0x250 [ 446.503820][T14618] bpf_clone_redirect+0x30f/0x4a0 [ 446.508870][T14618] bpf_prog_da1e0ee5f8d5c8f5+0x5d/0x62 [ 446.514343][T14618] ? perf_swevent_event+0x240/0x570 [ 446.519576][T14618] ? perf_trace_preemptirq_template+0x269/0x330 [ 446.525846][T14618] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 446.531837][T14618] ? lockdep_softirqs_on+0x580/0x580 [ 446.537137][T14618] ? lock_chain_count+0x20/0x20 [ 446.542016][T14618] ? __local_bh_disable_ip+0x108/0x1a0 [ 446.547483][T14618] ? __cant_sleep+0x220/0x220 [ 446.552177][T14618] ? __local_bh_enable_ip+0x13a/0x1c0 [ 446.557562][T14618] ? _local_bh_enable+0xa0/0xa0 [ 446.562425][T14618] ? bpf_test_timer_continue+0x135/0x380 [ 446.568074][T14618] ? bpf_test_run+0x174/0x870 [ 446.572770][T14618] bpf_test_run+0x2df/0x870 [ 446.577308][T14618] ? bpf_test_run+0x174/0x870 [ 446.582000][T14618] ? convert___skb_to_skb+0x590/0x590 [ 446.587398][T14618] ? eth_get_headlen+0x210/0x210 [ 446.592362][T14618] ? bpf_prog_test_run_skb+0x7ad/0x12b0 [ 446.597935][T14618] ? convert___skb_to_skb+0x3d/0x590 [ 446.603246][T14618] bpf_prog_test_run_skb+0xad2/0x12b0 [ 446.608646][T14618] ? cpu_online+0x60/0x60 [ 446.612988][T14618] bpf_prog_test_run+0x321/0x390 [ 446.617941][T14618] __sys_bpf+0x49d/0x890 [ 446.622198][T14618] ? bpf_link_show_fdinfo+0x390/0x390 [ 446.627605][T14618] ? lock_chain_count+0x20/0x20 [ 446.632487][T14618] __x64_sys_bpf+0x7c/0x90 [ 446.636915][T14618] do_syscall_64+0x55/0xa0 [ 446.641342][T14618] ? clear_bhb_loop+0x40/0x90 [ 446.646071][T14618] ? clear_bhb_loop+0x40/0x90 [ 446.650767][T14618] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 446.656672][T14618] RIP: 0033:0x7f4165d9cdd9 [ 446.661096][T14618] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 446.680717][T14618] RSP: 002b:00007f4166ba5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 446.689150][T14618] RAX: ffffffffffffffda RBX: 00007f4166015fa0 RCX: 00007f4165d9cdd9 [ 446.697131][T14618] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 000000000000000a [ 446.705114][T14618] RBP: 00007f4166ba5090 R08: 0000000000000000 R09: 0000000000000000 [ 446.713105][T14618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 446.721083][T14618] R13: 00007f4166016038 R14: 00007f4166015fa0 R15: 00007ffc5156cff8 [ 446.729078][T14618] [ 446.741209][T14620] CPU: 1 PID: 14620 Comm: syz.2.2645 Not tainted syzkaller #0 [ 446.748713][T14620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 446.758790][T14620] Call Trace: [ 446.762097][T14620] [ 446.765056][T14620] dump_stack_lvl+0x18c/0x250 [ 446.769792][T14620] ? show_regs_print_info+0x20/0x20 [ 446.775032][T14620] ? load_image+0x420/0x420 [ 446.779575][T14620] ? __might_sleep+0xe0/0xe0 [ 446.784204][T14620] ? __lock_acquire+0x7d40/0x7d40 [ 446.789260][T14620] ? mark_lock+0x94/0x320 [ 446.793621][T14620] should_fail_ex+0x39d/0x4d0 [ 446.798340][T14620] should_failslab+0x9/0x20 [ 446.802888][T14620] slab_pre_alloc_hook+0x59/0x310 [ 446.807986][T14620] ? __get_vm_area_node+0x125/0x370 [ 446.813225][T14620] __kmem_cache_alloc_node+0x53/0x250 [ 446.818646][T14620] ? __get_vm_area_node+0x125/0x370 [ 446.823882][T14620] kmalloc_node_trace+0x26/0xe0 [ 446.828776][T14620] __get_vm_area_node+0x125/0x370 [ 446.833840][T14620] __vmalloc_node_range+0x36e/0x1330 [ 446.839159][T14620] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 446.844740][T14620] ? mark_lock+0x94/0x320 [ 446.849120][T14620] ? __lock_acquire+0x1347/0x7d40 [ 446.854184][T14620] ? verify_lock_unused+0x140/0x140 [ 446.859432][T14620] ? free_vm_area+0x50/0x50 [ 446.863972][T14620] ? end_current_label_crit_section+0x170/0x170 [ 446.870262][T14620] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 446.875853][T14620] __vmalloc+0x7a/0x90 [ 446.879957][T14620] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 446.885538][T14620] bpf_prog_alloc_no_stats+0x47/0x440 [ 446.890942][T14620] ? bpf_prog_alloc+0x2b/0x1a0 [ 446.895744][T14620] bpf_prog_alloc+0x3d/0x1a0 [ 446.900375][T14620] bpf_prog_load+0x6eb/0x1670 [ 446.905103][T14620] ? map_freeze+0x420/0x420 [ 446.909649][T14620] ? __might_fault+0xaa/0x120 [ 446.914365][T14620] ? __lock_acquire+0x7d40/0x7d40 [ 446.919454][T14620] ? file_end_write+0x159/0x250 [ 446.924350][T14620] ? __might_fault+0xaa/0x120 [ 446.929063][T14620] ? __might_fault+0xc6/0x120 [ 446.933764][T14620] ? __might_fault+0xaa/0x120 [ 446.938488][T14620] ? bpf_lsm_bpf+0x9/0x10 [ 446.942850][T14620] ? security_bpf+0x7e/0xa0 [ 446.947388][T14620] __sys_bpf+0x5ba/0x890 [ 446.951665][T14620] ? bpf_link_show_fdinfo+0x390/0x390 [ 446.957078][T14620] ? lock_chain_count+0x20/0x20 [ 446.961969][T14620] __x64_sys_bpf+0x7c/0x90 [ 446.966416][T14620] do_syscall_64+0x55/0xa0 [ 446.970862][T14620] ? clear_bhb_loop+0x40/0x90 [ 446.975572][T14620] ? clear_bhb_loop+0x40/0x90 [ 446.980283][T14620] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 446.986211][T14620] RIP: 0033:0x7f3de3d9cdd9 [ 446.990657][T14620] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 447.010292][T14620] RSP: 002b:00007f3de4cce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 447.018775][T14620] RAX: ffffffffffffffda RBX: 00007f3de4015fa0 RCX: 00007f3de3d9cdd9 [ 447.026792][T14620] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 447.034802][T14620] RBP: 00007f3de4cce090 R08: 0000000000000000 R09: 0000000000000000 [ 447.042814][T14620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 447.050805][T14620] R13: 00007f3de4016038 R14: 00007f3de4015fa0 R15: 00007fffc5010f18 [ 447.058805][T14620] [ 447.073961][T14620] syz.2.2645: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 447.096387][T14620] CPU: 1 PID: 14620 Comm: syz.2.2645 Not tainted syzkaller #0 [ 447.103971][T14620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 447.114071][T14620] Call Trace: [ 447.117376][T14620] [ 447.120338][T14620] dump_stack_lvl+0x18c/0x250 [ 447.125061][T14620] ? show_regs_print_info+0x20/0x20 [ 447.130311][T14620] ? load_image+0x420/0x420 [ 447.134853][T14620] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 447.141337][T14620] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 447.147868][T14620] warn_alloc+0x246/0x340 [ 447.152229][T14620] ? __get_vm_area_node+0x125/0x370 [ 447.157461][T14620] ? zone_watermark_ok_safe+0x230/0x230 [ 447.163041][T14620] ? rcu_is_watching+0x15/0xb0 [ 447.167845][T14620] ? __get_vm_area_node+0x356/0x370 [ 447.173084][T14620] __vmalloc_node_range+0x393/0x1330 [ 447.178403][T14620] ? mark_lock+0x94/0x320 [ 447.182769][T14620] ? __lock_acquire+0x1347/0x7d40 [ 447.187833][T14620] ? verify_lock_unused+0x140/0x140 [ 447.193073][T14620] ? free_vm_area+0x50/0x50 [ 447.197610][T14620] ? end_current_label_crit_section+0x170/0x170 [ 447.203889][T14620] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 447.209457][T14620] __vmalloc+0x7a/0x90 [ 447.213551][T14620] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 447.219114][T14620] bpf_prog_alloc_no_stats+0x47/0x440 [ 447.224499][T14620] ? bpf_prog_alloc+0x2b/0x1a0 [ 447.229306][T14620] bpf_prog_alloc+0x3d/0x1a0 [ 447.233921][T14620] bpf_prog_load+0x6eb/0x1670 [ 447.238617][T14620] ? map_freeze+0x420/0x420 [ 447.243136][T14620] ? __might_fault+0xaa/0x120 [ 447.247832][T14620] ? __lock_acquire+0x7d40/0x7d40 [ 447.252877][T14620] ? file_end_write+0x159/0x250 [ 447.257747][T14620] ? __might_fault+0xaa/0x120 [ 447.262438][T14620] ? __might_fault+0xc6/0x120 [ 447.267143][T14620] ? __might_fault+0xaa/0x120 [ 447.271834][T14620] ? bpf_lsm_bpf+0x9/0x10 [ 447.276185][T14620] ? security_bpf+0x7e/0xa0 [ 447.280715][T14620] __sys_bpf+0x5ba/0x890 [ 447.284978][T14620] ? bpf_link_show_fdinfo+0x390/0x390 [ 447.290403][T14620] ? lock_chain_count+0x20/0x20 [ 447.295297][T14620] __x64_sys_bpf+0x7c/0x90 [ 447.299742][T14620] do_syscall_64+0x55/0xa0 [ 447.304178][T14620] ? clear_bhb_loop+0x40/0x90 [ 447.308879][T14620] ? clear_bhb_loop+0x40/0x90 [ 447.313569][T14620] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 447.319479][T14620] RIP: 0033:0x7f3de3d9cdd9 [ 447.323908][T14620] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 447.343527][T14620] RSP: 002b:00007f3de4cce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 447.351951][T14620] RAX: ffffffffffffffda RBX: 00007f3de4015fa0 RCX: 00007f3de3d9cdd9 [ 447.359931][T14620] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 447.367922][T14620] RBP: 00007f3de4cce090 R08: 0000000000000000 R09: 0000000000000000 [ 447.375904][T14620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 447.383887][T14620] R13: 00007f3de4016038 R14: 00007f3de4015fa0 R15: 00007fffc5010f18 [ 447.391885][T14620] [ 447.402954][T14620] Mem-Info: [ 447.413452][T14620] active_anon:9394 inactive_anon:0 isolated_anon:0 [ 447.413452][T14620] active_file:18574 inactive_file:40085 isolated_file:0 [ 447.413452][T14620] unevictable:768 dirty:139 writeback:0 [ 447.413452][T14620] slab_reclaimable:10635 slab_unreclaimable:96975 [ 447.413452][T14620] mapped:24914 shmem:1361 pagetables:516 [ 447.413452][T14620] sec_pagetables:0 bounce:0 [ 447.413452][T14620] kernel_misc_reclaimable:0 [ 447.413452][T14620] free:1337472 free_pcp:6984 free_cma:0 [ 447.483619][T14620] Node 0 active_anon:37576kB inactive_anon:0kB active_file:74296kB inactive_file:160140kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:103856kB dirty:552kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11696kB pagetables:2064kB sec_pagetables:0kB all_unreclaimable? no [ 447.523602][T14620] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 447.558683][T14620] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 447.591305][T14620] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 447.599126][T14620] Node 0 DMA32 free:1433368kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:37740kB inactive_anon:0kB active_file:74296kB inactive_file:159304kB unevictable:1536kB writepending:552kB present:3129332kB managed:2586952kB mlocked:0kB bounce:0kB free_pcp:12304kB local_pcp:11008kB free_cma:0kB [ 447.656131][T14620] lowmem_reserve[]: 0 0 0 0 0 [ 447.662234][T14620] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:836kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 447.706100][T14620] lowmem_reserve[]: 0 0 0 0 0 [ 447.716260][T14620] Node 1 Normal free:3900908kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:15808kB local_pcp:10464kB free_cma:0kB [ 447.760414][T14620] lowmem_reserve[]: 0 0 0 0 0 [ 447.765264][T14620] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 447.778640][T14620] Node 0 DMA32: 1379*4kB (UM) 756*8kB (UM) 965*16kB (UME) 1713*32kB (UME) 478*64kB (UME) 826*128kB (UME) 256*256kB (UME) 127*512kB (UME) 65*1024kB (UME) 15*2048kB (UME) 241*4096kB (M) = 1433116kB [ 447.798910][T14620] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 447.832677][T14620] Node 1 Normal: 245*4kB (UME) 67*8kB (UME) 46*16kB (UME) 169*32kB (UME) 38*64kB (UME) 7*128kB (UE) 1*256kB (U) 1*512kB (M) 2*1024kB (UE) 2*2048kB (UE) 948*4096kB (M) = 3900908kB [ 447.866112][T14620] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 447.878482][T14620] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 447.897553][T14620] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 447.929907][T14620] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 447.956073][T14620] 60022 total pagecache pages [ 447.967235][T14620] 0 pages in swap cache [ 447.971466][T14620] Free swap = 124996kB [ 447.977747][T14620] Total swap = 124996kB [ 447.981943][T14620] 2097051 pages RAM [ 447.985768][T14620] 0 pages HighMem/MovableOnly [ 448.013282][T14620] 416927 pages reserved [ 448.024399][T14620] 0 pages cma reserved [ 448.476582][T14670] netlink: 'syz.1.2661': attribute type 29 has an invalid length. [ 448.501727][T14670] netlink: 'syz.1.2661': attribute type 29 has an invalid length. [ 448.801664][T14693] netlink: 'syz.1.2669': attribute type 10 has an invalid length. [ 448.812623][T14693] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2669'. [ 448.827805][T14689] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2668'. [ 448.842476][T14689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 448.855366][T14689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.871762][T14689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 448.883804][T14689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.899979][T14689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 448.915538][T14689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.935523][T14689] batadv_slave_1: entered promiscuous mode [ 448.953131][T14693] netlink: 'syz.1.2669': attribute type 10 has an invalid length. [ 448.970690][T14693] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2669'. [ 448.989002][T14695] netlink: 'syz.2.2667': attribute type 12 has an invalid length. [ 448.997310][T14695] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2667'. [ 450.087809][T14711] netlink: 'syz.0.2673': attribute type 10 has an invalid length. [ 450.119118][T14711] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2673'. [ 450.953243][T14722] netlink: 'syz.2.2677': attribute type 2 has an invalid length. [ 450.981168][T14722] netlink: 51 bytes leftover after parsing attributes in process `syz.2.2677'. [ 451.081969][T14731] netlink: 'syz.3.2679': attribute type 1 has an invalid length. [ 451.100317][T14731] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.2679'. [ 451.522628][T14760] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2688'. [ 451.610207][T14760] team0: Port device  removed [ 451.616349][T14760] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 451.662426][T14768] netlink: 'syz.3.2688': attribute type 12 has an invalid length. [ 451.676228][T14768] netlink: 14585 bytes leftover after parsing attributes in process `syz.3.2688'. [ 451.707238][T14764] delete_channel: no stack [ 451.754821][T14773] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2691'. [ 451.847938][T14763] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2687'. [ 452.039356][T14782] netlink: 'syz.2.2694': attribute type 10 has an invalid length. [ 452.055272][T14782] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2694'. [ 452.098326][T14782] batman_adv: batadv0: Adding interface: virt_wifi0 [ 452.141325][T14782] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 452.228628][T14782] batman_adv: batadv0: Interface activated: virt_wifi0 [ 452.247343][T14779] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2693'. [ 452.281594][T14784] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2693'. [ 452.875157][T14812] netlink: zone id is out of range [ 452.936242][T14812] netlink: set zone limit has 8 unknown bytes [ 454.333874][T14872] validate_nla: 4 callbacks suppressed [ 454.333890][T14872] netlink: 'syz.0.2718': attribute type 10 has an invalid length. [ 455.242386][T14920] netlink: 'syz.0.2732': attribute type 10 has an invalid length. [ 455.257979][T14920] __nla_validate_parse: 10 callbacks suppressed [ 455.257990][T14920] netlink: 151220 bytes leftover after parsing attributes in process `syz.0.2732'. [ 455.527146][T14932] netlink: 'syz.1.2736': attribute type 10 has an invalid length. [ 455.558377][T14932] 8021q: adding VLAN 0 to HW filter on device team0 [ 455.579335][T14932] bond0: (slave team0): Enslaving as an active interface with an up link [ 455.898039][T14938] netlink: 'syz.2.2738': attribute type 29 has an invalid length. [ 456.269318][T14937] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.2738'. [ 456.304396][T14938] netlink: 'syz.2.2738': attribute type 29 has an invalid length. [ 456.611034][T14951] mac80211_hwsim hwsim58 wlan1: entered allmulticast mode [ 456.696335][T14956] netlink: 'syz.2.2743': attribute type 10 has an invalid length. [ 456.726223][T14956] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2743'. [ 456.744914][T14956] ipvlan1: entered promiscuous mode [ 456.750566][T14956] ipvlan1: entered allmulticast mode [ 456.756459][T14956] veth0_vlan: entered allmulticast mode [ 456.768990][T14956] bridge0: port 3(ipvlan1) entered blocking state [ 456.775917][T14956] bridge0: port 3(ipvlan1) entered disabled state [ 456.786238][T14956] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 457.824086][T14986] netlink: 'syz.2.2752': attribute type 1 has an invalid length. [ 457.866499][T14986] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.2752'. [ 458.154435][T15000] netlink: 'syz.2.2756': attribute type 21 has an invalid length. [ 458.175925][T15000] IPv6: NLM_F_CREATE should be specified when creating new route [ 458.204385][T15000] IPv6: Can't replace route, no match found [ 458.267929][T15000] netlink: 'syz.2.2756': attribute type 39 has an invalid length. [ 458.277966][T15008] netlink: 209592 bytes leftover after parsing attributes in process `syz.0.2759'. [ 459.084227][T15000] hsr_slave_1 (unregistering): left promiscuous mode [ 459.222103][T15019] netlink: 'syz.0.2761': attribute type 14 has an invalid length. [ 459.234188][T15019] netlink: 64535 bytes leftover after parsing attributes in process `syz.0.2761'. [ 459.398636][T15026] netlink: 207508 bytes leftover after parsing attributes in process `syz.0.2765'. [ 459.537742][T15024] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2764'. [ 459.552932][T15024] openvswitch: netlink: Tunnel attr 0 has unexpected len 3 expected 8 [ 459.612091][T15033] netlink: 'syz.0.2766': attribute type 21 has an invalid length. [ 459.636089][T15033] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2766'. [ 459.919723][T15041] netlink: 'syz.0.2770': attribute type 21 has an invalid length. [ 459.979601][T15043] netlink: 16222 bytes leftover after parsing attributes in process `syz.1.2771'. [ 460.140418][T15049] netlink: 'syz.0.2770': attribute type 16 has an invalid length. [ 460.162792][T15049] veth1_macvtap: entered allmulticast mode [ 461.136506][T15082] sctp: [Deprecated]: syz.0.2779 (pid 15082) Use of struct sctp_assoc_value in delayed_ack socket option. [ 461.136506][T15082] Use struct sctp_sack_info instead [ 462.653483][T15062] syzkaller0: entered promiscuous mode [ 462.665088][T15062] syzkaller0: entered allmulticast mode [ 462.804002][T15091] __nla_validate_parse: 1 callbacks suppressed [ 462.804018][T15091] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2782'. [ 464.573163][T15109] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2786'. [ 464.652208][T15109] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 464.687481][T15109] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 464.717289][T15109] bond0 (unregistering): Released all slaves [ 464.964065][T15129] netlink: 'syz.2.2793': attribute type 10 has an invalid length. [ 465.044693][T15126] netlink: 'syz.1.2792': attribute type 7 has an invalid length. [ 465.072533][T15130] netlink: 'syz.1.2792': attribute type 7 has an invalid length. [ 465.200837][T15132] netlink: 'syz.0.2794': attribute type 10 has an invalid length. [ 465.288773][T15140] netlink: 'syz.3.2798': attribute type 15 has an invalid length. [ 465.718893][T15152] netlink: 'syz.3.2802': attribute type 4 has an invalid length. [ 465.734758][T15152] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2802'. [ 466.654188][T15180] Ÿë: port 1(ip6gretap0) entered blocking state [ 466.667123][T15180] Ÿë: port 1(ip6gretap0) entered disabled state [ 466.674966][T15180] ip6gretap0: entered allmulticast mode [ 466.693701][T15180] ip6gretap0: entered promiscuous mode [ 466.908540][T15196] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 467.007170][T15196] netlink: 'syz.3.2813': attribute type 2 has an invalid length. [ 467.015215][T15196] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2813'. [ 467.226287][T15205] netlink: 'syz.1.2816': attribute type 21 has an invalid length. [ 467.255196][T15205] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2816'. [ 468.382423][T15257] netlink: 'syz.1.2832': attribute type 21 has an invalid length. [ 468.404716][T15257] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2832'. [ 468.440230][T15255] netlink: 'syz.1.2832': attribute type 21 has an invalid length. [ 468.470252][T15255] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2832'. [ 468.533935][T15258] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2833'. [ 468.581764][T15258] ipvlan1: left promiscuous mode [ 468.618091][T15258] ipvlan1: left allmulticast mode [ 468.624329][T15258] veth0_vlan: left allmulticast mode [ 468.714353][T15258] batman_adv: batadv0: Adding interface: ipvlan1 [ 468.733977][T15258] batman_adv: batadv0: The MTU of interface ipvlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 468.797268][T15258] batman_adv: batadv0: Interface activated: ipvlan1 [ 469.708134][T15276] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2838'. [ 470.161015][T15291] validate_nla: 1 callbacks suppressed [ 470.161031][T15291] netlink: 'syz.0.2843': attribute type 21 has an invalid length. [ 470.183565][T15291] netlink: 16166 bytes leftover after parsing attributes in process `syz.0.2843'. [ 470.306562][T15294] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.2844'. [ 470.455526][ T12] tipc: Subscription rejected, illegal request [ 470.486115][T15304] ref_ctr_offset mismatch. inode: 0x7a offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe [ 470.507957][T15307] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2848'. [ 470.566423][T15300] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2846'. [ 470.691262][T15311] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2850'. [ 470.813505][T15317] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 470.889514][T15319] netlink: 'syz.2.2854': attribute type 4 has an invalid length. [ 470.902083][T15319] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2854'. [ 470.935544][T15324] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 471.027705][T15322] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 471.035135][T15322] IPv6: NLM_F_CREATE should be set when creating new route [ 471.042799][T15322] IPv6: NLM_F_CREATE should be set when creating new route [ 471.050322][T15322] IPv6: NLM_F_CREATE should be set when creating new route [ 471.328057][T15337] netlink: 'syz.1.2860': attribute type 10 has an invalid length. [ 471.400220][T15337] hsr0: entered promiscuous mode [ 471.405535][T15337] bridge0: port 3(hsr0) entered blocking state [ 471.434167][T15337] bridge0: port 3(hsr0) entered disabled state [ 471.440980][T15337] hsr0: entered allmulticast mode [ 471.446778][T15337] hsr_slave_0: entered allmulticast mode [ 471.452836][T15337] hsr_slave_1: entered allmulticast mode [ 471.462181][T15337] bridge0: port 3(hsr0) entered blocking state [ 471.468629][T15337] bridge0: port 3(hsr0) entered forwarding state [ 471.478217][T15343] tc_dump_action: action bad kind [ 471.864421][T15355] netlink: 'syz.1.2868': attribute type 1 has an invalid length. [ 471.888695][T15355] netlink: 'syz.1.2868': attribute type 3 has an invalid length. [ 473.170875][T15410] netlink: 'syz.1.2884': attribute type 153 has an invalid length. [ 473.314203][T15413] netlink: 'syz.1.2886': attribute type 10 has an invalid length. [ 473.468644][T15413] hsr_slave_0 (unregistering): left promiscuous mode [ 473.636562][T15416] __nla_validate_parse: 11 callbacks suppressed [ 473.636580][T15416] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2883'. [ 474.125036][T15441] netlink: 'syz.1.2893': attribute type 9 has an invalid length. [ 474.146150][T15441] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.2893'. [ 476.309196][T15493] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2909'. [ 477.299517][T15521] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2917'. [ 477.310853][T15519] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.2917'. [ 477.451552][T15525] netlink: 'syz.3.2918': attribute type 21 has an invalid length. [ 477.476875][T15525] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2918'. [ 477.665222][T15538] netlink: 'syz.3.2921': attribute type 3 has an invalid length. [ 477.673150][T15538] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2921'. [ 477.838671][T15544] netlink: 56537 bytes leftover after parsing attributes in process `syz.0.2924'. [ 478.018452][T15553] netlink: 'syz.0.2928': attribute type 1 has an invalid length. [ 478.043188][T15553] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2928'. [ 506.077570][ T5784] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 506.087227][ T5784] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 506.095418][ T5784] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 506.103506][ T5784] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 506.111197][ T5784] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 506.132968][ T5784] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 506.606852][ T5782] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 506.996281][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 507.004805][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 507.013980][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 507.022690][ T51] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 507.030124][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 507.083354][ T5784] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 507.096718][ T5784] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 507.104586][ T5784] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 507.116888][ T5784] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 507.125307][ T5784] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 507.133134][ T5784] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 507.526816][ T5784] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 507.535823][ T5784] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 507.552756][ T5784] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 507.562237][ T5784] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 507.574283][ T5784] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 507.581986][ T5784] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 508.206226][ T5784] Bluetooth: hci3: command tx timeout [ 509.016182][ T5784] Bluetooth: hci1: command 0x0406 tx timeout [ 509.096211][ T5784] Bluetooth: hci5: command tx timeout [ 509.176218][ T5784] Bluetooth: hci6: command tx timeout [ 509.646357][ T5784] Bluetooth: hci7: command tx timeout [ 510.290264][ T5784] Bluetooth: hci3: command tx timeout [ 511.169879][ T5784] Bluetooth: hci5: command tx timeout [ 511.256336][ T5784] Bluetooth: hci6: command tx timeout [ 511.736063][ T5784] Bluetooth: hci7: command tx timeout [ 512.366137][ T5784] Bluetooth: hci3: command tx timeout [ 513.246180][ T5784] Bluetooth: hci5: command tx timeout [ 513.336327][ T5784] Bluetooth: hci6: command tx timeout [ 513.816177][ T5784] Bluetooth: hci7: command tx timeout [ 514.446075][ T5784] Bluetooth: hci3: command tx timeout [ 515.336172][ T5784] Bluetooth: hci5: command tx timeout [ 515.406325][ T5784] Bluetooth: hci6: command tx timeout [ 515.886245][ T5784] Bluetooth: hci7: command tx timeout [ 524.060143][ T5081] Bluetooth: hci4: command 0x0406 tx timeout [ 538.995906][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 539.006067][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 544.526163][ T5081] Bluetooth: hci0: command 0x0406 tx timeout [ 560.629623][ T5081] Bluetooth: hci2: command 0x0406 tx timeout [ 567.156917][ T5783] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 567.165844][ T5783] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 567.173833][ T5783] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 567.182831][ T5783] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 567.196270][ T5783] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 567.203632][ T5783] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 567.598333][T15635] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 567.611528][T15635] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 567.619347][T15635] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 567.627873][T15635] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 567.636239][T15635] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 567.643901][T15635] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 568.967103][T15639] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 568.986141][T15639] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 568.994523][T15639] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 569.006771][T15639] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 569.014664][T15639] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 569.022807][T15639] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 569.131484][T15643] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 569.147078][T15643] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 569.155234][T15643] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 569.163826][T15643] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 569.171716][T15643] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 569.183837][T15643] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 587.845969][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 587.852725][ C0] rcu: 0-....: (1 GPs behind) idle=04bc/1/0x4000000000000000 softirq=54230/54232 fqs=3694 [ 587.863627][ C0] rcu: hardirqs softirqs csw/system [ 587.870050][ C0] rcu: number: 1544922 0 0 [ 587.876523][ C0] rcu: cputime: 16809 35670 55 ==> 52480(ms) [ 587.884363][ C0] rcu: (t=10500 jiffies g=63869 q=1682 ncpus=2) [ 587.890704][ C0] CPU: 0 PID: 15598 Comm: syz.3.2942 Not tainted syzkaller #0 [ 587.898174][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 587.908248][ C0] RIP: 0010:kasan_quarantine_put+0x88/0x220 [ 587.914170][ C0] Code: e8 ad 2f ae ff 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 0f 85 83 00 00 00 41 f7 c7 00 02 00 00 74 01 fb 31 c0 <48> 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f c3 48 8d 80 c0 7a 03 00 45 [ 587.933805][ C0] RSP: 0018:ffffc90000007028 EFLAGS: 00000206 [ 587.939890][ C0] RAX: 1709dce1ea5c8601 RBX: ffff888073855c80 RCX: 1709dce1ea5c8600 [ 587.947870][ C0] RDX: dffffc0000000000 RSI: ffffffff8acac9e0 RDI: ffffffff8b1c8fa0 [ 587.955854][ C0] RBP: ffff888073855c80 R08: ffffffff911c65ef R09: 1ffffffff2238cbd [ 587.963845][ C0] R10: dffffc0000000000 R11: fffffbfff2238cbe R12: 0000000000000000 [ 587.971823][ C0] R13: ffffc900000070c0 R14: 000000000009cd58 R15: 0000000000000282 [ 587.979840][ C0] FS: 00007f4166ba56c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 587.988785][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 587.995399][ C0] CR2: 0000000100000000 CR3: 0000000045aa0000 CR4: 00000000003506f0 [ 588.003383][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 588.011363][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 588.019348][ C0] Call Trace: [ 588.022637][ C0] [ 588.025522][ C0] slab_free_freelist_hook+0x130/0x1a0 [ 588.031003][ C0] ? ip6gre_tunnel_xmit+0xd6f/0x11f0 [ 588.036301][ C0] kmem_cache_free+0xf8/0x270 [ 588.041022][ C0] ip6gre_tunnel_xmit+0xd6f/0x11f0 [ 588.046181][ C0] ? ip6gre_tunnel_uninit+0x1e0/0x1e0 [ 588.051562][ C0] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 588.057296][ C0] ? mark_lock+0x94/0x320 [ 588.061643][ C0] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 588.067634][ C0] ? lock_chain_count+0x20/0x20 [ 588.072497][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 588.078667][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 588.083885][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 588.090088][ C0] dev_hard_start_xmit+0x246/0x740 [ 588.095233][ C0] sch_direct_xmit+0x25e/0x4c0 [ 588.100024][ C0] ? mrp_pdu_parse_vecattr_event+0x2a0/0x2a0 [ 588.106031][ C0] __dev_queue_xmit+0x165d/0x3660 [ 588.111106][ C0] ? read_seqbegin+0x196/0x270 [ 588.115906][ C0] ? __dev_queue_xmit+0x265/0x3660 [ 588.121041][ C0] ? read_seqbegin+0x19a/0x270 [ 588.125823][ C0] ? read_seqbegin+0x1c8/0x270 [ 588.130606][ C0] ? neigh_event_send+0x110/0x110 [ 588.135666][ C0] ? netdev_core_pick_tx+0x340/0x340 [ 588.140969][ C0] ? __asan_memcpy+0x40/0x70 [ 588.145574][ C0] ? eth_header+0x11b/0x200 [ 588.150093][ C0] ? llc_sysctl_exit+0x70/0x70 [ 588.154900][ C0] ? neigh_resolve_output+0x618/0x730 [ 588.160320][ C0] ip6_finish_output2+0xe3d/0x1630 [ 588.165458][ C0] ? ip6_finish_output2+0x645/0x1630 [ 588.170775][ C0] ? ip6_mtu+0x7d/0x3f0 [ 588.174963][ C0] ? nf_hook+0x390/0x390 [ 588.179252][ C0] ? ip6_finish_output+0x57b/0x820 [ 588.184397][ C0] ndisc_send_skb+0xc26/0x14f0 [ 588.189189][ C0] ? ndisc_send_skb+0x1f5/0x14f0 [ 588.194148][ C0] ? ndisc_mc_map+0x680/0x680 [ 588.198859][ C0] ? ndisc_alloc_skb+0x18c/0x450 [ 588.203812][ C0] ? skb_dst+0xd0/0xd0 [ 588.207907][ C0] addrconf_rs_timer+0x2d5/0x630 [ 588.212863][ C0] ? addrconf_disable_policy_idev+0x480/0x480 [ 588.218941][ C0] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 588.224945][ C0] call_timer_fn+0x189/0x540 [ 588.229552][ C0] ? addrconf_disable_policy_idev+0x480/0x480 [ 588.235626][ C0] ? call_timer_fn+0xd2/0x540 [ 588.240314][ C0] ? __run_timers+0x800/0x800 [ 588.245014][ C0] ? addrconf_disable_policy_idev+0x480/0x480 [ 588.251101][ C0] __run_timers+0x542/0x800 [ 588.255651][ C0] ? detach_timer+0x2b0/0x2b0 [ 588.260348][ C0] ? lock_chain_count+0x20/0x20 [ 588.265219][ C0] run_timer_softirq+0x67/0xf0 [ 588.270024][ C0] handle_softirqs+0x280/0x820 [ 588.274809][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 588.279594][ C0] ? do_softirq+0x1a0/0x1a0 [ 588.284109][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 588.289329][ C0] __irq_exit_rcu+0xd3/0x190 [ 588.293936][ C0] ? irq_exit_rcu+0x20/0x20 [ 588.298480][ C0] irq_exit_rcu+0x9/0x20 [ 588.302742][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 588.308392][ C0] [ 588.311333][ C0] [ 588.314282][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 588.320283][ C0] RIP: 0010:generic_exec_single+0x481/0x4f0 [ 588.326191][ C0] Code: 75 11 e8 42 05 0b 00 48 85 db 75 16 e8 38 05 0b 00 eb 15 e8 31 05 0b 00 e8 0c 4e 0a 09 48 85 db 74 ea e8 22 05 0b 00 fb 31 c0 <48> c7 44 24 20 0e 36 e0 45 4b c7 04 2c 00 00 00 00 43 c7 44 2c 08 [ 588.345813][ C0] RSP: 0018:ffffc900124cfa00 EFLAGS: 00000246 [ 588.351891][ C0] RAX: 0000000000000000 RBX: 0000000000000200 RCX: 0000000000080000 [ 588.359877][ C0] RDX: ffffc9001b245000 RSI: 000000000000206d RDI: 000000000000206e [ 588.367862][ C0] RBP: ffffc900124cfad0 R08: ffffffff911c65ff R09: 1ffffffff2238cbf [ 588.375853][ C0] R10: dffffc0000000000 R11: fffffbfff2238cc0 R12: 1ffff92002499f44 [ 588.383841][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff92002499f65 [ 588.391841][ C0] ? event_function+0x300/0x300 [ 588.396737][ C0] ? smp_call_function_single+0x5a0/0x5a0 [ 588.402472][ C0] ? percpu_counter_add_batch+0x1f1/0x2a0 [ 588.408208][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 588.413417][ C0] ? smp_call_function_single+0xb0/0x5a0 [ 588.419080][ C0] smp_call_function_single+0x36d/0x5a0 [ 588.424653][ C0] ? event_function+0x300/0x300 [ 588.429538][ C0] ? flush_smp_call_function_queue+0x250/0x250 [ 588.435719][ C0] ? event_function+0x300/0x300 [ 588.440600][ C0] perf_install_in_context+0x5be/0x920 [ 588.446114][ C0] ? exclusive_event_installable+0x2c0/0x2c0 [ 588.452120][ C0] ? add_event_to_ctx+0x1180/0x1180 [ 588.457355][ C0] ? anon_inode_getfile+0x109/0x1a0 [ 588.462576][ C0] ? perf_event__header_size+0x165/0x220 [ 588.468222][ C0] __se_sys_perf_event_open+0x1836/0x1c50 [ 588.473961][ C0] ? bpf_prog_test_run+0x1ce/0x390 [ 588.479119][ C0] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 588.484793][ C0] ? lock_chain_count+0x20/0x20 [ 588.489678][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 588.494903][ C0] ? __x64_sys_perf_event_open+0x20/0xc0 [ 588.500563][ C0] do_syscall_64+0x55/0xa0 [ 588.504998][ C0] ? clear_bhb_loop+0x40/0x90 [ 588.509707][ C0] ? clear_bhb_loop+0x40/0x90 [ 588.514416][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 588.520339][ C0] RIP: 0033:0x7f4165d9cdd9 [ 588.524777][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 588.544410][ C0] RSP: 002b:00007f4166ba5028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 588.552878][ C0] RAX: ffffffffffffffda RBX: 00007f4166015fa0 RCX: 00007f4165d9cdd9 [ 588.560889][ C0] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000480 [ 588.568869][ C0] RBP: 00007f4165e32d69 R08: 0000000000000000 R09: 0000000000000000 [ 588.576856][ C0] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 588.584855][ C0] R13: 00007f4166016038 R14: 00007f4166015fa0 R15: 00007ffc5156cff8 [ 588.592866][ C0] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)