last executing test programs: 42.786940528s ago: executing program 3 (id=2491): perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x0, 0xff, 0x5, 0x0, 0x2, 0xe2898, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xfffffffffffffff8, 0x4}, 0x0, 0xc8, 0x7fffffe, 0x5, 0xffdffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000001f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x8c4) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000580)=ANY=[@ANYBLOB], 0xfdef) 42.618118708s ago: executing program 3 (id=2492): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x7, 0xa}, 0x108c28, 0x5, 0x43a1bd76, 0x6, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x69f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x2, 0x73) r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0xc, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x382a, 0xffffffffffff0001}, 0x8000, 0x3, 0x43a1bd76, 0x7, 0x9, 0x658, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@o_path={&(0x7f00000001c0)='./file0\x00', 0x0, 0x0, r0}, 0x18) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d080201000000120000a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5, 0x400100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000d802f950000000000500000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2a}, 0x9c) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0xfffffffffffffffe, 0xb}, 0x4195, 0x20033, 0xfffffbff, 0x5, 0x4, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2007}, 0x0, 0xb, 0xffffffffffffffff, 0x9) r6 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) sendmsg$inet(r6, &(0x7f0000000380)={&(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000540), 0x1}, 0x8804) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0xd, 0x5, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) 41.358211593s ago: executing program 3 (id=2496): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0xfc00) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000), 0x8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0xf, 0x7, 0xa, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x50) r0 = socket$kcm(0x10, 0x2, 0x4) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x19d5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000001300)={&(0x7f0000000340)=@pppoe={0x18, 0x0, {0x1, @remote, 'bridge_slave_1\x00'}}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000840)="7e50ad76cccbee03a4bd8da085f1f9e1696c390d596a10e25839e0d94818674f069dd677f8972d672aa0cb4c837381b6612ffad4179e6c5e2469aa0bb60c230af567a521615a8792d0802d8876423ae5c2327c1e76a72e63acc2dca6584cdfd88081b9951b173ec5da866637af4ffc8bd801c80b0ab0b45460cc4244247b5a3d96c9075a51e791dab6342ed5ee3870156bde41ea9d51579266037683ae413da130a249056f1d4e6cad5d5a68117dcd784b1ac68c956c1c0c683c364dba1f1ccbf0360cdae5c197bd561a2964499248c7a4053a864a7b783b08a9a8a875848ca2f4e771a8", 0xe4}, {&(0x7f0000000940)="c80e40ab95022f73e4ce4934b1215100e94db5c994e2966d89f5e88fa3a24a24fe5539de8469da78c96cd4409e1c155e5d323516b6a3ce588f0c2aac34b28d6b200026e74f65663e205ffdbabb215b8fc58e046a1d15347dc873d9c7c91db63104ed93ca2761798ab73c4cfcce2a8827ac4c9d6cb50a5e5f1ad1ca3f44db5b02d9ee716af70b9d361d0f14bdc0b5c616241005d8984464aebc7ab24ccad8ebdd9b949de0575888bb6e40ec", 0xab}, {&(0x7f0000000a00)="033caa3f7ecf587e7077b2456625f2681490ce99d27de2662200dd33301bb24dcad1a104b364af65b6e07d978ac7aeaad9cc36b6fd7e531bdc5dcaf2548eded6639d1cfc71e7ddedcc1d13c81933b45898e9cdef77db504b4f2ab1a14fd8e282a5a09e45e3eca31556312004bffa5652b1fb02a430e83813663709a79099f468994d1dc6771de99ae1039adcdb7a9f8380520f403d1389d9aef9e6881867cb7752aa1085d0f73d0320d4c43bbce0abb705421916dd5deabd466e8b59180c8099d02c3ce7f430c03dfa5d0908eac2c999188ccb69d93ef2a70440c8860ad798aeeb3e5a12ce4bb21073ec3dbbe58cb557e22e41c4db515c0cc5", 0xf9}, {&(0x7f0000000b00)="74876468454901043ea896647c92b0d6e60e726b80960c2a6c07459ab85639e4c1859c9a97783d907679d52e46fa805fecc536c98b90ac276aea14ff6142b97e6096d25f5e2e2c02f842a2ce751af393f9aedfc5683e54512b47d5165de288f20903d006b02b4fd065fb899188f15a54ea5448ffd1124efca04cfe20e2cf7c3aca4c90c36ebd633fda7da25730322740b36b7fb60057a438efdc667ce2a8a89f1662c51afcbb5ab9e8e6880d6651eecef9c141eb221ab8513165f96c7705a30e6f6d01fdb7ee8fcedf723f802ad06474e8bcaecbbecf8275c5789a9bb6c4c9dd4989dfdef875be01808fe1c0", 0xec}], 0x4, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], 0x2c8}, 0x20000000) sendmsg$kcm(r3, 0x0, 0x20000001) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5}, 0x94) sendmsg(r3, 0x0, 0x40001) unlink(&(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000202000000000000000100000500"], &(0x7f0000001f40)=""/4089, 0x3e, 0xff9, 0xa}, 0x28) 41.103276496s ago: executing program 3 (id=2497): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x4, 0x0, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x81, 0x86e46, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x3}, 0x0, 0x8, 0x80, 0x0, 0x0, 0xffff0000, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7f, 0x2, @perf_bp={0x0, 0x9}, 0x0, 0x32, 0x43a1bd76, 0x6, 0x9, 0x2, 0x812, 0x0, 0x0, 0x0, 0x22009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2, 0x3, 0x2) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0xffffffffffffff6b, &(0x7f0000000000)=[{&(0x7f0000000580)="48000000150081fb7059ae08060c040002ff0f03900000000000000200006fabca3b4e7d06a6bd7c00060000030000068a562ad6e74703c48f93bc2a02000000461eb886a5e54f8f", 0x48}], 0x1}, 0x8400) 40.847465629s ago: executing program 3 (id=2500): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e25, @remote}, 0x10, 0x0}, 0xfffe) 40.65010546s ago: executing program 3 (id=2502): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000a00000002000000000000010200416c806c00010800000001000084090000000400000001000000010000000061615f5f0000305f"], 0x0, 0x4a, 0x0, 0x1}, 0x28) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000480)={&(0x7f0000000340)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x60}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x2, 0x1006, 0xff, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r6 = openat$cgroup_devices(r5, 0x0, 0x2, 0x0) write$cgroup_devices(r6, &(0x7f0000000200)=ANY=[@ANYBLOB='c 1223'], 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%\xf8\xff\xff\xff\xff\xff\xff\xff=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r7, &(0x7f0000000040)='syz1\x00', 0x1ff) socket$kcm(0x2, 0x200000000000003, 0x106) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x9, &(0x7f0000000580)=ANY=[], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r8 = socket$kcm(0x2, 0x2, 0x0) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0x2e, &(0x7f0000000640), 0x4) recvmsg$kcm(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$tipc(r2, &(0x7f0000000680)={0x0, 0x50, 0x0, 0x0, &(0x7f0000000400)="174a8a1c08079feec019b8c7abf2e5046bd083e9bc", 0x15, 0x24000840}, 0x20040089) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0, 0x3}, 0x3406c0d7) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x3, 0x2, 0x49, 0x29, 0x0, 0xfffffffffffffffc, 0x6, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x310, 0x100000000, 0x7, 0x0, 0x28, 0x1, 0x8, 0x0, 0x7, 0x0, 0xfffffffffffffffd}, r9, 0x4, r2, 0x2) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000180)=[{&(0x7f0000001940)='{', 0x1}], 0x1}, 0x80d1) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)="7f", 0x34000}], 0x1}, 0x480d1) 27.98347457s ago: executing program 0 (id=2525): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, 0x0, 0xfe33) socket$kcm(0x10, 0x2, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x0, 0xff, 0x5, 0x0, 0x2, 0xe2898, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xfffffffffffffff8, 0x4}, 0x0, 0xc8, 0x7fffffe, 0x5, 0xffdffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000100)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000340)="5ed0fc370c692126507f36d1a5f9318998", 0x11}], 0x1}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1a210, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x8001000, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000240), 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f0000000fc0)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x31}, 0x80, &(0x7f0000001000)=[{&(0x7f0000001040)="b8b2cc1e00c1dba49dbb66ca3a66", 0xe}], 0x1}, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000009c0)={0x0, 0xfffffff8, 0x30}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x1a, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9}, {}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x48ac, 0x0, 0x0, 0x0, 0x3}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000780)='GPL\x00', 0x9, 0xca, &(0x7f0000000840)=""/202, 0x1f00, 0x36, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000980)={0x5, 0xe, 0x16, 0x3ff}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000a00)=[r3, r4], &(0x7f0000000a40)=[{0x5, 0x5, 0x0, 0xc}, {0x7, 0x2, 0x5, 0x9}, {0x1, 0x3, 0x4, 0xb}], 0x10, 0x9}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r6, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81e6971100fe08000e40000200875a65969ff57b00ff020000000000000000000000000001e2607e15e6"], 0xfdef) 24.662505864s ago: executing program 0 (id=2530): perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x0, 0xff, 0x5, 0x0, 0x2, 0xe2898, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xfffffffffffffff8, 0x4}, 0x0, 0xc8, 0x7fffffe, 0x5, 0xffdffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000001f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x8c4) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81e6971100fe08000e40000200"], 0xfdef) 24.327453401s ago: executing program 0 (id=2531): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="05000000010000008e000000c9e7000001000000645cbed49e9df123c620b6a1ce992a786020b495c99493addb5725fa647e23ac0f2f1d88b7195d9abd046b8555cce5a16671f91d8a4ea3780db243e32dd1f4ff1e79bcc5eaff97262ac946cf520902e142e1002f94286a75fc7fcb45d2290f0c8921f457b41ebb7a98be7d5e558adb08e923d82733fe7d480cc5b2f251b1d634d7cb7bf5ccce886712f194822e64d9bdc8f4790396b87bab8a9ae4da2624757be294", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES64=0x0, @ANYBLOB='\x00'/28], 0x50) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x3, 0x106) setsockopt$sock_attach_bpf(r1, 0x29, 0x4c, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="5c00000014006b03000000d86e6c1d00028409fcffff564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6aee6d700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x84) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140), 0x4) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000001c0)=r6, 0x4) bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xe30a, r0}, 0x38) r7 = socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x840, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071115f00000000008510000002000000850000000000000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r8) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) perf_event_open(&(0x7f0000000780)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x10840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r9, 0x10f, 0x82, &(0x7f0000000300), 0x52) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) setsockopt$sock_attach_bpf(r7, 0x84, 0xb, &(0x7f0000000040), 0x2) sendmsg$inet(r7, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f0000000200)=[{&(0x7f00000001c0)="92", 0x1}], 0x1}, 0x0) sendmsg$inet(r7, 0x0, 0x4000) 22.966218152s ago: executing program 2 (id=2533): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x73, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x64b, 0x842}, 0x114905, 0x2, 0x0, 0x1, 0x3, 0xffffffff, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x4, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32], 0x48) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0xfffffffffffffffb) socket$kcm(0x10, 0x2, 0x2) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x2, 0x20000}, 0x102065, 0x0, 0x0, 0x3, 0x7, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x4e25, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, 0x0, 0x48}, 0x0) r3 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x404a) recvmsg$kcm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000001680)=""/4096, 0x1000}], 0x1, &(0x7f0000000080)=""/173, 0xad}, 0x20) socket$kcm(0x2b, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) socket$kcm(0xa, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000500)=@framed, &(0x7f0000000580)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r4, 0x0, 0x85, 0xcf, &(0x7f0000000000)="fae68670fef1c45ff0634fe72a6253b4357c978887379648e34b8e43761f35000437ab851cde4821ce97abc68f6a1c3593e2a7a267f78fff0e9e1743899a7dc5c1d2ecae353bd4bcdb61c053b1d7b1223331d664596d93a54d408700062455bf71027a99387a4c190aa0098e4554990bc6fdfd4647aad6ed8951ff86c092399a8d11b76c5e", &(0x7f00000008c0)=""/206, 0x0, 0x0, 0x4c, 0x1e, 0xfffffffffffffffe, &(0x7f00000000c0)="d5231f25b5f85be12036902ce1a29123e3c1d41aa6d9c06ff230c473bf3c", 0x0, 0x8000}, 0x48) 21.936461756s ago: executing program 2 (id=2534): perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x0, 0xff, 0x5, 0x0, 0x2, 0xe2898, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xfffffffffffffff8, 0x4}, 0x0, 0xc8, 0x7fffffe, 0x5, 0xffdffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0xa, 0x922000000003, 0x11) socket$kcm(0x11, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000001f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x8c4) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81e6971100fe08000e40000200875a65969ff57b00ff020000000000000000000000000001e2607e15e6"], 0xfdef) 21.614745263s ago: executing program 2 (id=2536): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000a00000002000000000000010200416c806c00010800000001000084090000000400000001000000010000000061615f5f0000305f"], 0x0, 0x4a, 0x0, 0x1}, 0x28) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000480)={&(0x7f0000000340)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x60}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x2, 0x1006, 0xff, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r7 = openat$cgroup_devices(r6, 0x0, 0x2, 0x0) write$cgroup_devices(r7, &(0x7f0000000200)=ANY=[@ANYBLOB='c 1223'], 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%\xf8\xff\xff\xff\xff\xff\xff\xff=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r8, &(0x7f0000000040)='syz1\x00', 0x1ff) socket$kcm(0x2, 0x200000000000003, 0x106) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x9, &(0x7f0000000580)=ANY=[@ANYBLOB="b4000000000000006111080000000000060000000000dbbc83d0fefcffffffffffffb7000018570000000000000000000000000000181a0000ded0bd854c471e7060af763f2bc687c13558c6", @ANYRES32=r3, @ANYBLOB], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r9 = socket$kcm(0x2, 0x2, 0x0) r10 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(r9, 0x1, 0x2e, &(0x7f0000000640), 0x4) recvmsg$kcm(r9, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$tipc(r2, &(0x7f0000000680)={0x0, 0x50, 0x0, 0x0, &(0x7f0000000400)="174a8a1c08079feec019b8c7abf2e5046bd083e9bc", 0x15, 0x24000840}, 0x20040089) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0, 0x3}, 0x3406c0d7) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x3, 0x2, 0x49, 0x29, 0x0, 0xfffffffffffffffc, 0x6, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x310, 0x100000000, 0x7, 0x0, 0x28, 0x1, 0x8, 0x0, 0x7, 0x0, 0xfffffffffffffffd}, r10, 0x4, r2, 0x2) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000180)=[{&(0x7f0000001940)='{', 0x1}], 0x1}, 0x80d1) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)="7f", 0x34000}], 0x1}, 0x480d1) 20.450316993s ago: executing program 0 (id=2538): perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x0, 0xff, 0x5, 0x0, 0x2, 0xe2898, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xfffffffffffffff8, 0x4}, 0x0, 0xc8, 0x7fffffe, 0x5, 0xffdffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000001f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x8c4) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81e6971100fe08000e40000200"], 0xfdef) 20.299761051s ago: executing program 2 (id=2539): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@struct={0x3, 0x0, 0x0, 0x4, 0x1, 0x4}]}, {0x0, [0x2e, 0x5f]}}, 0x0, 0x28, 0x0, 0x1}, 0x28) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x0, 0x69, &(0x7f00000001c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0xd2, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x1, '\x00', r2, r0, 0x1, 0x2, 0x4}, 0x50) 20.236961054s ago: executing program 0 (id=2540): socket$kcm(0x11, 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_bp={0x0, 0x3}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x4, 0x6, 0x8, 0x0, 0x1}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r1}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r2}, 0x38) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000001f00)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010007080c00bdad0140310068ad639a8ace8680210bc28b805508bc7a46e39a8285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33", 0x89}], 0x1}, 0xff0f000020000080) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r4, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) openat$cgroup_ro(r4, &(0x7f0000000140)='blkio.bfq.io_service_time\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0x1000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x0) socketpair(0x28, 0x2, 0x28, &(0x7f0000001400)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r5) socket$kcm(0x2, 0x200000000000006, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x5, 0x80, 0x10, 0xfd, 0x0, 0x0, 0x0, 0x1, 0x90, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0xaa32, 0x0, 0xfffffffd, 0x0, 0x5}) ioctl$TUNGETVNETLE(r5, 0x8955, &(0x7f0000000040)) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x801, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth0_vlan\x00', 0x400}) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0x2, 0x8, 0x40, 0xc0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791028000000000069002600000000009500740000000000", @ANYRES8=r2], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xa4, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport=0x28}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500), &(0x7f0000000080), 0x1003, r6}, 0x38) 20.018619766s ago: executing program 2 (id=2541): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x73, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x64b, 0x842}, 0x114905, 0x2, 0x0, 0x1, 0x3, 0xffffffff, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x4, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32], 0x48) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0xfffffffffffffffb) socket$kcm(0x10, 0x2, 0x2) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x2, 0x20000}, 0x102065, 0x0, 0x0, 0x3, 0x7, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x4e25, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, 0x0, 0x48}, 0x0) r3 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x404a) recvmsg$kcm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000001680)=""/4096, 0x1000}], 0x1, &(0x7f0000000080)=""/173, 0xad}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) socket$kcm(0xa, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000500)=@framed, &(0x7f0000000580)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r4, 0x0, 0x85, 0xcf, &(0x7f0000000000)="fae68670fef1c45ff0634fe72a6253b4357c978887379648e34b8e43761f35000437ab851cde4821ce97abc68f6a1c3593e2a7a267f78fff0e9e1743899a7dc5c1d2ecae353bd4bcdb61c053b1d7b1223331d664596d93a54d408700062455bf71027a99387a4c190aa0098e4554990bc6fdfd4647aad6ed8951ff86c092399a8d11b76c5e", &(0x7f00000008c0)=""/206, 0x0, 0x0, 0x4c, 0x1e, 0xfffffffffffffffe, &(0x7f00000000c0)="d5231f25b5f85be12036902ce1a29123e3c1d41aa6d9c06ff230c473bf3c", 0x0, 0x8000}, 0x48) 19.600683918s ago: executing program 2 (id=2543): r0 = perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x16, 0x2, 0x0, 0x0, 0x0, 0x1442, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, @perf_config_ext={0x5, 0x5ea1}, 0x100000, 0xca, 0x0, 0x5, 0x0, 0x0, 0x1000, 0x0, 0x20000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7fff, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/pid\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x401}, 0x108b84, 0x520, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000010c0)={0x18, 0x5, &(0x7f0000000840)=@framed={{}, [@map_idx_val={0x18, 0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000f80)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=[0xffffffffffffffff, r4]}, 0x90) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r5, &(0x7f0000000280)=ANY=[@ANYRES8=r2, @ANYRES8=r6], 0x12) 18.702515215s ago: executing program 0 (id=2545): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x53e, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x10, 0x6, &(0x7f0000000c80)=@raw=[@tail_call={{}, {0x4}, {0x85, 0x0, 0x0, 0x8c}}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x2}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000025c0)=@bpf_ext={0x1c, 0xa, &(0x7f0000002080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x0, 0x7ffe}, [@ringbuf_query, @alu={0x4, 0x0, 0xb, 0x3, 0x1, 0x10, 0x8}, @generic={0x6, 0x1, 0x9, 0xe289, 0x265}, @ldst={0x2, 0x2, 0x3, 0x4, 0x7, 0x18, 0xffffffffffffffff}]}, &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001500)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000002040)={0x3, 0xc, 0x2, 0xb}, 0x10, 0x70d1, 0xffffffffffffffff, 0x5, &(0x7f0000002500)=[0xffffffffffffffff, 0x1], &(0x7f0000002540)=[{0x1, 0x1, 0xe, 0x2}, {0x4, 0x1, 0xe, 0x2}, {0x5, 0x3, 0x9, 0x4}, {0x4, 0x3, 0x10, 0xa}, {0x2, 0x2, 0xe, 0xc}], 0x10, 0x5bcf08f}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b0000"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0x11, 0x200000000000003, 0x300) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000001580)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000001300)=""/248, 0xf8}], 0x1}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000140)={'\x00', 0x6132}) write$cgroup_subtree(r4, &(0x7f0000001480)=ANY=[], 0xc54c295c) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f00000003c0), 0x4) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="240000006600816657bb97c9269de9aaec8488040f8906004cb9cca7480ef402000000e3", 0x24}], 0x1, 0x0, 0x0, 0xc9e}, 0x48084) sendmsg$inet(r2, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000000), 0x8) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r6) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0xd, &(0x7f0000000000), 0x143}, 0x48) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) write$cgroup_subtree(r6, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa000086dd"], 0xcfa4) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000012c0)={&(0x7f0000001400)=ANY=[], &(0x7f00000011c0)=""/248, 0x74, 0xf8, 0x1, 0x0, 0x10000, @value=r6}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="150a00000000000061117c0000e572000000000000000000000000000a8486f252a672570000000055e9b7a9cdc59248"], &(0x7f0000000000)='GPL\x00'}, 0x80) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r7, 0x18000000000002a0, 0x1d, 0x0, &(0x7f0000000400)="b9ff0307683a268cb8091a99005303b0609fcee2f92810c13ba6ac4c15", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) 17.941484584s ago: executing program 1 (id=2546): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="05000000010000008e000000c9e7000001000000645cbed49e9df123c620b6a1ce992a786020b495c99493addb5725fa647e23ac0f2f1d88b7195d9abd046b8555cce5a16671f91d8a4ea3780db243e32dd1f4ff1e79bcc5eaff97262ac946cf520902e142e1002f94286a75fc7fcb45d2290f0c8921f457b41ebb7a98be7d5e558adb08e923d82733fe7d480cc5b2f251b1d634d7cb7bf5ccce886712f194822e64d9bdc8f4790396b87bab8a9ae4da2624757be294", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES64=0x0, @ANYBLOB='\x00'/28], 0x50) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x3, 0x106) setsockopt$sock_attach_bpf(r1, 0x29, 0x4c, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="5c00000014006b03000000d86e6c1d00028409fcffff564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6aee6d700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x84) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140), 0x4) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000001c0)=r6, 0x4) bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xe30a, r0}, 0x38) r7 = socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x840, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071115f00000000008510000002000000850000000000000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r8) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) perf_event_open(&(0x7f0000000780)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x10840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r9, 0x10f, 0x82, &(0x7f0000000300), 0x52) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) setsockopt$sock_attach_bpf(r7, 0x84, 0xb, &(0x7f0000000040), 0x2) sendmsg$inet(r7, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f0000000200)=[{&(0x7f00000001c0)="92", 0x1}], 0x1}, 0x0) sendmsg$inet(r7, 0x0, 0x4000) 16.688034179s ago: executing program 1 (id=2547): perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x0, 0xff, 0x5, 0x0, 0x2, 0xe2898, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xfffffffffffffff8, 0x4}, 0x0, 0xc8, 0x7fffffe, 0x5, 0xffdffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000001f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x8c4) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81e6971100fe08000e40000200875a65969ff57b00ff020000000000"], 0xfdef) 16.622151833s ago: executing program 1 (id=2548): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0xfc00) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000), 0x8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0xf, 0x7, 0xa, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x50) r0 = socket$kcm(0x10, 0x2, 0x4) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x19d5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000001300)={&(0x7f0000000340)=@pppoe={0x18, 0x0, {0x1, @remote, 'bridge_slave_1\x00'}}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000840)="7e50ad76cccbee03a4bd8da085f1f9e1696c390d596a10e25839e0d94818674f069dd677f8972d672aa0cb4c837381b6612ffad4179e6c5e2469aa0bb60c230af567a521615a8792d0802d8876423ae5c2327c1e76a72e63acc2dca6584cdfd88081b9951b173ec5da866637af4ffc8bd801c80b0ab0b45460cc4244247b5a3d96c9075a51e791dab6342ed5ee3870156bde41ea9d51579266037683ae413da130a249056f1d4e6cad5d5a68117dcd784b1ac68c956c1c0c683c364dba1f1ccbf0360cdae5c197bd561a2964499248c7a4053a864a7b783b08a9a8a875848ca2f4e771a8", 0xe4}, {&(0x7f0000000940)="c80e40ab95022f73e4ce4934b1215100e94db5c994e2966d89f5e88fa3a24a24fe5539de8469da78c96cd4409e1c155e5d323516b6a3ce588f0c2aac34b28d6b200026e74f65663e205ffdbabb215b8fc58e046a1d15347dc873d9c7c91db63104ed93ca2761798ab73c4cfcce2a8827ac4c9d6cb50a5e5f1ad1ca3f44db5b02d9ee716af70b9d361d0f14bdc0b5c616241005d8984464aebc7ab24ccad8ebdd9b949de0575888bb6e40ec", 0xab}, {&(0x7f0000000a00)="033caa3f7ecf587e7077b2456625f2681490ce99d27de2662200dd33301bb24dcad1a104b364af65b6e07d978ac7aeaad9cc36b6fd7e531bdc5dcaf2548eded6639d1cfc71e7ddedcc1d13c81933b45898e9cdef77db504b4f2ab1a14fd8e282a5a09e45e3eca31556312004bffa5652b1fb02a430e83813663709a79099f468994d1dc6771de99ae1039adcdb7a9f8380520f403d1389d9aef9e6881867cb7752aa1085d0f73d0320d4c43bbce0abb705421916dd5deabd466e8b59180c8099d02c3ce7f430c03dfa5d0908eac2c999188ccb69d93ef2a70440c8860ad798aeeb3e5a12ce4bb21073ec3dbbe58cb557e22e41c4db515c0cc5", 0xf9}, {&(0x7f0000000b00)="74876468454901043ea896647c92b0d6e60e726b80960c2a6c07459ab85639e4c1859c9a97783d907679d52e46fa805fecc536c98b90ac276aea14ff6142b97e6096d25f5e2e2c02f842a2ce751af393f9aedfc5683e54512b47d5165de288f20903d006b02b4fd065fb899188f15a54ea5448ffd1124efca04cfe20e2cf7c3aca4c90c36ebd633fda7da25730322740b36b7fb60057a438efdc667ce2a8a89f1662c51afcbb5ab9e8e6880d6651eecef9c141eb221ab8513165f96c7705a30e6f6d01fdb7ee8fcedf723f802ad06474e8bcaecbbecf8275c5789a9bb6c4c9dd4989dfdef875be01808fe1c0", 0xec}], 0x4, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], 0x2c8}, 0x20000000) sendmsg$kcm(r3, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x20000001) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f00000001c0)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5}, 0x94) sendmsg(r3, 0x0, 0x40001) unlink(&(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000202000000000000000100000500"], &(0x7f0000001f40)=""/4089, 0x3e, 0xff9, 0xa}, 0x28) 16.510995909s ago: executing program 1 (id=2549): bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x14905, 0x5, 0x7, 0x3, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/0\x04\x00\x00\x82q\xee\x00'/32}, 0x30) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0xd, 0x10, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000010000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r2, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f0000000000)='syzkaller\x00', 0x9, 0xfeb, &(0x7f0000001e00)=""/4075, 0x41000}, 0x94) r3 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r3, 0x84, 0x65, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="12000000040000000800000001"], 0x50) r5 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r5, 0x84, 0x64, &(0x7f0000000000)=r7, 0x10) r8 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00', 0x0, 0x18}, 0x18) ioctl$TUNSETSTEERINGEBPF(r7, 0x800454e0, &(0x7f0000000200)=r8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0xe, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x1009, &(0x7f00000014c0)=""/4105}, 0x94) 15.5346731s ago: executing program 1 (id=2550): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x73, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x64b, 0x842}, 0x114905, 0x2, 0x0, 0x1, 0x3, 0xffffffff, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x4, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32], 0x48) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0xfffffffffffffffb) socket$kcm(0x10, 0x2, 0x2) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x2, 0x20000}, 0x102065, 0x0, 0x0, 0x3, 0x7, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x4e25, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, 0x0, 0x48}, 0x0) r3 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x404a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) socket$kcm(0xa, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000500)=@framed, &(0x7f0000000580)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r4, 0x0, 0x85, 0xcf, &(0x7f0000000000)="fae68670fef1c45ff0634fe72a6253b4357c978887379648e34b8e43761f35000437ab851cde4821ce97abc68f6a1c3593e2a7a267f78fff0e9e1743899a7dc5c1d2ecae353bd4bcdb61c053b1d7b1223331d664596d93a54d408700062455bf71027a99387a4c190aa0098e4554990bc6fdfd4647aad6ed8951ff86c092399a8d11b76c5e", &(0x7f00000008c0)=""/206, 0x0, 0x0, 0x4c, 0x1e, 0xfffffffffffffffe, &(0x7f00000000c0)="d5231f25b5f85be12036902ce1a29123e3c1d41aa6d9c06ff230c473bf3c", 0x0, 0x8000}, 0x48) 15.14154979s ago: executing program 1 (id=2551): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x7, 0xa}, 0x108c28, 0x5, 0x43a1bd76, 0x6, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x69f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x2, 0x73) r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef42d430f6296b72a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed40000000022278d00031e5388ee5c867ddd58211d6ece3ccb0cd2b6d3cffd962867a3a2f624f992daa94a6a556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff020000000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409e011f1264d43f153b3d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7000026a4e739c60f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf3f704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eedd9068ca1457870eb30d219e23ccc8e06dddeb61799257ab5000013c86ba99523d61a00000000c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb8629aeec90e6d1857da822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae200f279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522e8dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f34a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be10ba7dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2db484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b00ffffff7f000000000801f71d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cf0d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67856ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e2b8e7370baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b09000000d31df213c802d74797056fd3bca8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221fff0f0000705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f14fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008f3a20b49fe7636806867283e35cff8d00e7b251bab3cf6377a24f8e8d4bda7503674bc94bf7f4d2fa6f25944bf0a186436d9f6831995976328a1fdc78492c65c1434855dc35c3cf7cf9610c5387794443c99b304799114132362849c3fa85d6379729ff9094933db0cfbe8887c50b87e1469fdf454cef4cbc5f7bf384000000000000a4e8c1a25f47c440144a9776be6cb40aafdb9d3cc8f6a6050974e1c4000000000000008b753f4e1bef9556efcc087a99dbf231167013a4b2eaf6338a0b100c98a331dffc09"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0xc, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x382a, 0xffffffffffff0001}, 0x8000, 0x3, 0x43a1bd76, 0x7, 0x9, 0x658, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d080201000000120000a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5, 0x400100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000d802f950000000000500000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2a}, 0x9c) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0xfffffffffffffffe, 0xb}, 0x4195, 0x20033, 0xfffffbff, 0x5, 0x4, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2007}, 0x0, 0xb, 0xffffffffffffffff, 0x9) r6 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) sendmsg$inet(r6, &(0x7f0000000380)={&(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000540), 0x1}, 0x8804) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0xd, 0x5, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) 4.075965847s ago: executing program 32 (id=2543): r0 = perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x16, 0x2, 0x0, 0x0, 0x0, 0x1442, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, @perf_config_ext={0x5, 0x5ea1}, 0x100000, 0xca, 0x0, 0x5, 0x0, 0x0, 0x1000, 0x0, 0x20000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7fff, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/pid\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x401}, 0x108b84, 0x520, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000010c0)={0x18, 0x5, &(0x7f0000000840)=@framed={{}, [@map_idx_val={0x18, 0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000f80)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=[0xffffffffffffffff, r4]}, 0x90) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r5, &(0x7f0000000280)=ANY=[@ANYRES8=r2, @ANYRES8=r6], 0x12) 3.025211892s ago: executing program 33 (id=2545): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x53e, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x10, 0x6, &(0x7f0000000c80)=@raw=[@tail_call={{}, {0x4}, {0x85, 0x0, 0x0, 0x8c}}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x2}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000025c0)=@bpf_ext={0x1c, 0xa, &(0x7f0000002080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x0, 0x7ffe}, [@ringbuf_query, @alu={0x4, 0x0, 0xb, 0x3, 0x1, 0x10, 0x8}, @generic={0x6, 0x1, 0x9, 0xe289, 0x265}, @ldst={0x2, 0x2, 0x3, 0x4, 0x7, 0x18, 0xffffffffffffffff}]}, &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001500)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000002040)={0x3, 0xc, 0x2, 0xb}, 0x10, 0x70d1, 0xffffffffffffffff, 0x5, &(0x7f0000002500)=[0xffffffffffffffff, 0x1], &(0x7f0000002540)=[{0x1, 0x1, 0xe, 0x2}, {0x4, 0x1, 0xe, 0x2}, {0x5, 0x3, 0x9, 0x4}, {0x4, 0x3, 0x10, 0xa}, {0x2, 0x2, 0xe, 0xc}], 0x10, 0x5bcf08f}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b0000"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0x11, 0x200000000000003, 0x300) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000001580)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000001300)=""/248, 0xf8}], 0x1}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000140)={'\x00', 0x6132}) write$cgroup_subtree(r4, &(0x7f0000001480)=ANY=[], 0xc54c295c) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f00000003c0), 0x4) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="240000006600816657bb97c9269de9aaec8488040f8906004cb9cca7480ef402000000e3", 0x24}], 0x1, 0x0, 0x0, 0xc9e}, 0x48084) sendmsg$inet(r2, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000000), 0x8) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r6) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0xd, &(0x7f0000000000), 0x143}, 0x48) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) write$cgroup_subtree(r6, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa000086dd"], 0xcfa4) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000012c0)={&(0x7f0000001400)=ANY=[], &(0x7f00000011c0)=""/248, 0x74, 0xf8, 0x1, 0x0, 0x10000, @value=r6}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="150a00000000000061117c0000e572000000000000000000000000000a8486f252a672570000000055e9b7a9cdc59248"], &(0x7f0000000000)='GPL\x00'}, 0x80) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r7, 0x18000000000002a0, 0x1d, 0x0, &(0x7f0000000400)="b9ff0307683a268cb8091a99005303b0609fcee2f92810c13ba6ac4c15", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 34 (id=2551): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x7, 0xa}, 0x108c28, 0x5, 0x43a1bd76, 0x6, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x69f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x2, 0x73) r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0xc, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x382a, 0xffffffffffff0001}, 0x8000, 0x3, 0x43a1bd76, 0x7, 0x9, 0x658, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d080201000000120000a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5, 0x400100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000d802f950000000000500000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2a}, 0x9c) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0xfffffffffffffffe, 0xb}, 0x4195, 0x20033, 0xfffffbff, 0x5, 0x4, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2007}, 0x0, 0xb, 0xffffffffffffffff, 0x9) r6 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) sendmsg$inet(r6, &(0x7f0000000380)={&(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000540), 0x1}, 0x8804) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0xd, 0x5, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) kernel console output (not intermixed with test programs): 1.018596][T10600] RSP: 002b:00007f5c353b5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 501.027036][T10600] RAX: ffffffffffffffda RBX: 00007f5c34815fa0 RCX: 00007f5c3459c819 [ 501.035020][T10600] RDX: 0000000024000008 RSI: 00002000000000c0 RDI: 0000000000000005 [ 501.043004][T10600] RBP: 00007f5c353b5090 R08: 0000000000000000 R09: 0000000000000000 [ 501.050989][T10600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 501.058970][T10600] R13: 00007f5c34816038 R14: 00007f5c34815fa0 R15: 00007ffee3f56158 [ 501.067151][T10600] [ 501.353153][T10616] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1552'. [ 501.395974][T10613] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1551'. [ 501.711292][T10623] netlink: 1039 bytes leftover after parsing attributes in process `syz.0.1555'. [ 501.744191][T10625] netlink: 'syz.3.1556': attribute type 7 has an invalid length. [ 501.784417][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.791333][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.004122][T10627] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1557'. [ 502.034283][T10630] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 502.040814][T10630] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 502.421313][T10641] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 502.434347][T10641] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 502.470859][T10641] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 502.565481][T10641] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 502.607466][T10643] FAULT_INJECTION: forcing a failure. [ 502.607466][T10643] name failslab, interval 1, probability 0, space 0, times 0 [ 502.638529][T10643] CPU: 0 PID: 10643 Comm: syz.3.1562 Not tainted syzkaller #0 [ 502.646200][T10643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 502.656443][T10643] Call Trace: [ 502.659812][T10643] [ 502.662845][T10643] dump_stack_lvl+0x18c/0x250 [ 502.667657][T10643] ? show_regs_print_info+0x20/0x20 [ 502.672959][T10643] ? load_image+0x420/0x420 [ 502.677585][T10643] ? __might_sleep+0xe0/0xe0 [ 502.682274][T10643] ? __lock_acquire+0x7d40/0x7d40 [ 502.687415][T10643] should_fail_ex+0x39d/0x4d0 [ 502.692208][T10643] should_failslab+0x9/0x20 [ 502.696821][T10643] slab_pre_alloc_hook+0x59/0x310 [ 502.701968][T10643] ? apparmor_sk_alloc_security+0x77/0x100 [ 502.707846][T10643] __kmem_cache_alloc_node+0x53/0x250 [ 502.713375][T10643] ? apparmor_sk_alloc_security+0x77/0x100 [ 502.719237][T10643] kmalloc_trace+0x2a/0xe0 [ 502.723723][T10643] apparmor_sk_alloc_security+0x77/0x100 [ 502.729410][T10643] security_sk_alloc+0x6e/0xa0 [ 502.734330][T10643] sk_prot_alloc+0x101/0x210 [ 502.739056][T10643] ? sk_alloc+0x24/0x360 [ 502.743358][T10643] sk_alloc+0x3a/0x360 [ 502.747592][T10643] ? bpf_ctx_init+0x163/0x1a0 [ 502.752326][T10643] ? bpf_prog_test_run_skb+0x273/0x12b0 [ 502.757988][T10643] bpf_prog_test_run_skb+0x3a5/0x12b0 [ 502.763418][T10643] ? __fget_files+0x28/0x4b0 [ 502.768055][T10643] ? __fget_files+0x28/0x4b0 [ 502.772699][T10643] ? __fget_files+0x43d/0x4b0 [ 502.777467][T10643] ? cpu_online+0x60/0x60 [ 502.781848][T10643] bpf_prog_test_run+0x321/0x390 [ 502.786842][T10643] __sys_bpf+0x49d/0x890 [ 502.791245][T10643] ? bpf_link_show_fdinfo+0x390/0x390 [ 502.796725][T10643] ? lock_chain_count+0x20/0x20 [ 502.801658][T10643] __x64_sys_bpf+0x7c/0x90 [ 502.806131][T10643] do_syscall_64+0x55/0xa0 [ 502.810622][T10643] ? clear_bhb_loop+0x40/0x90 [ 502.815427][T10643] ? clear_bhb_loop+0x40/0x90 [ 502.820174][T10643] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 502.826109][T10643] RIP: 0033:0x7f957a79c819 [ 502.830608][T10643] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 502.850287][T10643] RSP: 002b:00007f957b6ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 502.858849][T10643] RAX: ffffffffffffffda RBX: 00007f957aa15fa0 RCX: 00007f957a79c819 [ 502.866900][T10643] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 502.874933][T10643] RBP: 00007f957b6ac090 R08: 0000000000000000 R09: 0000000000000000 [ 502.882982][T10643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 502.891233][T10643] R13: 00007f957aa16038 R14: 00007f957aa15fa0 R15: 00007fffd95722b8 [ 502.899352][T10643] [ 503.041147][T10647] netlink: 'syz.1.1563': attribute type 10 has an invalid length. [ 503.104557][T10649] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1564'. [ 503.329793][T10654] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1565'. [ 504.108310][T10660] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 504.114874][T10660] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 506.633722][T10673] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1572'. [ 506.748102][T10675] netlink: 'syz.1.1573': attribute type 4 has an invalid length. [ 506.755926][T10675] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1573'. [ 506.801053][T10675] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 506.955660][T10679] netlink: 65051 bytes leftover after parsing attributes in process `syz.3.1575'. [ 507.129556][T10679] netlink: 'syz.3.1575': attribute type 10 has an invalid length. [ 507.164923][T10683] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1576'. [ 507.206935][T10679] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 507.614681][T10687] netlink: 'syz.2.1577': attribute type 10 has an invalid length. [ 508.438988][T10699] netlink: 'syz.1.1581': attribute type 2 has an invalid length. [ 508.446799][T10699] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1581'. [ 509.685530][T10714] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1586'. [ 509.743271][T10716] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1585'. [ 510.703922][T10731] netlink: 'syz.1.1590': attribute type 4 has an invalid length. [ 510.758015][T10731] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1590'. [ 510.774694][T10731] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 510.820704][T10732] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 510.849420][T10732] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 510.874265][T10732] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 510.909595][T10732] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 511.353388][T10746] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1594'. [ 512.071391][T10755] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 512.077938][T10755] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 512.522100][T10759] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.1599'. [ 512.665635][T10765] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1600'. [ 513.270978][T10780] netlink: 'syz.0.1607': attribute type 10 has an invalid length. [ 513.365018][T10783] netlink: 'syz.1.1602': attribute type 4 has an invalid length. [ 513.505929][T10783] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1602'. [ 513.580410][T10783] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 514.666308][T10798] netlink: 'syz.2.1612': attribute type 10 has an invalid length. [ 515.469244][T10807] netlink: 'syz.2.1616': attribute type 10 has an invalid length. [ 515.612030][T10812] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1617'. [ 515.896310][ T5782] Bluetooth: hci0: unexpected event 0x03 length: 15 > 11 [ 516.315211][T10826] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1623'. [ 518.092719][T10841] netlink: 'syz.1.1629': attribute type 10 has an invalid length. [ 518.162267][T10834] netlink: 'syz.3.1627': attribute type 4 has an invalid length. [ 518.288961][T10834] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1627'. [ 518.454752][T10834] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 520.836165][T10857] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1634'. [ 520.862518][T10854] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1633'. [ 522.043782][T10870] netlink: 'syz.1.1640': attribute type 10 has an invalid length. [ 523.085327][T10889] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1647'. [ 524.360776][T10907] netlink: 'syz.3.1654': attribute type 10 has an invalid length. [ 526.149014][T10895] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 526.158628][T10895] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 526.502991][T10927] netlink: 'syz.3.1661': attribute type 10 has an invalid length. [ 526.576765][T10927] team0: Device ipvlan1 failed to register rx_handler [ 527.148235][T10937] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1664'. [ 527.362529][T10940] netlink: 'syz.1.1665': attribute type 10 has an invalid length. [ 528.683537][T10963] netlink: 'syz.1.1675': attribute type 10 has an invalid length. [ 529.061027][T10973] netlink: 'syz.3.1670': attribute type 4 has an invalid length. [ 529.145304][T10973] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1670'. [ 529.340277][T10973] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 531.018106][T10984] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1679'. [ 532.211560][T11001] netlink: 'syz.1.1686': attribute type 10 has an invalid length. [ 532.978802][T11013] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 532.985478][T11013] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 533.275550][T11025] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1693'. [ 533.708261][T11020] netlink: 'syz.0.1689': attribute type 4 has an invalid length. [ 533.812665][T11020] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1689'. [ 533.899213][T11020] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 534.704529][T11044] netlink: 'syz.3.1699': attribute type 10 has an invalid length. [ 535.113243][T11054] netlink: 'syz.1.1701': attribute type 10 has an invalid length. [ 535.230734][T11057] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 535.237259][T11057] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 535.925326][T11061] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 535.932167][T11061] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 536.028579][T11054] macvlan0: entered promiscuous mode [ 536.034321][T11054] macvlan0: entered allmulticast mode [ 536.040913][T11054] veth1_vlan: entered allmulticast mode [ 536.047872][T11054] team0: Port device macvlan0 added [ 536.124390][T11067] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1706'. [ 537.510835][T11080] netlink: 'syz.1.1711': attribute type 4 has an invalid length. [ 537.570278][T11080] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1711'. [ 537.630613][T11080] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 537.701431][T11083] netlink: 'syz.0.1712': attribute type 10 has an invalid length. [ 539.965148][T11112] FAULT_INJECTION: forcing a failure. [ 539.965148][T11112] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 539.998328][T11112] CPU: 1 PID: 11112 Comm: syz.3.1721 Not tainted syzkaller #0 [ 540.005880][T11112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 540.015994][T11112] Call Trace: [ 540.019314][T11112] [ 540.022275][T11112] dump_stack_lvl+0x18c/0x250 [ 540.027030][T11112] ? show_regs_print_info+0x20/0x20 [ 540.032292][T11112] ? load_image+0x420/0x420 [ 540.036851][T11112] ? __might_fault+0xaa/0x120 [ 540.041575][T11112] ? __lock_acquire+0x7d40/0x7d40 [ 540.046665][T11112] should_fail_ex+0x39d/0x4d0 [ 540.051402][T11112] _copy_from_user+0x2f/0xe0 [ 540.056134][T11112] __sys_bpf+0x23e/0x890 [ 540.060421][T11112] ? bpf_link_show_fdinfo+0x390/0x390 [ 540.065857][T11112] ? lock_chain_count+0x20/0x20 [ 540.070764][T11112] __x64_sys_bpf+0x7c/0x90 [ 540.075237][T11112] do_syscall_64+0x55/0xa0 [ 540.079709][T11112] ? clear_bhb_loop+0x40/0x90 [ 540.084432][T11112] ? clear_bhb_loop+0x40/0x90 [ 540.089162][T11112] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 540.095112][T11112] RIP: 0033:0x7f957a79c819 [ 540.099655][T11112] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 540.119316][T11112] RSP: 002b:00007f957b6ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 540.127796][T11112] RAX: ffffffffffffffda RBX: 00007f957aa15fa0 RCX: 00007f957a79c819 [ 540.135824][T11112] RDX: 0000000000000050 RSI: 0000200000000900 RDI: 000000000000000a [ 540.143867][T11112] RBP: 00007f957b6ac090 R08: 0000000000000000 R09: 0000000000000000 [ 540.151895][T11112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 540.159913][T11112] R13: 00007f957aa16038 R14: 00007f957aa15fa0 R15: 00007fffd95722b8 [ 540.168066][T11112] [ 540.528015][T11122] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1722'. [ 542.675067][T11134] netlink: 'syz.0.1727': attribute type 4 has an invalid length. [ 542.713076][T11134] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1727'. [ 542.892972][T11134] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 544.959577][T11142] netlink: 'syz.1.1729': attribute type 4 has an invalid length. [ 544.991660][T11142] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1729'. [ 545.026855][T11142] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 546.518368][T11168] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1737'. [ 547.216684][T11176] netlink: 'syz.3.1740': attribute type 10 has an invalid length. [ 547.282002][T11177] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 547.291592][T11177] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 549.484816][T11184] netlink: 'syz.3.1742': attribute type 4 has an invalid length. [ 549.567096][T11184] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1742'. [ 549.591060][T11184] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 550.528617][T11194] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 550.535413][T11194] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 552.039252][T11224] netlink: 'syz.0.1750': attribute type 10 has an invalid length. [ 552.564484][T11218] netlink: 'syz.2.1748': attribute type 4 has an invalid length. [ 552.669982][T11218] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1748'. [ 552.750245][T11218] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 556.228584][T11240] netlink: 'syz.1.1755': attribute type 4 has an invalid length. [ 556.541545][T11240] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1755'. [ 556.710608][T11240] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 556.762418][T11246] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 556.769482][T11246] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 558.002118][T11262] netlink: 'syz.2.1761': attribute type 10 has an invalid length. [ 558.604671][ T5782] Bluetooth: hci2: unexpected event 0x12 length: 15 > 8 [ 559.145810][T11267] netlink: 'syz.0.1767': attribute type 4 has an invalid length. [ 559.264655][T11267] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1767'. [ 559.273852][T11267] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 559.535982][T11277] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1765'. [ 559.586821][T11277] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1765'. [ 559.660725][T11277] bridge_slave_0: entered allmulticast mode [ 559.738743][T11277] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1765'. [ 559.851553][T11279] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1765'. [ 561.453527][T11290] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 561.460387][T11290] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 562.116190][T11301] netlink: 'syz.3.1771': attribute type 29 has an invalid length. [ 562.125059][T11301] netlink: 'syz.3.1771': attribute type 29 has an invalid length. [ 562.140247][T11302] netlink: 'syz.3.1771': attribute type 29 has an invalid length. [ 562.167028][T11301] netlink: 'syz.3.1771': attribute type 29 has an invalid length. [ 562.228332][T11303] netlink: 'syz.3.1771': attribute type 29 has an invalid length. [ 562.388695][T11302] netlink: 'syz.3.1771': attribute type 29 has an invalid length. [ 562.421410][T11301] netlink: 'syz.3.1771': attribute type 29 has an invalid length. [ 562.732387][T11298] netlink: 'syz.2.1772': attribute type 10 has an invalid length. [ 563.127643][T11309] netlink: 'syz.0.1773': attribute type 3 has an invalid length. [ 563.185656][T11309] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.1773'. [ 563.400856][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.412004][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.114213][ T5782] Bluetooth: hci0: unexpected event 0x12 length: 15 > 8 [ 565.249670][T11326] netlink: 'syz.2.1779': attribute type 4 has an invalid length. [ 565.318749][T11326] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1779'. [ 565.387952][T11326] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 566.961495][ T5782] Bluetooth: hci2: unexpected event 0x12 length: 15 > 8 [ 567.032736][T11356] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1789'. [ 567.092415][T11356] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1789'. [ 567.216985][T11356] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1789'. [ 567.343792][T11360] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1789'. [ 567.499741][T11372] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1793'. [ 567.560117][T11372] netlink: 'syz.2.1793': attribute type 10 has an invalid length. [ 567.673703][T11372] 8021q: adding VLAN 0 to HW filter on device bond0 [ 567.784570][T11372] team0: Port device bond0 added [ 571.146465][T11388] netlink: 'syz.1.1797': attribute type 4 has an invalid length. [ 571.307801][T11388] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1797'. [ 571.536101][ T5782] Bluetooth: hci0: unexpected event 0x12 length: 15 > 8 [ 571.575852][T11388] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 572.311094][T11401] netlink: 'syz.3.1799': attribute type 27 has an invalid length. [ 572.335460][T11401] netlink: 2418 bytes leftover after parsing attributes in process `syz.3.1799'. [ 573.333437][T11423] FAULT_INJECTION: forcing a failure. [ 573.333437][T11423] name failslab, interval 1, probability 0, space 0, times 0 [ 573.499222][T11423] CPU: 1 PID: 11423 Comm: syz.2.1807 Not tainted syzkaller #0 [ 573.506759][T11423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 573.516856][T11423] Call Trace: [ 573.520163][T11423] [ 573.523300][T11423] dump_stack_lvl+0x18c/0x250 [ 573.528029][T11423] ? show_regs_print_info+0x20/0x20 [ 573.533617][T11423] ? load_image+0x420/0x420 [ 573.538186][T11423] ? verify_lock_unused+0x140/0x140 [ 573.543512][T11423] should_fail_ex+0x39d/0x4d0 [ 573.548230][T11423] should_failslab+0x9/0x20 [ 573.552857][T11423] slab_pre_alloc_hook+0x59/0x310 [ 573.558030][T11423] kmem_cache_alloc+0x5a/0x2d0 [ 573.562930][T11423] ? skb_clone+0x1eb/0x370 [ 573.567409][T11423] skb_clone+0x1eb/0x370 [ 573.571691][T11423] __netlink_deliver_tap+0x41c/0x830 [ 573.577034][T11423] ? netlink_deliver_tap+0x2e/0x1b0 [ 573.582276][T11423] netlink_deliver_tap+0x19c/0x1b0 [ 573.587429][T11423] netlink_unicast+0x72c/0x8d0 [ 573.592344][T11423] netlink_sendmsg+0x8d0/0xbf0 [ 573.597250][T11423] ? netlink_getsockopt+0x590/0x590 [ 573.602495][T11423] ? aa_sock_msg_perm+0x94/0x150 [ 573.607472][T11423] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 573.612788][T11423] ? security_socket_sendmsg+0x80/0xa0 [ 573.618284][T11423] ? netlink_getsockopt+0x590/0x590 [ 573.623693][T11423] ____sys_sendmsg+0x5ba/0x960 [ 573.628521][T11423] ? __asan_memset+0x22/0x40 [ 573.633153][T11423] ? __sys_sendmsg_sock+0x30/0x30 [ 573.638314][T11423] ? __import_iovec+0x5f2/0x850 [ 573.643209][T11423] ? import_iovec+0x73/0xa0 [ 573.647747][T11423] ___sys_sendmsg+0x2a6/0x360 [ 573.652458][T11423] ? get_pid_task+0x20/0x1e0 [ 573.657175][T11423] ? __sys_sendmsg+0x2a0/0x2a0 [ 573.661995][T11423] ? __lock_acquire+0x7d40/0x7d40 [ 573.667183][T11423] __se_sys_sendmsg+0x1c2/0x2b0 [ 573.672157][T11423] ? __x64_sys_sendmsg+0x80/0x80 [ 573.677146][T11423] ? lockdep_hardirqs_on+0x98/0x150 [ 573.682392][T11423] do_syscall_64+0x55/0xa0 [ 573.686865][T11423] ? clear_bhb_loop+0x40/0x90 [ 573.691591][T11423] ? clear_bhb_loop+0x40/0x90 [ 573.696326][T11423] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 573.702273][T11423] RIP: 0033:0x7f5c3459c819 [ 573.706728][T11423] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 573.726371][T11423] RSP: 002b:00007f5c353b5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 573.734831][T11423] RAX: ffffffffffffffda RBX: 00007f5c34815fa0 RCX: 00007f5c3459c819 [ 573.742837][T11423] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 573.750841][T11423] RBP: 00007f5c353b5090 R08: 0000000000000000 R09: 0000000000000000 [ 573.758847][T11423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 573.766852][T11423] R13: 00007f5c34816038 R14: 00007f5c34815fa0 R15: 00007ffee3f56158 [ 573.774881][T11423] [ 574.745650][T11425] netlink: 'syz.3.1805': attribute type 4 has an invalid length. [ 574.777760][T11425] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1805'. [ 574.787564][T11425] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 575.491589][ T5782] Bluetooth: hci2: unexpected event 0x12 length: 15 > 8 [ 576.596332][T11448] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1811'. [ 576.900430][T11447] netlink: 'syz.0.1820': attribute type 10 has an invalid length. [ 577.114297][T11457] FAULT_INJECTION: forcing a failure. [ 577.114297][T11457] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 577.176707][T11457] CPU: 1 PID: 11457 Comm: syz.0.1814 Not tainted syzkaller #0 [ 577.184282][T11457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 577.194643][T11457] Call Trace: [ 577.197956][T11457] [ 577.200924][T11457] dump_stack_lvl+0x18c/0x250 [ 577.205671][T11457] ? show_regs_print_info+0x20/0x20 [ 577.210925][T11457] ? load_image+0x420/0x420 [ 577.215479][T11457] ? __might_fault+0xaa/0x120 [ 577.220208][T11457] ? __lock_acquire+0x7d40/0x7d40 [ 577.225273][T11457] should_fail_ex+0x39d/0x4d0 [ 577.229978][T11457] _copy_to_user+0x2f/0xa0 [ 577.234417][T11457] bpf_test_finish+0x19f/0x650 [ 577.239210][T11457] ? convert___skb_to_skb+0x590/0x590 [ 577.244600][T11457] ? convert_skb_to___skb+0x420/0x420 [ 577.249998][T11457] ? bpf_test_init+0x119/0x140 [ 577.254779][T11457] bpf_prog_test_run_xdp+0x8a9/0x10e0 [ 577.260178][T11457] ? dev_put+0x80/0x80 [ 577.264276][T11457] ? dev_put+0x80/0x80 [ 577.268362][T11457] bpf_prog_test_run+0x321/0x390 [ 577.273325][T11457] __sys_bpf+0x49d/0x890 [ 577.277589][T11457] ? bpf_link_show_fdinfo+0x390/0x390 [ 577.282987][T11457] ? lock_chain_count+0x20/0x20 [ 577.287864][T11457] __x64_sys_bpf+0x7c/0x90 [ 577.292294][T11457] do_syscall_64+0x55/0xa0 [ 577.296724][T11457] ? clear_bhb_loop+0x40/0x90 [ 577.301417][T11457] ? clear_bhb_loop+0x40/0x90 [ 577.306109][T11457] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 577.312023][T11457] RIP: 0033:0x7f5b4cb9c819 [ 577.316453][T11457] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 577.336073][T11457] RSP: 002b:00007f5b4db08028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 577.344505][T11457] RAX: ffffffffffffffda RBX: 00007f5b4ce15fa0 RCX: 00007f5b4cb9c819 [ 577.352493][T11457] RDX: 000000000000001b RSI: 0000200000000000 RDI: 000000000000000a [ 577.360478][T11457] RBP: 00007f5b4db08090 R08: 0000000000000000 R09: 0000000000000000 [ 577.368461][T11457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 577.376442][T11457] R13: 00007f5b4ce16038 R14: 00007f5b4ce15fa0 R15: 00007ffe8d6b3a38 [ 577.384442][T11457] [ 583.789996][T11490] netlink: 'syz.3.1824': attribute type 16 has an invalid length. [ 584.014764][T11490] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1824'. [ 584.078234][T11492] netlink: 'syz.2.1825': attribute type 10 has an invalid length. [ 586.815800][T11513] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 586.824918][T11513] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 588.265251][T11519] netlink: 'syz.0.1833': attribute type 4 has an invalid length. [ 588.308997][T11519] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1833'. [ 588.353456][T11519] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 589.078913][T11537] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1838'. [ 589.749224][T11537] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.1838'. [ 589.826906][T11537] netlink: 6332 bytes leftover after parsing attributes in process `syz.2.1838'. [ 591.918529][T11569] netlink: 'syz.1.1845': attribute type 4 has an invalid length. [ 591.926540][T11569] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1845'. [ 592.018254][T11569] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 593.802170][T11567] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 593.818175][T11567] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 595.778824][T11594] netlink: 'syz.1.1853': attribute type 10 has an invalid length. [ 597.354439][T11582] netlink: 'syz.3.1849': attribute type 4 has an invalid length. [ 597.536401][T11582] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1849'. [ 597.836206][T11582] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 598.688362][T11613] netlink: 'syz.1.1861': attribute type 4 has an invalid length. [ 598.745452][T11613] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1861'. [ 599.105135][T11613] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 601.783641][T11635] netlink: 'syz.1.1866': attribute type 10 has an invalid length. [ 603.188363][T11660] FAULT_INJECTION: forcing a failure. [ 603.188363][T11660] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 603.261685][T11651] netlink: 'syz.0.1873': attribute type 4 has an invalid length. [ 603.304663][T11660] CPU: 1 PID: 11660 Comm: syz.3.1875 Not tainted syzkaller #0 [ 603.312206][T11660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 603.322395][T11660] Call Trace: [ 603.325793][T11660] [ 603.328751][T11660] dump_stack_lvl+0x18c/0x250 [ 603.333485][T11660] ? show_regs_print_info+0x20/0x20 [ 603.338722][T11660] ? load_image+0x420/0x420 [ 603.343272][T11660] ? __lock_acquire+0x7d40/0x7d40 [ 603.348331][T11660] ? snprintf+0xe9/0x140 [ 603.352615][T11660] should_fail_ex+0x39d/0x4d0 [ 603.357337][T11660] _copy_to_user+0x2f/0xa0 [ 603.361794][T11660] simple_read_from_buffer+0xe7/0x150 [ 603.367212][T11660] proc_fail_nth_read+0x1e8/0x260 [ 603.372472][T11660] ? proc_fault_inject_write+0x360/0x360 [ 603.378249][T11660] ? fsnotify_perm+0x271/0x5e0 [ 603.383059][T11660] ? proc_fault_inject_write+0x360/0x360 [ 603.388911][T11660] vfs_read+0x28b/0x970 [ 603.393125][T11660] ? kernel_read+0x1e0/0x1e0 [ 603.397768][T11660] ? __fget_files+0x28/0x4b0 [ 603.402401][T11660] ? __fget_files+0x28/0x4b0 [ 603.407045][T11660] ? __fget_files+0x43d/0x4b0 [ 603.411782][T11660] ? __fdget_pos+0x2a3/0x330 [ 603.416476][T11660] ? ksys_read+0x75/0x260 [ 603.420826][T11660] ksys_read+0x150/0x260 [ 603.425205][T11660] ? vfs_write+0x990/0x990 [ 603.429651][T11660] ? lockdep_hardirqs_on+0x98/0x150 [ 603.434874][T11660] do_syscall_64+0x55/0xa0 [ 603.439390][T11660] ? clear_bhb_loop+0x40/0x90 [ 603.444088][T11660] ? clear_bhb_loop+0x40/0x90 [ 603.448791][T11660] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 603.454703][T11660] RIP: 0033:0x7f957a75d04e [ 603.459138][T11660] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 603.478763][T11660] RSP: 002b:00007f957b6abfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 603.487194][T11660] RAX: ffffffffffffffda RBX: 00007f957b6ac6c0 RCX: 00007f957a75d04e [ 603.495181][T11660] RDX: 000000000000000f RSI: 00007f957b6ac0a0 RDI: 0000000000000008 [ 603.503343][T11660] RBP: 00007f957b6ac090 R08: 0000000000000000 R09: 0000000000000000 [ 603.511329][T11660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 603.519307][T11660] R13: 00007f957aa16038 R14: 00007f957aa15fa0 R15: 00007fffd95722b8 [ 603.527394][T11660] [ 603.594524][T11651] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1873'. [ 603.649916][T11651] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 604.159485][T11667] netlink: 'syz.1.1878': attribute type 10 has an invalid length. [ 604.290704][T11664] netlink: 'syz.2.1877': attribute type 4 has an invalid length. [ 604.367901][T11664] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1877'. [ 604.377033][T11664] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 606.553355][T11698] netlink: 'syz.1.1888': attribute type 10 has an invalid length. [ 607.138594][ T5782] Bluetooth: hci3: unexpected event 0x12 length: 15 > 8 [ 608.619691][T11732] netlink: 'syz.1.1898': attribute type 8 has an invalid length. [ 608.701652][T11732] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.1898'. [ 609.093292][T11737] netlink: 'syz.3.1900': attribute type 10 has an invalid length. [ 610.291458][ T5782] Bluetooth: hci2: unexpected event 0x12 length: 15 > 8 [ 612.818290][T11763] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 612.832101][T11763] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 613.284972][T11756] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 613.292416][T11756] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 613.927344][T11778] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1914'. [ 614.105325][ T5782] Bluetooth: hci1: unexpected event 0x07 length: 15 < 255 [ 614.174185][T11785] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1916'. [ 615.314821][T11795] Q±6ã`Ò˜: renamed from lo (while UP) [ 615.402276][T11797] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 615.408856][T11797] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 615.744147][ T5782] Bluetooth: hci3: unexpected event 0x12 length: 15 > 8 [ 615.879850][T11812] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 615.893404][T11812] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 616.275268][T11809] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 616.281810][T11809] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 616.672562][ T5782] Bluetooth: hci1: unexpected event 0x12 length: 15 > 8 [ 617.620686][T11832] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1932'. [ 618.457723][T11839] Q±6ã`Ò˜: renamed from lo (while UP) [ 619.346086][T11856] netlink: 'syz.2.1935': attribute type 4 has an invalid length. [ 619.379340][T11856] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1935'. [ 619.453602][T11856] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 619.524966][T11859] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 619.531524][T11859] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 621.615199][T11886] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1947'. [ 621.669991][T11882] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1946'. [ 623.583711][T11907] FAULT_INJECTION: forcing a failure. [ 623.583711][T11907] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 623.597043][T11907] CPU: 0 PID: 11907 Comm: syz.1.1953 Not tainted syzkaller #0 [ 623.604543][T11907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 623.614613][T11907] Call Trace: [ 623.617914][T11907] [ 623.620860][T11907] dump_stack_lvl+0x18c/0x250 [ 623.625573][T11907] ? show_regs_print_info+0x20/0x20 [ 623.630797][T11907] ? load_image+0x420/0x420 [ 623.635325][T11907] ? __lock_acquire+0x7d40/0x7d40 [ 623.640373][T11907] ? snprintf+0xe9/0x140 [ 623.644636][T11907] should_fail_ex+0x39d/0x4d0 [ 623.649344][T11907] _copy_to_user+0x2f/0xa0 [ 623.653829][T11907] simple_read_from_buffer+0xe7/0x150 [ 623.659225][T11907] proc_fail_nth_read+0x1e8/0x260 [ 623.664269][T11907] ? proc_fault_inject_write+0x360/0x360 [ 623.669942][T11907] ? fsnotify_perm+0x271/0x5e0 [ 623.674752][T11907] ? proc_fault_inject_write+0x360/0x360 [ 623.680422][T11907] vfs_read+0x28b/0x970 [ 623.684610][T11907] ? kernel_read+0x1e0/0x1e0 [ 623.689244][T11907] ? __fget_files+0x28/0x4b0 [ 623.693857][T11907] ? __fget_files+0x28/0x4b0 [ 623.698467][T11907] ? __fget_files+0x43d/0x4b0 [ 623.703176][T11907] ? __fdget_pos+0x2a3/0x330 [ 623.707779][T11907] ? ksys_read+0x75/0x260 [ 623.712126][T11907] ksys_read+0x150/0x260 [ 623.716397][T11907] ? vfs_write+0x990/0x990 [ 623.720835][T11907] ? lockdep_hardirqs_on+0x98/0x150 [ 623.726148][T11907] do_syscall_64+0x55/0xa0 [ 623.730580][T11907] ? clear_bhb_loop+0x40/0x90 [ 623.735306][T11907] ? clear_bhb_loop+0x40/0x90 [ 623.740032][T11907] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 623.745939][T11907] RIP: 0033:0x7fddf195d04e [ 623.750374][T11907] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 623.770013][T11907] RSP: 002b:00007fddf28a9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 623.778445][T11907] RAX: ffffffffffffffda RBX: 00007fddf28aa6c0 RCX: 00007fddf195d04e [ 623.786458][T11907] RDX: 000000000000000f RSI: 00007fddf28aa0a0 RDI: 0000000000000006 [ 623.794461][T11907] RBP: 00007fddf28aa090 R08: 0000000000000000 R09: 0000000000000000 [ 623.802553][T11907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 623.810537][T11907] R13: 00007fddf1c16038 R14: 00007fddf1c15fa0 R15: 00007ffd81b39378 [ 623.818625][T11907] [ 624.243013][T11918] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1958'. [ 624.776496][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.794099][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.220328][T11924] netlink: 'syz.2.1956': attribute type 4 has an invalid length. [ 625.316265][T11924] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1956'. [ 625.462891][T11924] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 628.023932][T11962] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1969'. [ 632.052056][T11998] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1980'. [ 632.157821][T11991] netlink: 'syz.3.1977': attribute type 4 has an invalid length. [ 632.302059][T11991] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1977'. [ 632.410876][T11991] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 632.562137][T11997] netlink: 'syz.0.1980': attribute type 6 has an invalid length. [ 633.995245][T12009] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1982'. [ 637.608489][ T5782] Bluetooth: hci1: Malformed Event: 0x13 [ 637.828410][T12031] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1991'. [ 638.174517][T12034] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1992'. [ 640.312035][T12052] netlink: 'syz.1.1994': attribute type 4 has an invalid length. [ 640.527758][T12052] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1994'. [ 640.757711][T12052] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 641.494111][ T5782] Bluetooth: hci1: Malformed Event: 0x13 [ 641.713000][T12067] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2002'. [ 642.906006][T12079] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2005'. [ 643.744642][ T2958] tipc: Subscription rejected, illegal request [ 644.109497][T12093] FAULT_INJECTION: forcing a failure. [ 644.109497][T12093] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 644.154948][T12093] CPU: 0 PID: 12093 Comm: syz.3.2010 Not tainted syzkaller #0 [ 644.162613][T12093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 644.172715][T12093] Call Trace: [ 644.176015][T12093] [ 644.178988][T12093] dump_stack_lvl+0x18c/0x250 [ 644.183722][T12093] ? show_regs_print_info+0x20/0x20 [ 644.188951][T12093] ? load_image+0x420/0x420 [ 644.193499][T12093] ? __lock_acquire+0x7d40/0x7d40 [ 644.198548][T12093] ? snprintf+0xe9/0x140 [ 644.202909][T12093] should_fail_ex+0x39d/0x4d0 [ 644.207628][T12093] _copy_to_user+0x2f/0xa0 [ 644.212079][T12093] simple_read_from_buffer+0xe7/0x150 [ 644.217480][T12093] proc_fail_nth_read+0x1e8/0x260 [ 644.222527][T12093] ? proc_fault_inject_write+0x360/0x360 [ 644.228186][T12093] ? fsnotify_perm+0x271/0x5e0 [ 644.232972][T12093] ? proc_fault_inject_write+0x360/0x360 [ 644.238624][T12093] vfs_read+0x28b/0x970 [ 644.242806][T12093] ? kernel_read+0x1e0/0x1e0 [ 644.247416][T12093] ? __fget_files+0x28/0x4b0 [ 644.252033][T12093] ? __fget_files+0x28/0x4b0 [ 644.256676][T12093] ? __fget_files+0x43d/0x4b0 [ 644.261387][T12093] ? __fdget_pos+0x2a3/0x330 [ 644.265998][T12093] ? ksys_read+0x75/0x260 [ 644.270355][T12093] ksys_read+0x150/0x260 [ 644.274621][T12093] ? vfs_write+0x990/0x990 [ 644.279062][T12093] ? lockdep_hardirqs_on+0x98/0x150 [ 644.284278][T12093] do_syscall_64+0x55/0xa0 [ 644.288716][T12093] ? clear_bhb_loop+0x40/0x90 [ 644.293405][T12093] ? clear_bhb_loop+0x40/0x90 [ 644.298103][T12093] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 644.304011][T12093] RIP: 0033:0x7f957a75d04e [ 644.308592][T12093] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 644.328303][T12093] RSP: 002b:00007f957b6abfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 644.336904][T12093] RAX: ffffffffffffffda RBX: 00007f957b6ac6c0 RCX: 00007f957a75d04e [ 644.344890][T12093] RDX: 000000000000000f RSI: 00007f957b6ac0a0 RDI: 0000000000000005 [ 644.352961][T12093] RBP: 00007f957b6ac090 R08: 0000000000000000 R09: 0000000000000000 [ 644.360944][T12093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 644.368958][T12093] R13: 00007f957aa16038 R14: 00007f957aa15fa0 R15: 00007fffd95722b8 [ 644.376955][T12093] [ 644.523784][T12095] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2011'. [ 645.015842][ T5782] Bluetooth: hci2: Malformed Event: 0x13 [ 645.238007][T12113] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2018'. [ 645.546408][ T5782] Bluetooth: hci3: Malformed Event: 0x13 [ 646.457463][T12133] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2024'. [ 647.583385][ T5782] Bluetooth: hci3: Malformed Event: 0x13 [ 647.860075][T12157] netlink: 'syz.3.2034': attribute type 10 has an invalid length. [ 647.933678][T12157] team0: Port device macvlan0 added [ 647.971610][T12158] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2032'. [ 648.235565][T12169] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2037'. [ 649.286553][ T5782] Bluetooth: hci0: Malformed Event: 0x13 [ 650.092582][T12204] netlink: 'syz.3.2049': attribute type 29 has an invalid length. [ 650.118291][T12204] netlink: 'syz.3.2049': attribute type 29 has an invalid length. [ 650.161700][T12207] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2050'. [ 650.526103][T12219] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2054'. [ 650.671147][ T5782] Bluetooth: hci2: Malformed Event: 0x13 [ 651.050274][T12234] netlink: 'syz.1.2061': attribute type 10 has an invalid length. [ 651.072184][T12234] team0: Device ipvlan1 failed to register rx_handler [ 651.092007][T12235] netlink: 'syz.3.2060': attribute type 17 has an invalid length. [ 651.107924][T12235] netlink: 'syz.3.2060': attribute type 16 has an invalid length. [ 651.115838][T12235] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2060'. [ 651.330563][T12240] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2062'. [ 651.675005][ T2958] tipc: Subscription rejected, illegal request [ 652.882400][T12252] netlink: 'syz.2.2063': attribute type 4 has an invalid length. [ 652.906574][T12252] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2063'. [ 652.957908][T12252] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 653.109682][ T5782] Bluetooth: hci3: Malformed Event: 0x13 [ 653.605376][T12269] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2071'. [ 653.722521][T12273] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2073'. [ 654.607581][T12278] netlink: 'syz.2.2074': attribute type 28 has an invalid length. [ 655.382886][T12301] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2083'. [ 655.390987][ T5782] Bluetooth: hci2: Malformed Event: 0x13 [ 655.474071][T12304] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2084'. [ 656.416911][ T5782] Bluetooth: hci3: Malformed Event: 0x13 [ 656.561178][T12332] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2095'. [ 656.587375][T12334] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2096'. [ 657.166832][T12351] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2101'. [ 657.763654][T12361] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2106'. [ 657.878138][T12362] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 657.885219][T12362] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 658.161595][ T48] tipc: Subscription rejected, illegal request [ 659.133637][T12380] netlink: 'syz.3.2111': attribute type 11 has an invalid length. [ 659.153829][T12380] netlink: 'syz.3.2111': attribute type 10 has an invalid length. [ 659.167233][T12380] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 659.175269][T12380] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 659.183636][T12380] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 659.312062][T12385] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2113'. [ 659.573336][T12390] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2116'. [ 659.612171][T12394] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2117'. [ 661.463354][T12403] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 661.474711][T12403] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 662.019112][T12417] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2128'. [ 662.062341][T12419] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2127'. [ 662.265806][T12425] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2130'. [ 662.463208][T12429] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2140'. [ 662.485032][T12432] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2132'. [ 662.935606][T12440] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 662.942622][T12440] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 663.941077][T12455] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2141'. [ 664.055432][T12459] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2139'. [ 664.377235][T12457] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 664.385404][T12457] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 664.933092][T12469] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2145'. [ 665.386421][T12484] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2152'. [ 667.234860][T12499] FAULT_INJECTION: forcing a failure. [ 667.234860][T12499] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 667.248268][T12499] CPU: 1 PID: 12499 Comm: syz.3.2156 Not tainted syzkaller #0 [ 667.255776][T12499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 667.265868][T12499] Call Trace: [ 667.269188][T12499] [ 667.272148][T12499] dump_stack_lvl+0x18c/0x250 [ 667.276871][T12499] ? show_regs_print_info+0x20/0x20 [ 667.282202][T12499] ? load_image+0x420/0x420 [ 667.286754][T12499] ? __might_fault+0xaa/0x120 [ 667.291465][T12499] ? __lock_acquire+0x7d40/0x7d40 [ 667.296545][T12499] should_fail_ex+0x39d/0x4d0 [ 667.301273][T12499] _copy_from_iter+0x1d9/0x12e0 [ 667.306340][T12499] ? slab_post_alloc_hook+0x8a/0x4b0 [ 667.311757][T12499] ? __virt_addr_valid+0x18c/0x540 [ 667.316910][T12499] ? __lock_acquire+0x7d40/0x7d40 [ 667.322132][T12499] ? rcu_is_watching+0x15/0xb0 [ 667.326944][T12499] ? copyout_mc+0x70/0x70 [ 667.331316][T12499] ? __virt_addr_valid+0x18c/0x540 [ 667.336468][T12499] ? __virt_addr_valid+0x18c/0x540 [ 667.341631][T12499] ? __virt_addr_valid+0x469/0x540 [ 667.346789][T12499] ? __check_object_size+0x506/0xa20 [ 667.352121][T12499] netlink_sendmsg+0x76b/0xbf0 [ 667.356965][T12499] ? netlink_getsockopt+0x590/0x590 [ 667.362217][T12499] ? aa_sock_msg_perm+0x94/0x150 [ 667.367387][T12499] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 667.372719][T12499] ? security_socket_sendmsg+0x80/0xa0 [ 667.378304][T12499] ? netlink_getsockopt+0x590/0x590 [ 667.383554][T12499] ____sys_sendmsg+0x5ba/0x960 [ 667.388372][T12499] ? __asan_memset+0x22/0x40 [ 667.393013][T12499] ? __sys_sendmsg_sock+0x30/0x30 [ 667.398081][T12499] ? __import_iovec+0x5f2/0x850 [ 667.402988][T12499] ? import_iovec+0x73/0xa0 [ 667.407623][T12499] ___sys_sendmsg+0x2a6/0x360 [ 667.412344][T12499] ? __sys_sendmsg+0x2a0/0x2a0 [ 667.417164][T12499] ? trace_call_bpf+0xc3/0x6c0 [ 667.422082][T12499] __se_sys_sendmsg+0x1c2/0x2b0 [ 667.426978][T12499] ? __x64_sys_sendmsg+0x80/0x80 [ 667.431943][T12499] ? lockdep_hardirqs_on+0x98/0x150 [ 667.437161][T12499] do_syscall_64+0x55/0xa0 [ 667.441591][T12499] ? clear_bhb_loop+0x40/0x90 [ 667.446283][T12499] ? clear_bhb_loop+0x40/0x90 [ 667.450987][T12499] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 667.456986][T12499] RIP: 0033:0x7f957a79c819 [ 667.461418][T12499] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 667.481131][T12499] RSP: 002b:00007f957b68b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 667.489564][T12499] RAX: ffffffffffffffda RBX: 00007f957aa16090 RCX: 00007f957a79c819 [ 667.497569][T12499] RDX: 0000000000008004 RSI: 0000200000000680 RDI: 0000000000000009 [ 667.505552][T12499] RBP: 00007f957b68b090 R08: 0000000000000000 R09: 0000000000000000 [ 667.513534][T12499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 667.521539][T12499] R13: 00007f957aa16128 R14: 00007f957aa16090 R15: 00007fffd95722b8 [ 667.529590][T12499] [ 667.883914][T12506] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2158'. [ 668.266185][T12514] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2162'. [ 669.485243][ T5782] Bluetooth: hci0: Malformed Event: 0x13 [ 669.689458][T12552] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2170'. [ 670.088661][T12532] netlink: 'syz.0.2165': attribute type 4 has an invalid length. [ 670.111892][T12532] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2165'. [ 670.139395][T12532] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 671.352295][T12563] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2173'. [ 673.136158][ T5782] Bluetooth: hci2: Malformed Event: 0x13 [ 673.234244][T12578] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 673.241128][T12578] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 673.299501][T12576] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 673.308415][T12576] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 673.946630][T12591] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2180'. [ 674.763214][T12539] tipc: Subscription rejected, illegal request [ 675.300128][T12611] netlink: 'syz.1.2187': attribute type 4 has an invalid length. [ 675.478323][T12611] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2187'. [ 675.511016][T12611] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 676.082821][ T5782] Bluetooth: hci0: Malformed Event: 0x13 [ 676.802877][T12632] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2194'. [ 678.277900][ T5782] Bluetooth: hci3: Malformed Event: 0x13 [ 680.002625][T12661] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2206'. [ 680.761820][T12541] tipc: Subscription rejected, illegal request [ 681.943634][T12542] tipc: Subscription rejected, illegal request [ 681.960436][T12677] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2218'. [ 682.280235][T12682] netlink: 'syz.3.2212': attribute type 10 has an invalid length. [ 682.398314][T12680] netlink: 'syz.2.2210': attribute type 4 has an invalid length. [ 682.438172][T12680] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2210'. [ 682.488070][T12680] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 682.745354][T12686] netlink: 'syz.3.2213': attribute type 10 has an invalid length. [ 684.559998][T12695] netlink: 'syz.1.2215': attribute type 4 has an invalid length. [ 684.588479][T12695] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2215'. [ 684.667741][T12695] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 686.092401][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.118462][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.453799][T12713] netlink: 'syz.0.2222': attribute type 10 has an invalid length. [ 688.243792][ T1144] tipc: Subscription rejected, illegal request [ 688.271386][T12726] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2225'. [ 689.581178][T12742] netlink: 'syz.1.2232': attribute type 10 has an invalid length. [ 689.615101][T12743] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2239'. [ 689.911322][T12751] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 689.917874][T12751] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 690.159651][T12542] tipc: Subscription rejected, illegal request [ 691.148909][T12761] netlink: 'syz.3.2234': attribute type 4 has an invalid length. [ 691.156721][T12761] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2234'. [ 691.178205][T12761] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 691.724656][T12774] netlink: 'syz.1.2237': attribute type 4 has an invalid length. [ 691.776837][T12774] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2237'. [ 691.833008][T12774] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 693.854917][T12795] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2247'. [ 693.974709][T12798] netlink: 'syz.0.2249': attribute type 10 has an invalid length. [ 694.158288][T12800] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 694.164765][T12800] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 695.052622][T12816] netlink: 'syz.1.2256': attribute type 21 has an invalid length. [ 696.502529][T12824] netlink: 'syz.2.2259': attribute type 10 has an invalid length. [ 696.524045][T12818] netlink: 'syz.0.2257': attribute type 4 has an invalid length. [ 696.534886][T12818] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2257'. [ 696.544570][T12818] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 696.998608][T12843] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2262'. [ 697.125855][T12840] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 697.132748][T12840] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 697.673549][T12855] netlink: 'syz.0.2269': attribute type 10 has an invalid length. [ 697.725801][T12857] FAULT_INJECTION: forcing a failure. [ 697.725801][T12857] name failslab, interval 1, probability 0, space 0, times 0 [ 697.738956][T12857] CPU: 0 PID: 12857 Comm: syz.0.2270 Not tainted syzkaller #0 [ 697.746485][T12857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 697.756562][T12857] Call Trace: [ 697.759853][T12857] [ 697.762797][T12857] dump_stack_lvl+0x18c/0x250 [ 697.767566][T12857] ? show_regs_print_info+0x20/0x20 [ 697.772807][T12857] ? load_image+0x420/0x420 [ 697.777366][T12857] should_fail_ex+0x39d/0x4d0 [ 697.782074][T12857] should_failslab+0x9/0x20 [ 697.786586][T12857] slab_pre_alloc_hook+0x59/0x310 [ 697.791624][T12857] kmem_cache_alloc+0x5a/0x2d0 [ 697.796394][T12857] ? __nf_conntrack_alloc+0x99/0x380 [ 697.801702][T12857] __nf_conntrack_alloc+0x99/0x380 [ 697.806848][T12857] init_conntrack+0x177/0xf10 [ 697.811558][T12857] ? early_drop+0x7f0/0x7f0 [ 697.816087][T12857] ? nf_conntrack_find_get+0x650/0x650 [ 697.821562][T12857] ? __siphash_unaligned+0x22e/0x3a0 [ 697.826871][T12857] nf_conntrack_in+0xc06/0x15c0 [ 697.831763][T12857] ? nf_ct_pernet+0x270/0x270 [ 697.836456][T12857] ? ip6t_do_table+0x1d9/0x1510 [ 697.841326][T12857] ? ip6t_alloc_initial_table+0x640/0x640 [ 697.847108][T12857] ? ipv6_defrag+0x2d6/0x3a0 [ 697.851751][T12857] ? ipv6_conntrack_in+0x20/0x20 [ 697.856725][T12857] nf_hook_slow+0xbd/0x200 [ 697.861185][T12857] __ip6_local_out+0x784/0x8a0 [ 697.865980][T12857] ? __ip6_local_out+0x60c/0x8a0 [ 697.870950][T12857] ? ip6_dst_hoplimit+0x350/0x350 [ 697.875997][T12857] ? __ip6_local_out+0x8a0/0x8a0 [ 697.880952][T12857] ? rcu_force_quiescent_state+0x230/0x230 [ 697.886783][T12857] ? udp6_set_csum+0x98d/0xef0 [ 697.891570][T12857] ip6_local_out+0x2a/0x130 [ 697.896102][T12857] udp_tunnel6_xmit_skb+0x53e/0x970 [ 697.901418][T12857] geneve_xmit+0x2425/0x3540 [ 697.906073][T12857] ? geneve_xmit+0x15e/0x3540 [ 697.910819][T12857] ? geneve_stop+0x1b0/0x1b0 [ 697.915448][T12857] ? validate_xmit_xfrm+0xbc/0x12c0 [ 697.920679][T12857] ? xfrm_init_replay+0x2a0/0x2a0 [ 697.925746][T12857] dev_hard_start_xmit+0x246/0x740 [ 697.930899][T12857] __dev_queue_xmit+0x19a3/0x3660 [ 697.935955][T12857] ? __dev_queue_xmit+0x265/0x3660 [ 697.941087][T12857] ? lockdep_hardirqs_on+0x98/0x150 [ 697.946325][T12857] ? read_seqbegin+0x1c8/0x270 [ 697.951106][T12857] ? lockdep_hardirqs_on+0x98/0x150 [ 697.956324][T12857] ? neigh_event_send+0x110/0x110 [ 697.961366][T12857] ? netdev_core_pick_tx+0x340/0x340 [ 697.966666][T12857] ? __asan_memcpy+0x40/0x70 [ 697.971294][T12857] ? eth_header+0x11b/0x200 [ 697.975830][T12857] ? llc_sysctl_exit+0x70/0x70 [ 697.980651][T12857] ? neigh_resolve_output+0x618/0x730 [ 697.986093][T12857] ? ip_finish_output2+0x457/0x11e0 [ 697.991399][T12857] ip_finish_output2+0xd3a/0x11e0 [ 697.996485][T12857] ? ip_finish_output2+0x457/0x11e0 [ 698.001808][T12857] ? nf_hook+0xa2/0x390 [ 698.005981][T12857] ? __ip_local_out+0x5f0/0x5f0 [ 698.010936][T12857] ? ip_fragment+0x210/0x210 [ 698.015659][T12857] ? ip_mc_finish_output+0x250/0x250 [ 698.021069][T12857] ? ip_skb_dst_mtu+0x58a/0x9c0 [ 698.025954][T12857] ? ip_finish_output+0x3ef/0x4c0 [ 698.030994][T12857] ip_output+0x2a1/0x3b0 [ 698.035255][T12857] ? ip_output+0x60/0x3b0 [ 698.039627][T12857] ip_send_skb+0x12f/0x1d0 [ 698.044092][T12857] udp_send_skb+0xa37/0x13a0 [ 698.048749][T12857] udp_sendmsg+0x743/0x23b0 [ 698.053311][T12857] ? mark_lock+0x94/0x320 [ 698.057682][T12857] ? udp_sendmsg+0x23b0/0x23b0 [ 698.062479][T12857] ? udp_cmsg_send+0x350/0x350 [ 698.067270][T12857] ? __lock_acquire+0x1273/0x7d40 [ 698.072423][T12857] ? verify_lock_unused+0x140/0x140 [ 698.077669][T12857] ? verify_lock_unused+0x140/0x140 [ 698.082909][T12857] ? aa_label_sk_perm+0x463/0x5c0 [ 698.087971][T12857] ? tomoyo_check_path_number_acl+0x280/0x280 [ 698.094078][T12857] udpv6_sendmsg+0x93d/0x2390 [ 698.098788][T12857] ? udpv6_sendmsg+0x2390/0x2390 [ 698.103832][T12857] ? udp_v6_early_demux+0xf80/0xf80 [ 698.109065][T12857] ? __lock_acquire+0x1273/0x7d40 [ 698.114128][T12857] ? inet_send_prepare+0x5c/0x260 [ 698.119224][T12857] ? inet6_sendmsg+0x5f/0xd0 [ 698.123836][T12857] ? inet6_compat_ioctl+0x3c0/0x3c0 [ 698.129137][T12857] ____sys_sendmsg+0x5ba/0x960 [ 698.133923][T12857] ? __asan_memset+0x22/0x40 [ 698.138543][T12857] ? __sys_sendmsg_sock+0x30/0x30 [ 698.143617][T12857] ? __import_iovec+0x3fa/0x850 [ 698.148491][T12857] ? import_iovec+0x73/0xa0 [ 698.153015][T12857] ___sys_sendmsg+0x2a6/0x360 [ 698.157706][T12857] ? get_pid_task+0x20/0x1e0 [ 698.162321][T12857] ? __sys_sendmsg+0x2a0/0x2a0 [ 698.167119][T12857] ? __lock_acquire+0x7d40/0x7d40 [ 698.172183][T12857] __se_sys_sendmsg+0x1c2/0x2b0 [ 698.177446][T12857] ? __x64_sys_sendmsg+0x80/0x80 [ 698.182508][T12857] ? lockdep_hardirqs_on+0x98/0x150 [ 698.187736][T12857] do_syscall_64+0x55/0xa0 [ 698.192167][T12857] ? clear_bhb_loop+0x40/0x90 [ 698.196869][T12857] ? clear_bhb_loop+0x40/0x90 [ 698.201578][T12857] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 698.207490][T12857] RIP: 0033:0x7f5b4cb9c819 [ 698.212010][T12857] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 698.231809][T12857] RSP: 002b:00007f5b4db08028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 698.240259][T12857] RAX: ffffffffffffffda RBX: 00007f5b4ce15fa0 RCX: 00007f5b4cb9c819 [ 698.248247][T12857] RDX: 0000000000000000 RSI: 0000200000000880 RDI: 0000000000000003 [ 698.256229][T12857] RBP: 00007f5b4db08090 R08: 0000000000000000 R09: 0000000000000000 [ 698.264321][T12857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 698.272476][T12857] R13: 00007f5b4ce16038 R14: 00007f5b4ce15fa0 R15: 00007ffe8d6b3a38 [ 698.280474][T12857] [ 699.771153][T12873] netlink: 'syz.3.2272': attribute type 4 has an invalid length. [ 699.830226][T12873] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2272'. [ 699.943155][T12873] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 700.165450][T12880] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2279'. [ 700.234504][T12884] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2280'. [ 701.193476][T12893] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2283'. [ 701.309304][T12893] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2283'. [ 701.335928][T12895] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2283'. [ 701.380238][T12889] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 701.387045][T12889] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 702.200642][T12908] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2289'. [ 702.763201][T12918] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2291'. [ 702.909548][T12921] netlink: 'syz.2.2294': attribute type 21 has an invalid length. [ 702.965337][T12921] netlink: 'syz.2.2294': attribute type 1 has an invalid length. [ 703.592383][T12919] netlink: 'syz.0.2293': attribute type 4 has an invalid length. [ 703.763062][T12919] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2293'. [ 703.872391][T12919] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 704.044330][T12927] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2295'. [ 705.259784][T12941] __nla_validate_parse: 2 callbacks suppressed [ 705.259807][T12941] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2299'. [ 706.322895][T12954] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 706.329454][T12954] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 706.344930][T12955] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2304'. [ 708.142516][T12973] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2311'. [ 708.191224][T12977] netlink: 'syz.1.2309': attribute type 4 has an invalid length. [ 708.205044][T12977] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2309'. [ 708.216441][T12977] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 708.875098][T12988] netlink: 'syz.3.2316': attribute type 8 has an invalid length. [ 708.978366][T12988] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2316'. [ 709.036642][T12992] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2317'. [ 709.160947][T12992] debugfs: Directory 'ô!ô' with parent 'ieee80211' already present! [ 709.389365][T12989] netlink: 'syz.0.2315': attribute type 4 has an invalid length. [ 709.397189][T12989] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2315'. [ 709.438011][T12989] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 709.768537][T13009] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2320'. [ 710.558556][T13016] netlink: 'syz.2.2327': attribute type 4 has an invalid length. [ 710.566462][T13016] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2327'. [ 710.869141][T13016] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 711.748344][T13018] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 711.755310][T13018] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 712.598431][T13039] netlink: 'syz.3.2328': attribute type 2 has an invalid length. [ 712.630992][T13039] netlink: 17255 bytes leftover after parsing attributes in process `syz.3.2328'. [ 712.887253][T13043] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2330'. [ 713.158874][T13053] netlink: 'syz.0.2332': attribute type 21 has an invalid length. [ 713.166949][T13053] netlink: 'syz.0.2332': attribute type 1 has an invalid length. [ 713.244226][T13056] : renamed from team_slave_1 (while UP) [ 713.429547][T13055] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 713.436736][T13055] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 713.940846][T13072] netlink: 'syz.0.2341': attribute type 3 has an invalid length. [ 713.973610][T13072] netlink: 175884 bytes leftover after parsing attributes in process `syz.0.2341'. [ 714.043700][T13074] netlink: 'syz.3.2342': attribute type 2 has an invalid length. [ 714.051730][T13074] netlink: 'syz.3.2342': attribute type 1 has an invalid length. [ 714.061637][T13074] netlink: 198800 bytes leftover after parsing attributes in process `syz.3.2342'. [ 714.700722][T13078] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 714.707710][T13078] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 715.022019][ T5775] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 715.033045][ T5775] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 715.043647][ T5775] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 715.053009][ T5775] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 715.064838][ T5775] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 715.074082][ T5775] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 715.345923][T13090] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2346'. [ 715.797179][T13079] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 715.804035][T13079] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 715.835888][T12543] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 715.936240][T12543] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.090988][T12543] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.209104][T12543] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.374312][T13083] chnl_net:caif_netlink_parms(): no params data found [ 716.509362][T13114] netlink: 'syz.2.2355': attribute type 21 has an invalid length. [ 716.818330][T13083] bridge0: port 1(bridge_slave_0) entered blocking state [ 716.826279][T13083] bridge0: port 1(bridge_slave_0) entered disabled state [ 716.834309][T13083] bridge_slave_0: entered allmulticast mode [ 716.841954][T13083] bridge_slave_0: entered promiscuous mode [ 716.905060][T13083] bridge0: port 2(bridge_slave_1) entered blocking state [ 716.915648][T13083] bridge0: port 2(bridge_slave_1) entered disabled state [ 716.923863][T13083] bridge_slave_1: entered allmulticast mode [ 716.931091][T13083] bridge_slave_1: entered promiscuous mode [ 717.014942][T13083] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 717.061016][T13083] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 717.127964][ T5775] Bluetooth: hci2: command tx timeout [ 717.229558][T13083] team0: Port device team_slave_0 added [ 717.247242][T13083] team0: Port device team_slave_1 added [ 717.408633][T13083] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 717.415751][T13083] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 717.443526][T13083] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 717.499445][T13083] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 717.506562][T13083] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 717.537996][T13083] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 717.781650][T13083] hsr_slave_0: entered promiscuous mode [ 717.818694][T13083] hsr_slave_1: entered promiscuous mode [ 717.864424][T13083] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 717.887760][T13083] Cannot create hsr debugfs directory [ 717.997989][T13135] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 718.005457][T13135] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 718.396158][T13151] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2360'. [ 718.619097][T13159] FAULT_INJECTION: forcing a failure. [ 718.619097][T13159] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 718.650388][T13159] CPU: 0 PID: 13159 Comm: syz.0.2364 Not tainted syzkaller #0 [ 718.658052][T13159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 718.668360][T13159] Call Trace: [ 718.671699][T13159] [ 718.674682][T13159] dump_stack_lvl+0x18c/0x250 [ 718.679452][T13159] ? show_regs_print_info+0x20/0x20 [ 718.684744][T13159] ? load_image+0x420/0x420 [ 718.689504][T13159] ? __lock_acquire+0x7d40/0x7d40 [ 718.694572][T13159] ? snprintf+0xe9/0x140 [ 718.698838][T13159] should_fail_ex+0x39d/0x4d0 [ 718.703539][T13159] _copy_to_user+0x2f/0xa0 [ 718.708072][T13159] simple_read_from_buffer+0xe7/0x150 [ 718.713530][T13159] proc_fail_nth_read+0x1e8/0x260 [ 718.718624][T13159] ? proc_fault_inject_write+0x360/0x360 [ 718.724459][T13159] ? fsnotify_perm+0x271/0x5e0 [ 718.729243][T13159] ? proc_fault_inject_write+0x360/0x360 [ 718.734916][T13159] vfs_read+0x28b/0x970 [ 718.739093][T13159] ? kernel_read+0x1e0/0x1e0 [ 718.743700][T13159] ? __fget_files+0x28/0x4b0 [ 718.748479][T13159] ? __fget_files+0x28/0x4b0 [ 718.753100][T13159] ? __fget_files+0x43d/0x4b0 [ 718.758453][T13159] ? __fdget_pos+0x2a3/0x330 [ 718.763107][T13159] ? ksys_read+0x75/0x260 [ 718.767458][T13159] ksys_read+0x150/0x260 [ 718.771721][T13159] ? vfs_write+0x990/0x990 [ 718.776152][T13159] ? lockdep_hardirqs_on+0x98/0x150 [ 718.781365][T13159] do_syscall_64+0x55/0xa0 [ 718.785786][T13159] ? clear_bhb_loop+0x40/0x90 [ 718.790474][T13159] ? clear_bhb_loop+0x40/0x90 [ 718.795166][T13159] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 718.801068][T13159] RIP: 0033:0x7f5b4cb5d04e [ 718.805503][T13159] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 718.825136][T13159] RSP: 002b:00007f5b4db07fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 718.833564][T13159] RAX: ffffffffffffffda RBX: 00007f5b4db086c0 RCX: 00007f5b4cb5d04e [ 718.841640][T13159] RDX: 000000000000000f RSI: 00007f5b4db080a0 RDI: 0000000000000005 [ 718.849622][T13159] RBP: 00007f5b4db08090 R08: 0000000000000000 R09: 0000000000000000 [ 718.857613][T13159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 718.865707][T13159] R13: 00007f5b4ce16038 R14: 00007f5b4ce15fa0 R15: 00007ffe8d6b3a38 [ 718.873718][T13159] [ 719.210538][ T5775] Bluetooth: hci2: command tx timeout [ 720.042631][ T5775] Bluetooth: hci1: unexpected event 0x08 length: 15 > 4 [ 720.582361][T13196] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2370'. [ 720.987938][T12543] hsr_slave_0: left promiscuous mode [ 721.051939][T12543] hsr_slave_1: left promiscuous mode [ 721.165801][T12543] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 721.248417][T12543] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 721.290729][ T5775] Bluetooth: hci2: command tx timeout [ 721.301462][T12543] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 721.323319][T12543] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 721.957206][T12543] veth1_macvtap: left promiscuous mode [ 722.016871][T12543] veth0_macvtap: left promiscuous mode [ 722.069710][T12543] veth1_vlan: left allmulticast mode [ 722.075404][T12543] veth1_vlan: left promiscuous mode [ 722.092033][T12543] veth0_vlan: left promiscuous mode [ 722.816583][T12543] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 722.831206][T12543] geneve0 (unregistering): left allmulticast mode [ 723.052816][T12543] macvlan0 (unregistering): left promiscuous mode [ 723.065101][T12543] macvlan0 (unregistering): left allmulticast mode [ 723.076701][T12543] team0 (unregistering): Port device macvlan0 removed [ 723.371127][ T5775] Bluetooth: hci2: command tx timeout [ 723.416456][T12543] team_slave_1 (unregistering): left promiscuous mode [ 723.425079][T12543] team_slave_1 (unregistering): left allmulticast mode [ 723.433770][T12543] team0 (unregistering): Port device team_slave_1 removed [ 723.477434][T12543] team_slave_0 (unregistering): left promiscuous mode [ 723.484297][T12543] team_slave_0 (unregistering): left allmulticast mode [ 723.493731][T12543] team0 (unregistering): Port device team_slave_0 removed [ 723.538250][T12543] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 723.547213][T12543] bond_slave_1 (unregistering): left promiscuous mode [ 723.556257][T12543] bond_slave_1 (unregistering): left allmulticast mode [ 723.599133][T12543] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 723.610100][T12543] bond_slave_0 (unregistering): left promiscuous mode [ 723.616899][T12543] bond_slave_0 (unregistering): left allmulticast mode [ 723.939938][T12543] bond0 (unregistering): Released all slaves [ 723.978149][T13197] netlink: 'syz.0.2368': attribute type 4 has an invalid length. [ 723.995355][T13197] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2368'. [ 724.030301][T13197] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 724.051669][T13206] netlink: 'syz.2.2372': attribute type 10 has an invalid length. [ 724.068357][T13212] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2373'. [ 724.401260][ T1144] tipc: Subscription rejected, illegal request [ 724.408603][T13083] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 724.661720][T13216] team0: Port device bond0 removed [ 724.692280][T13216] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 724.726297][T13216] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 724.783780][T13216] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 724.801137][T13216] bond0 (unregistering): Released all slaves [ 724.822728][T13083] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 724.846298][T13083] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 724.877159][T13083] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 725.246042][ T5775] Bluetooth: hci1: Malformed Event: 0x13 [ 725.283021][T13231] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2379'. [ 725.360750][T13083] 8021q: adding VLAN 0 to HW filter on device bond0 [ 725.483768][T13083] 8021q: adding VLAN 0 to HW filter on device team0 [ 725.540720][T12543] bridge0: port 1(bridge_slave_0) entered blocking state [ 725.548172][T12543] bridge0: port 1(bridge_slave_0) entered forwarding state [ 725.589265][T12541] bridge0: port 2(bridge_slave_1) entered blocking state [ 725.596607][T12541] bridge0: port 2(bridge_slave_1) entered forwarding state [ 725.864024][T13249] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2381'. [ 726.055719][T13083] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 726.211787][T13083] veth0_vlan: entered promiscuous mode [ 726.263833][T13083] veth1_vlan: entered promiscuous mode [ 726.298761][T13255] netlink: 'syz.0.2382': attribute type 10 has an invalid length. [ 726.362028][T13083] veth0_macvtap: entered promiscuous mode [ 726.380098][T13083] veth1_macvtap: entered promiscuous mode [ 726.423790][T13083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 726.453335][T13260] netlink: 'syz.0.2383': attribute type 21 has an invalid length. [ 726.457637][T13083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 726.491720][T13083] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 726.549311][T13083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 726.686919][T13083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 726.700148][T13083] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 726.814499][T13083] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.939394][T13083] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.948995][T13083] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.958261][T13083] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 727.285576][T12542] tipc: Subscription rejected, illegal request [ 728.118779][T13267] netlink: 'syz.2.2384': attribute type 4 has an invalid length. [ 728.141607][T13267] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2384'. [ 728.220298][T13267] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 728.424719][T12542] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 728.480959][T12542] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 728.616858][T12536] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 728.642902][T12536] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 729.366741][ T5775] Bluetooth: hci3: Malformed Event: 0x13 [ 729.677290][T13298] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2389'. [ 730.068861][T13310] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2392'. [ 731.459525][ T5782] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 731.469170][ T5782] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 731.479295][ T5782] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 731.488706][ T5782] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 731.496499][ T5782] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 731.505068][ T5782] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 731.554388][T13333] netlink: 'syz.3.2396': attribute type 21 has an invalid length. [ 731.645266][T12541] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 732.817491][T12541] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.003785][T12541] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.122710][T13350] netlink: 'syz.0.2398': attribute type 4 has an invalid length. [ 733.261187][T13350] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2398'. [ 733.324606][T13350] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 733.554338][T13356] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2400'. [ 733.577218][T13326] chnl_net:caif_netlink_parms(): no params data found [ 733.605198][ T5782] Bluetooth: hci2: Malformed Event: 0x13 [ 733.608513][ T5775] Bluetooth: hci0: command tx timeout [ 733.671722][T12541] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.889888][T13326] bridge0: port 1(bridge_slave_0) entered blocking state [ 733.924480][T13326] bridge0: port 1(bridge_slave_0) entered disabled state [ 733.966699][T13326] bridge_slave_0: entered allmulticast mode [ 734.005982][T12543] tipc: Subscription rejected, illegal request [ 734.059168][T13326] bridge_slave_0: entered promiscuous mode [ 734.093756][T13326] bridge0: port 2(bridge_slave_1) entered blocking state [ 734.147980][T13326] bridge0: port 2(bridge_slave_1) entered disabled state [ 734.179592][T13326] bridge_slave_1: entered allmulticast mode [ 734.199120][T13326] bridge_slave_1: entered promiscuous mode [ 734.330605][T13326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 734.350230][T13366] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2402'. [ 734.372134][T13326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 734.613958][T13326] team0: Port device team_slave_0 added [ 734.686745][T13326] team0: Port device team_slave_1 added [ 734.960272][T13326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 735.015921][T13326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 735.215374][T13326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 735.309152][T13326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 735.396551][T13326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 735.451448][T13326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 735.688994][ T5775] Bluetooth: hci0: command tx timeout [ 737.767765][ T5775] Bluetooth: hci0: command tx timeout [ 737.785661][T13374] netlink: 'syz.3.2404': attribute type 4 has an invalid length. [ 737.802095][T13374] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2404'. [ 737.836359][T13374] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 738.974682][T13392] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2409'. [ 739.861822][ T5775] Bluetooth: hci0: command tx timeout [ 740.195306][ T5782] Bluetooth: hci1: Malformed Event: 0x13 [ 740.246869][T13326] hsr_slave_0: entered promiscuous mode [ 740.291683][T13326] hsr_slave_1: entered promiscuous mode [ 740.322241][T13326] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 740.345443][T13326] Cannot create hsr debugfs directory [ 740.441931][T12543] tipc: Subscription rejected, illegal request [ 741.091549][T13414] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2412'. [ 741.105685][T13416] netlink: 'syz.0.2413': attribute type 10 has an invalid length. [ 741.396924][T13429] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2417'. [ 741.752664][T13433] FAULT_INJECTION: forcing a failure. [ 741.752664][T13433] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 741.827976][T13433] CPU: 0 PID: 13433 Comm: syz.3.2418 Not tainted syzkaller #0 [ 741.835512][T13433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 741.845604][T13433] Call Trace: [ 741.848915][T13433] [ 741.851874][T13433] dump_stack_lvl+0x18c/0x250 [ 741.856608][T13433] ? show_regs_print_info+0x20/0x20 [ 741.861933][T13433] ? load_image+0x420/0x420 [ 741.866479][T13433] ? __might_fault+0xaa/0x120 [ 741.871219][T13433] ? __lock_acquire+0x7d40/0x7d40 [ 741.876307][T13433] should_fail_ex+0x39d/0x4d0 [ 741.881055][T13433] _copy_from_user+0x2f/0xe0 [ 741.885801][T13433] ____sys_sendmsg+0x2fd/0x960 [ 741.890615][T13433] ? __lock_acquire+0x7d40/0x7d40 [ 741.895698][T13433] ? __sys_sendmsg_sock+0x30/0x30 [ 741.900787][T13433] ? __import_iovec+0x3fa/0x850 [ 741.905743][T13433] ? import_iovec+0x73/0xa0 [ 741.910296][T13433] ___sys_sendmsg+0x2a6/0x360 [ 741.915028][T13433] ? __sys_sendmsg+0x2a0/0x2a0 [ 741.919854][T13433] ? trace_call_bpf+0xc3/0x6c0 [ 741.924697][T13433] __se_sys_sendmsg+0x1c2/0x2b0 [ 741.929586][T13433] ? __x64_sys_sendmsg+0x80/0x80 [ 741.934573][T13433] ? lockdep_hardirqs_on+0x98/0x150 [ 741.939829][T13433] do_syscall_64+0x55/0xa0 [ 741.944326][T13433] ? clear_bhb_loop+0x40/0x90 [ 741.949054][T13433] ? clear_bhb_loop+0x40/0x90 [ 741.953778][T13433] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 741.959726][T13433] RIP: 0033:0x7f957a79c819 [ 741.964269][T13433] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 741.983923][T13433] RSP: 002b:00007f957b6ac028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 741.992391][T13433] RAX: ffffffffffffffda RBX: 00007f957aa15fa0 RCX: 00007f957a79c819 [ 742.000398][T13433] RDX: 000000000000fffe RSI: 0000200000000b40 RDI: 0000000000000003 [ 742.008584][T13433] RBP: 00007f957b6ac090 R08: 0000000000000000 R09: 0000000000000000 [ 742.016597][T13433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 742.024691][T13433] R13: 00007f957aa16038 R14: 00007f957aa15fa0 R15: 00007fffd95722b8 [ 742.032729][T13433] [ 742.444650][T13438] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 742.453423][T13438] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 743.081687][ T5782] Bluetooth: hci3: Malformed Event: 0x13 [ 743.619328][ T1144] tipc: Subscription rejected, illegal request [ 744.206688][T13462] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2425'. [ 744.620331][T13468] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2426'. [ 744.848322][T13472] FAULT_INJECTION: forcing a failure. [ 744.848322][T13472] name failslab, interval 1, probability 0, space 0, times 0 [ 744.862258][T13472] CPU: 0 PID: 13472 Comm: syz.3.2427 Not tainted syzkaller #0 [ 744.869776][T13472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 744.880026][T13472] Call Trace: [ 744.883353][T13472] [ 744.886413][T13472] dump_stack_lvl+0x18c/0x250 [ 744.891164][T13472] ? show_regs_print_info+0x20/0x20 [ 744.896431][T13472] ? load_image+0x420/0x420 [ 744.901024][T13472] ? __might_sleep+0xe0/0xe0 [ 744.905760][T13472] ? __lock_acquire+0x7d40/0x7d40 [ 744.910819][T13472] should_fail_ex+0x39d/0x4d0 [ 744.915531][T13472] should_failslab+0x9/0x20 [ 744.920063][T13472] slab_pre_alloc_hook+0x59/0x310 [ 744.925124][T13472] ? tomoyo_encode+0x28b/0x540 [ 744.929937][T13472] ? tomoyo_encode+0x28b/0x540 [ 744.934747][T13472] __kmem_cache_alloc_node+0x53/0x250 [ 744.940245][T13472] ? tomoyo_encode+0x28b/0x540 [ 744.945028][T13472] __kmalloc+0xa4/0x230 [ 744.949341][T13472] tomoyo_encode+0x28b/0x540 [ 744.953969][T13472] tomoyo_realpath_from_path+0x592/0x5d0 [ 744.959637][T13472] tomoyo_path_number_perm+0x248/0x620 [ 744.965149][T13472] ? tomoyo_path_number_perm+0x217/0x620 [ 744.970824][T13472] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 744.976326][T13472] ? ksys_write+0x1c4/0x260 [ 744.980906][T13472] ? __fget_files+0x28/0x4b0 [ 744.985519][T13472] ? __fget_files+0x28/0x4b0 [ 744.990143][T13472] security_file_ioctl+0x70/0xa0 [ 744.995101][T13472] __se_sys_ioctl+0x48/0x170 [ 744.999710][T13472] do_syscall_64+0x55/0xa0 [ 745.004144][T13472] ? clear_bhb_loop+0x40/0x90 [ 745.008839][T13472] ? clear_bhb_loop+0x40/0x90 [ 745.013551][T13472] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 745.019463][T13472] RIP: 0033:0x7f957a79c819 [ 745.023941][T13472] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 745.043592][T13472] RSP: 002b:00007f957b6ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 745.052047][T13472] RAX: ffffffffffffffda RBX: 00007f957aa15fa0 RCX: 00007f957a79c819 [ 745.060047][T13472] RDX: 0000200000000080 RSI: 00000000000089f2 RDI: 0000000000000005 [ 745.068181][T13472] RBP: 00007f957b6ac090 R08: 0000000000000000 R09: 0000000000000000 [ 745.076168][T13472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 745.084152][T13472] R13: 00007f957aa16038 R14: 00007f957aa15fa0 R15: 00007fffd95722b8 [ 745.092156][T13472] [ 745.141629][T13472] ERROR: Out of memory at tomoyo_realpath_from_path. [ 745.142015][T13326] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 745.210340][T13326] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 745.271064][T13326] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 745.308679][T13326] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 745.727149][T12541] hsr_slave_0: left promiscuous mode [ 745.765951][T12541] hsr_slave_1: left promiscuous mode [ 745.800092][T12541] bridge_slave_1: left allmulticast mode [ 745.811791][T12541] bridge_slave_1: left promiscuous mode [ 745.822556][T12541] bridge0: port 2(bridge_slave_1) entered disabled state [ 745.836053][T12541] bridge_slave_0: left allmulticast mode [ 745.842080][T12541] bridge_slave_0: left promiscuous mode [ 745.850790][T12541] bridge0: port 1(bridge_slave_0) entered disabled state [ 745.886811][T12541] veth0_macvtap: left promiscuous mode [ 745.896172][T12541] veth1_vlan: left promiscuous mode [ 745.902601][T12541] veth0_vlan: left promiscuous mode [ 746.847725][ T5782] Bluetooth: hci2: Malformed Event: 0x13 [ 747.306340][T12541] team0 (unregistering): Port device team_slave_1 removed [ 747.360587][T12541] team0 (unregistering): Port device C removed [ 747.537621][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.546460][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.992845][T13523] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2434'. [ 748.119695][T13326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 748.211834][T13326] 8021q: adding VLAN 0 to HW filter on device team0 [ 748.229390][T12542] bridge0: port 1(bridge_slave_0) entered blocking state [ 748.236593][T12542] bridge0: port 1(bridge_slave_0) entered forwarding state [ 748.305649][T12542] bridge0: port 2(bridge_slave_1) entered blocking state [ 748.313779][T12542] bridge0: port 2(bridge_slave_1) entered forwarding state [ 748.424933][T12543] tipc: Subscription rejected, illegal request [ 748.556296][T13529] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 748.563113][T13529] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 749.271632][T13544] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2437'. [ 749.693037][T13326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 749.845798][T13326] veth0_vlan: entered promiscuous mode [ 749.860808][T13326] veth1_vlan: entered promiscuous mode [ 749.936785][T13326] veth0_macvtap: entered promiscuous mode [ 750.052434][T13326] veth1_macvtap: entered promiscuous mode [ 750.160239][T13326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 750.255243][T13326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 750.299332][T13326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 750.377934][T13326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 750.469176][T13326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 750.645942][T13326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 750.692606][T13326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 750.747754][T13326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 750.761687][T13326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 750.775597][T13326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 750.824138][T13326] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 750.837145][T13326] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 750.855166][T13326] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 750.864902][T13326] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.165401][T12543] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 751.189810][T12543] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 751.342252][T12536] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 751.474206][T12536] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 751.966145][T13567] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2443'. [ 752.776950][T13572] netlink: 'syz.2.2390': attribute type 10 has an invalid length. [ 752.845697][T13572] geneve0: entered promiscuous mode [ 753.095839][T13572] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 753.417877][T13581] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2445'. [ 754.085837][T13583] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 754.093074][T13583] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 754.302204][ T5775] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 754.316116][ T5775] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 754.345209][ T5775] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 754.358627][ T5775] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 754.366842][ T5775] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 754.384488][ T5775] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 754.526325][T13599] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2452'. [ 754.571302][T12539] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.735915][T12539] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.821768][ T5782] Bluetooth: hci1: ISO packet for unknown connection handle 2622 [ 754.893088][T12539] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 755.077404][T12539] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 755.260687][T13604] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 755.267245][T13604] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 755.384044][T13608] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2455'. [ 755.505110][T13590] chnl_net:caif_netlink_parms(): no params data found [ 755.817462][T13590] bridge0: port 1(bridge_slave_0) entered blocking state [ 755.831008][T13590] bridge0: port 1(bridge_slave_0) entered disabled state [ 755.839796][T13590] bridge_slave_0: entered allmulticast mode [ 755.847353][T13590] bridge_slave_0: entered promiscuous mode [ 755.916984][T13590] bridge0: port 2(bridge_slave_1) entered blocking state [ 755.937365][T13590] bridge0: port 2(bridge_slave_1) entered disabled state [ 755.953342][T13590] bridge_slave_1: entered allmulticast mode [ 755.963148][T13590] bridge_slave_1: entered promiscuous mode [ 756.104663][ T5782] Bluetooth: hci0: ISO packet for unknown connection handle 2622 [ 756.113441][T13625] FAULT_INJECTION: forcing a failure. [ 756.113441][T13625] name failslab, interval 1, probability 0, space 0, times 0 [ 756.128444][T13625] CPU: 0 PID: 13625 Comm: syz.2.2457 Not tainted syzkaller #0 [ 756.128800][T13590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 756.136025][T13625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 756.156579][T13625] Call Trace: [ 756.159941][T13625] [ 756.162906][T13625] dump_stack_lvl+0x18c/0x250 [ 756.167636][T13625] ? show_regs_print_info+0x20/0x20 [ 756.172892][T13625] ? load_image+0x420/0x420 [ 756.177450][T13625] ? __might_sleep+0xe0/0xe0 [ 756.182101][T13625] ? __lock_acquire+0x7d40/0x7d40 [ 756.187207][T13625] should_fail_ex+0x39d/0x4d0 [ 756.191967][T13625] should_failslab+0x9/0x20 [ 756.196536][T13625] slab_pre_alloc_hook+0x59/0x310 [ 756.201616][T13625] ? apparmor_sk_alloc_security+0x77/0x100 [ 756.207470][T13625] __kmem_cache_alloc_node+0x53/0x250 [ 756.213014][T13625] ? apparmor_sk_alloc_security+0x77/0x100 [ 756.218887][T13625] kmalloc_trace+0x2a/0xe0 [ 756.223358][T13625] apparmor_sk_alloc_security+0x77/0x100 [ 756.229034][T13625] security_sk_alloc+0x6e/0xa0 [ 756.233857][T13625] sk_prot_alloc+0x101/0x210 [ 756.238521][T13625] ? sk_alloc+0x24/0x360 [ 756.242819][T13625] sk_alloc+0x3a/0x360 [ 756.246935][T13625] ? bpf_ctx_init+0x163/0x1a0 [ 756.251653][T13625] ? bpf_prog_test_run_skb+0x273/0x12b0 [ 756.257245][T13625] bpf_prog_test_run_skb+0x3a5/0x12b0 [ 756.262642][T13625] ? __fget_files+0x28/0x4b0 [ 756.267257][T13625] ? __fget_files+0x28/0x4b0 [ 756.271879][T13625] ? __fget_files+0x43d/0x4b0 [ 756.276796][T13625] ? cpu_online+0x60/0x60 [ 756.281152][T13625] bpf_prog_test_run+0x321/0x390 [ 756.286113][T13625] __sys_bpf+0x49d/0x890 [ 756.290382][T13625] ? bpf_link_show_fdinfo+0x390/0x390 [ 756.295782][T13625] ? lock_chain_count+0x20/0x20 [ 756.300845][T13625] __x64_sys_bpf+0x7c/0x90 [ 756.305279][T13625] do_syscall_64+0x55/0xa0 [ 756.309772][T13625] ? clear_bhb_loop+0x40/0x90 [ 756.314470][T13625] ? clear_bhb_loop+0x40/0x90 [ 756.319168][T13625] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 756.325074][T13625] RIP: 0033:0x7f399bd9c819 [ 756.329502][T13625] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 756.349127][T13625] RSP: 002b:00007f399cc9a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 756.357562][T13625] RAX: ffffffffffffffda RBX: 00007f399c015fa0 RCX: 00007f399bd9c819 [ 756.365642][T13625] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 756.373714][T13625] RBP: 00007f399cc9a090 R08: 0000000000000000 R09: 0000000000000000 [ 756.381696][T13625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 756.389678][T13625] R13: 00007f399c016038 R14: 00007f399c015fa0 R15: 00007fff30319508 [ 756.397675][T13625] [ 756.477085][T13590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 756.489632][ T5782] Bluetooth: hci3: command tx timeout [ 756.736837][T13639] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2460'. [ 756.750746][T13590] team0: Port device team_slave_0 added [ 756.872799][T13590] team0: Port device team_slave_1 added [ 756.998829][T13590] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 757.011636][T13590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 757.175505][T13590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 757.376810][T13590] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 757.411262][T13590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 757.648510][T13590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 758.140502][T13590] hsr_slave_0: entered promiscuous mode [ 758.169373][T13590] hsr_slave_1: entered promiscuous mode [ 758.181658][T13590] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 758.210582][T13590] Cannot create hsr debugfs directory [ 758.227000][T13657] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2465'. [ 758.568734][ T5782] Bluetooth: hci3: command tx timeout [ 758.684381][T13651] netlink: 'syz.2.2462': attribute type 4 has an invalid length. [ 758.754440][T13651] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2462'. [ 758.858241][T13651] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 759.500229][T13667] netlink: 'syz.1.2468': attribute type 10 has an invalid length. [ 759.534697][T13667] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2468'. [ 759.566063][T13667] batadv_slave_1: entered promiscuous mode [ 759.589209][T13667] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 759.667463][T13667] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 759.743851][T13670] netlink: 'syz.3.2469': attribute type 10 has an invalid length. [ 759.913263][T13680] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2470'. [ 760.023684][T12539] hsr_slave_0: left promiscuous mode [ 760.067883][T12539] hsr_slave_1: left promiscuous mode [ 760.082090][T12539] bridge_slave_1: left allmulticast mode [ 760.093300][T12539] bridge_slave_1: left promiscuous mode [ 760.099701][T12539] bridge0: port 2(bridge_slave_1) entered disabled state [ 760.114115][T12539] bridge_slave_0: left promiscuous mode [ 760.121359][T12539] bridge0: port 1(bridge_slave_0) entered disabled state [ 760.185985][T12539] veth1_macvtap: left promiscuous mode [ 760.198736][T12539] veth0_macvtap: left promiscuous mode [ 760.207261][T12539] veth1_vlan: left promiscuous mode [ 760.214754][T12539] veth0_vlan: left promiscuous mode [ 760.656699][ T5782] Bluetooth: hci3: command tx timeout [ 761.572814][T12539] team0 (unregistering): Port device 0 removed [ 761.618929][T12539] team0 (unregistering): Port device team_slave_0 removed [ 762.121147][T13689] netlink: 'syz.1.2479': attribute type 10 has an invalid length. [ 762.135561][T13689] geneve0: entered promiscuous mode [ 762.180285][T13689] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 762.199523][T13698] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2475'. [ 762.513363][ T5782] Bluetooth: hci2: unexpected event 0x12 length: 15 > 8 [ 762.727793][ T5782] Bluetooth: hci3: command tx timeout [ 762.862955][T13712] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2480'. [ 763.429424][T13721] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 763.435952][T13721] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 763.777939][T13724] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2484'. [ 764.039116][T13590] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 764.108018][T13590] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 764.433048][T13590] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 764.539213][T13590] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 764.922355][T13590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 765.064450][T13590] 8021q: adding VLAN 0 to HW filter on device team0 [ 765.126511][T12542] bridge0: port 1(bridge_slave_0) entered blocking state [ 765.133849][T12542] bridge0: port 1(bridge_slave_0) entered forwarding state [ 765.310862][T12536] bridge0: port 2(bridge_slave_1) entered blocking state [ 765.318221][T12536] bridge0: port 2(bridge_slave_1) entered forwarding state [ 765.651551][T13738] netlink: 'syz.3.2486': attribute type 10 has an invalid length. [ 766.508979][T13755] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2490'. [ 767.238475][T13590] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 767.347771][T13772] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2492'. [ 767.505162][T13590] veth0_vlan: entered promiscuous mode [ 767.600778][T13590] veth1_vlan: entered promiscuous mode [ 767.655235][ T5782] Bluetooth: hci0: Malformed Event: 0x13 [ 767.750642][T13590] veth0_macvtap: entered promiscuous mode [ 767.765515][T13590] veth1_macvtap: entered promiscuous mode [ 767.841290][T13590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 767.862271][T13590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 767.890546][T13590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 767.929530][T13590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 767.969066][T13590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 767.997704][T13590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 768.015718][T13590] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 768.103336][T13590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 768.141418][T13590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 768.162300][T13779] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 768.169100][T13779] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 768.178670][T13590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 768.203954][T13590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 768.226940][T13590] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 768.253210][T13784] netlink: 'syz.2.2495': attribute type 10 has an invalid length. [ 768.395073][T13590] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 768.434207][T13590] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 768.457719][T13590] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 768.489609][T13590] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 768.581047][T13798] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2498'. [ 768.798037][T12539] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 768.816937][T12539] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 768.876352][T12539] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 768.916380][T12539] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 769.238072][T13807] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 769.248396][T13807] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 769.304290][T13816] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2503'. [ 771.784806][T13829] netlink: 'syz.1.2505': attribute type 10 has an invalid length. [ 773.324268][ T5782] Bluetooth: hci3: unexpected event 0x08 length: 15 > 4 [ 774.767993][T13851] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2508'. [ 776.920532][T13846] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 776.954582][T13846] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 777.493990][T13861] FAULT_INJECTION: forcing a failure. [ 777.493990][T13861] name failslab, interval 1, probability 0, space 0, times 0 [ 777.508707][T13861] CPU: 1 PID: 13861 Comm: syz.1.2511 Not tainted syzkaller #0 [ 777.516256][T13861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 777.526379][T13861] Call Trace: [ 777.529751][T13861] [ 777.532763][T13861] dump_stack_lvl+0x18c/0x250 [ 777.537531][T13861] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 777.544290][T13861] ? show_regs_print_info+0x20/0x20 [ 777.549569][T13861] ? load_image+0x420/0x420 [ 777.554281][T13861] should_fail_ex+0x39d/0x4d0 [ 777.559061][T13861] should_failslab+0x9/0x20 [ 777.563635][T13861] slab_pre_alloc_hook+0x59/0x310 [ 777.568768][T13861] kmem_cache_alloc+0x5a/0x2d0 [ 777.573595][T13861] ? dst_alloc+0x105/0x170 [ 777.578105][T13861] dst_alloc+0x105/0x170 [ 777.582437][T13861] ip_route_output_key_hash_rcu+0x14f6/0x2370 [ 777.588562][T13861] ? ip_route_output_key_hash_rcu+0x1311/0x2370 [ 777.594859][T13861] ? ip_route_output_key_hash+0x13d/0x330 [ 777.600744][T13861] ip_route_output_key_hash+0x1f3/0x330 [ 777.606337][T13861] ? ip_route_input_rcu+0x30f0/0x30f0 [ 777.611769][T13861] ? __lock_acquire+0x7d40/0x7d40 [ 777.616852][T13861] ip_route_output_flow+0x2a/0x150 [ 777.622104][T13861] ? security_sk_classify_flow+0x7b/0x90 [ 777.627867][T13861] udp_sendmsg+0x1603/0x23b0 [ 777.632530][T13861] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 777.637425][T13861] ? udp_cmsg_send+0x350/0x350 [ 777.642249][T13861] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 777.648274][T13861] ? lock_chain_count+0x20/0x20 [ 777.653286][T13861] ? inet_sendmsg+0x14b/0x2f0 [ 777.658055][T13861] ? __local_bh_enable_ip+0x13a/0x1c0 [ 777.663479][T13861] ? _local_bh_enable+0xa0/0xa0 [ 777.668462][T13861] ? do_raw_spin_unlock+0x121/0x230 [ 777.673789][T13861] ? inet_sendmsg+0x14b/0x2f0 [ 777.678602][T13861] ? inet_sendmsg+0x14b/0x2f0 [ 777.683328][T13861] ? inet_send_prepare+0x260/0x260 [ 777.688573][T13861] ____sys_sendmsg+0x5ba/0x960 [ 777.693471][T13861] ? __lock_acquire+0x7d40/0x7d40 [ 777.698542][T13861] ? __asan_memset+0x22/0x40 [ 777.703172][T13861] ? __sys_sendmsg_sock+0x30/0x30 [ 777.708229][T13861] ? __import_iovec+0x3fa/0x850 [ 777.713165][T13861] ? import_iovec+0x73/0xa0 [ 777.717765][T13861] ___sys_sendmsg+0x2a6/0x360 [ 777.722500][T13861] ? get_pid_task+0x20/0x1e0 [ 777.727154][T13861] ? __sys_sendmsg+0x2a0/0x2a0 [ 777.732052][T13861] ? __lock_acquire+0x7d40/0x7d40 [ 777.737373][T13861] __se_sys_sendmsg+0x1c2/0x2b0 [ 777.742305][T13861] ? __x64_sys_sendmsg+0x80/0x80 [ 777.747340][T13861] ? lockdep_hardirqs_on+0x98/0x150 [ 777.752597][T13861] do_syscall_64+0x55/0xa0 [ 777.757052][T13861] ? clear_bhb_loop+0x40/0x90 [ 777.761766][T13861] ? clear_bhb_loop+0x40/0x90 [ 777.766483][T13861] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 777.772418][T13861] RIP: 0033:0x7f5ce839c819 [ 777.776869][T13861] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 777.796508][T13861] RSP: 002b:00007f5ce9314028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 777.804964][T13861] RAX: ffffffffffffffda RBX: 00007f5ce8615fa0 RCX: 00007f5ce839c819 [ 777.813051][T13861] RDX: 000000000000fffe RSI: 0000200000000b40 RDI: 0000000000000003 [ 777.821050][T13861] RBP: 00007f5ce9314090 R08: 0000000000000000 R09: 0000000000000000 [ 777.829049][T13861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 777.837156][T13861] R13: 00007f5ce8616038 R14: 00007f5ce8615fa0 R15: 00007ffc6c973d78 [ 777.845207][T13861] [ 777.864584][T12538] tipc: Subscription rejected, illegal request [ 778.274320][T13866] IPv6: Can't replace route, no match found [ 778.839220][T13875] netlink: 'syz.1.2518': attribute type 10 has an invalid length. [ 779.732323][ T5775] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 779.748324][T13871] netlink: 'syz.0.2516': attribute type 4 has an invalid length. [ 779.756112][T13871] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2516'. [ 779.767839][ T5775] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 779.777445][ T5775] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 779.790486][ T5775] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 779.801238][ T5775] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 779.810345][ T5775] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 779.815314][T13883] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2521'. [ 780.071236][T13871] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 780.923748][T12543] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 781.145332][T12543] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 781.184746][T12541] tipc: Subscription rejected, illegal request [ 781.443770][T12543] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 781.591375][T12543] bond0: (slave netdevsim0): Releasing backup interface [ 781.622087][T12543] netdevsim netdevsim3 netdevsim0 (unregistering): left promiscuous mode [ 781.632818][T12543] netdevsim netdevsim3 netdevsim0 (unregistering): left allmulticast mode [ 781.646492][T12543] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 781.928395][ T5775] Bluetooth: hci1: command tx timeout [ 782.721139][T13907] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2527'. [ 783.349260][T13881] chnl_net:caif_netlink_parms(): no params data found [ 783.886635][T13900] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 783.896764][T13900] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 784.064023][ T5775] Bluetooth: hci1: command tx timeout [ 786.004204][T13881] bridge0: port 1(bridge_slave_0) entered blocking state [ 786.087912][ T5775] Bluetooth: hci1: command tx timeout [ 786.137801][T13881] bridge0: port 1(bridge_slave_0) entered disabled state [ 786.316218][T13881] bridge_slave_0: entered allmulticast mode [ 786.357822][T13881] bridge_slave_0: entered promiscuous mode [ 786.380895][T13881] bridge0: port 2(bridge_slave_1) entered blocking state [ 786.429385][T13881] bridge0: port 2(bridge_slave_1) entered disabled state [ 786.436695][T13881] bridge_slave_1: entered allmulticast mode [ 786.481695][T13881] bridge_slave_1: entered promiscuous mode [ 787.057175][ T5775] Bluetooth: hci2: Malformed Event: 0x13 [ 787.159741][T12539] tipc: Subscription rejected, illegal request [ 787.246203][T13881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 787.540633][T13881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 787.841765][T13881] team0: Port device team_slave_0 added [ 787.933468][T13881] team0: Port device team_slave_1 added [ 788.168182][ T5775] Bluetooth: hci1: command tx timeout [ 788.625720][T13881] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 788.660948][T13881] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 788.793669][T13881] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 788.820116][T13881] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 788.827376][T13881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 788.867421][T13881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 789.193592][T13972] mac80211_hwsim hwsim41 wlan1: entered promiscuous mode [ 789.213374][T13972] mac80211_hwsim hwsim41 wlan1: entered allmulticast mode [ 789.287317][T13881] hsr_slave_0: entered promiscuous mode [ 789.334180][T13881] hsr_slave_1: entered promiscuous mode [ 789.693999][ T1144] tipc: Subscription rejected, illegal request [ 790.151779][T13995] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2542'. [ 790.480703][ T5775] Bluetooth: hci0: Malformed Event: 0x13 [ 790.728813][T12543] hsr_slave_0: left promiscuous mode [ 790.755247][T12543] hsr_slave_1: left promiscuous mode [ 790.761972][T12543] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 790.770002][T12543] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 790.788637][T12543] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 790.806434][T12543] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 790.873917][T12543] veth1_macvtap: left promiscuous mode [ 790.888217][T12543] veth0_macvtap: left promiscuous mode [ 790.898795][T12543] veth1_vlan: left promiscuous mode [ 790.910466][T12543] veth0_vlan: left promiscuous mode [ 794.064508][T12538] tipc: Subscription rejected, illegal request [ 805.762633][ T5782] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 805.783670][ T5782] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 805.794471][ T5782] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 805.806600][ T5782] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 805.815110][ T5782] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 805.822949][ T5782] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 806.886717][ T5775] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 806.896175][ T5775] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 806.904872][ T5775] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 806.913654][ T5775] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 806.922391][ T5775] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 806.931547][ T5775] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 807.847895][ T5775] Bluetooth: hci4: command tx timeout [ 808.972645][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.973042][ T5782] Bluetooth: hci5: command tx timeout [ 808.979706][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.927870][ T5775] Bluetooth: hci4: command tx timeout [ 809.935644][ T5775] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 809.945194][ T5775] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 809.954994][ T5775] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 809.966213][ T5775] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 809.976439][ T5775] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 809.984256][ T5775] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 811.047774][ T5775] Bluetooth: hci5: command tx timeout [ 812.007864][ T5775] Bluetooth: hci4: command tx timeout [ 812.008009][ T5782] Bluetooth: hci6: command tx timeout [ 813.127777][ T5782] Bluetooth: hci5: command tx timeout [ 814.088441][ T5782] Bluetooth: hci4: command tx timeout [ 814.088453][ T5775] Bluetooth: hci6: command tx timeout [ 815.207882][ T5782] Bluetooth: hci5: command tx timeout [ 816.168023][ T5782] Bluetooth: hci6: command tx timeout [ 818.247797][ T5782] Bluetooth: hci6: command tx timeout [ 839.349683][ T5775] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 839.359260][ T5775] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 839.367936][ T5775] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 839.377358][ T5775] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 839.385235][ T5775] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 839.397168][ T5775] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 841.447754][ T5775] Bluetooth: hci7: command tx timeout [ 841.767731][ T5775] Bluetooth: hci2: command 0x0406 tx timeout [ 843.527790][ T5782] Bluetooth: hci7: command tx timeout [ 845.607705][ T5782] Bluetooth: hci7: command tx timeout [ 847.688620][ T5782] Bluetooth: hci7: command tx timeout [ 857.133962][ T5775] Bluetooth: hci0: command 0x0406 tx timeout [ 865.814261][ T5775] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 865.829199][ T5775] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 865.837311][ T5775] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 865.849912][ T5775] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 865.858979][ T5775] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 865.866564][ T5775] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 867.292685][ T5775] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 867.305105][ T5775] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 867.313559][ T5775] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 867.322802][ T5775] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 867.334620][ T5775] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 867.342487][ T5775] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 867.927769][ T5782] Bluetooth: hci8: command tx timeout [ 869.367796][ T5782] Bluetooth: hci9: command tx timeout [ 870.007896][ T5782] Bluetooth: hci8: command tx timeout [ 870.305734][ T5775] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 870.315369][ T5775] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 870.328811][ T5775] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 870.340350][ T5775] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 870.349915][ T5775] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 870.357417][ T5775] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 870.412073][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.419187][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.447898][ T5775] Bluetooth: hci9: command tx timeout [ 872.098101][ T5775] Bluetooth: hci8: command tx timeout [ 872.407947][ T5775] Bluetooth: hci10: command tx timeout [ 873.527816][ T5775] Bluetooth: hci9: command tx timeout [ 874.168386][ T5775] Bluetooth: hci8: command tx timeout [ 874.494672][ T5775] Bluetooth: hci10: command tx timeout [ 875.607737][ T5782] Bluetooth: hci9: command tx timeout [ 876.567728][ T5782] Bluetooth: hci10: command tx timeout [ 877.611169][ T5782] Bluetooth: hci3: command 0x0406 tx timeout [ 878.647746][ T5775] Bluetooth: hci10: command tx timeout [ 900.377732][ T5782] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 900.386182][ T5782] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 900.397223][ T5782] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 900.413973][ T5782] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 900.423397][ T5782] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 900.431779][ T5782] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 902.487852][ T5782] Bluetooth: hci11: command tx timeout [ 903.212207][ T5782] Bluetooth: hci1: command 0x0406 tx timeout [ 904.567829][ T5775] Bluetooth: hci11: command tx timeout [ 906.649135][ T5775] Bluetooth: hci11: command tx timeout [ 908.727866][ T5775] Bluetooth: hci11: command tx timeout [ 926.404065][ T5782] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 926.414700][ T5782] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 926.423044][ T5782] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 926.433373][ T5782] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 926.442831][ T5782] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 926.450643][ T5782] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 927.432631][T13084] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 927.444785][T13084] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 927.453208][T13084] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 927.464647][T13084] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 927.472823][T13084] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 927.481723][T13084] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 928.487796][T13084] Bluetooth: hci12: command tx timeout [ 928.817834][ T5775] Bluetooth: hci4: command 0x0406 tx timeout [ 929.527786][ T5775] Bluetooth: hci13: command tx timeout [ 930.453043][T13084] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 930.463886][T13084] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 930.472334][T13084] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 930.483985][T13084] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 930.493841][T13084] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 930.501461][T13084] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 930.568056][T13084] Bluetooth: hci12: command tx timeout [ 931.607753][T13084] Bluetooth: hci13: command tx timeout [ 931.851338][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.860003][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.568116][T14070] Bluetooth: hci14: command tx timeout [ 932.647708][T14070] Bluetooth: hci12: command tx timeout [ 933.687679][T14070] Bluetooth: hci13: command tx timeout [ 933.927680][T14070] Bluetooth: hci5: command 0x0406 tx timeout [ 933.928953][ T5782] Bluetooth: hci6: command 0x0406 tx timeout [ 934.647769][ T5775] Bluetooth: hci14: command tx timeout [ 934.727874][ T5775] Bluetooth: hci12: command tx timeout [ 935.767733][ T5775] Bluetooth: hci13: command tx timeout [ 936.729007][ T5775] Bluetooth: hci14: command tx timeout [ 938.809143][ T5775] Bluetooth: hci14: command tx timeout [ 954.247713][ T29] INFO: task dhcpcd:5434 blocked for more than 143 seconds. [ 954.255171][ T29] Not tainted syzkaller #0 [ 954.260447][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 954.274961][ T29] task:dhcpcd state:D stack:20968 pid:5434 ppid:5433 flags:0x00004002 [ 954.285762][ T29] Call Trace: [ 954.289288][ T29] [ 954.292331][ T29] __schedule+0x1553/0x45a0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 954.296894][ T29] ? __stack_depot_save+0x1f/0x630 [ 954.302295][ T29] ? kmalloc_reserve+0x116/0x240 [ 954.307392][ T29] ? asan.module_dtor+0x20/0x20 [ 954.327592][ T29] ? __mutex_lock+0x6a4/0xcc0 [ 954.332444][ T29] ? __mutex_trylock_common+0x8a/0x260 [ 954.347872][ T29] ? trace_raw_output_contention_end+0xd0/0xd0 [ 954.354100][ T29] schedule+0xbd/0x170 [ 954.407712][ T29] schedule_preempt_disabled+0x13/0x20 [ 954.413322][ T29] __mutex_lock+0x6a9/0xcc0 [ 954.437545][ T29] ? __mutex_lock+0x4f9/0xcc0 [ 954.442321][ T29] ? netlink_dump+0x78f/0xe50 [ 954.447054][ T29] ? mutex_lock_nested+0x20/0x20 [ 954.453310][ T29] ? __build_skb_around+0x255/0x3d0 [ 954.458776][ T29] ? __alloc_skb+0x1b2/0x2c0 [ 954.463417][ T29] netlink_dump+0x78f/0xe50 [ 954.468244][ T29] ? netlink_lookup+0x200/0x200 [ 954.473171][ T29] ? netlink_autobind+0x300/0x300 [ 954.478846][ T29] ? netlink_lookup+0x30/0x200 [ 954.483655][ T29] ? netlink_lookup+0x30/0x200 [ 954.494251][ T29] __netlink_dump_start+0x5f1/0x810 [ 954.500552][ T29] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 954.505929][ T29] rtnetlink_rcv_msg+0xe1d/0xfa0 [ 954.514384][ T29] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 954.520520][ T29] ? rtnl_getlink+0xd20/0xd20 [ 954.525265][ T29] ? rtnetlink_bind+0x80/0x80 [ 954.533544][ T29] ? mark_lock+0x94/0x320 [ 954.539700][ T29] ? verify_lock_unused+0x140/0x140 [ 954.544947][ T29] ? verify_lock_unused+0x140/0x140 [ 954.554434][ T29] ? rtnl_getlink+0xd20/0xd20 [ 954.560204][ T29] netlink_rcv_skb+0x241/0x4d0 [ 954.565040][ T29] ? rtnetlink_bind+0x80/0x80 [ 954.576199][ T29] ? netlink_ack+0x1180/0x1180 [ 954.581373][ T29] ? __lock_acquire+0x7d40/0x7d40 [ 954.586453][ T29] ? net_generic+0x1e/0x240 [ 954.596267][ T29] ? netlink_deliver_tap+0x2e/0x1b0 [ 954.602367][ T29] netlink_unicast+0x751/0x8d0 [ 954.607168][ T29] netlink_sendmsg+0x8d0/0xbf0 [ 954.616422][ T29] ? netlink_getsockopt+0x590/0x590 [ 954.621726][ T29] ? aa_sock_msg_perm+0x94/0x150 [ 954.626721][ T29] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 954.636257][ T29] ? security_socket_sendmsg+0x80/0xa0 [ 954.641931][ T29] __sys_sendto+0x4a9/0x6b0 [ 954.646465][ T29] ? __ia32_sys_getpeername+0x90/0x90 [ 954.656819][ T29] ? __might_fault+0xc6/0x120 [ 954.662657][ T29] ? __sys_getsockname+0x239/0x2d0 [ 954.672423][ T29] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 954.678560][ T29] ? lock_chain_count+0x20/0x20 [ 954.683483][ T29] __x64_sys_sendto+0xde/0xf0 [ 954.692470][ T29] do_syscall_64+0x55/0xa0 [ 954.697641][ T29] ? clear_bhb_loop+0x40/0x90 [ 954.702468][ T29] ? clear_bhb_loop+0x40/0x90 [ 954.707216][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 954.713547][ T29] RIP: 0033:0x7fb29e414407 [ 954.718045][ T29] RSP: 002b:00007ffdd8f367c0 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 954.726521][ T29] RAX: ffffffffffffffda RBX: 00007fb29e38a740 RCX: 00007fb29e414407 [ 954.734628][ T29] RDX: 0000000000000014 RSI: 00007ffdd8f36850 RDI: 0000000000000012 [ 954.742695][ T29] RBP: 00007ffdd8f36834 R08: 00007ffdd8f36834 R09: 000000000000000c [ 954.750799][ T29] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffdd8f57140 [ 954.758864][ T29] R13: 00007fb29e38a6c8 R14: 00007ffdd8f36930 R15: 00007ffdd8f46f10 [ 954.766887][ T29] [ 954.770135][ T29] INFO: task kworker/u4:14:12541 blocked for more than 143 seconds. [ 954.778310][ T29] Not tainted syzkaller #0 [ 954.783276][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 954.792571][ T29] task:kworker/u4:14 state:D stack:21736 pid:12541 ppid:2 flags:0x00004000 [ 954.804210][ T29] Workqueue: events_unbound linkwatch_event [ 954.810488][ T29] Call Trace: [ 954.813805][ T29] [ 954.816778][ T29] __schedule+0x1553/0x45a0 [ 954.822789][ T29] ? asan.module_dtor+0x20/0x20 [ 954.828089][ T29] ? __mutex_lock+0x6a4/0xcc0 [ 954.832820][ T29] ? __mutex_trylock_common+0x8a/0x260 [ 954.838746][ T29] ? kthread_data+0x4f/0xc0 [ 954.843293][ T29] ? wq_worker_sleeping+0x63/0x240 [ 954.848863][ T29] schedule+0xbd/0x170 [ 954.852975][ T29] schedule_preempt_disabled+0x13/0x20 [ 954.858872][ T29] __mutex_lock+0x6a9/0xcc0 [ 954.863507][ T29] ? __mutex_lock+0x4f9/0xcc0 [ 954.868789][ T29] ? linkwatch_event+0xe/0x60 [ 954.873643][ T29] ? mutex_lock_nested+0x20/0x20 [ 954.879125][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 954.884439][ T29] ? process_scheduled_works+0x96f/0x15d0 [ 954.899009][ T29] linkwatch_event+0xe/0x60 [ 954.903618][ T29] process_scheduled_works+0xa5d/0x15d0 [ 954.909801][ T29] ? worker_attach_to_pool+0x380/0x380 [ 954.915315][ T29] ? assign_work+0x3d2/0x5d0 [ 954.920430][ T29] worker_thread+0xa55/0xfc0 [ 954.925107][ T29] kthread+0x2fa/0x390 [ 954.929675][ T29] ? pr_cont_work+0x560/0x560 [ 954.934414][ T29] ? kthread_blkcg+0xd0/0xd0 [ 954.939607][ T29] ret_from_fork+0x48/0x80 [ 954.944085][ T29] ? kthread_blkcg+0xd0/0xd0 [ 954.949308][ T29] ret_from_fork_asm+0x11/0x20 [ 954.954154][ T29] [ 954.957273][ T29] INFO: task syz-executor:13881 blocked for more than 144 seconds. [ 954.965292][ T29] Not tainted syzkaller #0 [ 954.970498][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 954.979291][ T29] task:syz-executor state:D stack:21168 pid:13881 ppid:1 flags:0x00004006 [ 954.988603][ T29] Call Trace: [ 954.991927][ T29] [ 954.994887][ T29] __schedule+0x1553/0x45a0 [ 954.999568][ T29] ? asan.module_dtor+0x20/0x20 [ 955.005090][ T29] ? __mutex_lock+0x6a4/0xcc0 [ 955.010132][ T29] ? __mutex_trylock_common+0x8a/0x260 [ 955.015648][ T29] ? trace_raw_output_contention_end+0xd0/0xd0 [ 955.022024][ T29] schedule+0xbd/0x170 [ 955.026152][ T29] schedule_preempt_disabled+0x13/0x20 [ 955.031804][ T29] __mutex_lock+0x6a9/0xcc0 [ 955.036428][ T29] ? __mutex_lock+0x4f9/0xcc0 [ 955.041183][ T29] ? nsim_destroy+0x3f/0x180 [ 955.045831][ T29] ? mutex_lock_nested+0x20/0x20 [ 955.050874][ T29] ? _raw_spin_unlock+0x28/0x40 [ 955.055769][ T29] ? mntput_no_expire+0x2f8/0x870 [ 955.061377][ T29] ? __rwlock_init+0x150/0x150 [ 955.066251][ T29] nsim_destroy+0x3f/0x180 [ 955.071238][ T29] __nsim_dev_port_del+0x14d/0x1b0 [ 955.076417][ T29] nsim_dev_reload_destroy+0x283/0x480 [ 955.082159][ T29] nsim_drv_remove+0x58/0x170 [ 955.087039][ T29] ? nsim_bus_probe+0x20/0x20 [ 955.091872][ T29] device_release_driver_internal+0x468/0x7a0 [ 955.098178][ T29] bus_remove_device+0x342/0x400 [ 955.103903][ T29] device_del+0x522/0x910 [ 955.108374][ T29] ? kill_device+0x160/0x160 [ 955.113179][ T29] device_unregister+0x20/0xc0 [ 955.118308][ T29] del_device_store+0x2b1/0x370 [ 955.123194][ T29] ? del_port_store+0x170/0x170 [ 955.129003][ T29] ? sysfs_kf_write+0x187/0x2a0 [ 955.133902][ T29] ? sysfs_kf_read+0x310/0x310 [ 955.138960][ T29] kernfs_fop_write_iter+0x3b6/0x520 [ 955.144308][ T29] vfs_write+0x46c/0x990 [ 955.149042][ T29] ? file_end_write+0x250/0x250 [ 955.154003][ T29] ? __fdget_pos+0x2ba/0x330 [ 955.159147][ T29] ksys_write+0x150/0x260 [ 955.163563][ T29] ? __ia32_sys_read+0x90/0x90 [ 955.168797][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 955.174082][ T29] do_syscall_64+0x55/0xa0 [ 955.179132][ T29] ? clear_bhb_loop+0x40/0x90 [ 955.183947][ T29] ? clear_bhb_loop+0x40/0x90 [ 955.189109][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 955.195084][ T29] RIP: 0033:0x7f3f8635d04e [ 955.199940][ T29] RSP: 002b:00007ffc58ef9998 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 955.209645][ T29] RAX: ffffffffffffffda RBX: 000055558158d500 RCX: 00007f3f8635d04e [ 955.218017][ T29] RDX: 0000000000000001 RSI: 00007ffc58ef9a20 RDI: 0000000000000005 [ 955.226040][ T29] RBP: 00007f3f86433514 R08: 0000000000000000 R09: 0000000000000000 [ 955.234124][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 955.242644][ T29] R13: 00007ffc58ef9a20 R14: 00007f3f87144620 R15: 0000000000000003 [ 955.250775][ T29] [ 955.253960][ T29] INFO: task syz.2.2543:13997 blocked for more than 144 seconds. [ 955.261764][ T29] Not tainted syzkaller #0 [ 955.266816][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 955.275600][ T29] task:syz.2.2543 state:D stack:27016 pid:13997 ppid:13326 flags:0x00004004 [ 955.285038][ T29] Call Trace: [ 955.288659][ T29] [ 955.291648][ T29] __schedule+0x1553/0x45a0 [ 955.296199][ T29] ? trace_event_raw_event_lock+0x250/0x250 [ 955.302281][ T29] ? asan.module_dtor+0x20/0x20 [ 955.307360][ T29] ? __mutex_lock+0x6a4/0xcc0 [ 955.312836][ T29] ? __mutex_trylock_common+0x8a/0x260 [ 955.318585][ T29] ? trace_raw_output_contention_end+0xd0/0xd0 [ 955.324789][ T29] schedule+0xbd/0x170 [ 955.328969][ T29] schedule_preempt_disabled+0x13/0x20 [ 955.334486][ T29] __mutex_lock+0x6a9/0xcc0 [ 955.339131][ T29] ? __mutex_lock+0x4f9/0xcc0 [ 955.343840][ T29] ? tun_chr_close+0x41/0x1c0 [ 955.348988][ T29] ? mutex_lock_nested+0x20/0x20 [ 955.353981][ T29] ? __fput+0x61c/0x970 [ 955.358539][ T29] ? tun_chr_open+0x510/0x510 [ 955.363370][ T29] tun_chr_close+0x41/0x1c0 [ 955.368165][ T29] __fput+0x234/0x970 [ 955.372370][ T29] task_work_run+0x1d4/0x260 [ 955.376993][ T29] ? task_work_cancel+0x220/0x220 [ 955.382372][ T29] ? exit_to_user_mode_loop+0x3b/0x110 [ 955.388069][ T29] exit_to_user_mode_loop+0xe6/0x110 [ 955.393417][ T29] exit_to_user_mode_prepare+0xee/0x180 [ 955.399409][ T29] syscall_exit_to_user_mode+0x1a/0x50 [ 955.404934][ T29] do_syscall_64+0x61/0xa0 [ 955.409455][ T29] ? clear_bhb_loop+0x40/0x90 [ 955.414762][ T29] ? clear_bhb_loop+0x40/0x90 [ 955.419615][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 955.425563][ T29] RIP: 0033:0x7f399bd9c819 [ 955.430426][ T29] RSP: 002b:00007fff30319668 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 955.439239][ T29] RAX: 0000000000000000 RBX: 00007fff30319750 RCX: 00007f399bd9c819 [ 955.447258][ T29] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 955.455467][ T29] RBP: 00000000000c0e5a R08: 0000000000000001 R09: 0000000000000000 [ 955.463724][ T29] R10: 0000001b33420000 R11: 0000000000000246 R12: 00007fff30319790 [ 955.471817][ T29] R13: 00007f399c015fac R14: 00000000000c0fc5 R15: 00007f399c015fa0 [ 955.480073][ T29] [ 955.483154][ T29] INFO: task syz.0.2545:14005 blocked for more than 144 seconds. [ 955.491037][ T29] Not tainted syzkaller #0 [ 955.496147][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 955.504900][ T29] task:syz.0.2545 state:D stack:24936 pid:14005 ppid:13590 flags:0x00004004 [ 955.515070][ T29] Call Trace: [ 955.518440][ T29] [ 955.521411][ T29] __schedule+0x1553/0x45a0 [ 955.526158][ T29] ? mark_lock+0x94/0x320 [ 955.532605][ T29] ? asan.module_dtor+0x20/0x20 [ 955.541086][ T29] ? __mutex_lock+0x6a4/0xcc0 [ 955.545843][ T29] ? __mutex_trylock_common+0x8a/0x260 [ 955.552700][ T29] ? trace_raw_output_contention_end+0xd0/0xd0 [ 955.559101][ T29] schedule+0xbd/0x170 [ 955.563417][ T29] schedule_preempt_disabled+0x13/0x20 [ 955.569216][ T29] __mutex_lock+0x6a9/0xcc0 [ 955.573783][ T29] ? __mutex_lock+0x4f9/0xcc0 [ 955.578915][ T29] ? __tun_chr_ioctl+0x400/0x2000 [ 955.584003][ T29] ? mutex_lock_nested+0x20/0x20 [ 955.589441][ T29] ? rep_movs_alternative+0x33/0x90 [ 955.594694][ T29] __tun_chr_ioctl+0x400/0x2000 [ 955.600097][ T29] ? tun_flow_create+0x310/0x310 [ 955.605154][ T29] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 955.611588][ T29] ? bpf_lsm_file_ioctl+0x9/0x10 [ 955.617363][ T29] ? security_file_ioctl+0x80/0xa0 [ 955.622594][ T29] ? tun_chr_poll+0x630/0x630 [ 955.627370][ T29] __se_sys_ioctl+0xfd/0x170 [ 955.632107][ T29] do_syscall_64+0x55/0xa0 [ 955.636626][ T29] ? clear_bhb_loop+0x40/0x90 [ 955.642046][ T29] ? clear_bhb_loop+0x40/0x90 [ 955.646783][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 955.653300][ T29] RIP: 0033:0x7f638ad9c819 [ 955.658125][ T29] RSP: 002b:00007f638bc23028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 955.666795][ T29] RAX: ffffffffffffffda RBX: 00007f638b015fa0 RCX: 00007f638ad9c819 [ 955.674966][ T29] RDX: 0000200000000140 RSI: 00000000400454ca RDI: 0000000000000008 [ 955.683304][ T29] RBP: 00007f638ae32c91 R08: 0000000000000000 R09: 0000000000000000 [ 955.691915][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 955.700026][ T29] R13: 00007f638b016038 R14: 00007f638b015fa0 R15: 00007ffe46a59ab8 [ 955.708243][ T29] [ 955.711334][ T29] INFO: task syz.0.2545:14006 blocked for more than 144 seconds. [ 955.719913][ T29] Not tainted syzkaller #0 [ 955.724891][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 955.733921][ T29] task:syz.0.2545 state:D stack:25896 pid:14006 ppid:13590 flags:0x00004004 [ 955.743198][ T29] Call Trace: [ 955.746602][ T29] [ 955.749638][ T29] __schedule+0x1553/0x45a0 [ 955.754305][ T29] ? __stack_depot_save+0x1f/0x630 [ 955.759543][ T29] ? kmalloc_reserve+0x116/0x240 [ 955.764677][ T29] ? asan.module_dtor+0x20/0x20 [ 955.769632][ T29] ? __mutex_lock+0x6a4/0xcc0 [ 955.774575][ T29] ? __mutex_trylock_common+0x8a/0x260 [ 955.780161][ T29] ? trace_raw_output_contention_end+0xd0/0xd0 [ 955.786514][ T29] schedule+0xbd/0x170 [ 955.790841][ T29] schedule_preempt_disabled+0x13/0x20 [ 955.796351][ T29] __mutex_lock+0x6a9/0xcc0 [ 955.801102][ T29] ? __mutex_lock+0x4f9/0xcc0 [ 955.805817][ T29] ? netlink_dump+0x78f/0xe50 [ 955.810604][ T29] ? mutex_lock_nested+0x20/0x20 [ 955.815725][ T29] ? __build_skb_around+0x255/0x3d0 [ 955.821718][ T29] ? __alloc_skb+0x1b2/0x2c0 [ 955.826461][ T29] netlink_dump+0x78f/0xe50 [ 955.831047][ T29] ? netlink_lookup+0x200/0x200 [ 955.835971][ T29] ? netlink_autobind+0x300/0x300 [ 955.841089][ T29] ? netlink_lookup+0x30/0x200 [ 955.845917][ T29] ? netlink_lookup+0x30/0x200 [ 955.850827][ T29] __netlink_dump_start+0x5f1/0x810 [ 955.856187][ T29] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 955.861702][ T29] rtnetlink_rcv_msg+0xe1d/0xfa0 [ 955.866806][ T29] ? tc_ctl_chain+0x16d0/0x16d0 [ 955.872098][ T29] ? rtnetlink_bind+0x80/0x80 [ 955.876840][ T29] ? perf_trace_preemptirq_template+0x269/0x330 [ 955.883546][ T29] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 955.890061][ T29] ? lock_chain_count+0x20/0x20 [ 955.894966][ T29] ? __local_bh_enable_ip+0x13a/0x1c0 [ 955.900860][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 955.906147][ T29] ? __local_bh_enable_ip+0x13a/0x1c0 [ 955.911635][ T29] ? _local_bh_enable+0xa0/0xa0 [ 955.916527][ T29] ? __dev_queue_xmit+0x265/0x3660 [ 955.921740][ T29] ? __dev_queue_xmit+0x265/0x3660 [ 955.935991][ T29] ? __dev_queue_xmit+0x1b2c/0x3660 [ 955.941385][ T29] ? __dev_queue_xmit+0x265/0x3660 [ 955.946567][ T29] ? tc_ctl_chain+0x16d0/0x16d0 [ 955.951535][ T29] ? ref_tracker_free+0x690/0x840 [ 955.956620][ T29] netlink_rcv_skb+0x241/0x4d0 [ 955.961638][ T29] ? rtnetlink_bind+0x80/0x80 [ 955.966382][ T29] ? netlink_ack+0x1180/0x1180 [ 955.971348][ T29] ? __lock_acquire+0x7d40/0x7d40 [ 955.976427][ T29] ? netlink_deliver_tap+0x2e/0x1b0 [ 955.981745][ T29] netlink_unicast+0x751/0x8d0 [ 955.986617][ T29] netlink_sendmsg+0x8d0/0xbf0 [ 955.991748][ T29] ? netlink_getsockopt+0x590/0x590 [ 955.997327][ T29] ? aa_sock_msg_perm+0x94/0x150 [ 956.002654][ T29] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 956.008359][ T29] ? security_socket_sendmsg+0x80/0xa0 [ 956.013852][ T29] ? netlink_getsockopt+0x590/0x590 [ 956.019497][ T29] ____sys_sendmsg+0x5ba/0x960 [ 956.024338][ T29] ? __asan_memset+0x22/0x40 [ 956.030334][ T29] ? __sys_sendmsg_sock+0x30/0x30 [ 956.035403][ T29] ? __import_iovec+0x5f2/0x850 [ 956.040356][ T29] ? import_iovec+0x73/0xa0 [ 956.045007][ T29] ___sys_sendmsg+0x2a6/0x360 [ 956.049831][ T29] ? __sys_sendmsg+0x2a0/0x2a0 [ 956.054853][ T29] ? trace_call_bpf+0xc3/0x6c0 [ 956.060033][ T29] __se_sys_sendmsg+0x1c2/0x2b0 [ 956.064933][ T29] ? __x64_sys_sendmsg+0x80/0x80 [ 956.070186][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 956.075453][ T29] do_syscall_64+0x55/0xa0 [ 956.080258][ T29] ? clear_bhb_loop+0x40/0x90 [ 956.084977][ T29] ? clear_bhb_loop+0x40/0x90 [ 956.089976][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 956.095908][ T29] RIP: 0033:0x7f638ad9c819 [ 956.100854][ T29] RSP: 002b:00007f638bc02028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 956.109778][ T29] RAX: ffffffffffffffda RBX: 00007f638b016090 RCX: 00007f638ad9c819 [ 956.118256][ T29] RDX: 0000000000048084 RSI: 0000200000000380 RDI: 0000000000000009 [ 956.126378][ T29] RBP: 00007f638ae32c91 R08: 0000000000000000 R09: 0000000000000000 [ 956.135790][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 956.144150][ T29] R13: 00007f638b016128 R14: 00007f638b016090 R15: 00007ffe46a59ab8 [ 956.152367][ T29] [ 956.155415][ T29] INFO: task syz.1.2551:14027 blocked for more than 145 seconds. [ 956.163239][ T29] Not tainted syzkaller #0 [ 956.168751][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 956.177470][ T29] task:syz.1.2551 state:D stack:26120 pid:14027 ppid:13083 flags:0x00004004 [ 956.186820][ T29] Call Trace: [ 956.190233][ T29] [ 956.193212][ T29] __schedule+0x1553/0x45a0 [ 956.198072][ T29] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 956.204386][ T29] ? asan.module_dtor+0x20/0x20 [ 956.210584][ T29] ? __mutex_lock+0x6a4/0xcc0 [ 956.215320][ T29] ? __mutex_trylock_common+0x8a/0x260 [ 956.220882][ T29] ? trace_raw_output_contention_end+0xd0/0xd0 [ 956.227123][ T29] schedule+0xbd/0x170 [ 956.232164][ T29] schedule_preempt_disabled+0x13/0x20 [ 956.237974][ T29] __mutex_lock+0x6a9/0xcc0 [ 956.242523][ T29] ? __mutex_lock+0x4f9/0xcc0 [ 956.247348][ T29] ? rtnetlink_rcv_msg+0x811/0xfa0 [ 956.252530][ T29] ? mutex_lock_nested+0x20/0x20 [ 956.257892][ T29] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 956.263068][ T29] rtnetlink_rcv_msg+0x811/0xfa0 [ 956.268411][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 956.273675][ T29] ? rtnetlink_bind+0x80/0x80 [ 956.278442][ T29] ? perf_trace_preemptirq_template+0xac/0x330 [ 956.284650][ T29] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 956.290747][ T29] ? lock_chain_count+0x20/0x20 [ 956.295630][ T29] ? __local_bh_enable_ip+0x13a/0x1c0 [ 956.301075][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 956.306391][ T29] ? __local_bh_enable_ip+0x13a/0x1c0 [ 956.311883][ T29] ? _local_bh_enable+0xa0/0xa0 [ 956.316784][ T29] ? __dev_queue_xmit+0x265/0x3660 [ 956.321994][ T29] ? __dev_queue_xmit+0x265/0x3660 [ 956.327142][ T29] ? __dev_queue_xmit+0x1b2c/0x3660 [ 956.333209][ T29] ? __dev_queue_xmit+0x265/0x3660 [ 956.338530][ T29] ? ref_tracker_free+0x690/0x840 [ 956.343632][ T29] netlink_rcv_skb+0x241/0x4d0 [ 956.348506][ T29] ? rtnetlink_bind+0x80/0x80 [ 956.353275][ T29] ? netlink_ack+0x1180/0x1180 [ 956.358203][ T29] ? __lock_acquire+0x7d40/0x7d40 [ 956.363292][ T29] ? netlink_deliver_tap+0x2e/0x1b0 [ 956.369042][ T29] netlink_unicast+0x751/0x8d0 [ 956.373885][ T29] netlink_sendmsg+0x8d0/0xbf0 [ 956.379062][ T29] ? netlink_getsockopt+0x590/0x590 [ 956.384319][ T29] ? aa_sock_msg_perm+0x94/0x150 [ 956.389678][ T29] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 956.395042][ T29] ? security_socket_sendmsg+0x80/0xa0 [ 956.400895][ T29] ? netlink_getsockopt+0x590/0x590 [ 956.406304][ T29] ____sys_sendmsg+0x5ba/0x960 [ 956.411410][ T29] ? __asan_memset+0x22/0x40 [ 956.416053][ T29] ? __sys_sendmsg_sock+0x30/0x30 [ 956.421367][ T29] ? __import_iovec+0x5f2/0x850 [ 956.426275][ T29] ? import_iovec+0x73/0xa0 [ 956.432214][ T29] ___sys_sendmsg+0x2a6/0x360 [ 956.438771][ T29] ? __sys_sendmsg+0x2a0/0x2a0 [ 956.443802][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 956.449508][ T29] __se_sys_sendmsg+0x1c2/0x2b0 [ 956.454432][ T29] ? __x64_sys_sendmsg+0x80/0x80 [ 956.459740][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 956.465051][ T29] do_syscall_64+0x55/0xa0 [ 956.469912][ T29] ? clear_bhb_loop+0x40/0x90 [ 956.474632][ T29] ? clear_bhb_loop+0x40/0x90 [ 956.479732][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 956.485670][ T29] RIP: 0033:0x7f5ce839c819 [ 956.490355][ T29] RSP: 002b:00007f5ce92f3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 956.499132][ T29] RAX: ffffffffffffffda RBX: 00007f5ce8616090 RCX: 00007f5ce839c819 [ 956.507158][ T29] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000009 [ 956.515231][ T29] RBP: 00007f5ce8432c91 R08: 0000000000000000 R09: 0000000000000000 [ 956.523463][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 956.531621][ T29] R13: 00007f5ce8616128 R14: 00007f5ce8616090 R15: 00007ffc6c973d78 [ 956.540668][ T29] [ 956.543735][ T29] INFO: task syz-executor:14030 blocked for more than 145 seconds. [ 956.551684][ T29] Not tainted syzkaller #0 [ 956.556776][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 956.565779][ T29] task:syz-executor state:D stack:25320 pid:14030 ppid:1 flags:0x00004004 [ 956.575355][ T29] Call Trace: [ 956.579004][ T29] [ 956.582010][ T29] __schedule+0x1553/0x45a0 [ 956.586611][ T29] ? asan.module_dtor+0x20/0x20 [ 956.591921][ T29] ? __mutex_lock+0x6a4/0xcc0 [ 956.596672][ T29] ? __mutex_trylock_common+0x8a/0x260 [ 956.602657][ T29] ? trace_raw_output_contention_end+0xd0/0xd0 [ 956.609236][ T29] schedule+0xbd/0x170 [ 956.613395][ T29] schedule_preempt_disabled+0x13/0x20 [ 956.619518][ T29] __mutex_lock+0x6a9/0xcc0 [ 956.624168][ T29] ? __mutex_lock+0x4f9/0xcc0 [ 956.629324][ T29] ? rtnetlink_rcv_msg+0x811/0xfa0 [ 956.634492][ T29] ? mutex_lock_nested+0x20/0x20 [ 956.640670][ T29] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 956.645940][ T29] rtnetlink_rcv_msg+0x811/0xfa0 [ 956.651518][ T29] ? rtnetlink_bind+0x80/0x80 [ 956.656338][ T29] ? mark_lock+0x94/0x320 [ 956.661121][ T29] ? __lock_acquire+0x1273/0x7d40 [ 956.666218][ T29] ? __kernel_text_address+0xd/0x30 [ 956.671669][ T29] ? mark_lock+0x94/0x320 [ 956.676066][ T29] ? mark_lock+0x94/0x320 [ 956.680525][ T29] ? __lock_acquire+0x1273/0x7d40 [ 956.685668][ T29] ? kmalloc_reserve+0x95/0x240 [ 956.690653][ T29] ? verify_lock_unused+0x140/0x140 [ 956.695898][ T29] ? verify_lock_unused+0x140/0x140 [ 956.701184][ T29] netlink_rcv_skb+0x241/0x4d0 [ 956.706000][ T29] ? rtnetlink_bind+0x80/0x80 [ 956.711053][ T29] ? netlink_ack+0x1180/0x1180 [ 956.715893][ T29] ? __lock_acquire+0x7d40/0x7d40 [ 956.721375][ T29] ? net_generic+0x1e/0x240 [ 956.725948][ T29] ? netlink_deliver_tap+0x2e/0x1b0 [ 956.731743][ T29] netlink_unicast+0x751/0x8d0 [ 956.736580][ T29] netlink_sendmsg+0x8d0/0xbf0 [ 956.742582][ T29] ? netlink_getsockopt+0x590/0x590 [ 956.748138][ T29] ? aa_sock_msg_perm+0x94/0x150 [ 956.753124][ T29] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 956.758861][ T29] ? security_socket_sendmsg+0x80/0xa0 [ 956.764375][ T29] __sys_sendto+0x4a9/0x6b0 [ 956.769349][ T29] ? __ia32_sys_getpeername+0x90/0x90 [ 956.774791][ T29] ? __lock_acquire+0x7d40/0x7d40 [ 956.780298][ T29] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 956.786341][ T29] ? lock_chain_count+0x20/0x20 [ 956.791587][ T29] ? lock_chain_count+0x20/0x20 [ 956.796499][ T29] __x64_sys_sendto+0xde/0xf0 [ 956.801654][ T29] do_syscall_64+0x55/0xa0 [ 956.806106][ T29] ? clear_bhb_loop+0x40/0x90 [ 956.810945][ T29] ? clear_bhb_loop+0x40/0x90 [ 956.815659][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 956.821622][ T29] RIP: 0033:0x7f489955d04e [ 956.826080][ T29] RSP: 002b:00007ffc5de936b8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 956.834633][ T29] RAX: ffffffffffffffda RBX: 000055557d3e5500 RCX: 00007f489955d04e [ 956.842699][ T29] RDX: 0000000000000028 RSI: 00007f489a344670 RDI: 0000000000000003 [ 956.853019][ T29] RBP: 0000000000000001 R08: 00007ffc5de93734 R09: 000000000000000c [ 956.861514][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 956.869844][ T29] R13: 0000000000000000 R14: 00007f489a344670 R15: 0000000000000000 [ 956.878297][ T29] [ 956.881401][ T29] INFO: task syz-executor:14034 blocked for more than 145 seconds. [ 956.889958][ T29] Not tainted syzkaller #0 [ 956.894938][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 956.903692][ T29] task:syz-executor state:D stack:25320 pid:14034 ppid:1 flags:0x00004004 [ 956.913150][ T29] Call Trace: [ 956.916457][ T29] [ 956.919520][ T29] __schedule+0x1553/0x45a0 [ 956.924366][ T29] ? asan.module_dtor+0x20/0x20 [ 956.929398][ T29] ? __mutex_lock+0x6a4/0xcc0 [ 956.934246][ T29] ? __mutex_trylock_common+0x8a/0x260 [ 956.939812][ T29] ? trace_raw_output_contention_end+0xd0/0xd0 [ 956.946107][ T29] schedule+0xbd/0x170 [ 956.951052][ T29] schedule_preempt_disabled+0x13/0x20 [ 956.956574][ T29] __mutex_lock+0x6a9/0xcc0 [ 956.961216][ T29] ? __mutex_lock+0x4f9/0xcc0 [ 956.965933][ T29] ? rtnetlink_rcv_msg+0x811/0xfa0 [ 956.978933][ T29] ? mutex_lock_nested+0x20/0x20 [ 956.984143][ T29] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 956.989449][ T29] rtnetlink_rcv_msg+0x811/0xfa0 [ 956.994470][ T29] ? rtnetlink_bind+0x80/0x80 [ 957.003570][ T29] ? mark_lock+0x94/0x320 [ 957.008154][ T29] ? __lock_acquire+0x1273/0x7d40 [ 957.013231][ T29] ? __kernel_text_address+0xd/0x30 [ 957.018696][ T29] ? mark_lock+0x94/0x320 [ 957.023076][ T29] ? mark_lock+0x94/0x320 [ 957.027437][ T29] ? __lock_acquire+0x1273/0x7d40 [ 957.037433][ T29] ? kmalloc_reserve+0x95/0x240 [ 957.042430][ T29] ? verify_lock_unused+0x140/0x140 [ 957.049902][ T29] ? verify_lock_unused+0x140/0x140 [ 957.055180][ T29] netlink_rcv_skb+0x241/0x4d0 [ 957.060151][ T29] ? rtnetlink_bind+0x80/0x80 [ 957.064900][ T29] ? netlink_ack+0x1180/0x1180 [ 957.069872][ T29] ? __lock_acquire+0x7d40/0x7d40 [ 957.075062][ T29] ? net_generic+0x1e/0x240 [ 957.079678][ T29] ? netlink_deliver_tap+0x2e/0x1b0 [ 957.084953][ T29] netlink_unicast+0x751/0x8d0 [ 957.090935][ T29] netlink_sendmsg+0x8d0/0xbf0 [ 957.095776][ T29] ? netlink_getsockopt+0x590/0x590 [ 957.101110][ T29] ? aa_sock_msg_perm+0x94/0x150 [ 957.106088][ T29] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 957.111619][ T29] ? security_socket_sendmsg+0x80/0xa0 [ 957.117124][ T29] __sys_sendto+0x4a9/0x6b0 [ 957.121695][ T29] ? __ia32_sys_getpeername+0x90/0x90 [ 957.127150][ T29] ? __lock_acquire+0x7d40/0x7d40 [ 957.132533][ T29] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 957.138649][ T29] ? lock_chain_count+0x20/0x20 [ 957.143559][ T29] ? lock_chain_count+0x20/0x20 [ 957.148545][ T29] __x64_sys_sendto+0xde/0xf0 [ 957.154588][ T29] do_syscall_64+0x55/0xa0 [ 957.159149][ T29] ? clear_bhb_loop+0x40/0x90 [ 957.163866][ T29] ? clear_bhb_loop+0x40/0x90 [ 957.168666][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 957.174604][ T29] RIP: 0033:0x7f771db5d04e [ 957.179100][ T29] RSP: 002b:00007ffe7d6cbb68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 957.187622][ T29] RAX: ffffffffffffffda RBX: 000055556f808500 RCX: 00007f771db5d04e [ 957.195627][ T29] RDX: 0000000000000028 RSI: 00007f771e944670 RDI: 0000000000000003 [ 957.204825][ T29] RBP: 0000000000000001 R08: 00007ffe7d6cbbe4 R09: 000000000000000c [ 957.213296][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 957.221470][ T29] R13: 0000000000000000 R14: 00007f771e944670 R15: 0000000000000000 [ 957.229616][ T29] [ 957.232670][ T29] INFO: task syz-executor:14037 blocked for more than 146 seconds. [ 957.240675][ T29] Not tainted syzkaller #0 [ 957.245649][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 957.255506][ T29] task:syz-executor state:D stack:25320 pid:14037 ppid:1 flags:0x00004004 [ 957.265096][ T29] Call Trace: [ 957.268530][ T29] [ 957.271499][ T29] __schedule+0x1553/0x45a0 [ 957.276086][ T29] ? asan.module_dtor+0x20/0x20 [ 957.281018][ T29] ? __mutex_lock+0x6a4/0xcc0 [ 957.285743][ T29] ? __mutex_trylock_common+0x8a/0x260 [ 957.291332][ T29] ? trace_raw_output_contention_end+0xd0/0xd0 [ 957.297600][ T29] schedule+0xbd/0x170 [ 957.301752][ T29] schedule_preempt_disabled+0x13/0x20 [ 957.307251][ T29] __mutex_lock+0x6a9/0xcc0 [ 957.311943][ T29] ? __mutex_lock+0x4f9/0xcc0 [ 957.316676][ T29] ? rtnetlink_rcv_msg+0x811/0xfa0 [ 957.321939][ T29] ? mutex_lock_nested+0x20/0x20 [ 957.326960][ T29] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 957.332376][ T29] rtnetlink_rcv_msg+0x811/0xfa0 [ 957.337398][ T29] ? rtnetlink_bind+0x80/0x80 [ 957.342186][ T29] ? mark_lock+0x94/0x320 [ 957.346572][ T29] ? __lock_acquire+0x1273/0x7d40 [ 957.351731][ T29] ? __kernel_text_address+0xd/0x30 [ 957.357650][ T29] ? mark_lock+0x94/0x320 [ 957.362426][ T29] ? mark_lock+0x94/0x320 [ 957.366822][ T29] ? __lock_acquire+0x1273/0x7d40 [ 957.372023][ T29] ? kmalloc_reserve+0x95/0x240 [ 957.376926][ T29] ? verify_lock_unused+0x140/0x140 [ 957.382204][ T29] ? verify_lock_unused+0x140/0x140 [ 957.387465][ T29] netlink_rcv_skb+0x241/0x4d0 [ 957.392383][ T29] ? rtnetlink_bind+0x80/0x80 [ 957.397116][ T29] ? netlink_ack+0x1180/0x1180 [ 957.402032][ T29] ? __lock_acquire+0x7d40/0x7d40 [ 957.407124][ T29] ? net_generic+0x1e/0x240 [ 957.411747][ T29] ? netlink_deliver_tap+0x2e/0x1b0 [ 957.416989][ T29] netlink_unicast+0x751/0x8d0 [ 957.421856][ T29] netlink_sendmsg+0x8d0/0xbf0 [ 957.426699][ T29] ? netlink_getsockopt+0x590/0x590 [ 957.432037][ T29] ? aa_sock_msg_perm+0x94/0x150 [ 957.437019][ T29] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 957.442559][ T29] ? security_socket_sendmsg+0x80/0xa0 [ 957.449443][ T29] __sys_sendto+0x4a9/0x6b0 [ 957.454011][ T29] ? __ia32_sys_getpeername+0x90/0x90 [ 957.460351][ T29] ? __lock_acquire+0x7d40/0x7d40 [ 957.465463][ T29] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 957.471567][ T29] ? lock_chain_count+0x20/0x20 [ 957.476469][ T29] ? lock_chain_count+0x20/0x20 [ 957.481448][ T29] __x64_sys_sendto+0xde/0xf0 [ 957.486277][ T29] do_syscall_64+0x55/0xa0 [ 957.490813][ T29] ? clear_bhb_loop+0x40/0x90 [ 957.495533][ T29] ? clear_bhb_loop+0x40/0x90 [ 957.500482][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 957.506441][ T29] RIP: 0033:0x7f1cdd15d04e [ 957.510969][ T29] RSP: 002b:00007ffce01cee38 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 957.519456][ T29] RAX: ffffffffffffffda RBX: 000055558f2c3500 RCX: 00007f1cdd15d04e [ 957.527468][ T29] RDX: 0000000000000028 RSI: 00007f1cddf44670 RDI: 0000000000000003 [ 957.535701][ T29] RBP: 0000000000000001 R08: 00007ffce01ceeb4 R09: 000000000000000c [ 957.543789][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 957.552007][ T29] R13: 0000000000000000 R14: 00007f1cddf44670 R15: 0000000000000000 [ 957.560120][ T29] [ 957.563851][ T29] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 957.573056][ T29] [ 957.573056][ T29] Showing all locks held in the system: [ 957.581057][ T29] 1 lock held by khungtaskd/29: [ 957.585935][ T29] #0: ffffffff8d1320e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 957.596005][ T29] 1 lock held by klogd/5128: [ 957.600671][ T29] #0: ffff8880b8e3c018 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 957.611597][ T29] 2 locks held by dhcpcd/5434: [ 957.616408][ T29] #0: ffff88804d458690 (nlk_cb_mutex-ROUTE){+.+.}-{3:3}, at: __netlink_dump_start+0xf4/0x810 [ 957.626882][ T29] #1: ffffffff8e3c2808 (rtnl_mutex){+.+.}-{3:3}, at: netlink_dump+0x78f/0xe50 [ 957.635940][ T29] 2 locks held by getty/5532: [ 957.640744][ T29] #0: ffff88802d6ab0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 957.650617][ T29] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x433/0x1390 [ 957.661019][ T29] 3 locks held by kworker/0:6/5879: [ 957.666810][ T29] #0: ffff888017c71d38 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 957.679585][ T29] #1: ffffc90004c57d00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 957.690757][ T29] #2: ffffffff8e3c2808 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x92/0xd90 [ 957.705654][ T29] 3 locks held by kworker/u4:14/12541: [ 957.711379][ T29] #0: ffff888017c71538 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 957.723368][ T29] #1: ffffc90004bbfd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 957.734566][ T29] #2: ffffffff8e3c2808 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 957.743665][ T29] 3 locks held by kworker/u4:15/12542: [ 957.750165][ T29] #0: ffff88802c942538 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 957.761956][ T29] #1: ffffc90004bcfd00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 957.776873][ T29] #2: ffffffff8e3c2808 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 957.790654][ T29] 4 locks held by kworker/u4:16/12543: [ 957.796175][ T29] #0: ffff88801a254938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 957.808564][ T29] #1: ffffc90004bdfd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 957.819391][ T29] #2: ffffffff8e3b57d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x14c/0xbb0 [ 957.828968][ T29] #3: ffffffff8e3c2808 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0xf2/0xa80 [ 957.839121][ T29] 5 locks held by kworker/u4:17/12544: [ 957.844603][ T29] #0: ffff8880b8e3c018 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 957.854714][ T29] #1: ffff8880b8e289c0 (psi_seq){-.-.}-{0:0}, at: __schedule+0x2176/0x45a0 [ 957.863599][ T29] #2: ffffffff8d1320e0 (rcu_read_lock){....}-{1:2}, at: batadv_nc_worker+0xd2/0x610 [ 957.874210][ T29] #3: ffff8880b8e289c0 (psi_seq){-.-.}-{0:0}, at: enqueue_task+0x26d/0x2b0 [ 957.883177][ T29] #4: ffff8880b8e289c0 (psi_seq){-.-.}-{0:0}, at: enqueue_task+0x26d/0x2b0 [ 957.892005][ T29] 7 locks held by syz-executor/13881: [ 957.897413][ T29] #0: ffff888021090418 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x21b/0x990 [ 957.906429][ T29] #1: ffff88805ca2cc88 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1e7/0x520 [ 957.916316][ T29] #2: ffff888024bdfe90 (kn->active#53){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x23a/0x520 [ 957.926464][ T29] #3: ffffffff8dca2848 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xd8/0x370 [ 957.936823][ T29] #4: ffff8880196b40e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xb6/0x7a0 [ 957.947462][ T29] #5: ffff8880196b5250 (&devlink->lock_key#2){+.+.}-{3:3}, at: nsim_drv_remove+0x50/0x170 [ 957.961734][ T29] #6: ffffffff8e3c2808 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x3f/0x180 [ 957.972645][ T29] 1 lock held by syz.2.2543/13997: [ 957.978009][ T29] #0: ffffffff8e3c2808 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x41/0x1c0 [ 957.987054][ T29] 1 lock held by syz.0.2545/14005: [ 957.992465][ T29] #0: ffffffff8e3c2808 (rtnl_mutex){+.+.}-{3:3}, at: __tun_chr_ioctl+0x400/0x2000 [ 958.001919][ T29] 2 locks held by syz.0.2545/14006: [ 958.007139][ T29] #0: ffff88806990f690 (nlk_cb_mutex-ROUTE){+.+.}-{3:3}, at: __netlink_dump_start+0xf4/0x810 [ 958.026472][ T29] #1: ffffffff8e3c2808 (rtnl_mutex){+.+.}-{3:3}, at: netlink_dump+0x78f/0xe50 [ 958.035599][ T29] 1 lock held by syz.1.2551/14027: [ 958.040783][ T29] #0: ffffffff8e3c2808 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 958.050332][ T29] 1 lock held by syz-executor/14030: [ 958.055656][ T29] #0: ffffffff8e3c2808 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 958.065153][ T29] 1 lock held by syz-executor/14034: [ 958.070509][ T29] #0: ffffffff8e3c2808 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 958.084612][ T29] 1 lock held by syz-executor/14037: [ 958.089989][ T29] #0: ffffffff8e3c2808 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 958.103523][ T29] 1 lock held by syz-executor/14040: [ 958.108895][ T29] #0: ffffffff8e3c2808 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 958.118648][ T29] 1 lock held by syz-executor/14045: [ 958.123972][ T29] #0: ffffffff8e3c2808 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 958.133477][ T29] 1 lock held by syz-executor/14049: [ 958.138926][ T29] #0: ffffffff8e3c2808 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 958.148629][ T29] 1 lock held by syz-executor/14052: [ 958.153950][ T29] #0: ffffffff8e3c2808 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 958.163470][ T29] 1 lock held by syz-executor/14058: [ 958.168870][ T29] #0: ffffffff8e3c2808 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 958.179260][ T29] 1 lock held by syz-executor/14063: [ 958.184586][ T29] #0: ffffffff8e3c2808 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 958.194126][ T29] 1 lock held by syz-executor/14068: [ 958.199510][ T29] #0: ffffffff8e3c2808 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 958.209160][ T29] 1 lock held by syz-executor/14072: [ 958.214481][ T29] #0: ffffffff8e3c2808 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 958.224058][ T29] [ 958.226415][ T29] ============================================= [ 958.226415][ T29] [ 958.234927][ T29] NMI backtrace for cpu 1 [ 958.239284][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 958.246514][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 958.256615][ T29] Call Trace: [ 958.259929][ T29] [ 958.262889][ T29] dump_stack_lvl+0x18c/0x250 [ 958.267604][ T29] ? preempt_count_add+0x91/0x1a0 [ 958.272683][ T29] ? show_regs_print_info+0x20/0x20 [ 958.277951][ T29] ? load_image+0x420/0x420 [ 958.282513][ T29] nmi_cpu_backtrace+0x3a6/0x3e0 [ 958.287496][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 958.293675][ T29] ? _printk+0xde/0x130 [ 958.297863][ T29] ? load_image+0x420/0x420 [ 958.302405][ T29] ? load_image+0x420/0x420 [ 958.306963][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 958.313070][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 958.319086][ T29] watchdog+0xf3d/0xf80 [ 958.323264][ T29] ? watchdog+0x1e1/0xf80 [ 958.327627][ T29] kthread+0x2fa/0x390 [ 958.331712][ T29] ? hungtask_pm_notify+0x90/0x90 [ 958.336757][ T29] ? kthread_blkcg+0xd0/0xd0 [ 958.341360][ T29] ret_from_fork+0x48/0x80 [ 958.345797][ T29] ? kthread_blkcg+0xd0/0xd0 [ 958.350421][ T29] ret_from_fork_asm+0x11/0x20 [ 958.355223][ T29] [ 958.359116][ T29] Sending NMI from CPU 1 to CPUs 0: [ 958.364383][ C0] NMI backtrace for cpu 0 [ 958.364395][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 [ 958.364410][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 958.364419][ C0] RIP: 0010:lockdep_hardirqs_off+0x4c/0x100 [ 958.364453][ C0] Code: 90 00 00 00 48 89 fb 65 8b 05 38 69 7d 75 a9 00 00 f0 00 74 68 83 3d e2 77 a6 0c 00 75 15 48 c7 04 24 00 00 00 00 9c 8f 04 24 04 24 00 02 00 00 75 79 65 8b 05 fc 39 7c 75 85 c0 74 56 65 4c [ 958.364466][ C0] RSP: 0018:ffffffff8ce07cc8 EFLAGS: 00000046 [ 958.364481][ C0] RAX: 0000000000000000 RBX: ffffffff817ab178 RCX: 69b24efd387c5100 [ 958.364492][ C0] RDX: 0000000000000000 RSI: ffffffff8acaca00 RDI: ffffffff8b1c8e60 [ 958.364502][ C0] RBP: ffffffff8ce07d90 R08: ffff8880b8e3c087 R09: 1ffff110171c7810 [ 958.364513][ C0] R10: dffffc0000000000 R11: ffffed10171c7811 R12: 1ffffffff19c0fa0 [ 958.364524][ C0] R13: dffffc0000000000 R14: ffffffff8ce9346c R15: dffffc0000000000 [ 958.364535][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 958.364554][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 958.364565][ C0] CR2: 00007f49b981c589 CR3: 000000000cf32000 CR4: 00000000003506f0 [ 958.364580][ C0] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 958.364590][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 958.364600][ C0] Call Trace: [ 958.364607][ C0] [ 958.364615][ C0] ? tick_nohz_idle_enter+0x118/0x260 [ 958.364636][ C0] trace_hardirqs_off+0x12/0x40 [ 958.364657][ C0] tick_nohz_idle_enter+0x118/0x260 [ 958.364677][ C0] ? tick_nohz_idle_retain_tick+0xa0/0xa0 [ 958.364700][ C0] ? nohz_run_idle_balance+0x59/0x140 [ 958.364717][ C0] do_idle+0x9a/0x590 [ 958.364736][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 958.364758][ C0] ? do_idle+0xc/0x590 [ 958.364775][ C0] cpu_startup_entry+0x43/0x60 [ 958.364792][ C0] rest_init+0x2e2/0x300 [ 958.364810][ C0] ? time_init+0x40/0x40 [ 958.364826][ C0] arch_call_rest_init+0xe/0x10 [ 958.364845][ C0] start_kernel+0x459/0x4e0 [ 958.364863][ C0] x86_64_start_reservations+0x2a/0x30 [ 958.364879][ C0] x86_64_start_kernel+0x60/0x60 [ 958.364895][ C0] secondary_startup_64_no_verify+0x179/0x17b [ 958.364921][ C0] [ 958.387565][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 958.387581][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 958.387601][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 958.387611][ T29] Call Trace: [ 958.387619][ T29] [ 958.387627][ T29] dump_stack_lvl+0x18c/0x250 [ 958.387663][ T29] ? show_regs_print_info+0x20/0x20 [ 958.387689][ T29] ? load_image+0x420/0x420 [ 958.387723][ T29] panic+0x2dc/0x730 [ 958.387743][ T29] ? schedule_preempt_disabled+0x20/0x20 [ 958.387772][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 958.387792][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 958.387817][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 958.387842][ T29] watchdog+0xf7c/0xf80 [ 958.387866][ T29] ? watchdog+0x1e1/0xf80 [ 958.387894][ T29] kthread+0x2fa/0x390 [ 958.387910][ T29] ? hungtask_pm_notify+0x90/0x90 [ 958.387932][ T29] ? kthread_blkcg+0xd0/0xd0 [ 958.387949][ T29] ret_from_fork+0x48/0x80 [ 958.387971][ T29] ? kthread_blkcg+0xd0/0xd0 [ 958.387989][ T29] ret_from_fork_asm+0x11/0x20 [ 958.388023][ T29] [ 958.389432][ T29] Kernel Offset: disabled [ 958.702451][ T29] Rebooting in 86400 seconds..