last executing test programs: 9.645173778s ago: executing program 0 (id=3185): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0xfffffe19) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0xa) (async) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x6, 0x8}, 0x50) (rerun: 64) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xc, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x28}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$kcm(0xa, 0x2, 0x0) (async, rerun: 32) r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x43cd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 32) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000002380)='GPL\x00', 0x5, 0x252, &(0x7f00000023c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffffd4}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) socket$kcm(0x11, 0x200000000000002, 0x300) (async, rerun: 32) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (rerun: 32) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) (async, rerun: 32) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101a42, 0x0) (async, rerun: 32) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x200, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="14000000040000000400000001"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r6, 0x0}, 0x20) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f0, &(0x7f0000000080)) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x2f02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000004095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)="02", 0x0}, 0x50) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x6, 0x56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x2, 0xfffffffd, 0x8, 0x0, 0xfffffff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001", @ANYRES8=r4], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x11, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000020000000000000000000000850000007b000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000800e700850000009400000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r9, 0xffffffffffffffff, 0xffff0000}, 0xc) 8.986005969s ago: executing program 0 (id=3177): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, 0x0, 0x9, 0x10, 0x0, 0xb}, 0x94) socket$kcm(0x11, 0x200000000000002, 0x300) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000008c0)=r4, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x6, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001300)="b9fb0307683a06000000000080f3", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 8.572108452s ago: executing program 0 (id=3180): socket$kcm(0x10, 0x3, 0x10) r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0xfd9}, 0x100002, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000010c0)={r4, 0x0, 0x0}, 0x10) sendmsg$inet(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af36504001a0038001d00", 0x28}, {&(0x7f00000000c0)="83d2ff5f00000080d2898a0cc6d6703b87eb28f77b09bc7e64f918fa3be4664d327d90424d5503002800"/52, 0x34}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x40) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000080)={[{0x2b, 'pids'}]}, 0x6) write$cgroup_subtree(r6, &(0x7f00000000c0)={[{0x2d, 'pids'}]}, 0x6) r7 = socket$kcm(0x2, 0x200000000000001, 0x106) recvmsg$kcm(r7, &(0x7f0000000a80)={&(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, 0x0}, 0x40000002) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r8) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90124fc60100c03400a000000053582c137153e370248078000f01700d1bd", 0x2e}], 0x1}, 0x0) 7.455479916s ago: executing program 0 (id=3187): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003507d25a806f8c6394f90524fc600d001141090005004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$kcm(0xa, 0x3, 0x3a) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000005600)={&(0x7f0000000240)=@ieee802154={0x24, @short={0x2, 0xffff, 0xaaa3}}, 0x80, &(0x7f0000004440)=[{&(0x7f00000002c0)="5463f3c2b1f8394beb7723aa86", 0xd}, {&(0x7f0000000300)="ee060f2e7a3c60eb6be639695a022608f728eaec354289bcfcdc056b9496224e7a4028de8c8c9636f2631a07593fff3b48a713b74d49744b21aa90e2acb1aa93cca8d025d7cc2b6ef9feced5e40603e3920cc067c9", 0x55}, {0x0}, {0x0}, {&(0x7f00000042c0)}, {&(0x7f0000004340)="fe86cfb37ee2c6105c0b5bc85ec3150ea9f00ecf4402217852c89705e6898591f2857abd18c9ab382332c1822bd3c6bf0a4b0496f26f76a5b0063a0013f871aef3ff6fc0daf776d34eeda5a11fb5ea98b181ffe2bc002d92a8ffd447dbd7f0a74b726ef1c701381bfae60f1dcdc9778b202cf739720fd59d906a34a58bff6f05842c3c83c1fd841f4578ddcbbb53841304be13a7e57169d4b771abd48a7250232823df43f22cd05fbb15bbc474f2ddccb1af167a2ae834b1e87d2068461d99665894dba462ebcbf22e5297154ad5f61b69771e44d16403387b266d44ab6fb52c16a22e78ff3972a60f03181dfe642a2956284b36e5ecf93f", 0xf8}], 0x6}, 0x20008080) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x60, 0x109, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736ed", &(0x7f0000000cc0)=""/265, 0xcb95, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0), 0x2, 0x0, 0x3ff}, 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) socket$kcm(0x28, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100"], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0x1, 0xa0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000000000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r4}, 0xc) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb90402200800fd007c05e8fe55a10a000b000140020203600e41b0000500ac0006031100000016001500090002000000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) ioctl$TUNSETPERSIST(r5, 0x400454ce, 0x0) 6.938410753s ago: executing program 0 (id=3192): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x30004081) sendmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20000800) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="bf16000000000000b7070000000100004870000000ffffffd40700001000000095000000000000002ba728041598fbd30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2681d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142fa9ea4318123f602000000000080de89e661168c1886d0d4d94f204e345c65c26e278ef5b915395b19284a1a4bc72fbc1626e3a2a2ad358061d0ae0209e6e83d15645aa818d92b21aa6459512f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa8666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00ce00000000d3a02762c2951257b85802189d74005d2a1bcf9436e192e23fd275985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bc52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dccaff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a6f387a1340a1c8889464f90cc4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd014a337ac5d58bcb5e517232586872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d36c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e480cd9d48aeb12b1d6acabd38a817bcd222614d1f62734d679039a97d2b74f9e8e997ccd314000f747f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065b03cfb65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d35dbb6c23b90cf36e83b8a434a97d09343d7f83079ccb02e69d384146056d125cfa788237874dd42dae334bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd8a8ca049f798abe646f738bebd69413afc9d8a5edd7aaa000000000600001e6c2f2a287c5278a218dbfaffffff00a14db5cfa6819eb1d39c48cfdc80d215c9e16e0c4736dd19363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c432e1001171792c65986146666a5490928441f47e0fe5eac41824ca1fd0eb71aa243c88d5480e5aee9c9e5f2e5a56a6d920335c8e8726fd8329d9a733d8f9ffffff5f912ac4e34bf6ea8a86da707b03bddb491ba0cc98f6be92c50008a2b50025419dfc75c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba69279500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a3cffc99fc647d0b82ef26ab708c0b19ed144be51c3b398f0e6bb7a30006000000cba12953d58cff0f0378740fe6662f377b97d8e7cdb047050d7296cd3856476a0ea49ad127ba6570bafc2bbcf9ee721fd9cb467ff071e5604fbf0491245c0000007d932d7a64de4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cb0cbfd23b265f4d4da448a7a0d19c5e43eae50a31609dfa2ddf267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed186a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d36df524b760ab92efcce7dd1574a0730a9e015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b05ebf1445ea110f499f840a5c965443d725556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bbbe4fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe8167827a8e6c8f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f7b206b2e02c21e963abc5ceb735c1b3c46b0a843de52a903375dfb663a8d8ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d0540884d97aecb19983fc6af29ab44a82aff9cba921192c665b877af6539bdb1b567f481ba07982e7ad758f4e1eac69e7e88a63960975f490e161e371ec8534791e3b61c63fb9450dd03985d900a9c0839208356b53750e76fcc3c2d1bddcbd83897921bd4d0c02e8188f3df79ea2a5c5444004830e6cb227ca1bdafb977c00000000003a417193b8c5d793687335a980010000fdf278218218e04b705ec62f1608cb569b81914e68f175b392af6bc4fd2121d7fd276af2c97a441b56e7a0687d98b8e76d8d0d231e4fe00be1de76bd19cc12e2bd938eb681ed6bc951c1b4f7c51af59eea4d40c6000000000200778a677b72786311153271a3313da02645e11761699e4d04ac86dd14ff7b9a10d3fa74696fe3953a5b7706bf5d1faba4b18808d9cb0e9d3696dec4e0820ee4028d7225a2c9c427cf64cbde6fba056b2006b7a37c1181d530fb865e235cd302f3b4071ee5237ada986b9e5e3144bf479f277f10656ad3744037ccc9c63685a6f1109d2ea73773d3635f61497f1fa1ea4a16f601800bf3e59141fbf05a96113320c445f9ba8596970d5254727e804fbd99ccefb7c09269dd2c5c25e56e169ac15980f3f85f7ca36dd5950ef5b64fd46f123311829534a82940994199b3cf7a8fabea9930952f5da9b909c1946e55289f668c423fcbb31ae91864c882313151741a67538c9689dc8ecc9903c7041e5c0704e2fa55a756487517a7445cbd9e3f5175e41c00000000000000000000000000bf98efd587fffe326f474b0b089c017b16c0062cbce96f5adebec52a79f9363909842f79c50a1520be46d87003137e4c5031f00123e812a5e37cd52c9eb7336281cb8c6ce9934b157d7875a70eaf103cb3138e2361c51cd1eab8a26b232acf6bf0ab829c26dab637538b2eb1420d812d2b80c777710ba0f18e4661681aa218d9ba54023ab4305d77eb15611ae2545835e9d30e9f6d4fb43a291c69545a1eea0f8720431132d8549f99bf6c5cb060da70cbb59d0a000000000034d083fc37d2449f72de0cbea4bc1dc89c136cdbc504f849d5502d77a95c7bfff4cd9c03058d0d4d07ea64824f1acf2b39389f675f39d01719cdbab3f1ce10609c8d7b3e37cb99b41da5e485a441b6a103549f55ab09dc98767763d1f21d9d5bc27d2b40050d1f8292f4d9ec6d0000000000003932062290f4996fdd55b06023437e9e2072daf7f5d82f6f1b5b89a41134f4dc2e65bb11272fdf8c8141f41d6160b3d8b6ecd16d14267f61b4881adee7f07f3d6af5ae79e16fe2c3f55ac7a6392d2e1d9b4286b6c30600a76b85ed6e1f0000c67e6c5fcdc8c39381be4799b8cb2d08b8262c807dd755e22b801162381aa9d1af2bbc9cfd497585337eac408b8475b47a392a10cae349160f128e5f873a58064eb400c36a90624f6aed398a215e9ce64522ab249f67c38a656d32ecff5cdb2b039c4abf349d2c0f88a42e9189bbfa7f5cf35b6e7ef8f9d33163b7ea87550fb1ba334c83e3aec4714c9c4ca3ecb04f2720237615a28bf310b58ffa2a103216fdcc8c2d8f5d55e5e7ebf147105272aaae56e86da86b3cf79a3f7306436762dd1a08ce873e07cebc7892ec6f9f696da38feed3d70001500e34ad2e1b2e64af4e37211b524e20f4ae1ba89a32bad2af9030f8add5cbacc59352c290f55d971b65953533668c25f21d8d62d849e9058eaa97c63491568887548f668cdbca2abf01a361a0b64d8b523e669da350e3ec7445dfbf366b0b3bc5e76824a1e43eaaeca70db90f2fa39596443447671933079a24fe3681ad9ac361f71ac279a688f10a12105edebc5e3bbc394c8305ab129ca2dfb9b7c5e9d097bd01b495cccefddce569117f7f5d6a6270ff0f0f4c371029ca8489571b55841bf3dd003bc81460eee57ceb3c33f4e90eb1fffffffffffffcfcbb616c2070237881afdb314cecd1623f3e55ab8b7627fa1be349145a8d6313cbc790eefe2020138e82fb9d351be4ddcbcc9bc048dd3db5828d16baec6e07a007f0030f34ea3cfd524d6fa1d45da5641d6c94e1d3ae7fba1c85035d2a60ef1696e0d96aa1c60019f73ae0aa6113cd66ef26b5777337c26e1461405d86fdf091edd526f25cada439bb3609ed5c35ab60a539ade786bd6004d0ea3edbd6c4da0d8e8be8c771c8c8a0b07d9859e04adb18964dcce9bce546074c2615318bf813e788c84409dffbc2df372a016e8c845d4257000000000000000000000000000000000000f29657697d9c2b132b2dc2f5ea5122836582a7e85fe2bc166f17aefd9d861de0191f5277d4a3b5afb6f23d9eea2459f7844606e1202768d83c24cc791bde44a448022bbfa571fe029a7b2d5152639ee283894ab6168992ff0acc01b39a078f285ce615351f262019586eb9447bb3eaffd7b53d8f37ca6c5f1027dd5b7592996c8a7789ba108979cc9ad07ed86682843e2eaa855dd01443ee6ffde1811f10039d5d14458177096e15cc4d8f2582a1bea5cc98d992f3de7d1cdfb24384b9f11b615c87c441dc970ec896a5af6bf69b50a244bc138a1cae3d220bcff6bcb3058c6e0d1cc0da889710f33f5638f805ce602365492282863cc8092b16656dea03cd50182aabbac78a14506dcbf823bec4a5dad14c4d7353b6a55c28321647df3a85bf9fca4e18aeaf4867e6a3dbdd7a5dbe1a52bddae83fc368404a032b75649cf74d7af8e9e3e43fad643ad3e8575a2bb0507531eac5e10b631575f1360803c8f556e07f292ab66b9bcea0c2f09db289a5934a4f2f5fe5cfc52b270a4a5fa2a8de62dcaf7ef52f1fd84c55e6a0c5a365a3b4e73c4ac6fc26367f3f6c07b06a0874c039622ba2bd369b105f57099f742a000a36c2f044a5de24604f82a1f197d9a70b5a62f794f57ec02df70d459fedd6125ae41479a2661360a79e175f0add2820018d5985183ee80f681403a7d08e0e2b88d0750c90b7ed5fed6f81ce797f3b60445ce811d2b4e45005a5ea06c1fe927af06433cd3885dc954e698a7a73416c73bfab7773a6e5e14338797ce9148cda4c0bf05fb67915aeb3661e755e4e1a0ceedfe8e91ee5361ff4c7c07b422e1443a6616b6eb3c325d5687644a4c0a1d44d9dfd82896f56bdfa0790406984c123e1d37da4a9a9444485e9b1e3b6b548528989d2aecc1e7b6ee92ca19298801105ced8964e000000000000000000000000000000000000000000000000000000000003d1c031ee2fc25c7ad34283187545b1343f7ab862e66cf5bf4ba4dbf5fda31619c05ddb97199ad4d01471e9b3c7f485b1e74d0ed34201915e79d5ed229f0773ab6b38529c45b10d0796e005b6d663b942320339b9fe1d4e393b4bcb596898cde06955a345db3cb956b0e5da1c1dba7046f4d12fc65085302f333516804d9f"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000180000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70300001a93"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x8, 0x2}, 0x48) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x8, &(0x7f0000000000)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0xad}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000000000006110740000000000180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001ec0)={{r4}, &(0x7f0000001e40), &(0x7f0000001e80)=r5}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r3, &(0x7f0000000080), &(0x7f0000000100)=""/122}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc) 6.697445631s ago: executing program 0 (id=3195): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x880, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2a, 0x2, 0x0) r0 = syz_clone(0x10004000, &(0x7f00000001c0)="7c773644ac78e147996242c6084035ffaca184d99b01b256db8ff0a920", 0x1d, &(0x7f0000000100), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000240)=ANY=[@ANYRES32=r0], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071041b000000000095"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001800)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r1], 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) openat$cgroup_type(r4, &(0x7f0000000300), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce220000"], 0xfdef) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r5, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000280)=@generic={&(0x7f00000000c0)='./file0\x00', r6}, 0x18) r7 = syz_clone(0x206000, &(0x7f0000001980), 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0xe, 0x5, 0x0, 0x7602, 0x2, 0x8140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x7f}, r7, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x281c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000500), 0x2}, 0x4000, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r8 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r8, &(0x7f0000000200)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x8001, @private2, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)="270300ff8dcfdc268a", 0x9}], 0x1}, 0x41) setsockopt$sock_attach_bpf(r8, 0x84, 0x1e, &(0x7f0000000000), 0x4) 2.928980918s ago: executing program 2 (id=3224): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003507d25a806f8c6394f90524fc600d001141090005004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$kcm(0xa, 0x3, 0x3a) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000005600)={&(0x7f0000000240)=@ieee802154={0x24, @short={0x2, 0xffff, 0xaaa3}}, 0x80, &(0x7f0000004440)=[{&(0x7f00000002c0)="5463f3c2b1f8394beb7723aa86", 0xd}, {&(0x7f0000000300)="ee060f2e7a3c60eb6be639695a022608f728eaec354289bcfcdc056b9496224e7a4028de8c8c9636f2631a07593fff3b48a713b74d49744b21aa90e2acb1aa93cca8d025d7cc2b6ef9feced5e40603e3920cc067c9", 0x55}, {0x0}, {0x0}, {&(0x7f00000042c0)}, {&(0x7f0000004340)="fe86cfb37ee2c6105c0b5bc85ec3150ea9f00ecf4402217852c89705e6898591f2857abd18c9ab382332c1822bd3c6bf0a4b0496f26f76a5b0063a0013f871aef3ff6fc0daf776d34eeda5a11fb5ea98b181ffe2bc002d92a8ffd447dbd7f0a74b726ef1c701381bfae60f1dcdc9778b202cf739720fd59d906a34a58bff6f05842c3c83c1fd841f4578ddcbbb53841304be13a7e57169d4b771abd48a7250232823df43f22cd05fbb15bbc474f2ddccb1af167a2ae834b1e87d2068461d99665894dba462ebcbf22e5297154ad5f61b69771e44d16403387b266d44ab6fb52c16a22e78ff3972a60f03181dfe642a2956284b36e5ecf93f", 0xf8}], 0x6}, 0x20008080) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x60, 0x109, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736ed", &(0x7f0000000cc0)=""/265, 0xcb95, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0), 0x2, 0x0, 0x3ff}, 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) socket$kcm(0x28, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100"], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0x1, 0xa0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000000000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r4}, 0xc) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb90402200800fd007c05e8fe55a10a000b000140020203600e41b0000500ac0006031100000016001500090002000000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) ioctl$TUNSETPERSIST(r5, 0x400454ce, 0x0) 2.846015781s ago: executing program 4 (id=3225): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000002c0)={r0}, 0x8) write$cgroup_int(r1, &(0x7f00000001c0), 0xfffffdef) write$cgroup_subtree(r1, 0x0, 0xfdef) write$cgroup_subtree(r1, &(0x7f00000007c0)={[{0x2b, 'net_prio'}, {0x2b, 'io'}]}, 0xe) write$cgroup_devices(r1, &(0x7f0000000800)=ANY=[@ANYRESOCT, @ANYRES32, @ANYRES64=0x0], 0xffdd) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000019c0)={&(0x7f0000001740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x11e, 0x11e, 0x2, [@float={0x7, 0x0, 0x0, 0x10, 0xc}, @float={0x7, 0x0, 0x0, 0x10, 0x10}, @ptr={0x2}, @func_proto={0x0, 0x7, 0x0, 0xd, 0x0, [{0x5, 0x1}, {0x4}, {0x9, 0x4}, {}, {0xc, 0x5}, {0xa, 0x1}, {0x8, 0x4}]}, @datasec={0x2, 0x7, 0x0, 0xf, 0x2, [{0x800002, 0x400, 0x80}, {0x5, 0x7, 0x9}, {0x4, 0x9, 0x7}, {0x4, 0xa}, {0x3, 0x7fff, 0x7ff}, {0x1, 0x9, 0x5}, {0x3, 0x1000, 0xe2}], "f9cd"}, @decl_tag={0x9, 0x0, 0x0, 0x11, 0x5, 0x6}, @enum={0xa, 0x4, 0x0, 0x6, 0x4, [{0x5, 0xffff8001}, {0x8, 0x4}, {0x8, 0x93d}, {0x8, 0x7}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x5, 0x1}}]}}, &(0x7f00000018c0)=""/197, 0x13a, 0xc5, 0x0, 0x1}, 0x28) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000001a80), 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000001a00)=@bloom_filter={0x1e, 0xd6, 0x10000, 0x4, 0x14430, r1, 0x1, '\x00', 0x0, r2, 0x1, 0x1, 0x4, 0x8, @void, @value, @value=r3}, 0x50) 2.735230774s ago: executing program 3 (id=3227): perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) socket$kcm(0x10, 0x3, 0x10) close(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) r2 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r4}, &(0x7f0000000000), &(0x7f00000000c0)=r1}, 0x20) recvmsg$unix(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000940)=""/199, 0xc7}], 0x1}, 0x10000) 2.599162148s ago: executing program 1 (id=3228): bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) r0 = socket$kcm(0x10, 0x2, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0x1, 0x58, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x5, &(0x7f00000006c0)=ANY=[@ANYRES64=r0], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.events.local\x00', 0x26e1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2106, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x10, 0x2, 0x10) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0x78}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080)) 2.507542571s ago: executing program 1 (id=3229): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x10, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ldst={0x2, 0x0, 0x3, 0x4, 0x0, 0x40, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, r3, 0x4}, 0x38) close(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r5, 0x8, 0x0, 0x9, &(0x7f0000000140)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)={@cgroup=r3, r3, 0x37, 0x8, 0x0, @void, @value=r3, @void, @void, r6}, 0x20) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000b40)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000b00)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x2000c084) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188440f81ec59acbc0413a1d8481100390e142744c24c9f8f4800005e140602000000050e000a00", 0x2e}], 0x1}, 0x8000) ioctl$SIOCSIFHWADDR(r4, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\x00\x00\x00 '}) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r8, 0x0, 0x0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r8, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000000040)=r8) 2.506512542s ago: executing program 2 (id=3230): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x18000000000002a0, 0xf, 0x0, &(0x7f00000001c0)="b15dd7cf1c00000400000000000036", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.444012303s ago: executing program 3 (id=3231): r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169b740ac03d7c64cee49ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d54f45a24effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f949c479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c7724e9e7e7babf61fe358ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261ed1d4515f46290d5c6579b63358fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f13dff7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63e774e940bfeb0de83f42fd565a299f741f9b00be4e8fcaf4ec85daceb16d9e8a438e3eb2556570e381b03d9e3c245728648ed9ff22dc963ed105c851c3481125b4c0c8a08a0c9930190902af109fc56b64cc952f298ebe73d7b18052e0147356228ca171b06274a871e2cf9609e0b4cdad36c3250bc8f56f95a6ed"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x4c, 0x0, 0x4, 0x3000000, {0x0, 0x2000000}}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x2}]}}, 0xffffffffffffffff, 0x3e, 0xb1, 0x2}, 0x20) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000040000000c0000000010"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = syz_clone(0x100080, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_int(r7, &(0x7f0000000200), 0x43451) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000000006c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r8, 0x4030582a, &(0x7f0000000040)) write$cgroup_pid(r8, &(0x7f00000002c0)=r6, 0x12) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030033000b63d25a80648c2594f91224fc60100c214002000003050582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 2.336355747s ago: executing program 2 (id=3232): socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x134c58d86b541130) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4dc) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = getpid() sendmsg$unix(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="10", 0x1}], 0x1, &(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB='\x00'], 0x38}, 0x8841) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r5, 0x0, 0x0) r7 = perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x8, 0xa, 0x40, 0x4, 0x0, 0x200, 0x84800, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x10e6, 0x0, @perf_config_ext={0x16000000000000, 0x2}, 0x80, 0x7f, 0x5, 0x0, 0x6, 0x100, 0x0, 0x0, 0x6}, r3, 0xe, 0xffffffffffffffff, 0x9) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r10 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000780)={0x0, r8}, 0x8) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="2100000001000000010000809b1dd16581080200", @ANYRES32=0x1, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000040000000200edff00"/28], 0x50) r12 = getpid() sendmsg$unix(r9, &(0x7f0000000a40)={&(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000700)=[{&(0x7f00000005c0)="34ede0c6eefdb2d19cd9a36e13fbf5ed8e7eb773da267e90855a7a621b4812e2e5d528ae9ea0482a8ab97977bce7263549b7a6f6b2139b145728af181e00280a8951673280aa7a41770e345338c124a7d28b38ee874fe8050cbfb527e341", 0x5e}, {&(0x7f0000000680)="e9362fd0c952ae71045c333ab12a2d5afa02a4bd925ff3945b2eddc6a2807cb27ba2f5d058a098769c2538ba95e4cbac9824c4d6bb0bfbbcb93f3e7adaff6431f8dc3277e6afa249466ce61b76b90e2a745d79ae0a8e715ddf5e999992c3a90fd033f90c900f0a5c5ab7ccc7ab8930ab51", 0x71}], 0x2, &(0x7f0000000c00)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r7, @ANYRES32=r0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r11, @ANYBLOB="34000000000000000100000001000000", @ANYRES32, @ANYRES32=r6, @ANYRES32, @ANYRES32=r9, @ANYRES32=r0, @ANYRES32=r10, @ANYRES32=r0, @ANYRES8=r4, @ANYRES32=r5, @ANYBLOB="00d89c1c49e3ee8d", @ANYRES32=r7, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32, @ANYRES32=r11, @ANYBLOB="000000001cfbffffffff00000100000002000000", @ANYRES32=r12, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r7, @ANYRES32=r6, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="00000000140000000010000001000000e8000000", @ANYBLOB="1110f0d792b721645930383f0ed7811752940a59b54ed2ccc01a7e6801ab2d2b5d588acfec6e5401973390f5a38da6334a63d8bb1ddac57390e01093ab15fdf0b12008580ad6e91a2ecacf", @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r6, @ANYRES32=r0, @ANYRES32=r7, @ANYRES32=r2, @ANYRES32, @ANYRES32=r8], 0x138, 0x8852}, 0x20000000) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r14 = socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003fffe, 0x30, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x53, 0x7}}, 0x0, 0x1000, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r16) recvmsg$unix(r15, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x15}, 0x0) setsockopt$sock_attach_bpf(r14, 0x107, 0x12, &(0x7f00000008c0)=r17, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r13, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000021000aac141419e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) 2.011818057s ago: executing program 1 (id=3233): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x2000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000180)=@in6={0xa, 0x218, 0x0, @remote, 0x1}, 0x80, 0x0}, 0x20000000) 1.830454362s ago: executing program 4 (id=3234): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x18000000000002a0, 0x11, 0x0, &(0x7f00000001c0)="b15dd7cf1c00000400000000000036af17", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.625149389s ago: executing program 4 (id=3235): r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0xfcf, 0x8, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f00000001c0)='D', 0x33fe0}], 0x1}, 0x20000040) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) close(r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="12000000010000000400"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0xa4, 0x7f, 0x7, 0x20002}, {0x6, 0x0, 0xfd, 0xfffffffd}]}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r3, &(0x7f0000000040)}, 0x20) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r4, 0x107, 0xd, &(0x7f00000000c0), 0x10) socket$kcm(0x10, 0x100000000002, 0x4) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x1, 0x0, 0x0, 0x9, 0x101e1, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000280), 0x2}, 0x10, 0x3, 0x1, 0x4, 0x0, 0xc, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x51, &(0x7f0000000180)=[{&(0x7f0000000440)="6e245132a1938d9438ca8b2fbac231e0ca2ee0d53e029f67ca23cb69f1f4c75e1c2b8729bee628bdca92f476a0617440c4ba04bf0e5c0351dd789c85efc854b80b3d0a37f9a5954c354985d783126d042e8d47f53093722a", 0x58}], 0x1, 0x0, 0x0, 0x7400}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) socket$kcm(0x29, 0x7, 0x0) socket$kcm(0x29, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x4f) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r5 = socket$kcm(0x23, 0x5, 0x0) sendmsg(r5, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x40c0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x1f00, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00000010008188040f80ec59acbc0413a181003100000002010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe2a, 0x0, 0xffffffffffffffa0, 0x0, 0xffffff1e}, 0x400c0) 1.624410109s ago: executing program 2 (id=3236): socket$kcm(0x10, 0x3, 0x10) r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0xfd9}, 0x100002, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000010c0)={r4, 0x0, 0x0}, 0x10) sendmsg$inet(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af36504001a0038001d00", 0x28}, {&(0x7f00000000c0)="83d2ff5f00000080d2898a0cc6d6703b87eb28f77b09bc7e64f918fa3be4664d327d90424d5503002800"/52, 0x34}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x40) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000080)={[{0x2b, 'pids'}]}, 0x6) write$cgroup_subtree(r6, &(0x7f00000000c0)={[{0x2d, 'pids'}]}, 0x6) r7 = socket$kcm(0x2, 0x200000000000001, 0x106) recvmsg$kcm(r7, &(0x7f0000000a80)={&(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, 0x0}, 0x40000002) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r8) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90124fc60100c03400a000000053582c137153e370248078000f01700d1bd", 0x2e}], 0x1}, 0x0) 1.428154775s ago: executing program 3 (id=3237): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) socket$kcm(0x10, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8210, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r3, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000200)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x8, &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc1, &(0x7f0000000580)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0x35, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xfffffffffffffffd, 0xffffffffffffffff, 0x1) socket$kcm(0x11, 0x3, 0x0) getpid() r4 = socket$kcm(0x2, 0x200000000000003, 0x106) setsockopt$sock_attach_bpf(r4, 0x0, 0x5, 0x0, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xa, 0x10, &(0x7f0000000a00)=ANY=[@ANYBLOB="b7c8e7e6b224945900000000000000008a00fe0000000087080000000000007bc8f815c35fa87a7771b200b8b8e98d82ffed4f74ae28fed78af0ff00000000bda100000000000027000000f8ffffffbf04bf4fdc7262ec688660ac8774a400000000000007040000f0e3ffffb7020000000000001823000056ef9c76f25f2994942dbcb2895f00438b806c524400655de45951489a554b73782efd4e3b87c17dae363da87e3c467304661cf35b403c7309d7398422521858e0d01fd6f5a07b6431babbd0b2025b76b4bb", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x180, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r5, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x20000000) sendmsg$kcm(r5, &(0x7f0000000100)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x23}}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000100100000100000051d833483cc75d51900000000000000004000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319e2e66d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)}, 0x2041) 1.181985703s ago: executing program 3 (id=3238): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x4474, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="12000000340000000400b05bfe4ee07ff9096e4e", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r1}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r3, &(0x7f0000000500), 0x0}, 0x20) recvmsg$unix(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f00000005c0), 0x6e, &(0x7f00000036c0)=[{&(0x7f00000026c0)=""/4096, 0x1000}], 0x1, &(0x7f0000003700)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe0}, 0x100) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0xff, 0x0, 0x40, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x85a, 0x4}, 0x0, 0x7b, 0x8, 0x8, 0x1, 0x0, 0x82, 0x0, 0x7, 0x0, 0xa}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) r5 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x1004, 0x6dd700000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x87}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x2c, 0x3, 0x0, &(0x7f0000000580)) perf_event_open$cgroup(&(0x7f00000002c0)={0x3, 0x80, 0x0, 0xb6, 0xd, 0xf2, 0x0, 0x7, 0x80, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000000c0), 0x7}, 0x102000, 0x7fffffffffffffff, 0x1, 0x8, 0xf, 0x5, 0x7, 0x0, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0x4, r5, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x0, 0x37, 0x0, 0x0, 0x1}, 0x28) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89a0, &(0x7f0000000080)) socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001940)="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", 0xd80}, {&(0x7f0000000140)="a2870f1def66f48cc8830c7023bf744803527759543d4991bd867d665212c494d3d7e718ec41820651799c3898ee5c6d84fd2f96afe77cbbc94889f4d4ca", 0x3e}], 0x2}, 0x44) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@map, 0x2b, 0x1, 0x8, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xc, 0x0, 0x0, &(0x7f0000000380), &(0x7f0000000180)=[0x0, 0x0]}, 0x40) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89a2, &(0x7f0000000080)) 1.151644104s ago: executing program 4 (id=3239): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@cgroup=r0, 0x2b, 0x1, 0xd9, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000540)={@cgroup, r1, 0x18, 0x8, 0x0, @void, @value=r0, @void, @void, r2}, 0x20) socket$kcm(0x11, 0x2, 0x300) r3 = perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0xffffffff}, 0x80a0, 0x0, 0x4, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'wlan1\x00', @random="01000500"}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0x1}, &(0x7f0000000040), &(0x7f0000000180)=r4}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={r4, 0x0, 0x0}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r5}, &(0x7f0000000140), &(0x7f0000000380)=r6}, 0x20) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f00000005c0)) 1.141687464s ago: executing program 2 (id=3240): perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) socket$kcm(0x10, 0x3, 0x10) close(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) r2 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r4}, &(0x7f0000000000), &(0x7f00000000c0)=r1}, 0x20) recvmsg$unix(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000940)=""/199, 0xc7}], 0x1}, 0x10000) 1.011486078s ago: executing program 1 (id=3241): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x18000000000002a0, 0xf, 0x0, &(0x7f00000001c0)="b15dd7cf1c00000400000000000036", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 961.22956ms ago: executing program 4 (id=3242): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x4, 0x20c, 0xb}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x25, &(0x7f0000000000)='/proc/sys/net/iph6\x00\x00\x00\x00\x00\x00_\xea\x80=\x00\x00\x00\x00\x00\x00\x00\x00\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 864.666463ms ago: executing program 1 (id=3243): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000002c0)={r0}, 0x8) write$cgroup_int(r1, &(0x7f00000001c0), 0xfffffdef) write$cgroup_subtree(r1, 0x0, 0xfdef) write$cgroup_subtree(r1, &(0x7f00000007c0)={[{0x2b, 'net_prio'}, {0x2b, 'io'}]}, 0xe) write$cgroup_devices(r1, &(0x7f0000000800)=ANY=[@ANYRESOCT, @ANYRES32, @ANYRES64=0x0], 0xffdd) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000019c0)={&(0x7f0000001740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x11e, 0x11e, 0x2, [@float={0x7, 0x0, 0x0, 0x10, 0xc}, @float={0x7, 0x0, 0x0, 0x10, 0x10}, @ptr={0x2}, @func_proto={0x0, 0x7, 0x0, 0xd, 0x0, [{0x5, 0x1}, {0x4}, {0x9, 0x4}, {}, {0xc, 0x5}, {0xa, 0x1}, {0x8, 0x4}]}, @datasec={0x2, 0x7, 0x0, 0xf, 0x2, [{0x800002, 0x400, 0x80}, {0x5, 0x7, 0x9}, {0x4, 0x9, 0x7}, {0x4, 0xa}, {0x3, 0x7fff, 0x7ff}, {0x1, 0x9, 0x5}, {0x3, 0x1000, 0xe2}], "f9cd"}, @decl_tag={0x9, 0x0, 0x0, 0x11, 0x5, 0x6}, @enum={0xa, 0x4, 0x0, 0x6, 0x4, [{0x5, 0xffff8001}, {0x8, 0x4}, {0x8, 0x93d}, {0x8, 0x7}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x5, 0x1}}]}}, &(0x7f00000018c0)=""/197, 0x13a, 0xc5, 0x0, 0x1}, 0x28) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000001a80), 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000001a00)=@bloom_filter={0x1e, 0xd6, 0x10000, 0x4, 0x14430, r1, 0x1, '\x00', 0x0, r2, 0x1, 0x1, 0x4, 0x8, @void, @value, @value=r3}, 0x50) 849.856953ms ago: executing program 4 (id=3244): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x2) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r3, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r4, 0x4) r5 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x43cd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=r3, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000180)=r7, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000705d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10000c00", 0x33fe0}], 0x1}, 0x0) 831.690223ms ago: executing program 2 (id=3245): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000010c0)='net_prio.prioidx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80008, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x152, 0x1, 0x0, 0x2, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f00000000c0)=r0, 0x4) sendmsg$kcm(r1, &(0x7f0000000040)={&(0x7f0000000280)=@caif=@dgm={0x25, 0x9, 0x9}, 0x80, &(0x7f0000000140)}, 0x4008001) socket$kcm(0x1e, 0x1, 0x0) r2 = perf_event_open$cgroup(&(0x7f00000003c0)={0x0, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0xa8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x4, &(0x7f00000000c0)=ANY=[], 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000028000b05d2600d00030009000100ff35", 0x14}], 0x1}, 0x0) openat$cgroup_ro(r0, &(0x7f0000001100)='cpuacct.usage_percpu\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="450a0000000000006111780000000000180000000001c0e4d100"/40], &(0x7f0000000000)='GPL\x00'}, 0x80) socket$kcm(0x10, 0x2, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0xffffffffffffffff, 0x0, r2, 0x0) r4 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f00000003c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x700, 0x0, @mcast2}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000780)="f1", 0x1}], 0x1}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000003440)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x3, &(0x7f0000003ac0), 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) close(0xffffffffffffffff) r6 = socket$kcm(0x2, 0x5, 0x84) socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r6, 0x84, 0x78, &(0x7f0000000040), 0x4) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8916, &(0x7f0000000000)={'wlan1\x00', @random="0200ff7fffff"}) socketpair(0x18, 0x4, 0x1, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, 0x0, 0x200000c8) 828.525944ms ago: executing program 3 (id=3246): socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x20000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800001, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x2, 0x8, 0x0, 0x20000, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x72bd1de2ad10b2f3, 0x0, 0xcfb5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x84000, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8940, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x5452, &(0x7f0000000b80)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|C\b\x00\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdd\x85\xaac{\x8c\x8ffp`-\xcd\xf6jh\xbf\x9c\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\x8b\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca^\xf9\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x96\x86\xdb\xa9\xd3\x01\xb2\xc7\xf8G\x069\x90,\xda\xf6\xc5\xcd\xec\xa3B\xc3\"4\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\x7f\xec\xb2\xc5E\x00\xdd\xf2e\xa8\xf1<\xb2\xc82\xbf=o\x00`\xc1A\'\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x92\xbb\xe3Y\x97\xc2') sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="92", 0x1}], 0x1}, 0x3) 585.894071ms ago: executing program 3 (id=3247): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe30e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8800, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001900)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x3, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000034d, &(0x7f0000001d00), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000240)=ANY=[@ANYBLOB='1\r'], 0x31) 0s ago: executing program 1 (id=3248): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) socket$kcm(0x10, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8210, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r3, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000200)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x8, &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc1, &(0x7f0000000580)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0x35, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xfffffffffffffffd, 0xffffffffffffffff, 0x1) socket$kcm(0x11, 0x3, 0x0) getpid() r4 = socket$kcm(0x2, 0x200000000000003, 0x106) setsockopt$sock_attach_bpf(r4, 0x0, 0x5, 0x0, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xa, 0x10, &(0x7f0000000a00)=ANY=[@ANYBLOB="b7c8e7e6b224945900000000000000008a00fe0000000087080000000000007bc8f815c35fa87a7771b200b8b8e98d82ffed4f74ae28fed78af0ff00000000bda100000000000027000000f8ffffffbf04bf4fdc7262ec688660ac8774a400000000000007040000f0e3ffffb7020000000000001823000056ef9c76f25f2994942dbcb2895f00438b806c524400655de45951489a554b73782efd4e3b87c17dae363da87e3c467304661cf35b403c7309d7398422521858e0d01fd6f5a07b6431babbd0b2025b76b4bb", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x180, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r5, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x20000000) sendmsg$kcm(r5, &(0x7f0000000100)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x23}}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000100100000100000051d833483cc75d51900000000000000004000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319e2e66d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)}, 0x2041) kernel console output (not intermixed with test programs): 546] _copy_from_user+0x2e/0x170 [ 204.218276][ T7546] __copy_msghdr_from_user+0xc9/0x630 [ 204.223647][ T7546] ? verify_lock_unused+0x140/0x140 [ 204.228842][ T7546] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 204.234135][ T7546] ___sys_sendmsg+0x19a/0x2e0 [ 204.238811][ T7546] ? __sys_sendmsg+0x2a0/0x2a0 [ 204.243582][ T7546] ? vfs_write+0x8b2/0xd60 [ 204.248004][ T7546] __se_sys_sendmsg+0x1af/0x290 [ 204.252847][ T7546] ? __x64_sys_sendmsg+0x80/0x80 [ 204.257776][ T7546] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 204.263763][ T7546] ? lockdep_hardirqs_on+0x94/0x140 [ 204.268956][ T7546] do_syscall_64+0x4c/0xa0 [ 204.273362][ T7546] ? clear_bhb_loop+0x30/0x80 [ 204.278029][ T7546] ? clear_bhb_loop+0x30/0x80 [ 204.282702][ T7546] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 204.288593][ T7546] RIP: 0033:0x7f0a95b9ee59 [ 204.292999][ T7546] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 204.312593][ T7546] RSP: 002b:00007f0a93df8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 204.320999][ T7546] RAX: ffffffffffffffda RBX: 00007f0a95e17fa0 RCX: 00007f0a95b9ee59 [ 204.328958][ T7546] RDX: 0000000004000081 RSI: 0000200000000000 RDI: 0000000000000004 [ 204.336918][ T7546] RBP: 00007f0a93df8090 R08: 0000000000000000 R09: 0000000000000000 [ 204.344880][ T7546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 204.352840][ T7546] R13: 00007f0a95e18038 R14: 00007f0a95e17fa0 R15: 00007ffc2e7fa4e8 [ 204.360816][ T7546] [ 204.968115][ T7579] netlink: 'syz.3.1212': attribute type 12 has an invalid length. [ 205.006091][ T7579] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1212'. [ 205.108083][ T7581] netlink: 'syz.4.1215': attribute type 9 has an invalid length. [ 205.166670][ T7581] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1215'. [ 205.767534][ T7603] FAULT_INJECTION: forcing a failure. [ 205.767534][ T7603] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 205.830439][ T7603] CPU: 1 PID: 7603 Comm: syz.0.1222 Not tainted syzkaller #0 [ 205.838548][ T7603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 205.849056][ T7603] Call Trace: [ 205.852360][ T7603] [ 205.855572][ T7603] dump_stack_lvl+0x188/0x250 [ 205.860898][ T7603] ? show_regs_print_info+0x20/0x20 [ 205.866146][ T7603] ? load_image+0x400/0x400 [ 205.870654][ T7603] ? __lock_acquire+0x7d10/0x7d10 [ 205.876825][ T7603] ? rcu_nmi_exit+0x6f/0xf0 [ 205.881431][ T7603] should_fail+0x38c/0x4c0 [ 205.885860][ T7603] _copy_from_iter+0x22e/0x1170 [ 205.890898][ T7603] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 205.897765][ T7603] ? copy_mc_pipe_to_iter+0x7d0/0x7d0 [ 205.903238][ T7603] ? __phys_addr_symbol+0x2b/0x70 [ 205.908450][ T7603] ? __check_object_size+0x30c/0x410 [ 205.914000][ T7603] skb_copy_datagram_from_iter+0xf2/0x6a0 [ 205.919820][ T7603] ? skb_put+0x117/0x210 [ 205.924430][ T7603] packet_sendmsg+0x3840/0x5060 [ 205.929571][ T7603] ? __might_sleep+0xf0/0xf0 [ 205.937016][ T7603] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 205.950711][ T7603] ? lock_chain_count+0x20/0x20 [ 205.957949][ T7603] ? aa_sk_perm+0x7dc/0x910 [ 205.964910][ T7603] ? packet_getsockopt+0x9a0/0x9a0 [ 205.970213][ T7603] ? aa_sock_msg_perm+0x94/0x150 [ 205.978192][ T7603] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 205.985227][ T7603] ? security_socket_sendmsg+0x7c/0xa0 [ 205.993347][ T7603] ? packet_getsockopt+0x9a0/0x9a0 [ 206.003515][ T7603] ____sys_sendmsg+0x5b7/0x8f0 [ 206.010009][ T7603] ? __sys_sendmsg_sock+0x30/0x30 [ 206.017637][ T7603] ? import_iovec+0x6f/0xa0 [ 206.022263][ T7603] ___sys_sendmsg+0x236/0x2e0 [ 206.027817][ T7603] ? __sys_sendmsg+0x2a0/0x2a0 [ 206.032994][ T7603] __se_sys_sendmsg+0x1af/0x290 [ 206.038185][ T7603] ? __x64_sys_sendmsg+0x80/0x80 [ 206.043421][ T7603] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 206.050053][ T7603] ? lockdep_hardirqs_on+0x94/0x140 [ 206.055263][ T7603] do_syscall_64+0x4c/0xa0 [ 206.060654][ T7603] ? clear_bhb_loop+0x30/0x80 [ 206.065455][ T7603] ? clear_bhb_loop+0x30/0x80 [ 206.070161][ T7603] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 206.076143][ T7603] RIP: 0033:0x7f2f4db0ce59 [ 206.080720][ T7603] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 206.101035][ T7603] RSP: 002b:00007f2f4bd66028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 206.109456][ T7603] RAX: ffffffffffffffda RBX: 00007f2f4dd85fa0 RCX: 00007f2f4db0ce59 [ 206.117835][ T7603] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 206.126742][ T7603] RBP: 00007f2f4bd66090 R08: 0000000000000000 R09: 0000000000000000 [ 206.135744][ T7603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.143937][ T7603] R13: 00007f2f4dd86038 R14: 00007f2f4dd85fa0 R15: 00007ffd1bb8bc08 [ 206.152190][ T7603] [ 206.437190][ T7627] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1228'. [ 206.706516][ T7638] netlink: 'syz.0.1235': attribute type 9 has an invalid length. [ 206.731002][ T7638] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1235'. [ 207.347044][ T7659] netlink: 15743 bytes leftover after parsing attributes in process `syz.2.1242'. [ 207.451881][ T7659] netlink: 'syz.2.1242': attribute type 10 has an invalid length. [ 207.547588][ T21] Bluetooth: hci1: command 0x0406 tx timeout [ 207.553717][ T21] Bluetooth: hci3: command 0x0406 tx timeout [ 207.582406][ T21] Bluetooth: hci2: command 0x0406 tx timeout [ 207.606857][ T21] Bluetooth: hci4: command 0x0406 tx timeout [ 207.615865][ T21] Bluetooth: hci0: command 0x0406 tx timeout [ 207.673736][ T7678] FAULT_INJECTION: forcing a failure. [ 207.673736][ T7678] name failslab, interval 1, probability 0, space 0, times 0 [ 207.711000][ T7678] CPU: 0 PID: 7678 Comm: syz.0.1250 Not tainted syzkaller #0 [ 207.718423][ T7678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 207.729163][ T7678] Call Trace: [ 207.732910][ T7678] [ 207.735957][ T7678] dump_stack_lvl+0x188/0x250 [ 207.740758][ T7678] ? show_regs_print_info+0x20/0x20 [ 207.746230][ T7678] ? load_image+0x400/0x400 [ 207.750739][ T7678] ? __might_sleep+0xf0/0xf0 [ 207.755325][ T7678] ? __lock_acquire+0x7d10/0x7d10 [ 207.760438][ T7678] should_fail+0x38c/0x4c0 [ 207.765029][ T7678] should_failslab+0x5/0x20 [ 207.769539][ T7678] slab_pre_alloc_hook+0x51/0xc0 [ 207.774658][ T7678] __kmalloc_node_track_caller+0x68/0x3a0 [ 207.780490][ T7678] ? netlink_sendmsg+0x654/0xbe0 [ 207.785657][ T7678] ? kmem_cache_alloc_node+0x162/0x2d0 [ 207.791846][ T7678] ? __alloc_skb+0xf4/0x750 [ 207.797370][ T7678] ? netlink_sendmsg+0x654/0xbe0 [ 207.802321][ T7678] __alloc_skb+0x22c/0x750 [ 207.807119][ T7678] netlink_sendmsg+0x654/0xbe0 [ 207.811898][ T7678] ? netlink_getsockopt+0x570/0x570 [ 207.817292][ T7678] ? aa_sock_msg_perm+0x94/0x150 [ 207.822230][ T7678] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 207.827506][ T7678] ? security_socket_sendmsg+0x7c/0xa0 [ 207.833046][ T7678] ? netlink_getsockopt+0x570/0x570 [ 207.838260][ T7678] ____sys_sendmsg+0x5b7/0x8f0 [ 207.843091][ T7678] ? __sys_sendmsg_sock+0x30/0x30 [ 207.848117][ T7678] ? import_iovec+0x6f/0xa0 [ 207.853037][ T7678] ___sys_sendmsg+0x236/0x2e0 [ 207.857734][ T7678] ? __sys_sendmsg+0x2a0/0x2a0 [ 207.863197][ T7678] ? vfs_write+0x8b2/0xd60 [ 207.867633][ T7678] __se_sys_sendmsg+0x1af/0x290 [ 207.872515][ T7678] ? __x64_sys_sendmsg+0x80/0x80 [ 207.877561][ T7678] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 207.883595][ T7678] ? lockdep_hardirqs_on+0x94/0x140 [ 207.888786][ T7678] do_syscall_64+0x4c/0xa0 [ 207.893191][ T7678] ? clear_bhb_loop+0x30/0x80 [ 207.897858][ T7678] ? clear_bhb_loop+0x30/0x80 [ 207.902528][ T7678] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 207.908498][ T7678] RIP: 0033:0x7f2f4db0ce59 [ 207.912908][ T7678] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 207.932680][ T7678] RSP: 002b:00007f2f4bd66028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 207.941088][ T7678] RAX: ffffffffffffffda RBX: 00007f2f4dd85fa0 RCX: 00007f2f4db0ce59 [ 207.949052][ T7678] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 207.957012][ T7678] RBP: 00007f2f4bd66090 R08: 0000000000000000 R09: 0000000000000000 [ 207.965004][ T7678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.972993][ T7678] R13: 00007f2f4dd86038 R14: 00007f2f4dd85fa0 R15: 00007ffd1bb8bc08 [ 207.981008][ T7678] [ 208.029223][ T7684] netlink: 'syz.2.1251': attribute type 9 has an invalid length. [ 208.037983][ T7684] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1251'. [ 208.723352][ T7711] raw_sendmsg: syz.4.1262 forgot to set AF_INET. Fix it! [ 209.276135][ T7730] netlink: 'syz.3.1268': attribute type 9 has an invalid length. [ 209.323008][ T7730] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1268'. [ 209.911877][ T7751] device wlan1 entered promiscuous mode [ 210.259929][ T7772] FAULT_INJECTION: forcing a failure. [ 210.259929][ T7772] name failslab, interval 1, probability 0, space 0, times 0 [ 210.349007][ T7772] CPU: 1 PID: 7772 Comm: syz.0.1283 Not tainted syzkaller #0 [ 210.356707][ T7772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 210.366964][ T7772] Call Trace: [ 210.370271][ T7772] [ 210.373230][ T7772] dump_stack_lvl+0x188/0x250 [ 210.378060][ T7772] ? show_regs_print_info+0x20/0x20 [ 210.383649][ T7772] ? load_image+0x400/0x400 [ 210.388208][ T7772] ? __might_sleep+0xf0/0xf0 [ 210.392859][ T7772] ? __lock_acquire+0x7d10/0x7d10 [ 210.398060][ T7772] should_fail+0x38c/0x4c0 [ 210.402538][ T7772] should_failslab+0x5/0x20 [ 210.407066][ T7772] slab_pre_alloc_hook+0x51/0xc0 [ 210.412041][ T7772] kmem_cache_alloc_node_trace+0x4a/0x300 [ 210.417791][ T7772] ? __get_vm_area_node+0x119/0x2d0 [ 210.423033][ T7772] __get_vm_area_node+0x119/0x2d0 [ 210.428109][ T7772] __vmalloc_node_range+0xef/0x8b0 [ 210.433255][ T7772] ? ethtool_get_stats+0x207/0x390 [ 210.438410][ T7772] ? __might_fault+0xb3/0x110 [ 210.443122][ T7772] ? ethtool_get_stats+0x207/0x390 [ 210.448262][ T7772] vzalloc+0x75/0x80 [ 210.452195][ T7772] ? ethtool_get_stats+0x207/0x390 [ 210.457331][ T7772] ethtool_get_stats+0x207/0x390 [ 210.462303][ T7772] ? ethtool_phys_id+0x4b0/0x4b0 [ 210.467383][ T7772] dev_ethtool+0xc00/0xfe0 [ 210.471943][ T7772] ? ethtool_get_module_eeprom_call+0x170/0x170 [ 210.478237][ T7772] ? mutex_lock_io_nested+0x60/0x60 [ 210.483478][ T7772] ? __lock_acquire+0x7d10/0x7d10 [ 210.488540][ T7772] ? full_name_hash+0x8e/0xe0 [ 210.493282][ T7772] dev_ioctl+0x457/0xe30 [ 210.497640][ T7772] ? _copy_from_user+0x111/0x170 [ 210.502611][ T7772] sock_do_ioctl+0x245/0x320 [ 210.507230][ T7772] ? sock_show_fdinfo+0xb0/0xb0 [ 210.512139][ T7772] sock_ioctl+0x4d2/0x710 [ 210.516497][ T7772] ? sock_poll+0x410/0x410 [ 210.520962][ T7772] ? bpf_lsm_file_ioctl+0x5/0x10 [ 210.525921][ T7772] ? security_file_ioctl+0x7c/0xa0 [ 210.531062][ T7772] ? sock_poll+0x410/0x410 [ 210.535496][ T7772] __se_sys_ioctl+0xfa/0x170 [ 210.540119][ T7772] do_syscall_64+0x4c/0xa0 [ 210.544554][ T7772] ? clear_bhb_loop+0x30/0x80 [ 210.549242][ T7772] ? clear_bhb_loop+0x30/0x80 [ 210.553952][ T7772] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 210.559871][ T7772] RIP: 0033:0x7f2f4db0ce59 [ 210.564393][ T7772] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 210.586329][ T7772] RSP: 002b:00007f2f4bd66028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 210.595330][ T7772] RAX: ffffffffffffffda RBX: 00007f2f4dd85fa0 RCX: 00007f2f4db0ce59 [ 210.603679][ T7772] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000005 [ 210.612162][ T7772] RBP: 00007f2f4bd66090 R08: 0000000000000000 R09: 0000000000000000 [ 210.620265][ T7772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 210.628266][ T7772] R13: 00007f2f4dd86038 R14: 00007f2f4dd85fa0 R15: 00007ffd1bb8bc08 [ 210.636315][ T7772] [ 210.656203][ T7772] syz.0.1283: vmalloc error: size 232, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 210.705852][ T7772] CPU: 0 PID: 7772 Comm: syz.0.1283 Not tainted syzkaller #0 [ 210.713415][ T7772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 210.727170][ T7772] Call Trace: [ 210.730584][ T7772] [ 210.733603][ T7772] dump_stack_lvl+0x188/0x250 [ 210.738329][ T7772] ? rcu_lock_release+0x5/0x20 [ 210.743135][ T7772] ? show_regs_print_info+0x20/0x20 [ 210.748460][ T7772] ? load_image+0x400/0x400 [ 210.753033][ T7772] warn_alloc+0x243/0x320 [ 210.757417][ T7772] ? zone_watermark_ok_safe+0x240/0x240 [ 210.763221][ T7772] ? kmem_cache_alloc_node_trace+0x16c/0x300 [ 210.769240][ T7772] ? __get_vm_area_node+0x119/0x2d0 [ 210.775922][ T7772] __vmalloc_node_range+0x2b1/0x8b0 [ 210.781462][ T7772] ? __might_fault+0xb3/0x110 [ 210.786334][ T7772] ? ethtool_get_stats+0x207/0x390 [ 210.791502][ T7772] vzalloc+0x75/0x80 [ 210.795536][ T7772] ? ethtool_get_stats+0x207/0x390 [ 210.800700][ T7772] ethtool_get_stats+0x207/0x390 [ 210.805784][ T7772] ? ethtool_phys_id+0x4b0/0x4b0 [ 210.810879][ T7772] dev_ethtool+0xc00/0xfe0 [ 210.815364][ T7772] ? ethtool_get_module_eeprom_call+0x170/0x170 [ 210.821668][ T7772] ? mutex_lock_io_nested+0x60/0x60 [ 210.826940][ T7772] ? __lock_acquire+0x7d10/0x7d10 [ 210.832519][ T7772] ? full_name_hash+0x8e/0xe0 [ 210.838334][ T7772] dev_ioctl+0x457/0xe30 [ 210.842697][ T7772] ? _copy_from_user+0x111/0x170 [ 210.847754][ T7772] sock_do_ioctl+0x245/0x320 [ 210.854483][ T7772] ? sock_show_fdinfo+0xb0/0xb0 [ 210.862205][ T7772] sock_ioctl+0x4d2/0x710 [ 210.867227][ T7772] ? sock_poll+0x410/0x410 [ 210.872545][ T7772] ? bpf_lsm_file_ioctl+0x5/0x10 [ 210.881381][ T7772] ? security_file_ioctl+0x7c/0xa0 [ 210.887022][ T7772] ? sock_poll+0x410/0x410 [ 210.891550][ T7772] __se_sys_ioctl+0xfa/0x170 [ 210.896241][ T7772] do_syscall_64+0x4c/0xa0 [ 210.901394][ T7772] ? clear_bhb_loop+0x30/0x80 [ 210.906204][ T7772] ? clear_bhb_loop+0x30/0x80 [ 210.911175][ T7772] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 210.917157][ T7772] RIP: 0033:0x7f2f4db0ce59 [ 210.921578][ T7772] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 210.943155][ T7772] RSP: 002b:00007f2f4bd66028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 210.952216][ T7772] RAX: ffffffffffffffda RBX: 00007f2f4dd85fa0 RCX: 00007f2f4db0ce59 [ 210.960805][ T7772] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000005 [ 210.969969][ T7772] RBP: 00007f2f4bd66090 R08: 0000000000000000 R09: 0000000000000000 [ 210.977958][ T7772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 210.985936][ T7772] R13: 00007f2f4dd86038 R14: 00007f2f4dd85fa0 R15: 00007ffd1bb8bc08 [ 210.993971][ T7772] [ 211.088086][ T7772] Mem-Info: [ 211.091864][ T7772] active_anon:263 inactive_anon:11823 isolated_anon:0 [ 211.091864][ T7772] active_file:23488 inactive_file:37857 isolated_file:0 [ 211.091864][ T7772] unevictable:768 dirty:115 writeback:0 [ 211.091864][ T7772] slab_reclaimable:20974 slab_unreclaimable:97073 [ 211.091864][ T7772] mapped:29739 shmem:1630 pagetables:638 bounce:0 [ 211.091864][ T7772] kernel_misc_reclaimable:0 [ 211.091864][ T7772] free:1359366 free_pcp:11591 free_cma:0 [ 211.158720][ T7772] Node 0 active_anon:1020kB inactive_anon:46984kB active_file:93752kB inactive_file:151428kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118956kB dirty:460kB writeback:0kB shmem:4444kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10540kB pagetables:2752kB all_unreclaimable? no [ 211.206311][ T7772] Node 1 active_anon:32kB inactive_anon:508kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2076kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 211.244354][ T7772] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 211.274073][ T7772] lowmem_reserve[]: 0 2539 2540 2540 2540 [ 211.280800][ T7772] Node 0 DMA32 free:1505676kB min:34784kB low:43480kB high:52176kB reserved_highatomic:0KB active_anon:1020kB inactive_anon:47084kB active_file:93752kB inactive_file:151428kB unevictable:1536kB writepending:460kB present:3129332kB managed:2606544kB mlocked:0kB bounce:0kB free_pcp:39656kB local_pcp:20652kB free_cma:0kB [ 211.314985][ T7772] lowmem_reserve[]: 0 0 0 0 0 [ 211.326787][ T7772] Node 0 Normal free:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:660kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 211.364255][ T7796] netlink: 'syz.1.1289': attribute type 9 has an invalid length. [ 211.374085][ T7796] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1289'. [ 211.390160][ T7772] lowmem_reserve[]: 0 0 0 0 0 [ 211.402800][ T7772] Node 1 Normal free:3916776kB min:55108kB low:68884kB high:82660kB reserved_highatomic:0KB active_anon:32kB inactive_anon:508kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:5328kB local_pcp:4656kB free_cma:0kB [ 211.437948][ T7772] lowmem_reserve[]: 0 0 0 0 0 [ 211.442865][ T7772] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 211.457074][ T7772] Node 0 DMA32: 2494*4kB (UME) 2277*8kB (UME) 1301*16kB (UM) 1333*32kB (UME) 734*64kB (UM) 346*128kB (UME) 118*256kB (M) 36*512kB (ME) 4*1024kB (UM) 2*2048kB (UM) 309*4096kB (M) = 1505424kB [ 211.477496][ T7772] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 211.489451][ T7772] Node 1 Normal: 136*4kB (UME) 23*8kB (UME) 27*16kB (UME) 211*32kB (UME) 84*64kB (UME) 10*128kB (U) 5*256kB (UME) 3*512kB (U) 0*1024kB 2*2048kB (UM) 951*4096kB (ME) = 3916776kB [ 211.508138][ T7772] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 211.517913][ T7772] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 211.527283][ T7772] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 211.537885][ T7772] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 211.548970][ T7772] 62975 total pagecache pages [ 211.553745][ T7772] 0 pages in swap cache [ 211.558173][ T7772] Swap cache stats: add 0, delete 0, find 0/0 [ 211.564370][ T7772] Free swap = 124996kB [ 211.568615][ T7772] Total swap = 124996kB [ 211.572786][ T7772] 2097051 pages RAM [ 211.576772][ T7772] 0 pages HighMem/MovableOnly [ 211.581453][ T7772] 411492 pages reserved [ 211.585666][ T7772] 0 pages cma reserved [ 211.896927][ T7808] FAULT_INJECTION: forcing a failure. [ 211.896927][ T7808] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 211.916877][ T7808] CPU: 0 PID: 7808 Comm: syz.0.1294 Not tainted syzkaller #0 [ 211.924302][ T7808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 211.934371][ T7808] Call Trace: [ 211.937672][ T7808] [ 211.940616][ T7808] dump_stack_lvl+0x188/0x250 [ 211.945310][ T7808] ? show_regs_print_info+0x20/0x20 [ 211.950525][ T7808] ? load_image+0x400/0x400 [ 211.955291][ T7808] ? __lock_acquire+0x7d10/0x7d10 [ 211.960328][ T7808] ? perf_trace_lock+0xe4/0x390 [ 211.965179][ T7808] should_fail+0x38c/0x4c0 [ 211.969610][ T7808] _copy_from_user+0x2e/0x170 [ 211.974387][ T7808] ___sys_recvmsg+0x173/0x5c0 [ 211.979611][ T7808] ? __sys_recvmsg+0x280/0x280 [ 211.984610][ T7808] ? trace_event_raw_event_lock+0x270/0x270 [ 211.990552][ T7808] __x64_sys_recvmsg+0x1f9/0x2c0 [ 211.995770][ T7808] ? ___sys_recvmsg+0x5c0/0x5c0 [ 212.000642][ T7808] ? syscall_enter_from_user_mode+0x2a/0x70 [ 212.006534][ T7808] do_syscall_64+0x4c/0xa0 [ 212.010967][ T7808] ? clear_bhb_loop+0x30/0x80 [ 212.015667][ T7808] ? clear_bhb_loop+0x30/0x80 [ 212.020368][ T7808] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 212.026273][ T7808] RIP: 0033:0x7f2f4db0ce59 [ 212.030743][ T7808] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.050528][ T7808] RSP: 002b:00007f2f4bd66028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 212.058954][ T7808] RAX: ffffffffffffffda RBX: 00007f2f4dd85fa0 RCX: 00007f2f4db0ce59 [ 212.066932][ T7808] RDX: 0000000000000000 RSI: 0000200000000e80 RDI: 0000000000000004 [ 212.074906][ T7808] RBP: 00007f2f4bd66090 R08: 0000000000000000 R09: 0000000000000000 [ 212.082887][ T7808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.092816][ T7808] R13: 00007f2f4dd86038 R14: 00007f2f4dd85fa0 R15: 00007ffd1bb8bc08 [ 212.100942][ T7808] [ 212.476779][ T7828] FAULT_INJECTION: forcing a failure. [ 212.476779][ T7828] name failslab, interval 1, probability 0, space 0, times 0 [ 212.494615][ T7828] CPU: 0 PID: 7828 Comm: syz.4.1301 Not tainted syzkaller #0 [ 212.502034][ T7828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 212.512101][ T7828] Call Trace: [ 212.515374][ T7828] [ 212.518300][ T7828] dump_stack_lvl+0x188/0x250 [ 212.522984][ T7828] ? show_regs_print_info+0x20/0x20 [ 212.528170][ T7828] ? load_image+0x400/0x400 [ 212.532664][ T7828] ? __might_sleep+0xf0/0xf0 [ 212.537243][ T7828] ? __lock_acquire+0x7d10/0x7d10 [ 212.542264][ T7828] should_fail+0x38c/0x4c0 [ 212.546676][ T7828] should_failslab+0x5/0x20 [ 212.551258][ T7828] slab_pre_alloc_hook+0x51/0xc0 [ 212.556278][ T7828] __kmalloc_node_track_caller+0x68/0x3a0 [ 212.561989][ T7828] ? netlink_sendmsg+0x654/0xbe0 [ 212.566922][ T7828] ? kmem_cache_alloc_node+0x162/0x2d0 [ 212.572369][ T7828] ? __alloc_skb+0xf4/0x750 [ 212.576860][ T7828] ? netlink_sendmsg+0x654/0xbe0 [ 212.581885][ T7828] __alloc_skb+0x22c/0x750 [ 212.586302][ T7828] netlink_sendmsg+0x654/0xbe0 [ 212.591092][ T7828] ? netlink_getsockopt+0x570/0x570 [ 212.596366][ T7828] ? aa_sock_msg_perm+0x94/0x150 [ 212.601310][ T7828] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 212.606593][ T7828] ? security_socket_sendmsg+0x7c/0xa0 [ 212.612041][ T7828] ? netlink_getsockopt+0x570/0x570 [ 212.617227][ T7828] ____sys_sendmsg+0x5b7/0x8f0 [ 212.622101][ T7828] ? __sys_sendmsg_sock+0x30/0x30 [ 212.627156][ T7828] ? import_iovec+0x6f/0xa0 [ 212.631661][ T7828] ___sys_sendmsg+0x236/0x2e0 [ 212.636339][ T7828] ? __sys_sendmsg+0x2a0/0x2a0 [ 212.641117][ T7828] __se_sys_sendmsg+0x1af/0x290 [ 212.645962][ T7828] ? __x64_sys_sendmsg+0x80/0x80 [ 212.650885][ T7828] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 212.656862][ T7828] ? lockdep_hardirqs_on+0x94/0x140 [ 212.662056][ T7828] do_syscall_64+0x4c/0xa0 [ 212.666568][ T7828] ? clear_bhb_loop+0x30/0x80 [ 212.671266][ T7828] ? clear_bhb_loop+0x30/0x80 [ 212.675946][ T7828] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 212.681842][ T7828] RIP: 0033:0x7f2a4ab79e59 [ 212.686260][ T7828] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.705869][ T7828] RSP: 002b:00007f2a48dd3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 212.714561][ T7828] RAX: ffffffffffffffda RBX: 00007f2a4adf2fa0 RCX: 00007f2a4ab79e59 [ 212.722636][ T7828] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 212.730634][ T7828] RBP: 00007f2a48dd3090 R08: 0000000000000000 R09: 0000000000000000 [ 212.738600][ T7828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.746558][ T7828] R13: 00007f2a4adf3038 R14: 00007f2a4adf2fa0 R15: 00007ffccef34568 [ 212.754543][ T7828] [ 213.363210][ T7850] netlink: 'syz.1.1307': attribute type 9 has an invalid length. [ 213.395863][ T7850] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1307'. [ 213.734503][ T7860] FAULT_INJECTION: forcing a failure. [ 213.734503][ T7860] name failslab, interval 1, probability 0, space 0, times 0 [ 213.808543][ T7860] CPU: 0 PID: 7860 Comm: syz.3.1310 Not tainted syzkaller #0 [ 213.816035][ T7860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 213.826358][ T7860] Call Trace: [ 213.829788][ T7860] [ 213.833324][ T7860] dump_stack_lvl+0x188/0x250 [ 213.838098][ T7860] ? show_regs_print_info+0x20/0x20 [ 213.843361][ T7860] ? load_image+0x400/0x400 [ 213.847949][ T7860] ? __might_sleep+0xf0/0xf0 [ 213.852600][ T7860] ? __lock_acquire+0x7d10/0x7d10 [ 213.857727][ T7860] should_fail+0x38c/0x4c0 [ 213.862263][ T7860] should_failslab+0x5/0x20 [ 213.866835][ T7860] slab_pre_alloc_hook+0x51/0xc0 [ 213.872493][ T7860] kmem_cache_alloc_trace+0x47/0x2a0 [ 213.877926][ T7860] ? allocate_cgrp_cset_links+0xc9/0x320 [ 213.883662][ T7860] allocate_cgrp_cset_links+0xc9/0x320 [ 213.889833][ T7860] find_css_set+0x9ed/0x1520 [ 213.895167][ T7860] ? cgroup_migrate_prepare_dst+0xc30/0xc30 [ 213.901199][ T7860] ? mark_lock+0x94/0x320 [ 213.905671][ T7860] cgroup_migrate_prepare_dst+0x13b/0xc30 [ 213.911514][ T7860] cgroup_attach_task+0x508/0x7b0 [ 213.917203][ T7860] ? cgroup_migrate_execute+0x1010/0x1010 [ 213.923055][ T7860] ? cgroup_attach_permissions+0x537/0xa90 [ 213.928955][ T7860] ? revert_creds+0x17f/0x250 [ 213.933714][ T7860] __cgroup_procs_write+0x239/0x350 [ 213.939247][ T7860] cgroup_procs_write+0x23/0x40 [ 213.944198][ T7860] ? cgroup_procs_next+0xa0/0xa0 [ 213.949216][ T7860] cgroup_file_write+0x2c3/0x660 [ 213.954216][ T7860] ? read_lock_is_recursive+0x10/0x10 [ 213.959681][ T7860] ? cgroup_seqfile_stop+0xd0/0xd0 [ 213.964948][ T7860] ? cgroup_seqfile_stop+0xd0/0xd0 [ 213.970610][ T7860] kernfs_fop_write_iter+0x379/0x4c0 [ 213.976225][ T7860] vfs_write+0x745/0xd60 [ 213.980704][ T7860] ? file_end_write+0x250/0x250 [ 213.985667][ T7860] ? __fget_files+0x40f/0x480 [ 213.990450][ T7860] ? mutex_lock_nested+0x17/0x20 [ 213.995441][ T7860] ? __fdget_pos+0x2bf/0x370 [ 214.000089][ T7860] ? ksys_write+0x71/0x260 [ 214.004859][ T7860] ksys_write+0x152/0x260 [ 214.009276][ T7860] ? __ia32_sys_read+0x80/0x80 [ 214.014226][ T7860] ? lockdep_hardirqs_on+0x94/0x140 [ 214.019640][ T7860] do_syscall_64+0x4c/0xa0 [ 214.024107][ T7860] ? clear_bhb_loop+0x30/0x80 [ 214.028948][ T7860] ? clear_bhb_loop+0x30/0x80 [ 214.033712][ T7860] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 214.039653][ T7860] RIP: 0033:0x7f0a95b9ee59 [ 214.044124][ T7860] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.063994][ T7860] RSP: 002b:00007f0a93df8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 214.072478][ T7860] RAX: ffffffffffffffda RBX: 00007f0a95e17fa0 RCX: 00007f0a95b9ee59 [ 214.080595][ T7860] RDX: 0000000000000012 RSI: 0000200000000040 RDI: 000000000000000c [ 214.088750][ T7860] RBP: 00007f0a93df8090 R08: 0000000000000000 R09: 0000000000000000 [ 214.096773][ T7860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.105232][ T7860] R13: 00007f0a95e18038 R14: 00007f0a95e17fa0 R15: 00007ffc2e7fa4e8 [ 214.113373][ T7860] [ 214.799002][ T7883] netlink: 'syz.4.1316': attribute type 21 has an invalid length. [ 214.894590][ T7883] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1316'. [ 215.104043][ T7900] netlink: 'syz.3.1324': attribute type 9 has an invalid length. [ 215.151273][ T7900] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1324'. [ 215.456404][ T7913] tap0: tun_chr_ioctl cmd 35111 [ 215.817248][ T7933] netlink: 'syz.0.1333': attribute type 9 has an invalid length. [ 215.876123][ T7933] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1333'. [ 217.028104][ T7973] netlink: 'syz.0.1348': attribute type 9 has an invalid length. [ 217.056896][ T7973] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1348'. [ 217.462419][ T7996] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1356'. [ 217.510516][ T7996] openvswitch: netlink: Key 29 has unexpected len 3064 expected 0 [ 217.788649][ T8003] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.425444][ T8031] FAULT_INJECTION: forcing a failure. [ 218.425444][ T8031] name failslab, interval 1, probability 0, space 0, times 0 [ 218.470313][ T8030] netlink: 'syz.0.1367': attribute type 9 has an invalid length. [ 218.507115][ T8030] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1367'. [ 218.534222][ T8031] CPU: 1 PID: 8031 Comm: syz.3.1366 Not tainted syzkaller #0 [ 218.541651][ T8031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 218.551718][ T8031] Call Trace: [ 218.555011][ T8031] [ 218.557955][ T8031] dump_stack_lvl+0x188/0x250 [ 218.562648][ T8031] ? show_regs_print_info+0x20/0x20 [ 218.567863][ T8031] ? load_image+0x400/0x400 [ 218.572385][ T8031] ? __might_sleep+0xf0/0xf0 [ 218.576996][ T8031] ? __lock_acquire+0x7d10/0x7d10 [ 218.582045][ T8031] should_fail+0x38c/0x4c0 [ 218.586488][ T8031] should_failslab+0x5/0x20 [ 218.590997][ T8031] slab_pre_alloc_hook+0x51/0xc0 [ 218.595951][ T8031] kmem_cache_alloc_trace+0x47/0x2a0 [ 218.601336][ T8031] ? __inet_diag_dump_start+0x8b/0x970 [ 218.606811][ T8031] __inet_diag_dump_start+0x8b/0x970 [ 218.612115][ T8031] __netlink_dump_start+0x3e8/0x700 [ 218.617333][ T8031] inet_diag_rcv_msg_compat+0x207/0x420 [ 218.622889][ T8031] ? inet_diag_unregister+0xb0/0xb0 [ 218.628094][ T8031] ? __mutex_trylock_common+0x155/0x260 [ 218.633653][ T8031] ? mutex_lock_io_nested+0x60/0x60 [ 218.638874][ T8031] ? __inet_diag_dump+0x380/0x380 [ 218.643936][ T8031] ? inet_diag_dump_start_compat+0x20/0x20 [ 218.649747][ T8031] ? inet_diag_dump+0x50/0x50 [ 218.654437][ T8031] ? inet_diag_unregister+0xb0/0xb0 [ 218.659641][ T8031] sock_diag_rcv_msg+0x164/0x3e0 [ 218.664591][ T8031] netlink_rcv_skb+0x1f5/0x440 [ 218.669369][ T8031] ? sock_diag_bind+0xa0/0xa0 [ 218.674051][ T8031] ? netlink_ack+0xb50/0xb50 [ 218.678644][ T8031] ? __lock_acquire+0x7d10/0x7d10 [ 218.683677][ T8031] sock_diag_rcv+0x26/0x40 [ 218.688091][ T8031] netlink_unicast+0x774/0x920 [ 218.692864][ T8031] netlink_sendmsg+0x8ba/0xbe0 [ 218.697637][ T8031] ? netlink_getsockopt+0x570/0x570 [ 218.702835][ T8031] ? aa_sock_msg_perm+0x94/0x150 [ 218.707773][ T8031] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 218.713056][ T8031] ? security_socket_sendmsg+0x7c/0xa0 [ 218.718511][ T8031] ? netlink_getsockopt+0x570/0x570 [ 218.723709][ T8031] ____sys_sendmsg+0x5b7/0x8f0 [ 218.728498][ T8031] ? __sys_sendmsg_sock+0x30/0x30 [ 218.733535][ T8031] ? import_iovec+0x6f/0xa0 [ 218.738044][ T8031] ___sys_sendmsg+0x236/0x2e0 [ 218.742725][ T8031] ? __sys_sendmsg+0x2a0/0x2a0 [ 218.747499][ T8031] ? vfs_write+0x8b2/0xd60 [ 218.751937][ T8031] __se_sys_sendmsg+0x1af/0x290 [ 218.756793][ T8031] ? __x64_sys_sendmsg+0x80/0x80 [ 218.761730][ T8031] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 218.767725][ T8031] ? lockdep_hardirqs_on+0x94/0x140 [ 218.772926][ T8031] do_syscall_64+0x4c/0xa0 [ 218.777339][ T8031] ? clear_bhb_loop+0x30/0x80 [ 218.782011][ T8031] ? clear_bhb_loop+0x30/0x80 [ 218.786685][ T8031] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 218.792576][ T8031] RIP: 0033:0x7f0a95b9ee59 [ 218.796991][ T8031] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 218.816597][ T8031] RSP: 002b:00007f0a93dd7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 218.825015][ T8031] RAX: ffffffffffffffda RBX: 00007f0a95e18090 RCX: 00007f0a95b9ee59 [ 218.832985][ T8031] RDX: 0000000000040084 RSI: 0000200000000100 RDI: 0000000000000004 [ 218.840952][ T8031] RBP: 00007f0a93dd7090 R08: 0000000000000000 R09: 0000000000000000 [ 218.848923][ T8031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 218.856890][ T8031] R13: 00007f0a95e18128 R14: 00007f0a95e18090 R15: 00007ffc2e7fa4e8 [ 218.864988][ T8031] [ 219.126930][ T8047] FAULT_INJECTION: forcing a failure. [ 219.126930][ T8047] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 219.191367][ T8047] CPU: 1 PID: 8047 Comm: syz.4.1372 Not tainted syzkaller #0 [ 219.198782][ T8047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 219.208855][ T8047] Call Trace: [ 219.212151][ T8047] [ 219.215091][ T8047] dump_stack_lvl+0x188/0x250 [ 219.219783][ T8047] ? show_regs_print_info+0x20/0x20 [ 219.224983][ T8047] ? load_image+0x400/0x400 [ 219.229491][ T8047] ? __lock_acquire+0x7d10/0x7d10 [ 219.234532][ T8047] should_fail+0x38c/0x4c0 [ 219.238957][ T8047] _copy_from_user+0x2e/0x170 [ 219.243725][ T8047] perf_copy_attr+0x167/0x840 [ 219.248414][ T8047] __se_sys_perf_event_open+0xf5/0x1bb0 [ 219.253974][ T8047] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 219.259625][ T8047] ? lockdep_hardirqs_on+0x94/0x140 [ 219.264826][ T8047] ? __x64_sys_perf_event_open+0x1c/0xc0 [ 219.270466][ T8047] do_syscall_64+0x4c/0xa0 [ 219.274900][ T8047] ? clear_bhb_loop+0x30/0x80 [ 219.279583][ T8047] ? clear_bhb_loop+0x30/0x80 [ 219.284271][ T8047] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 219.290173][ T8047] RIP: 0033:0x7f2a4ab79e59 [ 219.294593][ T8047] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.314201][ T8047] RSP: 002b:00007f2a48dd3028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 219.322716][ T8047] RAX: ffffffffffffffda RBX: 00007f2a4adf2fa0 RCX: 00007f2a4ab79e59 [ 219.330678][ T8047] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000001080 [ 219.338639][ T8047] RBP: 00007f2a48dd3090 R08: 0000000000000000 R09: 0000000000000000 [ 219.346598][ T8047] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 219.354559][ T8047] R13: 00007f2a4adf3038 R14: 00007f2a4adf2fa0 R15: 00007ffccef34568 [ 219.362532][ T8047] [ 219.537543][ T8054] netlink: 'syz.0.1374': attribute type 21 has an invalid length. [ 219.545464][ T8054] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1374'. [ 219.592352][ T8051] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 219.613150][ T8054] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 219.626910][ T8051] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 219.637187][ T8054] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 219.647898][ T8051] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 219.672765][ T8054] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 219.688625][ T8051] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 219.713345][ T8051] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 219.758536][ T8051] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 220.055006][ T8074] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1381'. [ 220.256045][ T8079] netlink: 'syz.1.1383': attribute type 10 has an invalid length. [ 220.294681][ T8079] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1383'. [ 220.351530][ T8079] batman_adv: batadv0: Adding interface: veth0_vlan [ 220.381002][ T8079] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.515667][ T8079] batman_adv: batadv0: Interface activated: veth0_vlan [ 222.850770][ T8114] netlink: 14719 bytes leftover after parsing attributes in process `syz.1.1395'. [ 223.329258][ T8138] netlink: 'syz.0.1401': attribute type 21 has an invalid length. [ 223.396406][ T8138] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1401'. [ 223.659211][ T8151] FAULT_INJECTION: forcing a failure. [ 223.659211][ T8151] name failslab, interval 1, probability 0, space 0, times 0 [ 223.750999][ T8151] CPU: 1 PID: 8151 Comm: syz.0.1405 Not tainted syzkaller #0 [ 223.758428][ T8151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 223.768489][ T8151] Call Trace: [ 223.771767][ T8151] [ 223.774692][ T8151] dump_stack_lvl+0x188/0x250 [ 223.779365][ T8151] ? __lock_acquire+0x7d10/0x7d10 [ 223.784382][ T8151] ? show_regs_print_info+0x20/0x20 [ 223.789568][ T8151] ? load_image+0x400/0x400 [ 223.794058][ T8151] ? rcu_nmi_exit+0x6f/0xf0 [ 223.798559][ T8151] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 223.804532][ T8151] should_fail+0x38c/0x4c0 [ 223.808942][ T8151] should_failslab+0x5/0x20 [ 223.813434][ T8151] slab_pre_alloc_hook+0x51/0xc0 [ 223.818363][ T8151] ? dst_alloc+0x101/0x160 [ 223.822771][ T8151] kmem_cache_alloc+0x3d/0x290 [ 223.827528][ T8151] dst_alloc+0x101/0x160 [ 223.831765][ T8151] ip_route_output_key_hash_rcu+0x15ee/0x24d0 [ 223.837836][ T8151] ip_route_output_key_hash+0x1c6/0x300 [ 223.843376][ T8151] ? ip_route_input_rcu+0x31d0/0x31d0 [ 223.848747][ T8151] ? __lock_acquire+0x7d10/0x7d10 [ 223.853885][ T8151] ip_route_output_flow+0x26/0x150 [ 223.859016][ T8151] ? security_sk_classify_flow+0x77/0x90 [ 223.864734][ T8151] raw_sendmsg+0x10e7/0x1aa0 [ 223.869331][ T8151] ? compat_raw_ioctl+0x60/0x60 [ 223.874187][ T8151] ? aa_sk_perm+0x7dc/0x910 [ 223.878690][ T8151] ? tomoyo_socket_sendmsg_permission+0x212/0x2f0 [ 223.885101][ T8151] ? sock_rps_record_flow+0x17/0x3b0 [ 223.890379][ T8151] ? inet_sendmsg+0x78/0x2f0 [ 223.894957][ T8151] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 223.900228][ T8151] ? security_socket_sendmsg+0x7c/0xa0 [ 223.905682][ T8151] ? inet_send_prepare+0x260/0x260 [ 223.910785][ T8151] ____sys_sendmsg+0x5b7/0x8f0 [ 223.915549][ T8151] ? __sys_sendmsg_sock+0x30/0x30 [ 223.920567][ T8151] ? import_iovec+0x6f/0xa0 [ 223.925072][ T8151] ___sys_sendmsg+0x236/0x2e0 [ 223.929745][ T8151] ? __sys_sendmsg+0x2a0/0x2a0 [ 223.934506][ T8151] ? ktime_get_real_ts64+0x440/0x440 [ 223.939799][ T8151] __se_sys_sendmsg+0x1af/0x290 [ 223.944644][ T8151] ? __x64_sys_sendmsg+0x80/0x80 [ 223.949569][ T8151] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 223.955551][ T8151] ? lockdep_hardirqs_on+0x94/0x140 [ 223.960741][ T8151] do_syscall_64+0x4c/0xa0 [ 223.965145][ T8151] ? clear_bhb_loop+0x30/0x80 [ 223.969816][ T8151] ? clear_bhb_loop+0x30/0x80 [ 223.974482][ T8151] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 223.980368][ T8151] RIP: 0033:0x7f2f4db0ce59 [ 223.984775][ T8151] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.004369][ T8151] RSP: 002b:00007f2f4bd66028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 224.012775][ T8151] RAX: ffffffffffffffda RBX: 00007f2f4dd85fa0 RCX: 00007f2f4db0ce59 [ 224.020735][ T8151] RDX: 0000000000000000 RSI: 0000200000001640 RDI: 000000000000000d [ 224.028704][ T8151] RBP: 00007f2f4bd66090 R08: 0000000000000000 R09: 0000000000000000 [ 224.036663][ T8151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 224.044804][ T8151] R13: 00007f2f4dd86038 R14: 00007f2f4dd85fa0 R15: 00007ffd1bb8bc08 [ 224.052791][ T8151] [ 224.266099][ T8168] netlink: 'syz.2.1411': attribute type 15 has an invalid length. [ 224.315735][ T8168] netlink: 'syz.2.1411': attribute type 7 has an invalid length. [ 224.380015][ T8168] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1411'. [ 224.771467][ T8187] netlink: 'syz.3.1415': attribute type 29 has an invalid length. [ 224.889513][ T8187] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1415'. [ 225.782425][ T8215] netlink: 'syz.4.1426': attribute type 29 has an invalid length. [ 225.831122][ T8217] netlink: 'syz.2.1429': attribute type 29 has an invalid length. [ 225.870193][ T8215] netlink: 'syz.4.1426': attribute type 29 has an invalid length. [ 225.978014][ T8217] netlink: 'syz.2.1429': attribute type 29 has an invalid length. [ 227.157990][ T8261] netlink: 'syz.4.1445': attribute type 29 has an invalid length. [ 227.161489][ T8260] netlink: 'syz.2.1446': attribute type 29 has an invalid length. [ 227.219970][ T8260] netlink: 'syz.2.1446': attribute type 29 has an invalid length. [ 227.286201][ T8261] netlink: 'syz.4.1445': attribute type 29 has an invalid length. [ 228.222791][ T8299] netlink: 'syz.3.1462': attribute type 29 has an invalid length. [ 228.266816][ T8299] netlink: 'syz.3.1462': attribute type 29 has an invalid length. [ 231.510762][ T8433] validate_nla: 10 callbacks suppressed [ 231.510776][ T8433] netlink: 'syz.3.1514': attribute type 29 has an invalid length. [ 231.586347][ T8433] netlink: 'syz.3.1514': attribute type 29 has an invalid length. [ 232.049845][ T8454] netlink: 'syz.2.1523': attribute type 29 has an invalid length. [ 232.074533][ T8454] netlink: 'syz.2.1523': attribute type 29 has an invalid length. [ 232.858890][ T8491] netlink: 'syz.3.1539': attribute type 29 has an invalid length. [ 232.899003][ T8497] netlink: 'syz.0.1538': attribute type 29 has an invalid length. [ 232.937304][ T8497] netlink: 'syz.0.1538': attribute type 29 has an invalid length. [ 232.988175][ T8491] netlink: 'syz.3.1539': attribute type 29 has an invalid length. [ 233.774619][ T8534] netlink: 'syz.4.1556': attribute type 29 has an invalid length. [ 233.826864][ T8534] netlink: 'syz.4.1556': attribute type 29 has an invalid length. [ 236.520186][ T8662] validate_nla: 8 callbacks suppressed [ 236.520302][ T8662] netlink: 'syz.3.1605': attribute type 29 has an invalid length. [ 236.588157][ T8662] netlink: 'syz.3.1605': attribute type 29 has an invalid length. [ 237.398569][ T8695] netlink: 'syz.0.1620': attribute type 29 has an invalid length. [ 237.552818][ T8695] netlink: 'syz.0.1620': attribute type 29 has an invalid length. [ 237.623263][ T8709] netlink: 'syz.3.1625': attribute type 29 has an invalid length. [ 237.705485][ T8709] netlink: 'syz.3.1625': attribute type 29 has an invalid length. [ 238.617049][ T8747] netlink: 'syz.2.1642': attribute type 29 has an invalid length. [ 238.689324][ T8747] netlink: 'syz.2.1642': attribute type 29 has an invalid length. [ 238.774695][ T8759] netlink: 'syz.3.1643': attribute type 29 has an invalid length. [ 238.832475][ T8759] netlink: 'syz.3.1643': attribute type 29 has an invalid length. [ 241.703952][ T8887] validate_nla: 6 callbacks suppressed [ 241.703967][ T8887] netlink: 'syz.3.1693': attribute type 29 has an invalid length. [ 241.722322][ T8887] netlink: 'syz.3.1693': attribute type 29 has an invalid length. [ 241.797922][ T8890] netlink: 'syz.0.1696': attribute type 29 has an invalid length. [ 241.861877][ T8890] netlink: 'syz.0.1696': attribute type 29 has an invalid length. [ 242.783692][ T8933] netlink: 'syz.4.1713': attribute type 29 has an invalid length. [ 242.861186][ T8933] netlink: 'syz.4.1713': attribute type 29 has an invalid length. [ 243.112638][ T8948] netlink: 'syz.3.1717': attribute type 29 has an invalid length. [ 243.179605][ T8948] netlink: 'syz.3.1717': attribute type 29 has an invalid length. [ 243.781886][ T8981] netlink: 'syz.4.1732': attribute type 29 has an invalid length. [ 243.828275][ T8981] netlink: 'syz.4.1732': attribute type 29 has an invalid length. [ 246.716930][ T9121] validate_nla: 12 callbacks suppressed [ 246.716964][ T9121] netlink: 'syz.2.1792': attribute type 29 has an invalid length. [ 246.785522][ T9121] netlink: 'syz.2.1792': attribute type 29 has an invalid length. [ 247.634406][ T9161] netlink: 'syz.1.1804': attribute type 29 has an invalid length. [ 247.680984][ T9161] netlink: 'syz.1.1804': attribute type 29 has an invalid length. [ 247.762552][ T9166] netlink: 'syz.2.1808': attribute type 29 has an invalid length. [ 247.809943][ T9166] netlink: 'syz.2.1808': attribute type 29 has an invalid length. [ 248.433294][ T9202] netlink: 'syz.2.1822': attribute type 29 has an invalid length. [ 248.503952][ T9202] netlink: 'syz.2.1822': attribute type 29 has an invalid length. [ 248.587051][ T9209] netlink: 'syz.4.1824': attribute type 29 has an invalid length. [ 248.690498][ T9209] netlink: 'syz.4.1824': attribute type 29 has an invalid length. [ 249.196523][ T9238] FAULT_INJECTION: forcing a failure. [ 249.196523][ T9238] name failslab, interval 1, probability 0, space 0, times 0 [ 249.253090][ T9238] CPU: 1 PID: 9238 Comm: syz.0.1838 Not tainted syzkaller #0 [ 249.260504][ T9238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 249.270563][ T9238] Call Trace: [ 249.273833][ T9238] [ 249.276747][ T9238] dump_stack_lvl+0x188/0x250 [ 249.281415][ T9238] ? show_regs_print_info+0x20/0x20 [ 249.286602][ T9238] ? load_image+0x400/0x400 [ 249.291103][ T9238] should_fail+0x38c/0x4c0 [ 249.295509][ T9238] should_failslab+0x5/0x20 [ 249.300001][ T9238] slab_pre_alloc_hook+0x51/0xc0 [ 249.304928][ T9238] kmem_cache_alloc_trace+0x47/0x2a0 [ 249.310194][ T9238] ? sctp_add_bind_addr+0x89/0x350 [ 249.315301][ T9238] sctp_add_bind_addr+0x89/0x350 [ 249.320235][ T9238] sctp_copy_local_addr_list+0x2dd/0x4a0 [ 249.325857][ T9238] ? sctp_do_8_2_transport_strike+0x840/0x840 [ 249.331911][ T9238] ? sctp_v4_is_any+0x31/0x50 [ 249.336573][ T9238] ? sctp_copy_one_addr+0x93/0x660 [ 249.341672][ T9238] sctp_bind_addr_copy+0xaf/0x3c0 [ 249.346685][ T9238] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 249.353002][ T9238] sctp_connect_new_asoc+0x2f5/0x6a0 [ 249.358276][ T9238] ? __sctp_connect+0xd80/0xd80 [ 249.363111][ T9238] ? __local_bh_enable_ip+0x136/0x1c0 [ 249.368465][ T9238] ? _local_bh_enable+0xa0/0xa0 [ 249.373300][ T9238] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 249.378831][ T9238] ? security_sctp_bind_connect+0x85/0xb0 [ 249.384537][ T9238] sctp_sendmsg+0x158d/0x2900 [ 249.389220][ T9238] ? aa_sk_perm+0x7dc/0x910 [ 249.393708][ T9238] ? sctp_getsockopt+0x8a0/0x8a0 [ 249.398632][ T9238] ? aa_af_perm+0x340/0x340 [ 249.403122][ T9238] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 249.409521][ T9238] ? sock_rps_record_flow+0x17/0x3b0 [ 249.414803][ T9238] ? inet_sendmsg+0x78/0x2f0 [ 249.419376][ T9238] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 249.424645][ T9238] ? security_socket_sendmsg+0x7c/0xa0 [ 249.430090][ T9238] ? inet_send_prepare+0x260/0x260 [ 249.435189][ T9238] ____sys_sendmsg+0x5b7/0x8f0 [ 249.439951][ T9238] ? __sys_sendmsg_sock+0x30/0x30 [ 249.444964][ T9238] ? import_iovec+0x6f/0xa0 [ 249.449456][ T9238] ___sys_sendmsg+0x236/0x2e0 [ 249.454127][ T9238] ? __sys_sendmsg+0x2a0/0x2a0 [ 249.458886][ T9238] ? vfs_write+0x8b2/0xd60 [ 249.463304][ T9238] __se_sys_sendmsg+0x1af/0x290 [ 249.468141][ T9238] ? __x64_sys_sendmsg+0x80/0x80 [ 249.473068][ T9238] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 249.479044][ T9238] ? lockdep_hardirqs_on+0x94/0x140 [ 249.484230][ T9238] do_syscall_64+0x4c/0xa0 [ 249.488628][ T9238] ? clear_bhb_loop+0x30/0x80 [ 249.493290][ T9238] ? clear_bhb_loop+0x30/0x80 [ 249.497951][ T9238] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 249.503825][ T9238] RIP: 0033:0x7f2f4db0ce59 [ 249.508233][ T9238] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 249.527832][ T9238] RSP: 002b:00007f2f4bd66028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 249.536232][ T9238] RAX: ffffffffffffffda RBX: 00007f2f4dd85fa0 RCX: 00007f2f4db0ce59 [ 249.544188][ T9238] RDX: 0000000000000480 RSI: 0000200000003480 RDI: 0000000000000003 [ 249.552144][ T9238] RBP: 00007f2f4bd66090 R08: 0000000000000000 R09: 0000000000000000 [ 249.560097][ T9238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 249.568052][ T9238] R13: 00007f2f4dd86038 R14: 00007f2f4dd85fa0 R15: 00007ffd1bb8bc08 [ 249.576022][ T9238] [ 250.214390][ T9271] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1851'. [ 250.297701][ T9271] device bond0 entered promiscuous mode [ 250.303379][ T9271] device bond_slave_0 entered promiscuous mode [ 250.359868][ T9271] device bond_slave_1 entered promiscuous mode [ 250.371209][ T9271] bridge0: port 3(bond0) entered blocking state [ 250.378456][ T9271] bridge0: port 3(bond0) entered disabled state [ 250.397625][ T9271] bridge0: port 3(bond0) entered blocking state [ 250.404184][ T9271] bridge0: port 3(bond0) entered forwarding state [ 252.070693][ T9362] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.1889'. [ 252.439127][ T9384] validate_nla: 13 callbacks suppressed [ 252.439178][ T9384] netlink: 'syz.3.1895': attribute type 29 has an invalid length. [ 252.469919][ T9385] netlink: 'syz.0.1896': attribute type 29 has an invalid length. [ 252.553297][ T9384] netlink: 'syz.3.1895': attribute type 29 has an invalid length. [ 252.592864][ T9385] netlink: 'syz.0.1896': attribute type 29 has an invalid length. [ 253.389052][ T9426] netlink: 'syz.4.1912': attribute type 29 has an invalid length. [ 253.404821][ T9427] netlink: 'syz.1.1913': attribute type 29 has an invalid length. [ 253.457595][ T9426] netlink: 'syz.4.1912': attribute type 29 has an invalid length. [ 253.476176][ T9427] netlink: 'syz.1.1913': attribute type 29 has an invalid length. [ 254.426801][ T9468] FAULT_INJECTION: forcing a failure. [ 254.426801][ T9468] name failslab, interval 1, probability 0, space 0, times 0 [ 254.452814][ T9468] CPU: 0 PID: 9468 Comm: syz.0.1930 Not tainted syzkaller #0 [ 254.460223][ T9468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 254.470285][ T9468] Call Trace: [ 254.473566][ T9468] [ 254.476496][ T9468] dump_stack_lvl+0x188/0x250 [ 254.481179][ T9468] ? show_regs_print_info+0x20/0x20 [ 254.486374][ T9468] ? load_image+0x400/0x400 [ 254.490880][ T9468] ? __might_sleep+0xf0/0xf0 [ 254.495465][ T9468] ? __lock_acquire+0x7d10/0x7d10 [ 254.500494][ T9468] should_fail+0x38c/0x4c0 [ 254.504915][ T9468] should_failslab+0x5/0x20 [ 254.509412][ T9468] slab_pre_alloc_hook+0x51/0xc0 [ 254.514350][ T9468] __kmalloc_node_track_caller+0x68/0x3a0 [ 254.520059][ T9468] ? netlink_sendmsg+0x654/0xbe0 [ 254.524989][ T9468] ? kmem_cache_alloc_node+0x162/0x2d0 [ 254.530437][ T9468] ? __alloc_skb+0xf4/0x750 [ 254.534936][ T9468] ? netlink_sendmsg+0x654/0xbe0 [ 254.539866][ T9468] __alloc_skb+0x22c/0x750 [ 254.544283][ T9468] netlink_sendmsg+0x654/0xbe0 [ 254.549055][ T9468] ? netlink_getsockopt+0x570/0x570 [ 254.554249][ T9468] ? aa_sock_msg_perm+0x94/0x150 [ 254.559180][ T9468] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 254.564456][ T9468] ? security_socket_sendmsg+0x7c/0xa0 [ 254.569907][ T9468] ? netlink_getsockopt+0x570/0x570 [ 254.575097][ T9468] ____sys_sendmsg+0x5b7/0x8f0 [ 254.579861][ T9468] ? __sys_sendmsg_sock+0x30/0x30 [ 254.584886][ T9468] ? import_iovec+0x6f/0xa0 [ 254.589384][ T9468] ___sys_sendmsg+0x236/0x2e0 [ 254.594063][ T9468] ? __sys_sendmsg+0x2a0/0x2a0 [ 254.598827][ T9468] ? vfs_write+0x8b2/0xd60 [ 254.603260][ T9468] __se_sys_sendmsg+0x1af/0x290 [ 254.608112][ T9468] ? __x64_sys_sendmsg+0x80/0x80 [ 254.613044][ T9468] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 254.619031][ T9468] ? lockdep_hardirqs_on+0x94/0x140 [ 254.624227][ T9468] do_syscall_64+0x4c/0xa0 [ 254.628635][ T9468] ? clear_bhb_loop+0x30/0x80 [ 254.633305][ T9468] ? clear_bhb_loop+0x30/0x80 [ 254.637975][ T9468] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 254.643859][ T9468] RIP: 0033:0x7f2f4db0ce59 [ 254.648269][ T9468] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 254.667866][ T9468] RSP: 002b:00007f2f4bd66028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 254.676274][ T9468] RAX: ffffffffffffffda RBX: 00007f2f4dd85fa0 RCX: 00007f2f4db0ce59 [ 254.684236][ T9468] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 254.692199][ T9468] RBP: 00007f2f4bd66090 R08: 0000000000000000 R09: 0000000000000000 [ 254.700161][ T9468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 254.708125][ T9468] R13: 00007f2f4dd86038 R14: 00007f2f4dd85fa0 R15: 00007ffd1bb8bc08 [ 254.716108][ T9468] [ 254.819090][ T9477] netlink: 'syz.4.1932': attribute type 29 has an invalid length. [ 254.848248][ T9478] netlink: 'syz.2.1933': attribute type 29 has an invalid length. [ 255.434338][ T9506] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1946'. [ 255.472590][ T9506] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1946'. [ 255.499443][ T9506] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1946'. [ 256.382394][ T9553] FAULT_INJECTION: forcing a failure. [ 256.382394][ T9553] name failslab, interval 1, probability 0, space 0, times 0 [ 256.438966][ T9553] CPU: 1 PID: 9553 Comm: syz.1.1963 Not tainted syzkaller #0 [ 256.446390][ T9553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 256.456462][ T9553] Call Trace: [ 256.459755][ T9553] [ 256.462697][ T9553] dump_stack_lvl+0x188/0x250 [ 256.467400][ T9553] ? show_regs_print_info+0x20/0x20 [ 256.472617][ T9553] ? load_image+0x400/0x400 [ 256.477137][ T9553] ? __lock_acquire+0x7d10/0x7d10 [ 256.482187][ T9553] should_fail+0x38c/0x4c0 [ 256.486631][ T9553] should_failslab+0x5/0x20 [ 256.491150][ T9553] slab_pre_alloc_hook+0x51/0xc0 [ 256.496109][ T9553] __kmalloc_node_track_caller+0x68/0x3a0 [ 256.501843][ T9553] ? tcp_send_active_reset+0x82/0x6f0 [ 256.507228][ T9553] ? kmem_cache_alloc_node+0x162/0x2d0 [ 256.512689][ T9553] ? __alloc_skb+0xf4/0x750 [ 256.517194][ T9553] ? tcp_send_active_reset+0x82/0x6f0 [ 256.522577][ T9553] __alloc_skb+0x22c/0x750 [ 256.526998][ T9553] tcp_send_active_reset+0x82/0x6f0 [ 256.532200][ T9553] tcp_disconnect+0x1cb/0x1d20 [ 256.536973][ T9553] __tcp_close+0xc83/0xfa0 [ 256.541392][ T9553] tcp_close+0x24/0x110 [ 256.545547][ T9553] inet_release+0x139/0x180 [ 256.550055][ T9553] sock_release+0x7b/0x140 [ 256.554468][ T9553] smc_clcsock_release+0xc5/0xe0 [ 256.559404][ T9553] __smc_release+0x661/0x7d0 [ 256.563995][ T9553] smc_release+0x2ca/0x530 [ 256.568411][ T9553] sock_close+0xd5/0x240 [ 256.572652][ T9553] ? sock_mmap+0x90/0x90 [ 256.576884][ T9553] __fput+0x234/0x930 [ 256.580877][ T9553] task_work_run+0x125/0x1a0 [ 256.585465][ T9553] exit_to_user_mode_loop+0x10f/0x130 [ 256.590845][ T9553] exit_to_user_mode_prepare+0xee/0x180 [ 256.596382][ T9553] syscall_exit_to_user_mode+0x16/0x40 [ 256.601833][ T9553] do_syscall_64+0x58/0xa0 [ 256.606244][ T9553] ? clear_bhb_loop+0x30/0x80 [ 256.610911][ T9553] ? clear_bhb_loop+0x30/0x80 [ 256.615584][ T9553] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 256.621467][ T9553] RIP: 0033:0x7fe684236e59 [ 256.625875][ T9553] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 256.645470][ T9553] RSP: 002b:00007fe682490028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 256.653889][ T9553] RAX: 0000000000000000 RBX: 00007fe6844affa0 RCX: 00007fe684236e59 [ 256.661850][ T9553] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 256.669808][ T9553] RBP: 00007fe682490090 R08: 0000000000000000 R09: 0000000000000000 [ 256.677773][ T9553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 256.685731][ T9553] R13: 00007fe6844b0038 R14: 00007fe6844affa0 R15: 00007ffd29ba4728 [ 256.693719][ T9553] [ 256.892703][ T9569] device syzkaller0 entered promiscuous mode [ 257.884155][ T9604] validate_nla: 13 callbacks suppressed [ 257.884240][ T9604] netlink: 'syz.1.1984': attribute type 29 has an invalid length. [ 257.932737][ T9604] netlink: 'syz.1.1984': attribute type 29 has an invalid length. [ 258.132287][ T9619] netlink: 184 bytes leftover after parsing attributes in process `syz.2.1987'. [ 258.366865][ T9627] netlink: 'syz.1.1989': attribute type 29 has an invalid length. [ 258.437050][ T9627] netlink: 'syz.1.1989': attribute type 29 has an invalid length. [ 258.893149][ T9650] netlink: 'syz.1.1999': attribute type 29 has an invalid length. [ 258.926278][ T9650] netlink: 'syz.1.1999': attribute type 29 has an invalid length. [ 259.642663][ T9680] netlink: 'syz.4.2011': attribute type 29 has an invalid length. [ 259.692974][ T9680] netlink: 'syz.4.2011': attribute type 29 has an invalid length. [ 259.716751][ T9687] netlink: 'syz.1.2014': attribute type 29 has an invalid length. [ 259.756906][ T9687] netlink: 'syz.1.2014': attribute type 29 has an invalid length. [ 260.314191][ T9708] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2023'. [ 260.413652][ T9714] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2023'. [ 261.435307][ T9763] FAULT_INJECTION: forcing a failure. [ 261.435307][ T9763] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 261.519695][ T9763] CPU: 0 PID: 9763 Comm: syz.4.2045 Not tainted syzkaller #0 [ 261.527118][ T9763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 261.537187][ T9763] Call Trace: [ 261.540474][ T9763] [ 261.543416][ T9763] dump_stack_lvl+0x188/0x250 [ 261.548110][ T9763] ? show_regs_print_info+0x20/0x20 [ 261.553313][ T9763] ? load_image+0x400/0x400 [ 261.557821][ T9763] ? __lock_acquire+0x7d10/0x7d10 [ 261.562844][ T9763] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 261.568650][ T9763] should_fail+0x38c/0x4c0 [ 261.573071][ T9763] _copy_from_user+0x2e/0x170 [ 261.577743][ T9763] __copy_msghdr_from_user+0x48a/0x630 [ 261.583196][ T9763] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 261.588911][ T9763] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 261.594212][ T9763] ___sys_sendmsg+0x19a/0x2e0 [ 261.598892][ T9763] ? __sys_sendmsg+0x2a0/0x2a0 [ 261.603668][ T9763] ? trace_event_raw_event_lock+0x270/0x270 [ 261.609551][ T9763] ? vfs_write+0x8b2/0xd60 [ 261.614005][ T9763] __se_sys_sendmsg+0x1af/0x290 [ 261.618852][ T9763] ? __x64_sys_sendmsg+0x80/0x80 [ 261.623778][ T9763] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 261.629774][ T9763] ? lockdep_hardirqs_on+0x94/0x140 [ 261.634970][ T9763] do_syscall_64+0x4c/0xa0 [ 261.639377][ T9763] ? clear_bhb_loop+0x30/0x80 [ 261.644045][ T9763] ? clear_bhb_loop+0x30/0x80 [ 261.648713][ T9763] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 261.654595][ T9763] RIP: 0033:0x7f2a4ab79e59 [ 261.659002][ T9763] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 261.678596][ T9763] RSP: 002b:00007f2a48dd3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 261.687004][ T9763] RAX: ffffffffffffffda RBX: 00007f2a4adf2fa0 RCX: 00007f2a4ab79e59 [ 261.694965][ T9763] RDX: 0000000000000000 RSI: 0000200000007940 RDI: 0000000000000003 [ 261.702926][ T9763] RBP: 00007f2a48dd3090 R08: 0000000000000000 R09: 0000000000000000 [ 261.710890][ T9763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 261.718852][ T9763] R13: 00007f2a4adf3038 R14: 00007f2a4adf2fa0 R15: 00007ffccef34568 [ 261.726835][ T9763] [ 261.787550][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.793913][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 263.231810][ T9840] validate_nla: 14 callbacks suppressed [ 263.231862][ T9840] netlink: 'syz.2.2074': attribute type 29 has an invalid length. [ 263.262046][ T9840] netlink: 'syz.2.2074': attribute type 29 has an invalid length. [ 263.335782][ T9844] netlink: 'syz.1.2077': attribute type 29 has an invalid length. [ 263.400427][ T9844] netlink: 'syz.1.2077': attribute type 29 has an invalid length. [ 263.723297][ T9862] netlink: 'syz.0.2082': attribute type 29 has an invalid length. [ 263.780970][ T9862] netlink: 'syz.0.2082': attribute type 29 has an invalid length. [ 264.360902][ T9899] netlink: 'syz.0.2095': attribute type 29 has an invalid length. [ 264.391979][ T9899] netlink: 'syz.0.2095': attribute type 29 has an invalid length. [ 264.469299][ T9902] netlink: 'syz.3.2099': attribute type 29 has an invalid length. [ 264.511166][ T9902] netlink: 'syz.3.2099': attribute type 29 has an invalid length. [ 265.732402][ T9958] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 266.003770][ T9978] netlink: 24859 bytes leftover after parsing attributes in process `syz.4.2130'. [ 268.755394][T10108] validate_nla: 15 callbacks suppressed [ 268.755412][T10108] netlink: 'syz.4.2181': attribute type 9 has an invalid length. [ 268.773007][T10108] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.2181'. [ 268.829869][T10117] netlink: 'syz.1.2183': attribute type 29 has an invalid length. [ 268.945250][T10117] netlink: 'syz.1.2183': attribute type 29 has an invalid length. [ 269.318359][T10133] netlink: 'syz.2.2192': attribute type 29 has an invalid length. [ 269.360699][T10133] netlink: 'syz.2.2192': attribute type 29 has an invalid length. [ 269.910593][T10165] netlink: 'syz.2.2205': attribute type 13 has an invalid length. [ 269.969483][T10163] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 269.974650][T10165] netlink: 24859 bytes leftover after parsing attributes in process `syz.2.2205'. [ 270.362924][T10184] netlink: 'syz.1.2207': attribute type 29 has an invalid length. [ 270.413690][T10187] netlink: 'syz.3.2212': attribute type 29 has an invalid length. [ 270.467078][T10184] netlink: 'syz.1.2207': attribute type 29 has an invalid length. [ 270.513639][T10187] netlink: 'syz.3.2212': attribute type 29 has an invalid length. [ 271.090430][T10222] netlink: 24859 bytes leftover after parsing attributes in process `syz.1.2224'. [ 271.855851][ T4177] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 272.316224][T10277] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2247'. [ 273.855468][T10342] validate_nla: 18 callbacks suppressed [ 273.882504][T10342] netlink: 'syz.1.2272': attribute type 9 has an invalid length. [ 273.918124][T10342] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2272'. [ 274.059636][T10357] netlink: 'syz.4.2277': attribute type 29 has an invalid length. [ 274.149956][T10357] netlink: 'syz.4.2277': attribute type 29 has an invalid length. [ 274.513620][T10373] netlink: 'syz.1.2284': attribute type 29 has an invalid length. [ 274.574978][T10373] netlink: 'syz.1.2284': attribute type 29 has an invalid length. [ 274.598130][T10375] netlink: 'syz.4.2286': attribute type 29 has an invalid length. [ 274.659006][T10375] netlink: 'syz.4.2286': attribute type 29 has an invalid length. [ 275.066568][T10398] netlink: 'syz.1.2296': attribute type 29 has an invalid length. [ 275.091733][T10398] netlink: 'syz.1.2296': attribute type 29 has an invalid length. [ 275.277428][T10409] netlink: 'syz.0.2300': attribute type 29 has an invalid length. [ 277.925698][T10524] tap0: tun_chr_ioctl cmd 35111 [ 279.344786][T10607] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.421576][T10613] validate_nla: 29 callbacks suppressed [ 279.421622][T10613] netlink: 'syz.4.2379': attribute type 29 has an invalid length. [ 279.474536][T10613] netlink: 'syz.4.2379': attribute type 29 has an invalid length. [ 279.659806][T10618] netlink: 'syz.4.2381': attribute type 29 has an invalid length. [ 279.683120][T10618] netlink: 'syz.4.2381': attribute type 29 has an invalid length. [ 280.201049][T10642] netlink: 'syz.1.2392': attribute type 29 has an invalid length. [ 280.228471][T10642] netlink: 'syz.1.2392': attribute type 29 has an invalid length. [ 280.348436][T10651] netlink: 'syz.0.2396': attribute type 29 has an invalid length. [ 280.371198][T10651] netlink: 'syz.0.2396': attribute type 29 has an invalid length. [ 280.552035][T10649] tap0: tun_chr_ioctl cmd 35111 [ 281.069186][T10684] netlink: 'syz.3.2407': attribute type 29 has an invalid length. [ 281.094376][T10684] netlink: 'syz.3.2407': attribute type 29 has an invalid length. [ 281.654122][T10700] tap0: tun_chr_ioctl cmd 35111 [ 284.686851][T10851] validate_nla: 14 callbacks suppressed [ 284.686869][T10851] netlink: 'syz.4.2470': attribute type 29 has an invalid length. [ 284.734696][T10854] netlink: 'syz.1.2473': attribute type 29 has an invalid length. [ 284.763118][T10854] netlink: 'syz.1.2473': attribute type 29 has an invalid length. [ 284.813329][T10851] netlink: 'syz.4.2470': attribute type 29 has an invalid length. [ 285.433653][T10891] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.680608][T10895] netlink: 'syz.0.2488': attribute type 29 has an invalid length. [ 285.742816][T10895] netlink: 'syz.0.2488': attribute type 29 has an invalid length. [ 285.758031][T10897] netlink: 'syz.1.2489': attribute type 29 has an invalid length. [ 285.838381][T10897] netlink: 'syz.1.2489': attribute type 29 has an invalid length. [ 286.634673][T10934] netlink: 'syz.1.2503': attribute type 29 has an invalid length. [ 286.672690][T10934] netlink: 'syz.1.2503': attribute type 29 has an invalid length. [ 286.877662][T10941] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.847272][T10984] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.852247][T11077] validate_nla: 14 callbacks suppressed [ 289.852284][T11077] netlink: 'syz.4.2561': attribute type 29 has an invalid length. [ 289.891782][T11077] netlink: 'syz.4.2561': attribute type 29 has an invalid length. [ 290.235941][T11092] netlink: 'syz.3.2569': attribute type 29 has an invalid length. [ 290.273020][T11092] netlink: 'syz.3.2569': attribute type 29 has an invalid length. [ 291.101214][T11131] netlink: 'syz.0.2583': attribute type 29 has an invalid length. [ 291.132408][T11131] netlink: 'syz.0.2583': attribute type 29 has an invalid length. [ 291.282580][T11136] netlink: 'syz.3.2585': attribute type 29 has an invalid length. [ 291.344645][T11136] netlink: 'syz.3.2585': attribute type 29 has an invalid length. [ 291.350376][T11141] netlink: 'syz.4.2582': attribute type 29 has an invalid length. [ 291.495367][T11141] netlink: 'syz.4.2582': attribute type 29 has an invalid length. [ 295.255030][T11261] validate_nla: 22 callbacks suppressed [ 295.255097][T11261] netlink: 'syz.4.2634': attribute type 29 has an invalid length. [ 295.271897][T11261] netlink: 'syz.4.2634': attribute type 29 has an invalid length. [ 295.539016][T11269] netlink: 'syz.0.2639': attribute type 29 has an invalid length. [ 295.595339][T11270] netlink: 'syz.4.2641': attribute type 29 has an invalid length. [ 295.630347][T11269] netlink: 'syz.0.2639': attribute type 29 has an invalid length. [ 295.684650][T11270] netlink: 'syz.4.2641': attribute type 29 has an invalid length. [ 296.335461][T11295] netlink: 'syz.2.2647': attribute type 29 has an invalid length. [ 296.367279][T11295] netlink: 'syz.2.2647': attribute type 29 has an invalid length. [ 296.411227][T11296] netlink: 'syz.3.2650': attribute type 29 has an invalid length. [ 296.499296][T11296] netlink: 'syz.3.2650': attribute type 29 has an invalid length. [ 301.001781][T11456] validate_nla: 30 callbacks suppressed [ 301.001811][T11456] netlink: 'syz.1.2718': attribute type 29 has an invalid length. [ 301.040063][T11460] netlink: 'syz.4.2721': attribute type 29 has an invalid length. [ 301.051269][T11456] netlink: 'syz.1.2718': attribute type 29 has an invalid length. [ 301.091428][T11460] netlink: 'syz.4.2721': attribute type 29 has an invalid length. [ 301.105647][T11463] netlink: 'syz.2.2722': attribute type 3 has an invalid length. [ 301.145874][T11463] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2722'. [ 301.693718][T11493] netlink: 'syz.4.2735': attribute type 29 has an invalid length. [ 301.761927][T11493] netlink: 'syz.4.2735': attribute type 29 has an invalid length. [ 301.782688][T11498] netlink: 'syz.2.2737': attribute type 29 has an invalid length. [ 301.825639][T11498] netlink: 'syz.2.2737': attribute type 29 has an invalid length. [ 301.975309][T11506] netlink: 'syz.3.2741': attribute type 3 has an invalid length. [ 302.004319][T11506] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2741'. [ 302.600426][T11526] team0: Port device wlan1 added [ 302.615145][T11531] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2747'. [ 302.632746][T11525] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 303.930531][T11578] device wlan1 left promiscuous mode [ 304.167704][T11578] team0: Port device wlan1 added [ 304.231300][T11589] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2770'. [ 304.308982][T11577] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 304.410658][T11591] delete_channel: no stack [ 304.478588][T11613] net_ratelimit: 8792 callbacks suppressed [ 304.478604][T11613] netlink: set zone limit has 8 unknown bytes [ 305.076473][T11639] FAULT_INJECTION: forcing a failure. [ 305.076473][T11639] name failslab, interval 1, probability 0, space 0, times 0 [ 305.164569][T11639] CPU: 1 PID: 11639 Comm: syz.1.2792 Not tainted syzkaller #0 [ 305.172084][T11639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 305.182144][T11639] Call Trace: [ 305.185426][T11639] [ 305.188361][T11639] dump_stack_lvl+0x188/0x250 [ 305.193043][T11639] ? show_regs_print_info+0x20/0x20 [ 305.198231][T11639] ? load_image+0x400/0x400 [ 305.202730][T11639] ? __might_sleep+0xf0/0xf0 [ 305.207314][T11639] ? __lock_acquire+0x7d10/0x7d10 [ 305.212339][T11639] should_fail+0x38c/0x4c0 [ 305.216756][T11639] should_failslab+0x5/0x20 [ 305.221248][T11639] slab_pre_alloc_hook+0x51/0xc0 [ 305.226186][T11639] kmem_cache_alloc_node+0x47/0x2d0 [ 305.231378][T11639] ? perf_event_alloc+0x161/0x2240 [ 305.236492][T11639] perf_event_alloc+0x161/0x2240 [ 305.241426][T11639] ? __lock_acquire+0x7d10/0x7d10 [ 305.246441][T11639] ? do_raw_spin_unlock+0x11d/0x230 [ 305.251666][T11639] __se_sys_perf_event_open+0x6f5/0x1bb0 [ 305.257311][T11639] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 305.262957][T11639] ? lockdep_hardirqs_on+0x94/0x140 [ 305.268152][T11639] ? __x64_sys_perf_event_open+0x1c/0xc0 [ 305.273778][T11639] do_syscall_64+0x4c/0xa0 [ 305.278188][T11639] ? clear_bhb_loop+0x30/0x80 [ 305.282857][T11639] ? clear_bhb_loop+0x30/0x80 [ 305.287525][T11639] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 305.293409][T11639] RIP: 0033:0x7fe684236e59 [ 305.297816][T11639] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 305.317411][T11639] RSP: 002b:00007fe682490028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 305.325819][T11639] RAX: ffffffffffffffda RBX: 00007fe6844affa0 RCX: 00007fe684236e59 [ 305.333781][T11639] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000400 [ 305.341741][T11639] RBP: 00007fe682490090 R08: 0000000000000008 R09: 0000000000000000 [ 305.349700][T11639] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 305.357659][T11639] R13: 00007fe6844b0038 R14: 00007fe6844affa0 R15: 00007ffd29ba4728 [ 305.365642][T11639] [ 305.460718][T11643] team0: Port device wlan1 added [ 305.497023][T11650] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2795'. [ 305.581598][T11642] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 306.264484][T11678] validate_nla: 19 callbacks suppressed [ 306.264529][T11678] netlink: 'syz.2.2806': attribute type 29 has an invalid length. [ 306.302528][T11678] netlink: 'syz.2.2806': attribute type 29 has an invalid length. [ 306.841035][T11705] netlink: 'syz.0.2817': attribute type 29 has an invalid length. [ 306.878265][T11710] netlink: 'syz.1.2818': attribute type 10 has an invalid length. [ 306.973606][T11714] netlink: 'syz.2.2819': attribute type 29 has an invalid length. [ 307.014853][T11710] team0: Port device wlan1 added [ 307.065164][T11705] netlink: 'syz.0.2817': attribute type 29 has an invalid length. [ 307.126232][T11711] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2818'. [ 307.158313][T11714] netlink: 'syz.2.2819': attribute type 29 has an invalid length. [ 307.161530][T11709] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 307.492249][T11725] netlink: 'syz.1.2823': attribute type 29 has an invalid length. [ 307.560979][T11725] netlink: 'syz.1.2823': attribute type 29 has an invalid length. [ 308.178036][T11749] netlink: 'syz.2.2834': attribute type 29 has an invalid length. [ 309.675805][T11813] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2852'. [ 310.841496][T11853] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2872'. [ 310.885583][T11853] device bond0 entered promiscuous mode [ 310.936299][T11853] device bond_slave_0 entered promiscuous mode [ 310.964792][T11853] device bond_slave_1 entered promiscuous mode [ 311.002564][T11853] bridge0: port 3(bond0) entered blocking state [ 311.025298][T11853] bridge0: port 3(bond0) entered disabled state [ 311.104392][T11853] bridge0: port 3(bond0) entered blocking state [ 311.111168][T11853] bridge0: port 3(bond0) entered forwarding state [ 311.335225][T11862] validate_nla: 25 callbacks suppressed [ 311.355235][T11862] netlink: 'syz.4.2875': attribute type 29 has an invalid length. [ 311.426683][T11862] netlink: 'syz.4.2875': attribute type 29 has an invalid length. [ 311.530509][T11875] netlink: 'syz.3.2880': attribute type 29 has an invalid length. [ 311.549743][T11875] netlink: 'syz.3.2880': attribute type 29 has an invalid length. [ 311.636978][T11877] netlink: 'syz.0.2884': attribute type 29 has an invalid length. [ 311.681724][T11877] netlink: 'syz.0.2884': attribute type 29 has an invalid length. [ 312.205176][T11908] netlink: 'syz.4.2890': attribute type 29 has an invalid length. [ 312.295756][T11908] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2890'. [ 312.551320][T11916] netlink: 'syz.2.2896': attribute type 29 has an invalid length. [ 312.572417][T11916] netlink: 'syz.2.2896': attribute type 29 has an invalid length. [ 312.702632][T11919] netlink: 'syz.3.2897': attribute type 29 has an invalid length. [ 313.913062][T11969] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2914'. [ 316.376753][T12053] validate_nla: 22 callbacks suppressed [ 316.376769][T12053] netlink: 'syz.3.2943': attribute type 29 has an invalid length. [ 316.421311][T12053] netlink: 'syz.3.2943': attribute type 29 has an invalid length. [ 316.972483][T12073] netlink: 'syz.3.2952': attribute type 29 has an invalid length. [ 317.020896][T12073] netlink: 'syz.3.2952': attribute type 29 has an invalid length. [ 317.065460][T12078] netlink: 'syz.4.2955': attribute type 29 has an invalid length. [ 317.126698][T12078] netlink: 'syz.4.2955': attribute type 29 has an invalid length. [ 317.863621][T12105] device batadv0 entered promiscuous mode [ 318.093666][T12113] netlink: 'syz.1.2971': attribute type 29 has an invalid length. [ 318.134102][T12113] netlink: 'syz.1.2971': attribute type 29 has an invalid length. [ 318.164992][T12117] netlink: 'syz.2.2972': attribute type 29 has an invalid length. [ 318.240644][T12117] netlink: 'syz.2.2972': attribute type 29 has an invalid length. [ 318.774820][ T153] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.922982][ T153] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.980789][T12121] chnl_net:caif_netlink_parms(): no params data found [ 319.047864][ T153] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.327729][ T153] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.980505][T12121] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.075583][T12121] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.128367][T12121] device bridge_slave_0 entered promiscuous mode [ 320.205775][T12121] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.213302][T12121] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.231987][T12121] device bridge_slave_1 entered promiscuous mode [ 320.271584][T12121] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 320.342329][ T4177] Bluetooth: hci5: command 0x0409 tx timeout [ 320.401462][T12121] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 320.466465][T12200] FAULT_INJECTION: forcing a failure. [ 320.466465][T12200] name failslab, interval 1, probability 0, space 0, times 0 [ 320.535750][T12121] team0: Port device team_slave_0 added [ 320.576727][T12200] CPU: 0 PID: 12200 Comm: syz.0.3004 Not tainted syzkaller #0 [ 320.584240][T12200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 320.594331][T12200] Call Trace: [ 320.597617][T12200] [ 320.600559][T12200] dump_stack_lvl+0x188/0x250 [ 320.605262][T12200] ? show_regs_print_info+0x20/0x20 [ 320.610477][T12200] ? load_image+0x400/0x400 [ 320.615004][T12200] ? __might_sleep+0xf0/0xf0 [ 320.619607][T12200] ? __lock_acquire+0x7d10/0x7d10 [ 320.624657][T12200] should_fail+0x38c/0x4c0 [ 320.629101][T12200] should_failslab+0x5/0x20 [ 320.633611][T12200] slab_pre_alloc_hook+0x51/0xc0 [ 320.638568][T12200] kmem_cache_alloc_trace+0x47/0x2a0 [ 320.643857][T12200] ? ovs_ct_limit_cmd_set+0x2e4/0xae0 [ 320.649252][T12200] ovs_ct_limit_cmd_set+0x2e4/0xae0 [ 320.654458][T12200] ? __nla_parse+0x3c/0x50 [ 320.658894][T12200] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 320.665225][T12200] ? genl_family_rcv_msg_attrs_parse+0x20a/0x290 [ 320.671574][T12200] genl_rcv_msg+0xcea/0xf90 [ 320.676119][T12200] ? genl_bind+0x380/0x380 [ 320.680568][T12200] ? __dev_queue_xmit+0x1cbf/0x2f80 [ 320.685777][T12200] ? verify_lock_unused+0x140/0x140 [ 320.690997][T12200] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 320.696741][T12200] ? perf_trace_lock+0x301/0x390 [ 320.701698][T12200] ? rcu_lock_release+0x20/0x20 [ 320.706600][T12200] netlink_rcv_skb+0x1f5/0x440 [ 320.711372][T12200] ? genl_bind+0x380/0x380 [ 320.715803][T12200] ? netlink_ack+0xb50/0xb50 [ 320.720407][T12200] ? __lock_acquire+0x7d10/0x7d10 [ 320.725456][T12200] ? down_read+0x1aa/0x2e0 [ 320.729906][T12200] genl_rcv+0x24/0x40 [ 320.733915][T12200] netlink_unicast+0x774/0x920 [ 320.738723][T12200] netlink_sendmsg+0x8ba/0xbe0 [ 320.743526][T12200] ? netlink_getsockopt+0x570/0x570 [ 320.748743][T12200] ? aa_sock_msg_perm+0x94/0x150 [ 320.753704][T12200] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 320.758997][T12200] ? security_socket_sendmsg+0x7c/0xa0 [ 320.764473][T12200] ? netlink_getsockopt+0x570/0x570 [ 320.769678][T12200] ____sys_sendmsg+0x5b7/0x8f0 [ 320.774479][T12200] ? __sys_sendmsg_sock+0x30/0x30 [ 320.779540][T12200] ? import_iovec+0x6f/0xa0 [ 320.784080][T12200] ___sys_sendmsg+0x236/0x2e0 [ 320.788793][T12200] ? __sys_sendmsg+0x2a0/0x2a0 [ 320.793599][T12200] ? trace_event_raw_event_lock+0x270/0x270 [ 320.799500][T12200] ? vfs_write+0x8b2/0xd60 [ 320.803981][T12200] __se_sys_sendmsg+0x1af/0x290 [ 320.808854][T12200] ? __x64_sys_sendmsg+0x80/0x80 [ 320.813795][T12200] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 320.819815][T12200] ? lockdep_hardirqs_on+0x94/0x140 [ 320.825034][T12200] do_syscall_64+0x4c/0xa0 [ 320.829455][T12200] ? clear_bhb_loop+0x30/0x80 [ 320.834130][T12200] ? clear_bhb_loop+0x30/0x80 [ 320.838822][T12200] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 320.844718][T12200] RIP: 0033:0x7f2f4db0ce59 [ 320.849154][T12200] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 320.868778][T12200] RSP: 002b:00007f2f4bd66028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 320.877204][T12200] RAX: ffffffffffffffda RBX: 00007f2f4dd85fa0 RCX: 00007f2f4db0ce59 [ 320.885180][T12200] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000004 [ 320.893155][T12200] RBP: 00007f2f4bd66090 R08: 0000000000000000 R09: 0000000000000000 [ 320.901133][T12200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 320.909101][T12200] R13: 00007f2f4dd86038 R14: 00007f2f4dd85fa0 R15: 00007ffd1bb8bc08 [ 320.917121][T12200] [ 320.949152][T12121] team0: Port device team_slave_1 added [ 321.077710][T12121] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 321.115635][T12121] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.203029][T12218] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3008'. [ 321.232000][T12121] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 321.279667][T12218] netlink: 668 bytes leftover after parsing attributes in process `syz.0.3008'. [ 321.351838][T12121] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 321.371384][T12121] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.445631][T12121] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 321.648287][T12236] validate_nla: 9 callbacks suppressed [ 321.648304][T12236] netlink: 'syz.3.3013': attribute type 29 has an invalid length. [ 321.693295][T12218] openvswitch: netlink: Key type 15645 is out of range max 29 [ 321.709959][T12121] device hsr_slave_0 entered promiscuous mode [ 321.729212][T12121] device hsr_slave_1 entered promiscuous mode [ 321.752066][T12121] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 321.768044][T12121] Cannot create hsr debugfs directory [ 321.786942][T12236] netlink: 'syz.3.3013': attribute type 29 has an invalid length. [ 322.005409][T12245] netlink: 'syz.1.3014': attribute type 29 has an invalid length. [ 322.027790][T12245] netlink: 'syz.1.3014': attribute type 29 has an invalid length. [ 322.425684][ T1111] Bluetooth: hci5: command 0x041b tx timeout [ 322.763337][T12274] netlink: 'syz.2.3025': attribute type 29 has an invalid length. [ 322.885349][T12274] netlink: 'syz.2.3025': attribute type 29 has an invalid length. [ 323.124024][T12288] netlink: 'syz.1.3029': attribute type 29 has an invalid length. [ 323.146752][T12121] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 323.195747][T12294] netlink: 'syz.0.3028': attribute type 7 has an invalid length. [ 323.227445][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 323.233892][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.259126][T12288] netlink: 'syz.1.3029': attribute type 29 has an invalid length. [ 323.352051][T12121] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 323.443029][T12121] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 323.598265][T12121] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 323.639299][T12308] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.3033'. [ 324.191973][T12121] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.205272][T12328] netlink: 'syz.0.3039': attribute type 29 has an invalid length. [ 324.307024][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 324.323157][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 324.374375][T12121] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.432162][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 324.478261][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 324.505814][ T4240] Bluetooth: hci5: command 0x040f tx timeout [ 324.540040][ T4292] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.547179][ T4292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.868125][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 324.883898][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 324.920170][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 324.968119][ T4292] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.975252][ T4292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 325.058482][ T552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 325.073275][ T552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 325.111279][ T552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 325.144103][ T552] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 325.204042][T12121] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 325.240765][T12121] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 325.281718][ T153] team0: Port device wlan1 removed [ 325.399119][ T552] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 325.420082][ T552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 325.458545][ T552] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 325.492781][ T552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 325.547137][ T552] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 325.566863][ T552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 325.581309][ T552] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 325.633804][ T552] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 325.894421][ T153] device vlan0 left promiscuous mode [ 325.934175][ T153] À: port 1(vlan0) entered disabled state [ 326.030305][ T153] device hsr_slave_0 left promiscuous mode [ 326.082959][ T153] device hsr_slave_1 left promiscuous mode [ 326.112461][ T153] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 326.149530][ T153] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 326.166936][ T153] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 326.179042][ T153] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 326.206858][ T153] bridge0: port 3(bond0) entered disabled state [ 326.221813][ T153] device bridge_slave_1 left promiscuous mode [ 326.237968][ T153] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.411021][ T153] device bridge_slave_0 left promiscuous mode [ 326.440980][ T153] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.519296][ T153] device veth1_macvtap left promiscuous mode [ 326.586462][ T1111] Bluetooth: hci5: command 0x0419 tx timeout [ 326.590463][ T153] device veth0_macvtap left promiscuous mode [ 326.635215][ T153] device veth1_vlan left promiscuous mode [ 326.652717][ T153] device veth0_vlan left promiscuous mode [ 327.130742][ T153] team0 (unregistering): Port device virt_wifi0 removed [ 327.195476][ T153] team0 (unregistering): Port device team_slave_1 removed [ 327.231089][ T153] team0 (unregistering): Port device team_slave_0 removed [ 327.254086][ T153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 327.269146][ T153] device bond_slave_1 left promiscuous mode [ 327.284690][ T153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 327.304304][ T153] device bond_slave_0 left promiscuous mode [ 327.418014][ T153] bond0 (unregistering): Released all slaves [ 327.493168][T12388] validate_nla: 11 callbacks suppressed [ 327.493185][T12388] netlink: 'syz.1.3057': attribute type 29 has an invalid length. [ 327.512802][T12417] netlink: 'syz.0.3062': attribute type 29 has an invalid length. [ 327.690759][T12447] netlink: 'syz.1.3067': attribute type 29 has an invalid length. [ 327.729580][T12447] netlink: 'syz.1.3067': attribute type 29 has an invalid length. [ 327.804214][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 327.814164][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 327.895782][T12121] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 327.940921][T12459] netlink: 'syz.3.3071': attribute type 29 has an invalid length. [ 328.037646][T12459] netlink: 'syz.3.3071': attribute type 29 has an invalid length. [ 328.151438][T12470] netlink: 'syz.2.3070': attribute type 29 has an invalid length. [ 328.226280][T12470] netlink: 'syz.2.3070': attribute type 29 has an invalid length. [ 328.432038][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 328.445044][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 328.482256][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 328.496785][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 328.517091][T12121] device veth0_vlan entered promiscuous mode [ 328.534387][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 328.546584][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 328.568246][T12121] device veth1_vlan entered promiscuous mode [ 328.638056][ T552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 328.664544][ T552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 328.702099][T12121] device veth0_macvtap entered promiscuous mode [ 328.744526][T12121] device veth1_macvtap entered promiscuous mode [ 328.966873][T12121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 329.018074][T12121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.032661][T12121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 329.046254][T12121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.061053][T12121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 329.073107][T12121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.092292][T12121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 329.114527][T12488] netlink: 'syz.3.3077': attribute type 29 has an invalid length. [ 329.130756][T12121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.154823][T12121] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 329.164879][T12488] netlink: 'syz.3.3077': attribute type 29 has an invalid length. [ 329.184495][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 329.193657][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 329.243480][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 329.262617][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 329.287525][T12121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 329.323042][T12121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.339612][T12121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 329.352328][T12121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.362499][T12121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 329.373138][T12121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.406244][T12121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 329.420866][T12121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.437360][T12121] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 329.447653][ T552] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 329.482519][ T552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 329.507706][T12121] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.541723][T12121] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.568957][T12121] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.598070][T12121] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.861935][ T4254] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.892443][ T4254] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.935289][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 329.972981][ T4254] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.029022][ T4254] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.103898][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 330.839145][T12531] À: port 1(vlan0) entered blocking state [ 330.867289][T12531] À: port 1(vlan0) entered disabled state [ 330.922345][T12531] device vlan0 entered promiscuous mode [ 331.044546][T12534] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3094'. [ 331.055176][T12534] device bond0 entered promiscuous mode [ 331.074473][T12534] device bond_slave_0 entered promiscuous mode [ 331.083542][T12534] device bond_slave_1 entered promiscuous mode [ 331.111366][T12534] bridge0: port 3(bond0) entered blocking state [ 331.119051][T12534] bridge0: port 3(bond0) entered disabled state [ 331.170136][T12534] bridge0: port 3(bond0) entered blocking state [ 331.176769][T12534] bridge0: port 3(bond0) entered forwarding state [ 331.303597][T12545] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 331.925888][T12537] chnl_net:caif_netlink_parms(): no params data found [ 332.034181][T12537] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.041527][T12537] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.050293][T12537] device bridge_slave_0 entered promiscuous mode [ 332.060083][T12537] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.074725][T12537] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.086264][T12537] device bridge_slave_1 entered promiscuous mode [ 332.122053][T12537] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 332.134605][T12537] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 332.179611][T12537] team0: Port device team_slave_0 added [ 332.203866][T12537] team0: Port device team_slave_1 added [ 332.660223][T12537] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 332.674971][T12537] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.787394][T12537] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 332.856083][T12537] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 332.888164][T12537] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.931753][T12537] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 332.975774][ T1325] Bluetooth: hci2: command 0x0409 tx timeout [ 333.122824][T12537] device hsr_slave_0 entered promiscuous mode [ 333.147330][T12589] validate_nla: 15 callbacks suppressed [ 333.147344][T12589] netlink: 'syz.2.3109': attribute type 29 has an invalid length. [ 333.201391][T12537] device hsr_slave_1 entered promiscuous mode [ 333.210667][T12537] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 333.218824][T12537] Cannot create hsr debugfs directory [ 333.245189][T12593] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.3110'. [ 333.303558][T12589] netlink: 'syz.2.3109': attribute type 29 has an invalid length. [ 333.542526][T12602] FAULT_INJECTION: forcing a failure. [ 333.542526][T12602] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 333.595398][T12602] CPU: 0 PID: 12602 Comm: syz.2.3114 Not tainted syzkaller #0 [ 333.602897][T12602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 333.612963][T12602] Call Trace: [ 333.616233][T12602] [ 333.619149][T12602] dump_stack_lvl+0x188/0x250 [ 333.623815][T12602] ? show_regs_print_info+0x20/0x20 [ 333.629004][T12602] ? load_image+0x400/0x400 [ 333.633493][T12602] ? __lock_acquire+0x7d10/0x7d10 [ 333.638508][T12602] should_fail+0x38c/0x4c0 [ 333.642914][T12602] _copy_from_iter+0x22e/0x1170 [ 333.647751][T12602] ? __lock_acquire+0x7d10/0x7d10 [ 333.652765][T12602] ? copy_mc_pipe_to_iter+0x7d0/0x7d0 [ 333.658131][T12602] ? __virt_addr_valid+0x3c6/0x470 [ 333.663229][T12602] ? __phys_addr_symbol+0x2b/0x70 [ 333.668244][T12602] ? __check_object_size+0x30c/0x410 [ 333.673515][T12602] netlink_sendmsg+0x758/0xbe0 [ 333.678270][T12602] ? netlink_getsockopt+0x570/0x570 [ 333.683453][T12602] ? aa_sock_msg_perm+0x94/0x150 [ 333.688376][T12602] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 333.693644][T12602] ? security_socket_sendmsg+0x7c/0xa0 [ 333.699088][T12602] ? netlink_getsockopt+0x570/0x570 [ 333.704276][T12602] ____sys_sendmsg+0x5b7/0x8f0 [ 333.709032][T12602] ? __sys_sendmsg_sock+0x30/0x30 [ 333.714049][T12602] ? import_iovec+0x6f/0xa0 [ 333.718542][T12602] ___sys_sendmsg+0x236/0x2e0 [ 333.723215][T12602] ? __sys_sendmsg+0x2a0/0x2a0 [ 333.727971][T12602] ? vfs_write+0x8b2/0xd60 [ 333.732383][T12602] __se_sys_sendmsg+0x1af/0x290 [ 333.737219][T12602] ? __x64_sys_sendmsg+0x80/0x80 [ 333.742141][T12602] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 333.748113][T12602] ? lockdep_hardirqs_on+0x94/0x140 [ 333.753297][T12602] do_syscall_64+0x4c/0xa0 [ 333.757694][T12602] ? clear_bhb_loop+0x30/0x80 [ 333.762357][T12602] ? clear_bhb_loop+0x30/0x80 [ 333.767017][T12602] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 333.772893][T12602] RIP: 0033:0x7f47fbcd8e59 [ 333.777293][T12602] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 333.796880][T12602] RSP: 002b:00007f47f9f11028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 333.805281][T12602] RAX: ffffffffffffffda RBX: 00007f47fbf52090 RCX: 00007f47fbcd8e59 [ 333.813238][T12602] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000005 [ 333.821192][T12602] RBP: 00007f47f9f11090 R08: 0000000000000000 R09: 0000000000000000 [ 333.829148][T12602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 333.837102][T12602] R13: 00007f47fbf52128 R14: 00007f47fbf52090 R15: 00007ffcc25d8068 [ 333.845069][T12602] [ 333.884462][T12608] FAULT_INJECTION: forcing a failure. [ 333.884462][T12608] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 333.912064][T12608] CPU: 0 PID: 12608 Comm: syz.0.3117 Not tainted syzkaller #0 [ 333.919559][T12608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 333.924906][T12537] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.929615][T12608] Call Trace: [ 333.929625][T12608] [ 333.929632][T12608] dump_stack_lvl+0x188/0x250 [ 333.929658][T12608] ? show_regs_print_info+0x20/0x20 [ 333.929676][T12608] ? load_image+0x400/0x400 [ 333.960487][T12608] ? __lock_acquire+0x7d10/0x7d10 [ 333.965532][T12608] ? vfs_write+0x8b2/0xd60 [ 333.969944][T12608] should_fail+0x38c/0x4c0 [ 333.974352][T12608] _copy_from_user+0x2e/0x170 [ 333.979014][T12608] __sys_bpf+0x26d/0x6f0 [ 333.983242][T12608] ? bpf_link_show_fdinfo+0x380/0x380 [ 333.988602][T12608] ? vtime_user_exit+0x2c8/0x3e0 [ 333.993527][T12608] __x64_sys_bpf+0x78/0x90 [ 333.997924][T12608] do_syscall_64+0x4c/0xa0 [ 334.002336][T12608] ? clear_bhb_loop+0x30/0x80 [ 334.007020][T12608] ? clear_bhb_loop+0x30/0x80 [ 334.011689][T12608] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 334.017567][T12608] RIP: 0033:0x7f2f4db0ce59 [ 334.021982][T12608] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 334.041575][T12608] RSP: 002b:00007f2f4bd66028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 334.049983][T12608] RAX: ffffffffffffffda RBX: 00007f2f4dd85fa0 RCX: 00007f2f4db0ce59 [ 334.057944][T12608] RDX: 000000000000000c RSI: 00002000000005c0 RDI: 000000000000000a [ 334.065913][T12608] RBP: 00007f2f4bd66090 R08: 0000000000000000 R09: 0000000000000000 [ 334.073865][T12608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 334.081826][T12608] R13: 00007f2f4dd86038 R14: 00007f2f4dd85fa0 R15: 00007ffd1bb8bc08 [ 334.089808][T12608] [ 334.193252][T12537] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.265493][T12617] netlink: 'syz.0.3128': attribute type 29 has an invalid length. [ 334.317992][T12537] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.344609][T12617] netlink: 'syz.0.3128': attribute type 29 has an invalid length. [ 334.403493][T12537] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.603119][T12633] FAULT_INJECTION: forcing a failure. [ 334.603119][T12633] name failslab, interval 1, probability 0, space 0, times 0 [ 334.616075][T12633] CPU: 0 PID: 12633 Comm: syz.4.3126 Not tainted syzkaller #0 [ 334.623541][T12633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 334.633589][T12633] Call Trace: [ 334.636856][T12633] [ 334.639774][T12633] dump_stack_lvl+0x188/0x250 [ 334.644439][T12633] ? show_regs_print_info+0x20/0x20 [ 334.649620][T12633] ? load_image+0x400/0x400 [ 334.654106][T12633] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 334.659987][T12633] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 334.665865][T12633] ? _raw_spin_unlock+0x40/0x40 [ 334.670726][T12633] should_fail+0x38c/0x4c0 [ 334.675132][T12633] should_failslab+0x5/0x20 [ 334.679620][T12633] slab_pre_alloc_hook+0x51/0xc0 [ 334.684542][T12633] ? skb_clone+0x1bd/0x350 [ 334.688948][T12633] kmem_cache_alloc+0x3d/0x290 [ 334.693696][T12633] skb_clone+0x1bd/0x350 [ 334.697924][T12633] ? __neigh_event_send+0xe63/0x1470 [ 334.703197][T12633] __neigh_event_send+0xe70/0x1470 [ 334.708300][T12633] neigh_resolve_output+0x1b3/0x6a0 [ 334.713487][T12633] ? rcu_lock_acquire+0x30/0x30 [ 334.718322][T12633] ? nf_hook+0x2ea/0x360 [ 334.722555][T12633] ip_finish_output2+0xcbf/0x10a0 [ 334.727567][T12633] ? ip_mc_finish_output+0x250/0x250 [ 334.732836][T12633] ? rcu_is_watching+0x11/0xa0 [ 334.737591][T12633] ? netif_rx_ni+0x16c/0x3f0 [ 334.742181][T12633] ? ip_fragment+0x210/0x210 [ 334.746760][T12633] ? dev_loopback_xmit+0x255/0x330 [ 334.751855][T12633] ? ip_skb_dst_mtu+0x584/0x9b0 [ 334.756698][T12633] ? ip_finish_output+0x3e8/0x4b0 [ 334.761708][T12633] ip_send_skb+0x129/0x1c0 [ 334.766110][T12633] raw_sendmsg+0x14b7/0x1aa0 [ 334.770694][T12633] ? compat_raw_ioctl+0x60/0x60 [ 334.775541][T12633] ? aa_sk_perm+0x7dc/0x910 [ 334.780032][T12633] ? tomoyo_socket_sendmsg_permission+0x212/0x2f0 [ 334.786432][T12633] ? sock_rps_record_flow+0x17/0x3b0 [ 334.791702][T12633] ? inet_sendmsg+0x78/0x2f0 [ 334.796275][T12633] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 334.801543][T12633] ? security_socket_sendmsg+0x7c/0xa0 [ 334.806987][T12633] ? inet_send_prepare+0x260/0x260 [ 334.812082][T12633] ____sys_sendmsg+0x5b7/0x8f0 [ 334.816838][T12633] ? __sys_sendmsg_sock+0x30/0x30 [ 334.821851][T12633] ? import_iovec+0x6f/0xa0 [ 334.826345][T12633] ___sys_sendmsg+0x236/0x2e0 [ 334.831015][T12633] ? __sys_sendmsg+0x2a0/0x2a0 [ 334.835773][T12633] ? vfs_write+0x8b2/0xd60 [ 334.840191][T12633] __se_sys_sendmsg+0x1af/0x290 [ 334.845031][T12633] ? __x64_sys_sendmsg+0x80/0x80 [ 334.849952][T12633] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 334.855928][T12633] ? lockdep_hardirqs_on+0x94/0x140 [ 334.861115][T12633] do_syscall_64+0x4c/0xa0 [ 334.865515][T12633] ? clear_bhb_loop+0x30/0x80 [ 334.870177][T12633] ? clear_bhb_loop+0x30/0x80 [ 334.874836][T12633] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 334.880712][T12633] RIP: 0033:0x7fc2d45ede59 [ 334.885114][T12633] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 334.904700][T12633] RSP: 002b:00007fc2d2847028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 334.913099][T12633] RAX: ffffffffffffffda RBX: 00007fc2d4866fa0 RCX: 00007fc2d45ede59 [ 334.921053][T12633] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000003 [ 334.929007][T12633] RBP: 00007fc2d2847090 R08: 0000000000000000 R09: 0000000000000000 [ 334.936964][T12633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 334.944922][T12633] R13: 00007fc2d4867038 R14: 00007fc2d4866fa0 R15: 00007ffc8afd6db8 [ 334.952898][T12633] [ 335.063192][ T1108] Bluetooth: hci2: command 0x041b tx timeout [ 335.146844][T12537] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 335.178006][T12537] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 335.256438][T12537] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 335.270044][T12537] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 335.598682][T12653] netlink: 'syz.2.3134': attribute type 29 has an invalid length. [ 335.653706][T12653] netlink: 'syz.2.3134': attribute type 29 has an invalid length. [ 335.707749][T12537] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.741897][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 335.759157][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 335.788439][T12537] 8021q: adding VLAN 0 to HW filter on device team0 [ 335.823756][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 335.840904][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 335.853060][ T4292] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.860181][ T4292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.894053][T12664] netlink: 'syz.0.3138': attribute type 29 has an invalid length. [ 335.993829][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 336.013707][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 336.063908][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 336.104587][ T4292] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.111747][ T4292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 336.176779][T12664] netlink: 'syz.0.3138': attribute type 29 has an invalid length. [ 336.214866][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 336.294572][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 336.379169][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 336.396130][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 336.439972][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 336.467615][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 336.483203][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 336.506720][ T552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 336.522347][ T552] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 336.543219][ T552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 336.552347][ T552] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 336.716023][T12693] netlink: 'syz.4.3147': attribute type 29 has an invalid length. [ 336.862675][T12537] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 336.902292][T12694] netlink: 'syz.1.3145': attribute type 10 has an invalid length. [ 336.913153][T12694] device hsr0 entered promiscuous mode [ 336.924821][T12694] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 336.952592][T12694] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 336.963057][T12694] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 336.978836][T12694] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 337.135887][ T4275] Bluetooth: hci2: command 0x040f tx timeout [ 337.515872][ T552] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 337.529471][ T552] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 337.562668][T12537] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 337.684394][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 337.727314][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 337.738583][T12730] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.3160'. [ 337.903078][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 337.929975][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 337.995131][T12537] device veth0_vlan entered promiscuous mode [ 338.088390][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 338.108784][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 338.184389][T12736] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3161'. [ 338.206260][T12736] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3161'. [ 338.215451][T12736] netlink: 33 bytes leftover after parsing attributes in process `syz.0.3161'. [ 338.237296][T12736] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3161'. [ 338.252378][T12736] netlink: 33 bytes leftover after parsing attributes in process `syz.0.3161'. [ 338.261888][T12736] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3161'. [ 338.272569][T12736] netlink: 33 bytes leftover after parsing attributes in process `syz.0.3161'. [ 338.310418][T12537] device veth1_vlan entered promiscuous mode [ 338.453544][T12748] validate_nla: 6 callbacks suppressed [ 338.453574][T12748] netlink: 'syz.2.3166': attribute type 29 has an invalid length. [ 338.496521][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 338.505974][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 338.520859][T12537] device veth0_macvtap entered promiscuous mode [ 338.540443][T12748] netlink: 'syz.2.3166': attribute type 29 has an invalid length. [ 338.582903][ T153] team0: Port device wlan1 removed [ 338.674461][T12537] device veth1_macvtap entered promiscuous mode [ 338.912605][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 338.943253][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 339.002913][T12537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.028602][T12537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.065759][T12537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.105684][T12537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.145608][T12537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.185652][T12537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.195547][T12537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.216408][ T1108] Bluetooth: hci2: command 0x0419 tx timeout [ 339.235576][T12537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.245424][T12537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.279451][T12537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.307522][T12537] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 339.451379][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 339.496716][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 339.524992][T12537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.573241][T12537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.621403][T12537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.632141][T12537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.655560][T12537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.083303][T12537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.123272][T12537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.175616][T12537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.213045][T12537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.234414][T12537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.254171][T12537] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 340.282150][ T153] device vlan0 left promiscuous mode [ 340.288065][ T153] À: port 1(vlan0) entered disabled state [ 340.402846][ T153] device hsr_slave_0 left promiscuous mode [ 340.457545][ T153] device hsr_slave_1 left promiscuous mode [ 340.472460][ T153] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 340.505727][ T153] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 340.529760][ T153] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 340.558121][ T153] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 340.566703][ T153] bridge0: port 3(bond0) entered disabled state [ 340.574946][ T153] device bridge_slave_1 left promiscuous mode [ 340.582128][ T153] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.603373][ T153] device bridge_slave_0 left promiscuous mode [ 340.611746][T12796] netlink: 'syz.0.3180': attribute type 29 has an invalid length. [ 340.611989][ T153] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.653195][ T153] device veth1_vlan left promiscuous mode [ 340.660582][ T153] device veth0_vlan left promiscuous mode [ 341.035014][ T153] team0 (unregistering): Port device team_slave_1 removed [ 341.064392][ T153] team0 (unregistering): Port device team_slave_0 removed [ 341.094515][ T153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 341.111782][ T153] device bond_slave_1 left promiscuous mode [ 341.127651][ T153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 341.147169][ T153] device bond_slave_0 left promiscuous mode [ 341.243941][ T153] bond0 (unregistering): Released all slaves [ 341.344124][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 341.358686][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 341.410596][T12796] netlink: 'syz.0.3180': attribute type 29 has an invalid length. [ 341.480351][T12537] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.494233][T12537] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.535837][T12537] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.546944][T12537] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.628892][T12808] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3184'. [ 341.674754][T12808] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 341.707582][T12812] netlink: 'syz.0.3187': attribute type 1 has an invalid length. [ 341.740527][T12812] netlink: 116376 bytes leftover after parsing attributes in process `syz.0.3187'. [ 341.836299][T12815] netlink: 'syz.0.3187': attribute type 11 has an invalid length. [ 341.889127][T12815] netlink: 'syz.0.3187': attribute type 5 has an invalid length. [ 341.925961][ T4254] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.944150][ T4254] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 342.041496][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 342.209948][ T4292] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 342.235430][ T4292] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 342.276095][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 343.507420][T12852] netlink: 'syz.4.3201': attribute type 3 has an invalid length. [ 343.535721][T12852] __nla_validate_parse: 1 callbacks suppressed [ 343.535736][T12852] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3201'. [ 344.270732][T12867] netlink: 'syz.1.3204': attribute type 1 has an invalid length. [ 344.286486][T12867] netlink: 116376 bytes leftover after parsing attributes in process `syz.1.3204'. [ 344.469044][T12861] chnl_net:caif_netlink_parms(): no params data found [ 344.498032][T12867] netlink: 'syz.1.3204': attribute type 11 has an invalid length. [ 344.507089][T12867] netlink: 'syz.1.3204': attribute type 5 has an invalid length. [ 344.977490][T12861] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.014756][T12861] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.037785][T12861] device bridge_slave_0 entered promiscuous mode [ 345.064015][T12861] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.091789][T12861] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.132613][T12861] device bridge_slave_1 entered promiscuous mode [ 345.242237][T12861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 345.265276][T12861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.385606][T12861] team0: Port device team_slave_0 added [ 345.401742][T12861] team0: Port device team_slave_1 added [ 345.407040][T12903] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.3214'. [ 345.495112][T12861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 345.518198][T12861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.548289][T12861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 345.626012][T12861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 345.633084][T12861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.683296][T12861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 345.883812][T12861] device hsr_slave_0 entered promiscuous mode [ 346.005705][T12861] device hsr_slave_1 entered promiscuous mode [ 346.034119][T12861] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 346.095196][T12861] Cannot create hsr debugfs directory [ 346.134088][ T4239] Bluetooth: hci1: command 0x0409 tx timeout [ 346.223923][T12919] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 346.304260][T12924] netlink: 'syz.2.3224': attribute type 1 has an invalid length. [ 346.330675][T12924] netlink: 116376 bytes leftover after parsing attributes in process `syz.2.3224'. [ 346.414163][T12930] netlink: 'syz.2.3224': attribute type 11 has an invalid length. [ 346.449040][T12930] netlink: 'syz.2.3224': attribute type 5 has an invalid length. [ 346.638610][T12941] netlink: 'syz.1.3229': attribute type 10 has an invalid length. [ 346.719555][T12941] team0: Port device dummy0 added [ 346.838459][T12861] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.885334][T12944] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3229'. [ 346.947899][T12861] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.348049][T12861] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.516049][T12861] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.670039][T12960] netlink: 'syz.4.3235': attribute type 10 has an invalid length. [ 347.681390][T12962] netlink: 'syz.2.3236': attribute type 29 has an invalid length. [ 347.721639][T12960] device hsr0 entered promiscuous mode [ 347.786092][T12960] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 347.832510][T12960] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 347.853261][T12960] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 347.883519][T12960] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 347.964163][T12861] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 348.002088][T12861] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 348.035007][T12861] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 348.096839][T12861] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 348.129621][T12974] À: port 1(vlan0) entered blocking state [ 348.155054][T12974] À: port 1(vlan0) entered disabled state [ 348.175975][ T1108] Bluetooth: hci1: command 0x041b tx timeout [ 348.193665][T12974] device vlan0 entered promiscuous mode [ 348.438273][T12986] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.3244'. [ 348.497373][T12986] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 366.595867][ T4258] Bluetooth: hci6: command 0x0409 tx timeout [ 366.602881][ T4258] Bluetooth: hci4: command 0x0409 tx timeout [ 366.746154][ T4258] Bluetooth: hci7: command 0x0409 tx timeout [ 366.995752][ T4258] Bluetooth: hci8: command 0x0409 tx timeout [ 368.695889][T12563] Bluetooth: hci4: command 0x041b tx timeout [ 368.702855][T12563] Bluetooth: hci6: command 0x041b tx timeout [ 368.845776][T12563] Bluetooth: hci7: command 0x041b tx timeout [ 369.095802][T12563] Bluetooth: hci8: command 0x041b tx timeout [ 370.745795][ T4258] Bluetooth: hci6: command 0x040f tx timeout [ 370.752855][ T4258] Bluetooth: hci4: command 0x040f tx timeout [ 370.895841][ T4258] Bluetooth: hci7: command 0x040f tx timeout [ 371.147136][ T4258] Bluetooth: hci8: command 0x040f tx timeout [ 372.845776][T12563] Bluetooth: hci4: command 0x0419 tx timeout [ 372.851897][T12563] Bluetooth: hci6: command 0x0419 tx timeout [ 372.995830][T12563] Bluetooth: hci7: command 0x0419 tx timeout [ 373.247023][T12563] Bluetooth: hci8: command 0x0419 tx timeout [ 384.700329][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.712032][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 400.117742][ T4258] ODEBUG: Out of memory. ODEBUG disabled [ 406.045829][T12563] Bluetooth: hci9: command 0x0409 tx timeout [ 408.096847][T12563] Bluetooth: hci9: command 0x041b tx timeout [ 410.196838][T12563] Bluetooth: hci9: command 0x040f tx timeout [ 412.295682][T12563] Bluetooth: hci9: command 0x0419 tx timeout [ 427.395799][T12563] Bluetooth: hci11: command 0x0409 tx timeout [ 427.407013][T12563] Bluetooth: hci10: command 0x0409 tx timeout [ 427.545793][T12563] Bluetooth: hci12: command 0x0409 tx timeout [ 427.645696][T12563] Bluetooth: hci13: command 0x0409 tx timeout [ 429.495776][T12563] Bluetooth: hci10: command 0x041b tx timeout [ 429.502825][T12563] Bluetooth: hci11: command 0x041b tx timeout [ 429.645691][T12563] Bluetooth: hci12: command 0x041b tx timeout [ 429.696856][T12563] Bluetooth: hci13: command 0x041b tx timeout [ 431.545762][T12563] Bluetooth: hci11: command 0x040f tx timeout [ 431.555770][T12563] Bluetooth: hci10: command 0x040f tx timeout [ 431.695724][T12563] Bluetooth: hci12: command 0x040f tx timeout [ 431.796836][T12563] Bluetooth: hci13: command 0x040f tx timeout [ 433.645705][T12563] Bluetooth: hci10: command 0x0419 tx timeout [ 433.656560][T12563] Bluetooth: hci11: command 0x0419 tx timeout [ 433.795795][T12563] Bluetooth: hci12: command 0x0419 tx timeout [ 433.895707][T12563] Bluetooth: hci13: command 0x0419 tx timeout [ 443.095717][T12563] Bluetooth: hci5: command 0x0406 tx timeout [ 446.098454][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 446.104759][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 453.545540][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 453.552507][ C1] rcu: 0-....: (0 ticks this GP) idle=0fb/1/0x4000000000000000 softirq=34341/34341 fqs=2099 [ 453.563578][ C1] (detected by 1, t=10502 jiffies, g=40989, q=1170) [ 453.570269][ C1] Sending NMI from CPU 1 to CPUs 0: [ 453.575473][ C0] NMI backtrace for cpu 0 [ 453.575482][ C0] CPU: 0 PID: 12987 Comm: syz.2.3245 Not tainted syzkaller #0 [ 453.575499][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 453.575507][ C0] RIP: 0010:check_preemption_disabled+0x6/0x110 [ 453.575532][ C0] Code: f2 32 8a e8 2c 01 00 00 65 ff 0d c1 6a 46 76 5b c3 00 00 cc 48 c7 c7 a0 06 7a 8a 48 c7 c6 e0 06 7a 8a eb 00 55 41 57 41 56 53 <48> 83 ec 10 65 48 8b 04 25 28 00 00 00 48 89 44 24 08 65 8b 05 79 [ 453.575545][ C0] RSP: 0018:ffffc90000007918 EFLAGS: 00000046 [ 453.575558][ C0] RAX: 0000000000000000 RBX: 1ffff92000000f2c RCX: f8f8f8f8f8f8f8f8 [ 453.575570][ C0] RDX: 0000000000000100 RSI: ffffffff8a7a06e0 RDI: ffffffff8a7a06a0 [ 453.575581][ C0] RBP: ffffc90000007a08 R08: ffffffff8d89f82f R09: 1ffffffff1b13f05 [ 453.575592][ C0] R10: dffffc0000000000 R11: fffffbfff1b13f06 R12: 0000000000000000 [ 453.575603][ C0] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000802 [ 453.575613][ C0] FS: 00007f47f9f326c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 453.575628][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 453.575639][ C0] CR2: 0000001b32c17ff8 CR3: 0000000063290000 CR4: 00000000003506f0 [ 453.575653][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 453.575662][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 453.575672][ C0] Call Trace: [ 453.575679][ C0] [ 453.575688][ C0] rcu_nmi_exit+0xa/0xf0 [ 453.575721][ C0] rcu_irq_exit_irqson+0x92/0x120 [ 453.575751][ C0] ? rcu_irq_exit_check_preempt+0x200/0x200 [ 453.575785][ C0] ? __irq_exit_rcu+0x147/0x230 [ 453.575814][ C0] ? irq_exit_rcu+0x20/0x20 [ 453.575849][ C0] ? asm_sysvec_irq_work+0x16/0x20 [ 453.575881][ C0] trace_irq_enable_rcuidle+0x11e/0x180 [ 453.575899][ C0] trace_hardirqs_on+0x57/0x80 [ 453.575914][ C0] asm_sysvec_irq_work+0x16/0x20 [ 453.575928][ C0] RIP: 0010:rcu_read_unlock_special+0x7f/0x4a0 [ 453.575944][ C0] Code: eb 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 2b 42 c7 44 2b 08 f8 f3 f3 f3 65 44 8b 35 d2 df 9c 7e 41 f7 c6 00 00 f0 00 74 40 <48> c7 44 24 20 0e 36 e0 45 4a c7 04 2b 00 00 00 00 42 c7 44 2b 08 [ 453.575956][ C0] RSP: 0018:ffffc90000007b00 EFLAGS: 00000206 [ 453.575968][ C0] RAX: f833e38fbf134d00 RBX: 1ffff92000000f64 RCX: f833e38fbf134d00 [ 453.575979][ C0] RDX: dffffc0000000000 RSI: ffffffff8a2b3100 RDI: ffffffff8a7a0700 [ 453.575991][ C0] RBP: ffffc90000007bd8 R08: ffff8880b903b30b R09: 1ffff11017207661 [ 453.576002][ C0] R10: dffffc0000000000 R11: ffffed1017207662 R12: ffffffff8c323800 [ 453.576013][ C0] R13: dffffc0000000000 R14: 0000000000000246 R15: 0000000000000001 [ 453.576035][ C0] ? skb_release_head_state+0x150/0x240 [ 453.576054][ C0] ? __rcu_read_unlock+0xd0/0xd0 [ 453.576078][ C0] __rcu_read_unlock+0x78/0xd0 [ 453.576094][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 453.576111][ C0] ieee80211_iterate_active_interfaces_atomic+0x132/0x140 [ 453.576132][ C0] mac80211_hwsim_beacon+0x9b/0x180 [ 453.576148][ C0] ? hw_scan_work+0xed0/0xed0 [ 453.576171][ C0] __hrtimer_run_queues+0x4f2/0xb70 [ 453.576201][ C0] ? hrtimer_interrupt+0x8d0/0x8d0 [ 453.576223][ C0] hrtimer_run_softirq+0x176/0x240 [ 453.576244][ C0] handle_softirqs+0x339/0x830 [ 453.576262][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 453.576280][ C0] ? do_softirq+0x210/0x210 [ 453.576302][ C0] __irq_exit_rcu+0x13b/0x230 [ 453.576317][ C0] ? irq_exit_rcu+0x20/0x20 [ 453.576338][ C0] irq_exit_rcu+0x5/0x20 [ 453.576351][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 453.576369][ C0] [ 453.576374][ C0] [ 453.576389][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 453.576405][ C0] RIP: 0010:refill_stock+0x344/0x540 [ 453.576422][ C0] Code: 00 00 9c 8f 44 24 60 f7 44 24 60 00 02 00 00 41 c6 44 1e 04 f8 75 46 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <49> c7 04 1e 00 00 00 00 41 c7 44 1e 08 00 00 00 00 65 48 8b 04 25 [ 453.576435][ C0] RSP: 0018:ffffc9000301f880 EFLAGS: 00000206 [ 453.576448][ C0] RAX: f833e38fbf134d00 RBX: dffffc0000000000 RCX: f833e38fbf134d00 [ 453.576461][ C0] RDX: dffffc0000000000 RSI: ffffffff8a2b3100 RDI: ffffffff8a7a0700 [ 453.576473][ C0] RBP: ffffc9000301f970 R08: ffff8880b903b30b R09: 1ffff11017207661 [ 453.576485][ C0] R10: dffffc0000000000 R11: ffffed1017207662 R12: 0000000000000001 [ 453.576496][ C0] R13: ffff8880b9036498 R14: 1ffff92000603f18 R15: 0000000000000a06 [ 453.576519][ C0] ? __lock_acquire+0x7d10/0x7d10 [ 453.576540][ C0] ? mem_cgroup_uncharge_skmem+0x190/0x190 [ 453.576557][ C0] ? propagate_protected_usage+0x7a/0x240 [ 453.576575][ C0] ? page_counter_uncharge+0x59/0x110 [ 453.576597][ C0] refill_obj_stock+0x25c/0x470 [ 453.576613][ C0] ? obj_cgroup_charge+0x320/0x320 [ 453.576629][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 453.576652][ C0] memcg_slab_free_hook+0x157/0x1f0 [ 453.576671][ C0] ? qlink_free+0x37/0x80 [ 453.576686][ C0] ___cache_free+0x63/0x120 [ 453.576702][ C0] qlist_free_all+0x35/0x90 [ 453.576718][ C0] kasan_quarantine_reduce+0x150/0x160 [ 453.576735][ C0] __kasan_slab_alloc+0x2f/0xd0 [ 453.576751][ C0] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 453.576767][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 453.576784][ C0] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 453.576817][ C0] ? slab_pre_alloc_hook+0x27/0xc0 [ 453.576832][ C0] ? __might_sleep+0xf0/0xf0 [ 453.576848][ C0] ? __lock_acquire+0x7d10/0x7d10 [ 453.576864][ C0] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 453.576883][ C0] ? lock_chain_count+0x20/0x20 [ 453.576907][ C0] slab_post_alloc_hook+0x4c/0x380 [ 453.576923][ C0] ? should_failslab+0x5/0x20 [ 453.576940][ C0] __kmalloc_track_caller+0x125/0x330 [ 453.576955][ C0] ? __sys_setsockopt+0x2bf/0x3d0 [ 453.576976][ C0] sctp_setsockopt+0x7d/0xf80 [ 453.576994][ C0] ? sock_common_recvmsg+0x1c0/0x1c0 [ 453.577012][ C0] __sys_setsockopt+0x2bf/0x3d0 [ 453.577032][ C0] __x64_sys_setsockopt+0xb1/0xc0 [ 453.577051][ C0] do_syscall_64+0x4c/0xa0 [ 453.577065][ C0] ? clear_bhb_loop+0x30/0x80 [ 453.577079][ C0] ? clear_bhb_loop+0x30/0x80 [ 453.577096][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 453.577111][ C0] RIP: 0033:0x7f47fbcd8e59 [ 453.577129][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 453.577142][ C0] RSP: 002b:00007f47f9f32028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 453.577157][ C0] RAX: ffffffffffffffda RBX: 00007f47fbf51fa0 RCX: 00007f47fbcd8e59 [ 453.577168][ C0] RDX: 0000000000000078 RSI: 0000000000000084 RDI: 000000000000000e [ 453.577177][ C0] RBP: 00007f47fbd6ed6f R08: 0000000000000004 R09: 0000000000000000 [ 453.577187][ C0] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 453.577197][ C0] R13: 00007f47fbf52038 R14: 00007f47fbf51fa0 R15: 00007ffcc25d8068 [ 453.577217][ C0] [ 456.369671][ T4304] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 0-... } 10783 jiffies s: 17821 root: 0x1/. [ 456.392175][ T4304] rcu: blocking rcu_node structures (internal RCU debug): [ 456.400159][ T4304] Task dump for CPU 0: [ 456.404227][ T4304] task:syz.2.3245 state:R running task stack:25520 pid:12987 ppid: 4196 flags:0x0000400c [ 456.415058][ T4304] Call Trace: [ 456.418495][ T4304] [ 456.421433][ T4304] ? sysvec_apic_timer_interrupt+0x80/0xc0 [ 456.427264][ T4304] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 456.433431][ T4304] ? refill_stock+0x344/0x540 [ 456.438143][ T4304] ? __lock_acquire+0x7d10/0x7d10 [ 456.443176][ T4304] ? mem_cgroup_uncharge_skmem+0x190/0x190 [ 456.449006][ T4304] ? propagate_protected_usage+0x7a/0x240 [ 456.454734][ T4304] ? page_counter_uncharge+0x59/0x110 [ 456.460133][ T4304] ? refill_obj_stock+0x25c/0x470 [ 456.465158][ T4304] ? obj_cgroup_charge+0x320/0x320 [ 456.470338][ T4304] ? lockdep_hardirqs_on+0x94/0x140 [ 456.475965][ T4304] ? memcg_slab_free_hook+0x157/0x1f0 [ 456.481346][ T4304] ? qlink_free+0x37/0x80 [ 456.485775][ T4304] ? ___cache_free+0x63/0x120 [ 456.490455][ T4304] ? qlist_free_all+0x35/0x90 [ 456.495131][ T4304] ? kasan_quarantine_reduce+0x150/0x160 [ 456.500782][ T4304] ? __kasan_slab_alloc+0x2f/0xd0 [ 456.505825][ T4304] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 456.511987][ T4304] ? lockdep_hardirqs_on+0x94/0x140 [ 456.517223][ T4304] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 456.523403][ T4304] ? slab_pre_alloc_hook+0x27/0xc0 [ 456.528536][ T4304] ? __might_sleep+0xf0/0xf0 [ 456.533126][ T4304] ? __lock_acquire+0x7d10/0x7d10 [ 456.538168][ T4304] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 456.544151][ T4304] ? lock_chain_count+0x20/0x20 [ 456.549029][ T4304] ? slab_post_alloc_hook+0x4c/0x380 [ 456.554317][ T4304] ? should_failslab+0x5/0x20 [ 456.559016][ T4304] ? __kmalloc_track_caller+0x125/0x330 [ 456.564558][ T4304] ? __sys_setsockopt+0x2bf/0x3d0 [ 456.569619][ T4304] ? sctp_setsockopt+0x7d/0xf80 [ 456.574482][ T4304] ? sock_common_recvmsg+0x1c0/0x1c0 [ 456.579790][ T4304] ? __sys_setsockopt+0x2bf/0x3d0 [ 456.584819][ T4304] ? __x64_sys_setsockopt+0xb1/0xc0 [ 456.590038][ T4304] ? do_syscall_64+0x4c/0xa0 [ 456.594632][ T4304] ? clear_bhb_loop+0x30/0x80 [ 456.599325][ T4304] ? clear_bhb_loop+0x30/0x80 [ 456.604005][ T4304] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 456.610105][ T4304]