last executing test programs: 4.667924024s ago: executing program 3 (id=3521): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0xc2841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001440)={'\x00', 0x4212}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x9) ioctl$SIOCSIFHWADDR(r0, 0x8927, &(0x7f0000000000)={'tunl0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) 4.339496912s ago: executing program 4 (id=3525): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000180)=@o_path={&(0x7f0000000140)='./file0\x00', r0, 0x4000, r0}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000001880)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000001700)=[{&(0x7f0000000280)=""/83, 0x53}, {&(0x7f0000000300)=""/246, 0xf6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/254, 0xfe}, {&(0x7f0000001500)=""/195, 0xc3}, {&(0x7f0000001600)=""/212, 0xd4}], 0x6, &(0x7f0000001780)=""/211, 0xd3}, 0x2100) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000018c0)={0xffffffffffffffff}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000002f80)={r1, 0x58, &(0x7f0000002f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000003040)={r1, 0x58, &(0x7f0000002fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$inet(r4, &(0x7f0000003180)={&(0x7f0000001900)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000002e40)=[{&(0x7f0000001940)="c247c6eebc495a53433ab98bc03373f0110eea5e496feaab0e813eeb888bcdb92decf05233f1e7612392377e7c12b696e799b798097aa875809f1b72a54f309d18040d91657070470ba3f9dd6786af150d06381d4114ae7243424fbc14bb8afd6a5652529d63", 0x66}, {&(0x7f00000019c0)="c8c8bac285908733d4fa6a4d8cd1237fe26e793342e7ba127b8808ca17e84b74c5d2c4af7c39eded2f696d08f40552d7522b268ee145542d448ff9f29701fcea18b992cc6c7f4a5a9773e4c400f78700b227e548aa0dc88156dddce7efcae062bc985967792be4e8ce74f37a9902cabd5b1c9d47449ee5808a660a4c603c7c1605017289aa45b243e51863dd1cfbb62537ac10b803b6b078b198488c63c5906a213572d03ec62c444a2193765e513ac91ac901489f899853fb5905c546997bd486fc2dc16df7d79c", 0xc8}, {&(0x7f0000001ac0)="9b8e89ce1fbe5296bc1c1b99d448c3fcdb316f1fba75be65d96b2d60b472d31b23d4ee234997e6fe87e9f3214a193768aac7344e2758a7e85d65b1e9d260b42470370d94962dd2b1b42595267ef01d7527a2a7a3deffd79fe1564eddbe9f7156", 0x60}, {&(0x7f0000001b40)="ba00954c69c83e0477f7d6be81a885b2626bbc263ef7e8037e88baae29bea9b6dcc3198298e8b77b", 0x28}, {&(0x7f0000001b80)="5f98b43c7c9063200435e1fb71acb926a33f0e6b251b91667c2d608e3396319abe797640c21a47b1f6077128d8744959e35402c73b70c3e19a4927c458cc51a09f1cc587e5b52f5a905f71", 0x4b}, {&(0x7f0000001c00)="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", 0x1000}, {&(0x7f0000002c00)="8035732d0f4f069f7c9694b4ec9207401ff08dfbe36a970defa9f236432382e91046cfe29435a6a71f", 0x29}, {&(0x7f0000002c40)="8ae62b19b6fe1dae4d4bc4d4f300c10982812557b74f992a75dc47e0d277735209fe5d2ff463bc79c3a7", 0x2a}, {&(0x7f0000002c80)="e2da71fa5fb4f7ed83798572a7c69d82c34c9916b719a1cbc305c4bfd70583589fbcbf10db0ae31b05de4a29468e8624d6ca06c676c7703d0769be74bb40dcdb666050aaca5a9007688466c05a0dbb9d851ef371b38e743c408a757522e32557859ee0642124c4cb8e38426b862b6403ebb9b967d5fc9afe5dfca472815497abb64f9c428bc798494db751e590d288e85bcd6660d0a940e608c0fcc6113686ffd92bfd9c", 0xa4}, {&(0x7f0000002d40)="239eec17644b47ec4ead3833f499448335c59f5218d80d383bc83a944a663bcd98509a99e7c9d33ed40bc4d6ae77f9d6d15d9367b9002551471a4e796f91bd89fce4322d8c4fb0528d5fdfef66a03da57b0afcf20ffe3f2fd19be90559b599e97591675fce16abf855eef473e1996414ccaa2baca89a11963c35bc971b69c9f5aa44299761fe3a8ec6219e71a7318fff14743192c69e2e4bdd214517f8c1353c0380f8fbf3a900f81dc53195814807997d990d313c2336fc90564609a38e00abceea0da67240", 0xc6}], 0xa, &(0x7f0000003080)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@generic={0x88, 0x2}, @ssrr={0x89, 0x7, 0x6d, [@remote]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @multicast1, @local}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x688}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @remote, @loopback}}}], 0xf0}, 0x20000001) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000031c0)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x8, '\x00', r5, 0xffffffffffffffff, 0x5, 0x5, 0x5}, 0x50) r8 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000032c0)=@generic={&(0x7f0000003280)='./file0\x00', 0x0, 0x8}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000003340)={{r7, 0xffffffffffffffff}, &(0x7f0000003240), &(0x7f0000003300)=r8}, 0x20) ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0x768) r10 = perf_event_open$cgroup(&(0x7f0000003380)={0x4, 0x80, 0x2, 0x7f, 0x9, 0x0, 0x0, 0x800, 0x80000, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xff, 0x2, @perf_config_ext={0x6, 0xc}, 0x1, 0x5, 0x5, 0x4, 0x7, 0xff, 0x8, 0x0, 0xf, 0x0, 0x8}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x6) ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x40082406, &(0x7f0000003400)='\x00') r11 = bpf$ITER_CREATE(0x21, &(0x7f0000003440), 0x8) ioctl$TUNSETSTEERINGEBPF(r11, 0x800454e0, &(0x7f0000003480)=r1) r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000003500)=@generic={&(0x7f00000034c0)='./file0\x00', 0x0, 0x18}, 0x18) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000003680)={0xa2e, 0x0}, 0x8) r14 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000003700)=@o_path={&(0x7f00000036c0)='./file1\x00', 0x0, 0x18, r10}, 0x18) r15 = bpf$PROG_LOAD(0x5, &(0x7f00000037c0)={0x1, 0x10, &(0x7f0000003540)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff3, 0x0, 0x0, 0x0, 0x80000000}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r12}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd829}}, @map_idx={0x18, 0x1, 0x5, 0x0, 0xf}, @alu={0x4, 0x0, 0x7, 0x0, 0x4, 0xfffffffffffffffc, 0xfffffffffffffff0}]}, &(0x7f00000035c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xc, r11, 0x8, &(0x7f0000003600)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000003640)={0x5, 0xd, 0x1000, 0x1}, 0x10, r13, r11, 0x2, &(0x7f0000003740)=[r14, r12, r7, r7, r9, r11, r0, r12], &(0x7f0000003780)=[{0x1, 0x5, 0x2, 0xb}, {0x3, 0x1, 0x4, 0x1}], 0x10, 0xff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x8, 0x1a, &(0x7f0000003880)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffa}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x3}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x2}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x3}, @ldst={0x3, 0x0, 0x6, 0x5, 0xa, 0x50}, @alu={0x4, 0x1, 0x1, 0x9, 0x6, 0x100, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r14}}]}, &(0x7f0000003980)='GPL\x00', 0x5, 0xc1, &(0x7f00000039c0)=""/193, 0x41100, 0x3, '\x00', r6, @fallback=0x25, r11, 0x8, 0x0, 0x0, 0x10, &(0x7f0000003ac0)={0x2, 0x4, 0x18, 0x7}, 0x10, r13, r8, 0x5, &(0x7f0000003b00)=[r0], &(0x7f0000003b40)=[{0x100, 0x3, 0x0, 0xf608ca4b915a60a4}, {0x3, 0x3, 0xf, 0x1}, {0x1, 0x2, 0x10, 0x4}, {0x3, 0x2, 0xe, 0xa}, {0x1, 0x1, 0xb, 0x7}], 0x10, 0x86c}, 0x94) ioctl$PERF_EVENT_IOC_QUERY_BPF(r11, 0xc008240a, &(0x7f0000003c80)={0x7, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r16 = openat$tun(0xffffffffffffff9c, &(0x7f0000003cc0), 0x400040, 0x0) ioctl$TUNSETFILTEREBPF(r16, 0x800454e1, &(0x7f0000003d00)=r11) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000003d40)={r14, 0xffffffffffffffff}, 0x4) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000003e00)={r17, &(0x7f0000003d80)="d76fb6df4b87302921d7af7f492814b25bacdacf56210e9abd3b7df1c55bd3396d13a7cbd4dcdc05376a08e889dea30d9ea51c1c80f4eeeb7d8d7eac00542f76973a78ad85f32983e47def1393976e95107863060a1ee7ffdf0eb4beda462fd1f31f12f0746c26f4d4561acb0892160b"}, 0x20) r18 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000004040)=@bpf_tracing={0x1a, 0x25, &(0x7f0000003e40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xa194}, {{0x18, 0x1, 0x1, 0x0, r12}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r12}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @call={0x85, 0x0, 0x0, 0x15}, @map_idx={0x18, 0x7, 0x5, 0x0, 0xd}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r12}}, @call={0x85, 0x0, 0x0, 0xc2}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000003f80)='GPL\x00', 0xb, 0x0, 0x0, 0x40f00, 0x20, '\x00', r6, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xefba, r15, 0x3, &(0x7f0000003fc0)=[r7, r1, r17, r7, r11, r7, r12], &(0x7f0000004000)=[{0x0, 0x2, 0xc}, {0x2, 0x5, 0x5, 0xc}, {0x0, 0x5, 0x10, 0x9}], 0x10, 0x8001}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000004200)={@fallback=r2, 0x2a, 0x0, 0x7, &(0x7f0000004100)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000004140)=[0x0, 0x0, 0x0], &(0x7f0000004180)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000041c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000004240)={@map=r11, r15, 0xc, 0x2017, r18, @value=r11, @void, @void, @void, r19}, 0x20) 4.086729688s ago: executing program 1 (id=3526): socket$kcm(0xa, 0x3, 0x73) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1d, 0x2, 0x2, &(0x7f0000000300)={0x0, 0x0}) r0 = perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0xff, 0x43, 0x0, 0x0, 0x0, 0x7, 0x80000, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb2, 0x2000000, @perf_bp={0x0}, 0x2600, 0x0, 0x0, 0x0, 0x4000800, 0x0, 0x0, 0x0, 0x5, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYRES8=0x0], &(0x7f0000000c00)='GPL\x00', 0x100000, 0x0, 0x0, 0x0, 0x23}, 0x94) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)) ioctl$SIOCSIFHWADDR(r2, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b06, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r4 = socket$kcm(0xa, 0x0, 0x0) setsockopt$sock_attach_bpf(r4, 0x0, 0x4, 0x0, 0x8400) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xef, 0x0, &(0x7f0000000100)="b9ff030f6044238cb89e14f088a81bff803500004000638477fbac14142ce000000162079f4b4d2f87e56dca6aab055013f208001a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6e", 0x0, 0xfe, 0x60000000}, 0x50) perf_event_open$cgroup(&(0x7f0000000940)={0x5, 0x80, 0xc, 0x7, 0x81, 0x9, 0x0, 0x4, 0x40014, 0x6, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8c9, 0x1, @perf_config_ext={0xc, 0x400}, 0x0, 0x2, 0x101, 0x9, 0x6, 0xd, 0x2, 0x0, 0x2, 0x0, 0x9}, r0, 0xb, r2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) 4.086501028s ago: executing program 3 (id=3527): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000a80)=ANY=[@ANYBLOB="9feb010018000000000000002400556c9021dc23bfb21e5205000000000000000000000019000000000203000000000000000000000b00000000001000000000000902000052b32a"], 0x0, 0x3e}, 0x20) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0xa}, 0x10c002, 0xac5d}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) r2 = perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x12020, 0xfffffffffffffffe, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xffffffffffffff9e) r3 = perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f00000003c0)='syzkaller\x00', 0x25, 0xb3, &(0x7f000000cf3d)=""/179, 0x0, 0x0, '\x00', 0x0, @fallback=0x4}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r5) socket$kcm(0x25, 0x5, 0x0) recvmsg(r4, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0xa0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r2], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, r0}, 0x94) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40042409, 0x1) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x541b, &(0x7f0000000080)={'batadv_slave_1\x00', @remote}) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$sock(r6, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="7a6eca88ca428c8d4f36c8b8fc2047659bdcb41a9ebe5ac0bed120663c7a3c234c937452515eae867806e58adcd922e70fa89f0e436ab6", 0x37}, {&(0x7f0000000100), 0xfffffeda}], 0x2}, 0x4804) r7 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000300)={&(0x7f00000000c0)=@phonet={0x23, 0x0, 0x1, 0x4}, 0x80, 0x0}, 0x20000080) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r8, 0xffff0000, 0x10, 0x0, &(0x7f0000000380)="2b206d3c19c115da728c27780000cea6", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8924, &(0x7f0000000000)={'bond_slave_0\x00', @random="010000201000"}) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000600)={0x0, 0x91f, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x1b) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="d8000000120081414e81f782db010000001d080b01008100e8fe55a1010115000600142603600e1208002e0040001101a8001200a400014006000d30514d3afab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef6aa98516277ce06bba020017cbec040000000000000000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4688df216265e5dbf66f282ac027812cfbd3f1aeb4edbb57a7025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0b", 0xcb}], 0x1}, 0xc000) 3.6069555s ago: executing program 1 (id=3529): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000101000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 3.515791913s ago: executing program 1 (id=3530): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e04"], 0x0, 0x52}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0xc, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x1a}, 0x28) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000280)=0x1ffff) write$cgroup_pid(r0, &(0x7f0000000040), 0x12) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB='j8'], 0x0, 0x42, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa067707"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="020000"], 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'}) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000600000004000000fc"], 0x48) 3.417848295s ago: executing program 2 (id=3531): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x50) openat$ppp(0xffffffffffffff9c, 0x0, 0x20000, 0x0) close(0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, &(0x7f0000002280)={'bridge_slave_0\x00', @random="2b2000004ec6"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5d31, 0x30000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0xa}, 0x0, 0x0, 0x0, 0x9, 0x7fff}, 0x0, 0xffffffffffffffff, r1, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00480008000000000000ef00000000"], 0x48) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x98ffffff}, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080)) r5 = getpid() r6 = gettid() sendmsg$unix(r0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@cred={{0x1c, 0x1, 0x2, {r5, 0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r6}}}, @cred={{0x1c, 0x1, 0x2, {r6, 0x0, 0xee01}}}], 0x60, 0x4014}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x10c002, 0xac5d, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3.294931838s ago: executing program 4 (id=3533): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20098, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x8, 0x0, 0xc2ba, 0x0, 0x4000000, 0xb11, 0xfffe, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/1664], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r1, 0x702, 0x64, 0x0, &(0x7f0000000380)="e460334470b8d480eb00c1520800", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 3.011976665s ago: executing program 0 (id=3534): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x10) r1 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x6b, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000240)={'veth0_vlan\x00', 0x1000}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0xf6}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) 2.522981567s ago: executing program 4 (id=3535): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x3c) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x2, 0x5}, 0x51f5, 0x0, 0xfffffffc, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe40, 0x2b0, &(0x7f0000000100)="b9ff0b078059268cb89e14f086dd2de0ffff20200000ff02000aac14140ce000000d49e832f0", 0x0, 0x28e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (fail_nth: 5) 2.471728108s ago: executing program 2 (id=3536): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0xc2841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001440)={'\x00', 0x4212}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x9) ioctl$SIOCSIFHWADDR(r0, 0x8927, &(0x7f0000000000)={'tunl0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) 2.427858029s ago: executing program 3 (id=3537): socket$kcm(0x10, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000002f00000015ffffffffffffea5c00000000000000"], 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext={0x101, 0x6}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000001440)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x10c002, 0xac5d, 0x0, 0x8, 0x0, 0x10000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002c80)=ANY=[@ANYBLOB="1b00"/11], 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x22, &(0x7f0000000280), 0x4) recvmsg$kcm(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80)=""/4096, 0x1000}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) r2 = socket$kcm(0x10, 0x2, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000e1e, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000b000000080000000000000f050001"], 0x0, 0x2f, 0x0, 0x6}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000002000000a00300000500000000000000", @ANYRES32, @ANYBLOB="0000000000000000405d86327c"], 0x48) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB='V?\x00\x00-\x00Y'], 0xfe33) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000080)) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000009c0)}, 0xff0f000020000080) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="1802000000000000000000000000000085100000010000009500000000000000180000000001000020000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x4, 0x0, 0x0, 0x41000, 0x12}, 0x94) r4 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000001c0)={&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000002900"], 0x18}, 0x0) 2.42354048s ago: executing program 1 (id=3538): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x22, &(0x7f00000000c0)=r3, 0x4) 2.063552139s ago: executing program 0 (id=3539): r0 = socket$kcm(0x10, 0x3, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r5}, &(0x7f0000000280), &(0x7f0000000240)=r2}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000002780)=""/4172, 0x104c}, {&(0x7f0000000480)=""/20, 0x14}], 0x2}, 0x40000002) 2.044057729s ago: executing program 4 (id=3540): socket$kcm(0xa, 0x3, 0x73) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1d, 0x2, 0x2, &(0x7f0000000300)={0x0, 0x0}) r0 = perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0xff, 0x43, 0x0, 0x0, 0x0, 0x7, 0x80000, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb2, 0x2000000, @perf_bp={0x0}, 0x2600, 0x0, 0x0, 0x0, 0x4000800, 0x0, 0x0, 0x0, 0x5, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYRES8=0x0], &(0x7f0000000c00)='GPL\x00', 0x100000, 0x0, 0x0, 0x0, 0x23}, 0x94) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)) ioctl$SIOCSIFHWADDR(r2, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b06, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r4 = socket$kcm(0xa, 0x0, 0x0) setsockopt$sock_attach_bpf(r4, 0x0, 0x4, 0x0, 0x8400) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xef, 0x0, &(0x7f0000000100)="b9ff030f6044238cb89e14f088a81bff803500004000638477fbac14142ce000000162079f4b4d2f87e56dca6aab055013f208001a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6e", 0x0, 0xfe, 0x60000000}, 0x50) perf_event_open$cgroup(&(0x7f0000000940)={0x5, 0x80, 0xc, 0x7, 0x81, 0x9, 0x0, 0x4, 0x40014, 0x6, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8c9, 0x1, @perf_config_ext={0xc, 0x400}, 0x0, 0x2, 0x101, 0x9, 0x6, 0xd, 0x2, 0x0, 0x2, 0x0, 0x9}, r0, 0xb, r2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) 2.042709579s ago: executing program 2 (id=3541): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02002200356bd25a806f8c6394f91124fc60040006000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r3, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x12102) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) setsockopt$sock_attach_bpf(r6, 0x10f, 0x8a, &(0x7f0000000180)=r5, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0f00000004000000040000000c"], 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r12}, &(0x7f0000000280), &(0x7f0000000240)=r9}, 0x20) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r12, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f0000000200)=r13, 0x4) sendmsg$inet(r11, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000001800000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000180)=r0, 0x4) sendmsg$inet(r1, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="2c000000000000000000000007000000441c0503e020000100000000ac1414", @ANYRES64], 0xfffffffffffffe6c}, 0x40880) 1.779929386s ago: executing program 0 (id=3542): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)="89000000120081ae08060cdc03000fff7f030010000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad00009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x14) 1.779481666s ago: executing program 2 (id=3543): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x2, 0x1a, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000ad0000000700000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a}, 0x94) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffffff0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x800, 0x0, 0x80000000}, {0x1000000a, 0x4}], 0x10, 0x40004}, 0x94) close(0x3) r4 = socket$kcm(0x2, 0x5, 0x84) r5 = socket$kcm(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x11b, 0x23, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000001c0)=@generic={&(0x7f0000000100)='./file0\x00', r3}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) close(0x3) socket$kcm(0xa, 0x5, 0x0) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c012, 0xac5d, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, 0x6, 0x10000}, 0x80, 0x0}, 0xd0a0) openat$cgroup(r3, &(0x7f0000000200)='syz1\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x64, &(0x7f0000000000)=r8, 0x1c) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x6e, &(0x7f0000000000)=r9, 0x1c) close(0x3) bpf$PROG_LOAD(0x1c, &(0x7f00000003c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251ef60a84c9f4d4930f0000004509c5bb0000000000001da2b2ae3ae74cc4e8c3c811", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080) recvmsg$kcm(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000e80)=[{0x0}, {&(0x7f0000001480)=""/136, 0x88}, {&(0x7f0000000100)=""/37, 0x25}, {&(0x7f0000000dc0)=""/139, 0x8b}], 0x4}, 0x0) r11 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r11, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x0, @local, 0x3}, 0x80, &(0x7f00000029c0)=[{&(0x7f00000016c0)="83", 0x1}], 0x1}, 0x41) sendmsg$kcm(r11, &(0x7f00000001c0)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x4, @local, 0x3, 0x4}, 0x80, &(0x7f0000000100)=[{0x0, 0x21}], 0x1}, 0x4804) 1.721307687s ago: executing program 0 (id=3544): r0 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r0, 0x110, 0x4, 0x0, 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4040000) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000001280)=ANY=[@ANYBLOB="620ac4ff000000007110530000000000"], &(0x7f0000000480)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xe70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg$kcm(r1, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="1400000034000b47564cb62814", 0xd}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb01001800210000000000340000003400000006000000040000000000000e040000000000000000000000000000020000000002000000000000080200000000000000000000090300000000005f0061"], 0x0, 0x52}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0xc, 0x100022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x9, 0x0, 0xe86, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r4 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0xf, &(0x7f00000002c0), 0x161) sendmsg$inet(r4, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x48000) setsockopt$sock_attach_bpf(r4, 0x1, 0x31, &(0x7f0000000640)=r3, 0x4) close(r4) perf_event_open$cgroup(&(0x7f00000002c0)={0x3, 0x80, 0x4, 0x6, 0x4, 0x7, 0x0, 0x100000, 0x10, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x200, 0x0, @perf_config_ext={0x5993, 0x8}, 0x80, 0x7, 0x7, 0x9, 0x3, 0xffffffff, 0x8000, 0x0, 0x5, 0x0, 0x9}, r2, 0xc, r2, 0x0) close(r2) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000003140)=[{&(0x7f00000006c0)="cc4c523fa095cb7779f07834b5fb174f69766c65a03d796981d2f384623342651fbe7c135b3bd245c1fe90dec25db02e2f0f566352dc1587c05baf8ddbae391ac1a42490b918a1d3cfb65e18ede887fad146be75efbb730edc5e034111345b46dc234d917065d06096d1ee5b2021e56dde682a00f124813758f30c97a9ba554f856314ec3fdbb9e56bcbeb94f4e8bc2695", 0x91}, {&(0x7f0000000840)="f52b0dd4c6edca6cdb05472dc3f95814a60078a21a2c2721bea298f5971c1b3544568094d02f0d03698ba718fa291d0b3b58a7d749141af97b7e46f29bafd3acdcaf1894d9cf34f81870df4e985968fb5f05dd91b00d58ddb89855500f73fd35517f9f3795813eac574b5133eae6ab9d4e88066f30e70dbc720e05374917c2125d578e4f23190443a7007e3fa6aac049ac2b6e44ea40ea1e1c83bc961e112bf16c8f9ddc36cbda974a239a710fdeca55a1941ef1b2c8fd58b1a121903d4810f575ef2feaf4f36d0e70b6f5", 0xcb}, {&(0x7f0000000940)="f9ca181bd1693a04eed44c983d4f4521e2c850e757c3710ab6a24062cd7564543ac5fdc156cabb53f6510ac08e62cd82cf0d3b03ce3bc49a57bdd2403e5fb29b2ff9f4e7fdfc8e02361b3e90cf9ce3374e0fa5724dcae1bac1f3993792102a4d183385adccedfa716c866cea5d9a9d5c5d5f705a1724eba550ed3f3c7cd7d05d", 0x80}, {&(0x7f0000000a00)="01226a25f9b1884fb368fc5b853022c65ead843db1bb33a95575fb1a07e42bab5400a04ddd1c08e0f4936939a7803bc0b950143d867bfff48ad74f651699318f82302a1ba304874ea72b13fae81802f8cb84c72e1d81abb5ee3bd6569ccd687745f4b4b6eab6f839e4", 0x69}, {&(0x7f0000002040)="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", 0x1000}, {&(0x7f0000003040)="6a3a3ea39eea2d85821a477d741ff98e3b26e4d955d39e7f00ca62ad36095e51fded69d7c936fa04a8886220ac5328165fff51417348c52273edfdc38a530e4303dd72fef7bd57aede751a3f34fd9d20da052f2416fd268f47e7a5ef207538f1", 0x60}], 0x6}, 0x40042) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008d8dff"}) 1.387305685s ago: executing program 3 (id=3545): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20098, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x8, 0x0, 0xc2ba, 0x0, 0x4000000, 0xb11, 0xfffe, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/1664], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r1, 0x702, 0x64, 0x0, &(0x7f0000000380)="e460334470b8d480eb00c1520800", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.259829898s ago: executing program 2 (id=3546): r0 = socket$kcm(0xa, 0x5, 0x0) (async) r1 = perf_event_open(0x0, 0x0, 0xd, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x10, 0x0, 0x0, 0x100000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="180200000100ffff0000000000000000850000000700000085000000d000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xe, 0x0, &(0x7f0000000040)="f7edad00"/14, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$kcm(0x2b, 0x1, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8921, &(0x7f0000000cc0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00l \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}, 0x2000) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000005c0)=r2, 0x4) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000680)=@base={0xa, 0x16, 0xb4, 0x3}, 0x50) ioctl$TUNGETFILTER(r3, 0x801054db, &(0x7f0000000cc0)=""/242) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6}, @exit, @map_fd={0x18, 0xc, 0x1, 0x0, r4}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) socket$kcm(0x21, 0x2, 0x2) close(0x3) r5 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r5, &(0x7f0000000480)={&(0x7f0000000a40)=@in6={0xa, 0x4e22, 0x4411, @local, 0x4004}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000440)='m', 0x1}], 0x1}, 0x814) 1.086793073s ago: executing program 1 (id=3559): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x8040) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x22, &(0x7f00000000c0)=r1, 0x4) 46.196279ms ago: executing program 3 (id=3550): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x10) r1 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x6b, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000240)={'veth0_vlan\x00', 0x1000}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0xf6}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) 1.381249ms ago: executing program 1 (id=3551): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130af0b7050000010000006a0af2fe000000008500000044000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d6200100000000000000ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a0932f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c43ff010000000000000128dfd70b438af60b060000000000000056642b49b745f3bf2c4af38ffb7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0eb3280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee99367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57d31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96bf704526a8919bc700002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381ccc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73cfd1e76982f3d899f71e4a9f0ba8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f0000000000000000"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x6, @perf_config_ext, 0x10c002, 0x89, 0x0, 0x0, 0x8fc, 0xfffffffc}, 0x0, 0x1, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000001700)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x1}, 0x8806, 0x3, 0x634e, 0x0, 0x0, 0x1, 0xfff6, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) recvmsg$kcm(r1, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000001bc0)=""/80, 0x50}], 0x1}, 0x0) sendmsg$inet(r0, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000340)="b8", 0x1}], 0x1}, 0x4000001) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0x101d0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000c40)=ANY=[], 0x1458}, 0x20048811) recvmsg$kcm(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000680)=""/102, 0x66}], 0x1}, 0x40) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r5, 0x1, 0x9, &(0x7f0000000800), 0x4) socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x2, 0x5, 0x84) 969.92µs ago: executing program 2 (id=3552): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x64e55f0204cc0d30}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@map, 0x1d, 0x0, 0xfffffffc, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100), &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r2 = socket$kcm(0xa, 0x5, 0x0) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfe9, 0x200000000000000}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000001200000000000000000095", @ANYRES64=0x0, @ANYRESDEC=r3, @ANYRESDEC=r1], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000940), 0x4) socket$kcm(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000640)=ANY=[@ANYBLOB="9fcb01001800400000000000000000000000ea000200eaff0000522998643e99e56fec61a4d8d5926c5f9c6d091c26c807de46f70ebc5483d7158fd760cf0085798300c7e313b4645939df7cb49c1d611a7cfe2756dd7de1cc6cfc26202c21a38a9b18cfa0d987104eb44b11ef1d414ac2109ad28c03c8b0f378c9a3735276f4fd4c385275afbb96e58ebb17448f282176b0a750fef79d213fd9b434a9462d688be7335a88e8e0e100e94d1db9c8a7729751caf04178c7b635ea558185744823187e845bade4184b45e371e958a9cb7eb0f76b3dc04163fd16c8f1126f404a0991c925aa1833a4"], &(0x7f0000000140)=""/237, 0x1a, 0xed, 0x1}, 0x28) r7 = socket$kcm(0x21, 0x2, 0x2) r8 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x200a5, 0x0, 0xfffffffe, 0x7, 0x0, 0x2, 0x0, 0x0, 0x2000000}, 0x0, 0xd, r8, 0x0) r10 = socket$kcm(0x2a, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r10, 0x891b, 0x0) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYRESOCT=r10], 0x0, 0x51, 0x0, 0xfffffffc}, 0x28) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r9, 0x40042409, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRES16, @ANYRES8=r2, @ANYRESDEC=r7, @ANYRESOCT, @ANYRES32=r0, @ANYRES32=r10, @ANYRESOCT=r3, @ANYRESDEC=r5, @ANYRES16=r11], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8a10ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) r13 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r13, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b9040a00000000fe0500002015000600142603600e1209000a00000000000001060000b94dcf5c0468c1d67f6f94007134cfeee0800089e408e8d8ef52b40800de00e06bbace8017cbec4c2ee5a7cef4090000001fb79164075ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5035ccb29e00360db70100000040fad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a83954b43370e9701008400002d3bc75dc0bb9dd33e438c", 0xd8}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000e40)=ANY=[@ANYBLOB="0beb58527e1f68fcbcbecb2b4263f02028303cfd580ed07f1e5b4f3ffcbf08e5117a3e12ab674459241d559710ced6257cbe97b6b5842c023c2cf93df43e472045e846d36f4d38a408194c00000000bd3396dacb45a5f5a65c95d93fa4ab2d17a6f10d9a006c84cae3b91e3fff525792e82d5c5dc2b29e96f6a19718b14e37a7ced926ec95e3f7a3da2a47d0ae07db762896faffca4677b647691f2d70154a9c0c74d79bb2105b246aae0ffc612899d29d28cc683815fd6ec8f54e219eeb11e931ed6b9116aca129e507"], 0x0, 0x26}, 0x28) r14 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r14, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a0010000000028000031294", 0x2e}], 0x1}, 0x0) 564.089µs ago: executing program 0 (id=3553): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={&(0x7f0000000100)=@in={0x2, 0x4e21, @remote}, 0x80, &(0x7f0000000000)=[{&(0x7f00000006c0)='@', 0x1}], 0x1, &(0x7f0000000040)=[{0x18, 0x84, 0x0, 'r'}], 0x18}, 0x41) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r5) r6 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@generic={&(0x7f00000000c0)='./file0\x00', r3}, 0x18) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) r8 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)=r9}, 0x20) syz_clone(0x32a0000, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 4 (id=3554): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={r0, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001180)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) kernel console output (not intermixed with test programs): 7] RDX: 0000000000000050 RSI: 0000200000000c80 RDI: 000000000000000a [ 592.621363][T13557] RBP: 00007f217baa0090 R08: 0000000000000000 R09: 0000000000000000 [ 592.629351][T13557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 592.637344][T13557] R13: 00007f217ae26038 R14: 00007f217ae25fa0 R15: 00007fffe4c8f1e8 [ 592.645353][T13557] [ 592.670143][ T6249] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 592.678612][ T6249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 592.695748][ T6249] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 592.713221][ T6249] bridge0: port 2(bridge_slave_1) entered blocking state [ 592.720525][ T6249] bridge0: port 2(bridge_slave_1) entered forwarding state [ 592.734560][ T6249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 592.774479][ T6257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 592.808311][ T6257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 592.835328][ T6257] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 592.866198][ T6257] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 592.876456][ T4280] Bluetooth: hci0: command 0x041b tx timeout [ 592.903945][T13273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 592.943137][T13273] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 592.983064][T13273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 592.997576][T13273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 593.038234][ T6257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 593.053714][ T6257] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 593.083391][T13495] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 594.145373][ T6257] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 594.223577][ T6257] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 594.238399][T13495] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 594.340510][ T6257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 594.376265][ T6257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 594.438178][ T6257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 594.464824][ T6257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 594.495199][T13495] device veth0_vlan entered promiscuous mode [ 594.501852][T13589] netlink: 'syz.1.2938': attribute type 21 has an invalid length. [ 594.547009][T13589] netlink: 14530 bytes leftover after parsing attributes in process `syz.1.2938'. [ 594.568002][ T6257] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 594.599075][ T6257] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 594.618792][T13495] device veth1_vlan entered promiscuous mode [ 594.675384][ T6257] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 594.694396][ T6257] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 594.706285][ T6257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 594.738410][ T6257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 594.751367][T13495] device veth0_macvtap entered promiscuous mode [ 594.789401][T13495] device veth1_macvtap entered promiscuous mode [ 594.869613][T12939] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 594.920332][T12939] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 594.952737][ T49] Bluetooth: hci0: command 0x040f tx timeout [ 595.020916][T13495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 595.081350][T13495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.098199][T13495] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 595.109669][T12939] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 595.154256][T12939] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 595.175184][T13495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 595.214114][T13495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.238882][T13495] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 595.254326][T13604] FAULT_INJECTION: forcing a failure. [ 595.254326][T13604] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 595.269835][T13604] CPU: 0 PID: 13604 Comm: syz.2.2944 Not tainted syzkaller #0 [ 595.277344][T13604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 595.287432][T13604] Call Trace: [ 595.290755][T13604] [ 595.293735][T13604] dump_stack_lvl+0x188/0x24e [ 595.298457][T13604] ? deref_stack_reg+0x18e/0x220 [ 595.303442][T13604] ? show_regs_print_info+0x12/0x12 [ 595.308688][T13604] ? load_image+0x410/0x410 [ 595.313242][T13604] ? is_bpf_text_address+0x22/0x2a0 [ 595.318485][T13604] ? kernel_text_address+0x9c/0xd0 [ 595.323639][T13604] should_fail_ex+0x390/0x4c0 [ 595.328369][T13604] prepare_alloc_pages+0x1e1/0x5b0 [ 595.333545][T13604] __alloc_pages+0x130/0x4f0 [ 595.338194][T13604] ? zone_statistics+0x170/0x170 [ 595.343195][T13604] ? alloc_pages+0x4dd/0x740 [ 595.347816][T13604] get_zeroed_page+0x13/0x30 [ 595.352439][T13604] __dev_alloc_name+0x41b/0x800 [ 595.357342][T13604] ? lockdep_softirqs_off+0x430/0x430 [ 595.362756][T13604] ? __netdev_printk+0x3d0/0x3d0 [ 595.367721][T13604] ? lockdep_softirqs_off+0x430/0x430 [ 595.373130][T13604] dev_prep_valid_name+0x1dc/0x370 [ 595.378270][T13604] register_netdevice+0x498/0x1b80 [ 595.383404][T13604] ? net_generic+0x1e/0x240 [ 595.387970][T13604] ? netif_stacked_transfer_operstate+0x200/0x200 [ 595.394408][T13604] ? kvmalloc_node+0x6c/0x180 [ 595.399103][T13604] ? rcu_is_watching+0x11/0xa0 [ 595.403898][T13604] ? net_generic+0x1e/0x240 [ 595.408441][T13604] vti6_tnl_create2+0x80/0x140 [ 595.413222][T13604] vti6_locate+0x67e/0x770 [ 595.417694][T13604] ? skb_dst_update_pmtu_no_confirm+0x160/0x160 [ 595.423968][T13604] ? __might_fault+0xa6/0x120 [ 595.428667][T13604] ? vti6_siocdevprivate+0x672/0xba0 [ 595.433986][T13604] vti6_siocdevprivate+0x7c2/0xba0 [ 595.439139][T13604] ? vti6_tnl_xmit+0x1a20/0x1a20 [ 595.444126][T13604] ? full_name_hash+0xac/0xe0 [ 595.448874][T13604] dev_ifsioc+0xa4a/0xd50 [ 595.453245][T13604] ? dev_ioctl+0xe80/0xe80 [ 595.457694][T13604] ? full_name_hash+0xac/0xe0 [ 595.462396][T13604] ? dev_load+0x1d/0x1e0 [ 595.466832][T13604] ? dev_load+0x1d/0x1e0 [ 595.471113][T13604] dev_ioctl+0x5f8/0xe80 [ 595.475388][T13604] ? get_user_ifreq+0xc7/0x170 [ 595.480172][T13604] sock_ioctl+0x679/0x700 [ 595.484528][T13604] ? sock_poll+0x420/0x420 [ 595.488974][T13604] ? bpf_lsm_file_ioctl+0x5/0x10 [ 595.493942][T13604] ? security_file_ioctl+0x7c/0xa0 [ 595.499073][T13604] ? sock_poll+0x420/0x420 [ 595.503510][T13604] __se_sys_ioctl+0xfa/0x170 [ 595.508126][T13604] do_syscall_64+0x4c/0xa0 [ 595.512578][T13604] ? clear_bhb_loop+0x60/0xb0 [ 595.517281][T13604] ? clear_bhb_loop+0x60/0xb0 [ 595.521988][T13604] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 595.527911][T13604] RIP: 0033:0x7f54f439e1d9 [ 595.532343][T13604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 595.551981][T13604] RSP: 002b:00007f54f52ab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 595.560419][T13604] RAX: ffffffffffffffda RBX: 00007f54f4625fa0 RCX: 00007f54f439e1d9 [ 595.568409][T13604] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000004 [ 595.576395][T13604] RBP: 00007f54f52ab090 R08: 0000000000000000 R09: 0000000000000000 [ 595.584383][T13604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 595.592392][T13604] R13: 00007f54f4626038 R14: 00007f54f4625fa0 R15: 00007ffef9c6a2f8 [ 595.600438][T13604] [ 595.626705][ T6257] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 595.666320][ T6257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 595.687795][T13495] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.708413][T13495] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.735133][T13495] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.751552][T13495] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.933721][ T6257] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 595.965515][ T6257] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 595.998980][ T6249] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 596.045045][ T6249] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 596.062243][ T6249] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 596.088920][T13273] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 596.409130][T13628] netlink: 'syz.4.2953': attribute type 11 has an invalid length. [ 596.432176][T13628] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2953'. [ 596.654511][T13644] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2951'. [ 596.762568][T13644] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2951'. [ 597.034026][ T49] Bluetooth: hci0: command 0x0419 tx timeout [ 597.171445][T13659] FAULT_INJECTION: forcing a failure. [ 597.171445][T13659] name failslab, interval 1, probability 0, space 0, times 0 [ 597.195709][T13659] CPU: 0 PID: 13659 Comm: syz.2.2961 Not tainted syzkaller #0 [ 597.203277][T13659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 597.213378][T13659] Call Trace: [ 597.216692][T13659] [ 597.219661][T13659] dump_stack_lvl+0x188/0x24e [ 597.224394][T13659] ? verify_lock_unused+0x140/0x140 [ 597.229679][T13659] ? show_regs_print_info+0x12/0x12 [ 597.234929][T13659] ? load_image+0x410/0x410 [ 597.239479][T13659] ? crng_make_state+0x60e/0xb00 [ 597.244467][T13659] ? crng_make_state+0x1d1/0xb00 [ 597.249452][T13659] ? urandom_read_iter+0x140/0x140 [ 597.254619][T13659] ? ___sys_sendmsg+0x2a2/0x360 [ 597.259523][T13659] should_fail_ex+0x390/0x4c0 [ 597.264261][T13659] should_failslab+0x5/0x20 [ 597.268809][T13659] slab_pre_alloc_hook+0x59/0x300 [ 597.273881][T13659] ? sctp_add_bind_addr+0x89/0x350 [ 597.279035][T13659] __kmem_cache_alloc_node+0x4f/0x270 [ 597.284456][T13659] ? sctp_add_bind_addr+0x89/0x350 [ 597.289621][T13659] kmalloc_trace+0x26/0xe0 [ 597.294082][T13659] sctp_add_bind_addr+0x89/0x350 [ 597.299072][T13659] sctp_copy_local_addr_list+0x317/0x4d0 [ 597.304759][T13659] ? sctp_copy_local_addr_list+0xa0/0x4d0 [ 597.310527][T13659] ? sctp_do_8_2_transport_strike+0x900/0x900 [ 597.316642][T13659] ? sctp_v4_is_any+0x31/0x50 [ 597.321383][T13659] ? sctp_copy_one_addr+0x93/0x660 [ 597.326543][T13659] sctp_bind_addr_copy+0xaf/0x3c0 [ 597.331629][T13659] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 597.338019][T13659] sctp_connect_new_asoc+0x2f5/0x6a0 [ 597.343356][T13659] ? __sctp_connect+0xd80/0xd80 [ 597.348245][T13659] ? __local_bh_enable_ip+0x136/0x1c0 [ 597.353665][T13659] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 597.359254][T13659] ? security_sctp_bind_connect+0x85/0xb0 [ 597.365023][T13659] sctp_sendmsg+0x1686/0x2940 [ 597.369752][T13659] ? sctp_getsockopt+0x8a0/0x8a0 [ 597.374738][T13659] ? __might_fault+0xa6/0x120 [ 597.379450][T13659] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 597.385909][T13659] ? aa_sock_msg_perm+0x94/0x150 [ 597.390900][T13659] ? inet_sendmsg+0xca/0x2a0 [ 597.395544][T13659] ? inet_send_prepare+0x250/0x250 [ 597.400701][T13659] ____sys_sendmsg+0x5ed/0x9a0 [ 597.405518][T13659] ? __sys_sendmsg_sock+0x30/0x30 [ 597.410581][T13659] ? __import_iovec+0x306/0x510 [ 597.415492][T13659] ? import_iovec+0x6f/0xa0 [ 597.420051][T13659] ___sys_sendmsg+0x2a2/0x360 [ 597.424773][T13659] ? __sys_sendmsg+0x2a0/0x2a0 [ 597.429667][T13659] ? __lock_acquire+0x7ea0/0x7ea0 [ 597.434764][T13659] __se_sys_sendmsg+0x1c3/0x2b0 [ 597.439678][T13659] ? __x64_sys_sendmsg+0x80/0x80 [ 597.444670][T13659] ? lockdep_hardirqs_on+0x94/0x140 [ 597.449926][T13659] do_syscall_64+0x4c/0xa0 [ 597.454382][T13659] ? clear_bhb_loop+0x60/0xb0 [ 597.459092][T13659] ? clear_bhb_loop+0x60/0xb0 [ 597.463814][T13659] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 597.469743][T13659] RIP: 0033:0x7f54f439e1d9 [ 597.474185][T13659] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 597.493825][T13659] RSP: 002b:00007f54f52ab028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 597.502272][T13659] RAX: ffffffffffffffda RBX: 00007f54f4625fa0 RCX: 00007f54f439e1d9 [ 597.510287][T13659] RDX: 0000000004000040 RSI: 00002000000010c0 RDI: 0000000000000005 [ 597.518315][T13659] RBP: 00007f54f52ab090 R08: 0000000000000000 R09: 0000000000000000 [ 597.526326][T13659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 597.534343][T13659] R13: 00007f54f4626038 R14: 00007f54f4625fa0 R15: 00007ffef9c6a2f8 [ 597.542398][T13659] [ 598.323510][T13668] netlink: 'syz.2.2963': attribute type 1 has an invalid length. [ 598.414287][T13670] netlink: 'syz.2.2963': attribute type 1 has an invalid length. [ 598.438746][ T49] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 598.454112][ T49] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 598.462156][ T49] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 598.485116][ T49] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 598.492981][ T49] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 598.500848][ T49] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 598.757669][T13683] netlink: 'syz.1.2967': attribute type 2 has an invalid length. [ 598.775099][T13683] netlink: 'syz.1.2967': attribute type 1 has an invalid length. [ 598.796359][T13683] netlink: 170140 bytes leftover after parsing attributes in process `syz.1.2967'. [ 598.912934][T13674] chnl_net:caif_netlink_parms(): no params data found [ 599.232828][ T6257] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.279834][T13674] bridge0: port 1(bridge_slave_0) entered blocking state [ 599.344593][T13674] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.369818][T13674] device bridge_slave_0 entered promiscuous mode [ 599.394119][ T6257] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.421932][T13674] bridge0: port 2(bridge_slave_1) entered blocking state [ 599.432868][T13674] bridge0: port 2(bridge_slave_1) entered disabled state [ 599.450357][T13674] device bridge_slave_1 entered promiscuous mode [ 599.497478][ T6257] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.719111][ T6257] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.763860][T13674] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 599.800847][T13674] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 599.884410][T13674] team0: Port device team_slave_0 added [ 599.898309][T13674] team0: Port device team_slave_1 added [ 600.031436][T13674] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 600.048786][T13674] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 600.107234][T13674] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 600.181930][T13674] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 600.207505][T13674] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 600.277523][T13674] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 600.381936][T13720] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 600.418342][T13720] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 600.467350][T13725] netlink: 180 bytes leftover after parsing attributes in process `syz.1.2978'. [ 600.537037][T13674] device hsr_slave_0 entered promiscuous mode [ 600.557068][ T4280] Bluetooth: hci5: command 0x0409 tx timeout [ 600.637558][T13674] device hsr_slave_1 entered promiscuous mode [ 600.648925][T13674] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 600.670233][T13674] Cannot create hsr debugfs directory [ 600.851556][ T6257] device ip6gretap0 left promiscuous mode [ 600.874274][ T6257] : port 1(ip6gretap0) entered disabled state [ 600.986969][T13734] netlink: 'syz.1.2981': attribute type 2 has an invalid length. [ 601.016218][T13734] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2981'. [ 601.039014][T13741] FAULT_INJECTION: forcing a failure. [ 601.039014][T13741] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 601.119179][T13741] CPU: 0 PID: 13741 Comm: syz.0.2984 Not tainted syzkaller #0 [ 601.126712][T13741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 601.136917][T13741] Call Trace: [ 601.140226][T13741] [ 601.143195][T13741] dump_stack_lvl+0x188/0x24e [ 601.147918][T13741] ? show_regs_print_info+0x12/0x12 [ 601.153168][T13741] ? load_image+0x410/0x410 [ 601.157727][T13741] ? __lock_acquire+0x7ea0/0x7ea0 [ 601.162809][T13741] ? migrate_enable+0x148/0x220 [ 601.167717][T13741] should_fail_ex+0x390/0x4c0 [ 601.172448][T13741] _copy_to_user+0x2c/0x130 [ 601.177022][T13741] bpf_test_finish+0x4a2/0x600 [ 601.181887][T13741] ? convert_skb_to___skb+0x420/0x420 [ 601.187330][T13741] ? __build_skb+0x24b/0x3b0 [ 601.191980][T13741] bpf_prog_test_run_skb+0x1129/0x18e0 [ 601.197506][T13741] ? cpu_online+0xa0/0xa0 [ 601.201885][T13741] bpf_prog_test_run+0x31c/0x390 [ 601.206877][T13741] __sys_bpf+0x62b/0x780 [ 601.211169][T13741] ? bpf_link_show_fdinfo+0x380/0x380 [ 601.216631][T13741] ? lock_chain_count+0x20/0x20 [ 601.221547][T13741] __x64_sys_bpf+0x78/0x90 [ 601.226017][T13741] do_syscall_64+0x4c/0xa0 [ 601.230475][T13741] ? clear_bhb_loop+0x60/0xb0 [ 601.235196][T13741] ? clear_bhb_loop+0x60/0xb0 [ 601.239933][T13741] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 601.245862][T13741] RIP: 0033:0x7fa63d79e1d9 [ 601.250302][T13741] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 601.269955][T13741] RSP: 002b:00007fa63e6a0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 601.278402][T13741] RAX: ffffffffffffffda RBX: 00007fa63da25fa0 RCX: 00007fa63d79e1d9 [ 601.286422][T13741] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 601.294422][T13741] RBP: 00007fa63e6a0090 R08: 0000000000000000 R09: 0000000000000000 [ 601.302419][T13741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 601.310408][T13741] R13: 00007fa63da26038 R14: 00007fa63da25fa0 R15: 00007ffc2e023fc8 [ 601.318415][T13741] [ 601.748521][T13753] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2986'. [ 602.632916][ T49] Bluetooth: hci5: command 0x041b tx timeout [ 602.846900][T13674] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 602.871408][T13674] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 602.968853][ T6257] team0: Port device wlan1 removed [ 603.009883][T13674] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 603.937457][T13674] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 604.177801][ T6257] device bridge_slave_1 left promiscuous mode [ 604.209456][ T6257] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.228093][ T6257] device bridge_slave_0 left promiscuous mode [ 604.237888][ T6257] bridge0: port 1(bridge_slave_0) entered disabled state [ 604.282056][ T6257] device veth1_macvtap left promiscuous mode [ 604.294529][ T6257] device veth1_vlan left promiscuous mode [ 604.308807][ T6257] device veth0_vlan left promiscuous mode [ 604.712916][ T49] Bluetooth: hci5: command 0x040f tx timeout [ 605.874293][ T6257] team0 (unregistering): Port device hsr_slave_0 removed [ 605.979538][ T6257] team0 (unregistering): Port device team_slave_1 removed [ 606.353310][T13819] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 606.373305][T13819] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 606.411148][T13819] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 606.491159][T13674] 8021q: adding VLAN 0 to HW filter on device bond0 [ 606.541197][T12937] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 606.571822][T12937] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 606.584220][T13674] 8021q: adding VLAN 0 to HW filter on device team0 [ 606.607841][T12937] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 606.624108][T12937] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 606.642850][T12937] bridge0: port 1(bridge_slave_0) entered blocking state [ 606.650079][T12937] bridge0: port 1(bridge_slave_0) entered forwarding state [ 606.717611][T13857] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.3007'. [ 606.746550][T13860] device wlan1 entered promiscuous mode [ 606.768816][T13869] netlink: 'syz.2.3009': attribute type 21 has an invalid length. [ 606.793663][ T4280] Bluetooth: hci5: command 0x0419 tx timeout [ 606.834229][T13869] netlink: 16166 bytes leftover after parsing attributes in process `syz.2.3009'. [ 606.901851][T12937] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 606.918529][T12937] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 606.962241][T12937] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 606.987286][T12937] bridge0: port 2(bridge_slave_1) entered blocking state [ 606.994570][T12937] bridge0: port 2(bridge_slave_1) entered forwarding state [ 607.031103][T12937] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 607.071261][ T6272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 607.156117][ T6272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 607.200330][ T6272] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 607.256664][ T6272] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 607.289153][ T6272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 607.304648][ T6272] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 607.343620][ T6272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 607.355205][ T6272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 607.396936][ T6272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 607.414836][ T6272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 607.437791][T13674] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 607.498294][T13887] netlink: 'syz.4.3016': attribute type 1 has an invalid length. [ 607.534257][T13887] netlink: 'syz.4.3016': attribute type 3 has an invalid length. [ 607.542298][T13887] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3016'. [ 607.658500][T13892] netlink: 'syz.1.3018': attribute type 21 has an invalid length. [ 607.673153][T13892] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3018'. [ 607.702725][T13892] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3018'. [ 607.724911][T13895] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3019'. [ 607.743988][T13895] netlink: 'syz.4.3019': attribute type 11 has an invalid length. [ 608.176482][T12939] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 608.187588][T12939] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 608.198356][T13908] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3023'. [ 608.228643][T13674] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 608.346520][T12939] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 608.365234][T12939] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 608.511002][T12939] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 608.520566][T12939] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 608.533097][T13674] device veth0_vlan entered promiscuous mode [ 608.540590][T12939] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 608.549923][T12939] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 608.566406][T13674] device veth1_vlan entered promiscuous mode [ 608.621712][T12650] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 608.631083][T12650] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 608.673668][T12650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 608.729274][T12650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 608.766723][T13674] device veth0_macvtap entered promiscuous mode [ 608.796054][T13923] netlink: 'syz.4.3029': attribute type 6 has an invalid length. [ 608.817691][T13923] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3029'. [ 608.879796][T13674] device veth1_macvtap entered promiscuous mode [ 608.924333][T13674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 608.952983][T13674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.972862][T13674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 608.984088][T13674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.001951][T13674] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 609.015193][ T6249] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 609.041541][ T6249] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 609.072978][ T6249] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 609.102273][ T6249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 609.125391][T13674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 609.137240][T13674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.147984][T13674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 609.172690][T13674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.198701][T13674] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 609.231466][T12650] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 609.247775][T12650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 609.273260][T13674] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.282036][T13674] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.300229][T13674] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.314864][T13946] FAULT_INJECTION: forcing a failure. [ 609.314864][T13946] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 609.328075][T13674] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.398101][T13946] CPU: 0 PID: 13946 Comm: syz.1.3036 Not tainted syzkaller #0 [ 609.405660][T13946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 609.415758][T13946] Call Trace: [ 609.419077][T13946] [ 609.422043][T13946] dump_stack_lvl+0x188/0x24e [ 609.426794][T13946] ? show_regs_print_info+0x12/0x12 [ 609.432046][T13946] ? load_image+0x410/0x410 [ 609.436608][T13946] ? __lock_acquire+0x7ea0/0x7ea0 [ 609.441687][T13946] ? snprintf+0xe5/0x140 [ 609.446068][T13946] should_fail_ex+0x390/0x4c0 [ 609.450830][T13946] _copy_to_user+0x2c/0x130 [ 609.455390][T13946] simple_read_from_buffer+0xe3/0x150 [ 609.460807][T13946] proc_fail_nth_read+0x1a6/0x220 [ 609.465883][T13946] ? proc_fault_inject_write+0x310/0x310 [ 609.471577][T13946] ? fsnotify_perm+0x248/0x550 [ 609.476393][T13946] ? proc_fault_inject_write+0x310/0x310 [ 609.482073][T13946] vfs_read+0x2db/0x960 [ 609.486297][T13946] ? kernel_read+0x1e0/0x1e0 [ 609.490947][T13946] ? __fget_files+0x28/0x460 [ 609.495599][T13946] ? __fget_files+0x3fc/0x460 [ 609.500339][T13946] ? __fdget_pos+0x2ae/0x360 [ 609.504981][T13946] ? ksys_read+0x70/0x260 [ 609.509357][T13946] ksys_read+0x14d/0x260 [ 609.513624][T13946] ? vfs_write+0x9a0/0x9a0 [ 609.518073][T13946] ? lockdep_hardirqs_on+0x94/0x140 [ 609.523313][T13946] do_syscall_64+0x4c/0xa0 [ 609.527755][T13946] ? clear_bhb_loop+0x60/0xb0 [ 609.532461][T13946] ? clear_bhb_loop+0x60/0xb0 [ 609.537172][T13946] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 609.543111][T13946] RIP: 0033:0x7f74d195ea0e [ 609.547569][T13946] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 609.567207][T13946] RSP: 002b:00007f74cfbf5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 609.575648][T13946] RAX: ffffffffffffffda RBX: 00007f74cfbf66c0 RCX: 00007f74d195ea0e [ 609.583638][T13946] RDX: 000000000000000f RSI: 00007f74cfbf60a0 RDI: 0000000000000004 [ 609.591620][T13946] RBP: 00007f74cfbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 609.599612][T13946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 609.607613][T13946] R13: 00007f74d1c26038 R14: 00007f74d1c25fa0 R15: 00007fff66835f78 [ 609.615620][T13946] [ 610.473848][T12939] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 610.481729][T12939] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 610.526884][ T6272] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 610.569509][T12650] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 610.585260][T12650] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 610.604560][ T6272] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 610.890538][T13977] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 611.711433][ T6257] device netdevsim3 left promiscuous mode [ 611.738062][ T6257] team0: Port device netdevsim3 removed [ 611.758024][ T6257] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.812346][ T4280] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 611.828102][ T4280] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 611.837724][ T4280] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 611.845808][ T4280] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 611.861012][ T4280] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 611.872859][ T4280] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 611.894504][ T6257] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.114503][ T6257] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.651296][T14020] netlink: 'syz.0.3061': attribute type 10 has an invalid length. [ 612.664795][T14020] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3061'. [ 612.677280][T14020] bridge0: port 3(bond0) entered blocking state [ 612.686808][T14020] bridge0: port 3(bond0) entered disabled state [ 612.699535][T14020] device bond0 entered promiscuous mode [ 612.706804][T14020] device bond_slave_0 entered promiscuous mode [ 612.721649][T14020] device bond_slave_1 entered promiscuous mode [ 612.730234][T14020] bridge0: port 3(bond0) entered blocking state [ 612.736824][T14020] bridge0: port 3(bond0) entered forwarding state [ 612.767889][ T6257] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.493201][T14058] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.3070'. [ 613.512162][T14058] netlink: zone id is out of range [ 613.535394][T14058] netlink: zone id is out of range [ 613.549334][T14058] netlink: zone id is out of range [ 613.563222][T14058] netlink: zone id is out of range [ 613.569796][T14058] netlink: zone id is out of range [ 613.575852][T14058] netlink: zone id is out of range [ 613.581224][T14058] netlink: zone id is out of range [ 613.587038][T14058] netlink: zone id is out of range [ 613.592394][T14058] netlink: zone id is out of range [ 613.598470][T14058] netlink: zone id is out of range [ 613.695381][T14008] chnl_net:caif_netlink_parms(): no params data found [ 613.756106][T14062] netlink: 'syz.3.3070': attribute type 10 has an invalid length. [ 613.912804][ T4280] Bluetooth: hci3: command 0x0409 tx timeout [ 614.213749][T14062] team0: Device gre0 is of different type [ 614.362350][T14058] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3070'. [ 614.803147][T12939] wlan1: Trigger new scan to find an IBSS to join [ 615.212374][T14101] FAULT_INJECTION: forcing a failure. [ 615.212374][T14101] name failslab, interval 1, probability 0, space 0, times 0 [ 615.226186][T14101] CPU: 1 PID: 14101 Comm: syz.4.3082 Not tainted syzkaller #0 [ 615.233735][T14101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 615.243835][T14101] Call Trace: [ 615.247167][T14101] [ 615.250135][T14101] dump_stack_lvl+0x188/0x24e [ 615.254958][T14101] ? show_regs_print_info+0x12/0x12 [ 615.260251][T14101] ? load_image+0x410/0x410 [ 615.264799][T14101] ? __might_sleep+0xd0/0xd0 [ 615.269436][T14101] ? __lock_acquire+0x7ea0/0x7ea0 [ 615.274525][T14101] should_fail_ex+0x390/0x4c0 [ 615.279277][T14101] should_failslab+0x5/0x20 [ 615.283826][T14101] slab_pre_alloc_hook+0x59/0x300 [ 615.288888][T14101] ? __might_fault+0xa6/0x120 [ 615.293609][T14101] ? sk_prot_alloc+0xe7/0x210 [ 615.298359][T14101] __kmem_cache_alloc_node+0x4f/0x270 [ 615.303793][T14101] ? sk_prot_alloc+0xe7/0x210 [ 615.308517][T14101] __kmalloc+0xa3/0x240 [ 615.312716][T14101] sk_prot_alloc+0xe7/0x210 [ 615.317262][T14101] ? sk_alloc+0x20/0x330 [ 615.321561][T14101] sk_alloc+0x36/0x330 [ 615.325681][T14101] ? bpf_ctx_init+0x15e/0x190 [ 615.330399][T14101] bpf_prog_test_run_skb+0x36d/0x18e0 [ 615.335807][T14101] ? __fget_files+0x28/0x460 [ 615.340424][T14101] ? __fget_files+0x3fc/0x460 [ 615.345131][T14101] ? cpu_online+0xa0/0xa0 [ 615.349484][T14101] bpf_prog_test_run+0x31c/0x390 [ 615.354449][T14101] __sys_bpf+0x62b/0x780 [ 615.358719][T14101] ? bpf_link_show_fdinfo+0x380/0x380 [ 615.364130][T14101] ? lock_chain_count+0x20/0x20 [ 615.369009][T14101] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 615.375116][T14101] __x64_sys_bpf+0x78/0x90 [ 615.379564][T14101] do_syscall_64+0x4c/0xa0 [ 615.384010][T14101] ? clear_bhb_loop+0x60/0xb0 [ 615.388711][T14101] ? clear_bhb_loop+0x60/0xb0 [ 615.393415][T14101] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 615.399326][T14101] RIP: 0033:0x7f1d6119e1d9 [ 615.403760][T14101] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 615.423418][T14101] RSP: 002b:00007f1d6215c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 615.431857][T14101] RAX: ffffffffffffffda RBX: 00007f1d61425fa0 RCX: 00007f1d6119e1d9 [ 615.439862][T14101] RDX: 0000000000000050 RSI: 0000200000000100 RDI: 000000000000000a [ 615.447854][T14101] RBP: 00007f1d6215c090 R08: 0000000000000000 R09: 0000000000000000 [ 615.455856][T14101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 615.463851][T14101] R13: 00007f1d61426038 R14: 00007f1d61425fa0 R15: 00007ffd9620b438 [ 615.471858][T14101] [ 615.681756][T14008] bridge0: port 1(bridge_slave_0) entered blocking state [ 615.689394][T14008] bridge0: port 1(bridge_slave_0) entered disabled state [ 615.725085][T14008] device bridge_slave_0 entered promiscuous mode [ 615.747460][T14112] netlink: 'syz.3.3083': attribute type 21 has an invalid length. [ 615.773532][T14112] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3083'. [ 615.840336][T14008] bridge0: port 2(bridge_slave_1) entered blocking state [ 615.859028][T14008] bridge0: port 2(bridge_slave_1) entered disabled state [ 615.894757][T14008] device bridge_slave_1 entered promiscuous mode [ 615.992895][ T4280] Bluetooth: hci3: command 0x041b tx timeout [ 616.080363][T14008] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 616.107300][T14122] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.3088'. [ 616.184844][T14008] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 616.337728][T14008] team0: Port device team_slave_0 added [ 616.376222][T14008] team0: Port device team_slave_1 added [ 616.532917][T14008] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 616.563139][T14008] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 616.652530][T14008] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 616.703094][T14008] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 616.710118][T14008] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 616.812557][T14008] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 617.071876][T14157] netlink: 'syz.0.3098': attribute type 14 has an invalid length. [ 617.104447][T14157] netlink: 64283 bytes leftover after parsing attributes in process `syz.0.3098'. [ 617.154225][T14008] device hsr_slave_0 entered promiscuous mode [ 617.171692][T14008] device hsr_slave_1 entered promiscuous mode [ 617.238619][T14157] netlink: 'syz.0.3098': attribute type 29 has an invalid length. [ 617.262052][T14008] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 617.270310][T14008] Cannot create hsr debugfs directory [ 617.302084][T14157] netlink: 'syz.0.3098': attribute type 29 has an invalid length. [ 617.518626][T14167] netlink: 'syz.0.3098': attribute type 29 has an invalid length. [ 617.940524][T14178] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3103'. [ 618.056955][T14178] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3103'. [ 618.073399][ T4280] Bluetooth: hci3: command 0x040f tx timeout [ 618.225919][T14180] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3103'. [ 618.252775][ T6257] device hsr_slave_0 left promiscuous mode [ 618.267216][ T6257] device hsr_slave_1 left promiscuous mode [ 618.383663][ T6257] device veth1_vlan left promiscuous mode [ 618.390904][ T6257] device veth0_vlan left promiscuous mode [ 618.712615][T13273] wlan1: Trigger new scan to find an IBSS to join [ 619.697336][T12937] wlan1: Creating new IBSS network, BSSID 7a:5e:9a:97:ee:6f [ 619.979378][T14206] netlink: 'syz.4.3111': attribute type 1 has an invalid length. [ 619.990498][T14206] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3111'. [ 620.113208][ T6257] device team_slave_1 left promiscuous mode [ 620.129418][ T6257] team0 (unregistering): Port device team_slave_1 removed [ 620.152902][ T4280] Bluetooth: hci3: command 0x0419 tx timeout [ 620.232088][ T6257] device team_slave_0 left promiscuous mode [ 620.260589][ T6257] team0 (unregistering): Port device team_slave_0 removed [ 620.445498][ T6257] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 620.849311][ T6257] bond0 (unregistering): Released all slaves [ 620.978377][T14187] device syzkaller0 entered promiscuous mode [ 620.988889][T14181] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3103'. [ 621.772061][T14236] FAULT_INJECTION: forcing a failure. [ 621.772061][T14236] name failslab, interval 1, probability 0, space 0, times 0 [ 621.789609][T14236] CPU: 1 PID: 14236 Comm: syz.2.3117 Not tainted syzkaller #0 [ 621.797171][T14236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 621.807365][T14236] Call Trace: [ 621.810696][T14236] [ 621.813699][T14236] dump_stack_lvl+0x188/0x24e [ 621.818424][T14236] ? show_regs_print_info+0x12/0x12 [ 621.823672][T14236] ? load_image+0x410/0x410 [ 621.828225][T14236] ? __might_sleep+0xd0/0xd0 [ 621.832845][T14236] ? __lock_acquire+0x7ea0/0x7ea0 [ 621.837918][T14236] should_fail_ex+0x390/0x4c0 [ 621.842672][T14236] should_failslab+0x5/0x20 [ 621.847196][T14236] slab_pre_alloc_hook+0x59/0x300 [ 621.852293][T14236] ? __get_vm_area_node+0x122/0x330 [ 621.857534][T14236] __kmem_cache_alloc_node+0x4f/0x270 [ 621.862947][T14236] ? __get_vm_area_node+0x122/0x330 [ 621.868181][T14236] kmalloc_node_trace+0x22/0xe0 [ 621.873071][T14236] __get_vm_area_node+0x122/0x330 [ 621.878138][T14236] __vmalloc_node_range+0x357/0x1380 [ 621.883456][T14236] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 621.889051][T14236] ? trace_event_raw_event_lock+0x230/0x230 [ 621.894995][T14236] ? aa_get_newest_label+0xf9/0x5b0 [ 621.900223][T14236] ? free_vm_area+0x50/0x50 [ 621.904758][T14236] ? end_current_label_crit_section+0x170/0x170 [ 621.911033][T14236] ? __lock_acquire+0x7ea0/0x7ea0 [ 621.916088][T14236] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 621.921836][T14236] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 621.927435][T14236] __vmalloc+0x76/0x80 [ 621.931535][T14236] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 621.937129][T14236] bpf_prog_alloc_no_stats+0x37/0x3a0 [ 621.942538][T14236] ? bpf_prog_alloc+0x13/0x1b0 [ 621.947366][T14236] bpf_prog_alloc+0x1c/0x1b0 [ 621.952004][T14236] bpf_prog_load+0x7d4/0x1530 [ 621.956740][T14236] ? map_freeze+0x390/0x390 [ 621.961276][T14236] ? __might_fault+0xa6/0x120 [ 621.965991][T14236] ? __might_fault+0xa6/0x120 [ 621.970689][T14236] ? __might_fault+0xc2/0x120 [ 621.975392][T14236] ? __might_fault+0xa6/0x120 [ 621.980096][T14236] ? bpf_lsm_bpf+0x5/0x10 [ 621.984454][T14236] ? security_bpf+0x7a/0xa0 [ 621.988975][T14236] __sys_bpf+0x5b8/0x780 [ 621.993252][T14236] ? bpf_link_show_fdinfo+0x380/0x380 [ 621.998696][T14236] ? lock_chain_count+0x20/0x20 [ 622.003592][T14236] __x64_sys_bpf+0x78/0x90 [ 622.008043][T14236] do_syscall_64+0x4c/0xa0 [ 622.012493][T14236] ? clear_bhb_loop+0x60/0xb0 [ 622.017195][T14236] ? clear_bhb_loop+0x60/0xb0 [ 622.021906][T14236] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 622.027838][T14236] RIP: 0033:0x7f54f439e1d9 [ 622.032303][T14236] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 622.052030][T14236] RSP: 002b:00007f54f52ab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 622.060481][T14236] RAX: ffffffffffffffda RBX: 00007f54f4625fa0 RCX: 00007f54f439e1d9 [ 622.068473][T14236] RDX: 0000000000000048 RSI: 0000200000000200 RDI: 0000000000000005 [ 622.076467][T14236] RBP: 00007f54f52ab090 R08: 0000000000000000 R09: 0000000000000000 [ 622.084457][T14236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 622.092462][T14236] R13: 00007f54f4626038 R14: 00007f54f4625fa0 R15: 00007ffef9c6a2f8 [ 622.100486][T14236] [ 622.114239][T14236] syz.2.3117: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 622.135152][T14236] CPU: 0 PID: 14236 Comm: syz.2.3117 Not tainted syzkaller #0 [ 622.142751][T14236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 622.152846][T14236] Call Trace: [ 622.156173][T14236] [ 622.159169][T14236] dump_stack_lvl+0x188/0x24e [ 622.163902][T14236] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 622.170373][T14236] ? show_regs_print_info+0x12/0x12 [ 622.175635][T14236] ? load_image+0x410/0x410 [ 622.180183][T14236] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 622.186638][T14236] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 622.193177][T14236] warn_alloc+0x242/0x330 [ 622.197544][T14236] ? __get_vm_area_node+0x122/0x330 [ 622.202829][T14236] ? zone_watermark_ok_safe+0x270/0x270 [ 622.208420][T14236] ? rcu_is_watching+0x11/0xa0 [ 622.213234][T14236] ? __get_vm_area_node+0x318/0x330 [ 622.218485][T14236] __vmalloc_node_range+0x37c/0x1380 [ 622.223819][T14236] ? trace_event_raw_event_lock+0x230/0x230 [ 622.229787][T14236] ? aa_get_newest_label+0xf9/0x5b0 [ 622.235024][T14236] ? free_vm_area+0x50/0x50 [ 622.239559][T14236] ? end_current_label_crit_section+0x170/0x170 [ 622.245833][T14236] ? __lock_acquire+0x7ea0/0x7ea0 [ 622.250893][T14236] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 622.256652][T14236] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 622.262222][T14236] __vmalloc+0x76/0x80 [ 622.266319][T14236] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 622.271895][T14236] bpf_prog_alloc_no_stats+0x37/0x3a0 [ 622.277300][T14236] ? bpf_prog_alloc+0x13/0x1b0 [ 622.282111][T14236] bpf_prog_alloc+0x1c/0x1b0 [ 622.286737][T14236] bpf_prog_load+0x7d4/0x1530 [ 622.291487][T14236] ? map_freeze+0x390/0x390 [ 622.296041][T14236] ? __might_fault+0xa6/0x120 [ 622.300770][T14236] ? __might_fault+0xa6/0x120 [ 622.305477][T14236] ? __might_fault+0xc2/0x120 [ 622.310190][T14236] ? __might_fault+0xa6/0x120 [ 622.314898][T14236] ? bpf_lsm_bpf+0x5/0x10 [ 622.319256][T14236] ? security_bpf+0x7a/0xa0 [ 622.323802][T14236] __sys_bpf+0x5b8/0x780 [ 622.328083][T14236] ? bpf_link_show_fdinfo+0x380/0x380 [ 622.333527][T14236] ? lock_chain_count+0x20/0x20 [ 622.338430][T14236] __x64_sys_bpf+0x78/0x90 [ 622.342904][T14236] do_syscall_64+0x4c/0xa0 [ 622.347375][T14236] ? clear_bhb_loop+0x60/0xb0 [ 622.352100][T14236] ? clear_bhb_loop+0x60/0xb0 [ 622.356815][T14236] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 622.362747][T14236] RIP: 0033:0x7f54f439e1d9 [ 622.367192][T14236] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 622.386831][T14236] RSP: 002b:00007f54f52ab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 622.395275][T14236] RAX: ffffffffffffffda RBX: 00007f54f4625fa0 RCX: 00007f54f439e1d9 [ 622.403297][T14236] RDX: 0000000000000048 RSI: 0000200000000200 RDI: 0000000000000005 [ 622.411297][T14236] RBP: 00007f54f52ab090 R08: 0000000000000000 R09: 0000000000000000 [ 622.419295][T14236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 622.427303][T14236] R13: 00007f54f4626038 R14: 00007f54f4625fa0 R15: 00007ffef9c6a2f8 [ 622.435336][T14236] [ 622.460721][T14236] Mem-Info: [ 622.477004][T14236] active_anon:6496 inactive_anon:0 isolated_anon:0 [ 622.477004][T14236] active_file:20799 inactive_file:40170 isolated_file:0 [ 622.477004][T14236] unevictable:768 dirty:119 writeback:0 [ 622.477004][T14236] slab_reclaimable:21745 slab_unreclaimable:99367 [ 622.477004][T14236] mapped:35020 shmem:1369 pagetables:599 [ 622.477004][T14236] sec_pagetables:0 bounce:0 [ 622.477004][T14236] kernel_misc_reclaimable:0 [ 622.477004][T14236] free:1311554 free_pcp:10246 free_cma:0 [ 622.526494][T14236] Node 0 active_anon:25984kB inactive_anon:0kB active_file:83196kB inactive_file:160476kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:140080kB dirty:476kB writeback:0kB shmem:3940kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11028kB pagetables:2396kB sec_pagetables:0kB all_unreclaimable? no [ 622.572428][T14236] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 622.607623][T14236] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 622.635530][T14236] lowmem_reserve[]: 0 2511 2513 2513 2513 [ 622.641384][T14236] Node 0 DMA32 free:1342028kB boost:0kB min:34556kB low:43192kB high:51828kB reserved_highatomic:0KB active_anon:25984kB inactive_anon:0kB active_file:83196kB inactive_file:160476kB unevictable:1536kB writepending:476kB present:3129332kB managed:2576776kB mlocked:0kB bounce:0kB free_pcp:18224kB local_pcp:14668kB free_cma:0kB [ 622.674215][T14236] lowmem_reserve[]: 0 0 1 1 1 [ 622.679027][T14236] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1680kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:12kB free_cma:0kB [ 622.707193][T14236] lowmem_reserve[]: 0 0 0 0 0 [ 622.712003][T14236] Node 1 Normal free:3888804kB boost:0kB min:55324kB low:69152kB high:82980kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:23056kB local_pcp:12140kB free_cma:0kB [ 622.752620][T14236] lowmem_reserve[]: 0 0 0 0 0 [ 622.757434][T14236] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 622.778455][T14236] Node 0 DMA32: 933*4kB (UME) 881*8kB (UME) 705*16kB (UME) 1574*32kB (UME) 1173*64kB (UME) 469*128kB (UME) 259*256kB (UME) 81*512kB (UM) 44*1024kB (UME) 13*2048kB (UM) 233*4096kB (UM) = 1341356kB [ 622.806165][T14236] Node 0 Normal: 2*4kB (U) 2*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 622.818750][T14236] Node 1 Normal: 243*4kB (UME) 63*8kB (UME) 36*16kB (UE) 27*32kB (UME) 21*64kB (UME) 8*128kB (UME) 4*256kB (UM) 1*512kB (M) 1*1024kB (E) 1*2048kB (E) 947*4096kB (UM) = 3888804kB [ 622.837391][T14236] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 622.847208][T14236] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 622.856762][T14236] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 622.867809][T14236] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 622.877217][T14236] 62339 total pagecache pages [ 622.881922][T14236] 1 pages in swap cache [ 622.892933][T14236] Free swap = 124728kB [ 622.897155][T14236] Total swap = 124996kB [ 622.901349][T14236] 2097051 pages RAM [ 622.910208][T14236] 0 pages HighMem/MovableOnly [ 622.915211][T14236] 419192 pages reserved [ 622.919432][T14236] 0 pages cma reserved [ 624.247946][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.254370][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.540246][T14234] tipc: Started in network mode [ 624.563602][T14234] tipc: Node identity 9215a268, cluster identity 4711 [ 624.577103][T14234] tipc: Node number set to 2450891368 [ 624.591076][T14250] netlink: 'syz.2.3123': attribute type 21 has an invalid length. [ 624.599524][T14250] netlink: 'syz.2.3123': attribute type 20 has an invalid length. [ 624.672780][T14248] tun0: tun_chr_ioctl cmd 1074025681 [ 624.990317][T14260] netlink: 1010 bytes leftover after parsing attributes in process `syz.3.3125'. [ 625.002282][T14260] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 625.734334][T14284] device syzkaller0 entered promiscuous mode [ 625.778590][T14008] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 626.207002][T14008] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 626.459609][T14008] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 626.510027][T14305] FAULT_INJECTION: forcing a failure. [ 626.510027][T14305] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 626.542679][T14305] CPU: 0 PID: 14305 Comm: syz.0.3136 Not tainted syzkaller #0 [ 626.550192][T14305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 626.560285][T14305] Call Trace: [ 626.563596][T14305] [ 626.566560][T14305] dump_stack_lvl+0x188/0x24e [ 626.571297][T14305] ? show_regs_print_info+0x12/0x12 [ 626.576545][T14305] ? load_image+0x410/0x410 [ 626.581093][T14305] ? __lock_acquire+0x7ea0/0x7ea0 [ 626.586175][T14305] should_fail_ex+0x390/0x4c0 [ 626.590919][T14305] _copy_from_user+0x2c/0x170 [ 626.595659][T14305] bpf_prog_test_run_skb+0x263/0x18e0 [ 626.601078][T14305] ? __fget_files+0x28/0x460 [ 626.605721][T14305] ? __fget_files+0x3fc/0x460 [ 626.610461][T14305] ? cpu_online+0xa0/0xa0 [ 626.614835][T14305] bpf_prog_test_run+0x31c/0x390 [ 626.619809][T14305] __sys_bpf+0x62b/0x780 [ 626.624083][T14305] ? bpf_link_show_fdinfo+0x380/0x380 [ 626.629499][T14305] ? lock_chain_count+0x20/0x20 [ 626.634378][T14305] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 626.640388][T14305] __x64_sys_bpf+0x78/0x90 [ 626.644830][T14305] do_syscall_64+0x4c/0xa0 [ 626.649273][T14305] ? clear_bhb_loop+0x60/0xb0 [ 626.653978][T14305] ? clear_bhb_loop+0x60/0xb0 [ 626.658678][T14305] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 626.664595][T14305] RIP: 0033:0x7fa63d79e1d9 [ 626.669026][T14305] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 626.688666][T14305] RSP: 002b:00007fa63e6a0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 626.697132][T14305] RAX: ffffffffffffffda RBX: 00007fa63da25fa0 RCX: 00007fa63d79e1d9 [ 626.705126][T14305] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 626.713114][T14305] RBP: 00007fa63e6a0090 R08: 0000000000000000 R09: 0000000000000000 [ 626.721098][T14305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 626.729094][T14305] R13: 00007fa63da26038 R14: 00007fa63da25fa0 R15: 00007ffc2e023fc8 [ 626.737123][T14305] [ 626.755820][T14008] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 627.286600][T14330] FAULT_INJECTION: forcing a failure. [ 627.286600][T14330] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 627.309061][T14330] CPU: 1 PID: 14330 Comm: syz.2.3143 Not tainted syzkaller #0 [ 627.316578][T14330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 627.326673][T14330] Call Trace: [ 627.329981][T14330] [ 627.332941][T14330] dump_stack_lvl+0x188/0x24e [ 627.337661][T14330] ? show_regs_print_info+0x12/0x12 [ 627.342919][T14330] ? load_image+0x410/0x410 [ 627.347457][T14330] ? __lock_acquire+0x7ea0/0x7ea0 [ 627.352531][T14330] should_fail_ex+0x390/0x4c0 [ 627.357253][T14330] _copy_to_user+0x2c/0x130 [ 627.361799][T14330] bpf_test_finish+0x4a2/0x600 [ 627.366615][T14330] ? convert_skb_to___skb+0x420/0x420 [ 627.372044][T14330] ? __build_skb+0x24b/0x3b0 [ 627.376681][T14330] bpf_prog_test_run_skb+0x1129/0x18e0 [ 627.382203][T14330] ? cpu_online+0xa0/0xa0 [ 627.386577][T14330] bpf_prog_test_run+0x31c/0x390 [ 627.391561][T14330] __sys_bpf+0x62b/0x780 [ 627.395847][T14330] ? bpf_link_show_fdinfo+0x380/0x380 [ 627.401290][T14330] ? lock_chain_count+0x20/0x20 [ 627.406195][T14330] __x64_sys_bpf+0x78/0x90 [ 627.410651][T14330] do_syscall_64+0x4c/0xa0 [ 627.415103][T14330] ? clear_bhb_loop+0x60/0xb0 [ 627.419811][T14330] ? clear_bhb_loop+0x60/0xb0 [ 627.424513][T14330] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 627.430424][T14330] RIP: 0033:0x7f54f439e1d9 [ 627.434861][T14330] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 627.454516][T14330] RSP: 002b:00007f54f52ab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 627.462968][T14330] RAX: ffffffffffffffda RBX: 00007f54f4625fa0 RCX: 00007f54f439e1d9 [ 627.470960][T14330] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 627.478953][T14330] RBP: 00007f54f52ab090 R08: 0000000000000000 R09: 0000000000000000 [ 627.486950][T14330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 627.494939][T14330] R13: 00007f54f4626038 R14: 00007f54f4625fa0 R15: 00007ffef9c6a2f8 [ 627.502938][T14330] [ 630.096355][T14008] 8021q: adding VLAN 0 to HW filter on device bond0 [ 630.112076][T14347] device wlan1 left promiscuous mode [ 630.137045][T14347] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3147'. [ 630.211815][T13273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 630.239997][T13273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 630.265392][T14008] 8021q: adding VLAN 0 to HW filter on device team0 [ 630.302120][T13273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 630.328291][T14352] FAULT_INJECTION: forcing a failure. [ 630.328291][T14352] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 630.334419][T13273] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 630.378531][T13273] bridge0: port 1(bridge_slave_0) entered blocking state [ 630.385715][T13273] bridge0: port 1(bridge_slave_0) entered forwarding state [ 630.413651][T14352] CPU: 1 PID: 14352 Comm: syz.2.3150 Not tainted syzkaller #0 [ 630.421352][T14352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 630.431632][T14352] Call Trace: [ 630.435130][T14352] [ 630.438291][T14352] dump_stack_lvl+0x188/0x24e [ 630.443283][T14352] ? show_regs_print_info+0x12/0x12 [ 630.448753][T14352] ? load_image+0x410/0x410 [ 630.453513][T14352] ? __lock_acquire+0x7ea0/0x7ea0 [ 630.458852][T14352] should_fail_ex+0x390/0x4c0 [ 630.463820][T14352] _copy_from_user+0x2c/0x170 [ 630.468707][T14352] __sys_bpf+0x2ea/0x780 [ 630.473157][T14352] ? bpf_link_show_fdinfo+0x380/0x380 [ 630.478927][T14352] ? lock_chain_count+0x20/0x20 [ 630.484076][T14352] __x64_sys_bpf+0x78/0x90 [ 630.488687][T14352] do_syscall_64+0x4c/0xa0 [ 630.493264][T14352] ? clear_bhb_loop+0x60/0xb0 [ 630.498098][T14352] ? clear_bhb_loop+0x60/0xb0 [ 630.502978][T14352] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 630.509018][T14352] RIP: 0033:0x7f54f439e1d9 [ 630.513618][T14352] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 630.533364][T14352] RSP: 002b:00007f54f52ab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 630.541962][T14352] RAX: ffffffffffffffda RBX: 00007f54f4625fa0 RCX: 00007f54f439e1d9 [ 630.550077][T14352] RDX: 000000000000000c RSI: 0000200000000500 RDI: 000000000000000a [ 630.558213][T14352] RBP: 00007f54f52ab090 R08: 0000000000000000 R09: 0000000000000000 [ 630.566323][T14352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 630.574434][T14352] R13: 00007f54f4626038 R14: 00007f54f4625fa0 R15: 00007ffef9c6a2f8 [ 630.582801][T14352] [ 630.595949][T13273] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 630.606421][T13273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 630.618727][T13273] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 630.630091][T13273] bridge0: port 2(bridge_slave_1) entered blocking state [ 630.637275][T13273] bridge0: port 2(bridge_slave_1) entered forwarding state [ 630.680228][T13273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 630.716358][T13273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 630.822780][T13273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 630.844430][T13273] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 630.871262][T13273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 630.893832][T13273] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 630.923563][T13273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 630.941469][T13273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 630.956757][T13273] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 630.978285][ T6249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 631.023677][ T6249] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 631.083986][T14365] netlink: 'syz.3.3154': attribute type 2 has an invalid length. [ 631.102822][T14365] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3154'. [ 631.147744][T14008] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 631.170856][T14369] netlink: 'syz.4.3156': attribute type 3 has an invalid length. [ 631.204621][T14369] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3156'. [ 632.208303][T13273] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 632.226510][T13273] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 632.277201][T14008] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 632.538658][T14407] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.3159'. [ 634.145871][T14399] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3159'. [ 634.156423][T14402] IPv6: Can't replace route, no match found [ 634.162456][T14401] tipc: Started in network mode [ 634.167488][T14401] tipc: Node identity 9215a268, cluster identity 4711 [ 634.178589][T14401] tipc: Node number set to 2450891368 [ 634.227299][ T6257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 634.254348][ T6257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 634.312973][T13273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 634.352011][T13273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 634.380016][T13273] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 634.388384][T13273] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 634.424119][T14008] device veth0_vlan entered promiscuous mode [ 634.497158][T14008] device veth1_vlan entered promiscuous mode [ 634.611248][T13273] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 634.623531][T13273] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 634.648073][T13273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 634.660786][T13273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 634.716622][T14008] device veth0_macvtap entered promiscuous mode [ 634.739276][T14008] device veth1_macvtap entered promiscuous mode [ 634.776265][T14431] FAULT_INJECTION: forcing a failure. [ 634.776265][T14431] name failslab, interval 1, probability 0, space 0, times 0 [ 634.833959][T14008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 634.902665][T14431] CPU: 1 PID: 14431 Comm: syz.4.3167 Not tainted syzkaller #0 [ 634.910287][T14431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 634.920378][T14431] Call Trace: [ 634.923693][T14431] [ 634.926656][T14431] dump_stack_lvl+0x188/0x24e [ 634.931382][T14431] ? irqentry_enter+0x33/0x50 [ 634.936118][T14431] ? show_regs_print_info+0x12/0x12 [ 634.941371][T14431] ? load_image+0x410/0x410 [ 634.945923][T14431] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 634.951953][T14431] ? lock_chain_count+0x20/0x20 [ 634.956856][T14431] should_fail_ex+0x390/0x4c0 [ 634.961600][T14431] should_failslab+0x5/0x20 [ 634.966140][T14431] slab_pre_alloc_hook+0x59/0x300 [ 634.971206][T14431] kmem_cache_alloc+0x56/0x2f0 [ 634.975998][T14431] ? __build_skb+0x27/0x3b0 [ 634.980524][T14431] __build_skb+0x27/0x3b0 [ 634.984878][T14431] ? build_skb+0x14/0x230 [ 634.989236][T14431] build_skb+0x1e/0x230 [ 634.993418][T14431] bpf_prog_test_run_skb+0x38d/0x18e0 [ 634.998819][T14431] ? __fget_files+0x28/0x460 [ 635.003445][T14431] ? __fget_files+0x3fc/0x460 [ 635.008161][T14431] ? cpu_online+0xa0/0xa0 [ 635.012531][T14431] bpf_prog_test_run+0x31c/0x390 [ 635.017498][T14431] __sys_bpf+0x62b/0x780 [ 635.021769][T14431] ? bpf_link_show_fdinfo+0x380/0x380 [ 635.027187][T14431] ? lock_chain_count+0x20/0x20 [ 635.032078][T14431] __x64_sys_bpf+0x78/0x90 [ 635.036538][T14431] do_syscall_64+0x4c/0xa0 [ 635.040984][T14431] ? clear_bhb_loop+0x60/0xb0 [ 635.045686][T14431] ? clear_bhb_loop+0x60/0xb0 [ 635.050409][T14431] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 635.056329][T14431] RIP: 0033:0x7f1d6119e1d9 [ 635.060759][T14431] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 635.080380][T14431] RSP: 002b:00007f1d6215c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 635.088815][T14431] RAX: ffffffffffffffda RBX: 00007f1d61425fa0 RCX: 00007f1d6119e1d9 [ 635.096826][T14431] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 635.104816][T14431] RBP: 00007f1d6215c090 R08: 0000000000000000 R09: 0000000000000000 [ 635.112802][T14431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 635.120801][T14431] R13: 00007f1d61426038 R14: 00007f1d61425fa0 R15: 00007ffd9620b438 [ 635.128813][T14431] [ 635.170433][T14008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.232528][T14008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 635.292558][T14008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.312515][T14008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 635.340284][T14008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.372210][T14008] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 635.412342][ T6272] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 635.432989][ T6272] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 635.453593][ T6272] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 635.478605][ T6272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 635.523900][T14008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 635.564537][T14008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.625094][T14008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 635.637158][T14008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.653122][T14008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 635.682548][T14008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.723624][T14008] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 635.734673][ T6272] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 635.763367][ T6272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 635.793925][T14008] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.806470][T14008] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.816576][T14008] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.825794][T14008] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.029586][T13273] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 636.047813][T13273] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 636.089877][T13273] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 636.146186][T12650] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 636.183355][T12650] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 636.208150][T13273] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 636.669166][T14482] sctp: [Deprecated]: syz.0.3180 (pid 14482) Use of struct sctp_assoc_value in delayed_ack socket option. [ 636.669166][T14482] Use struct sctp_sack_info instead [ 636.813508][T14488] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3181'. [ 636.835338][T14491] sctp: [Deprecated]: syz.0.3180 (pid 14491) Use of struct sctp_assoc_value in delayed_ack socket option. [ 636.835338][T14491] Use struct sctp_sack_info instead [ 636.870378][T14494] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3181'. [ 637.548647][T14507] netlink: 'syz.0.3182': attribute type 21 has an invalid length. [ 637.562792][T14507] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3182'. [ 637.707161][ T49] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 637.717002][ T49] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 637.725675][ T49] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 637.734739][ T49] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 637.745063][ T49] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 637.754041][ T49] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 637.897485][T14523] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3186'. [ 638.361071][T14513] chnl_net:caif_netlink_parms(): no params data found [ 638.688385][T14513] bridge0: port 1(bridge_slave_0) entered blocking state [ 638.790580][T14513] bridge0: port 1(bridge_slave_0) entered disabled state [ 638.850113][T14513] device bridge_slave_0 entered promiscuous mode [ 638.904320][T14513] bridge0: port 2(bridge_slave_1) entered blocking state [ 638.951901][T14513] bridge0: port 2(bridge_slave_1) entered disabled state [ 639.021952][T14513] device bridge_slave_1 entered promiscuous mode [ 639.265756][T14513] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 639.340712][T14513] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 639.561619][T14513] team0: Port device team_slave_0 added [ 639.645181][T14513] team0: Port device team_slave_1 added [ 639.872664][ T49] Bluetooth: hci1: command 0x0409 tx timeout [ 639.890690][T14513] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 640.009479][T14513] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 640.245385][T14513] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 641.235905][T14513] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 641.243144][T14513] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 641.392532][T14513] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 641.575066][T14513] device hsr_slave_0 entered promiscuous mode [ 641.597888][T14513] device hsr_slave_1 entered promiscuous mode [ 641.645951][T14513] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 641.659079][T14513] Cannot create hsr debugfs directory [ 641.867055][T14595] FAULT_INJECTION: forcing a failure. [ 641.867055][T14595] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 641.893911][T14595] CPU: 0 PID: 14595 Comm: syz.0.3198 Not tainted syzkaller #0 [ 641.901448][T14595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 641.911559][T14595] Call Trace: [ 641.914877][T14595] [ 641.917845][T14595] dump_stack_lvl+0x188/0x24e [ 641.922579][T14595] ? show_regs_print_info+0x12/0x12 [ 641.927835][T14595] ? load_image+0x410/0x410 [ 641.932384][T14595] ? __might_fault+0xa6/0x120 [ 641.937135][T14595] should_fail_ex+0x390/0x4c0 [ 641.941871][T14595] copyin+0x1b/0x120 [ 641.945826][T14595] _copy_from_iter+0x447/0x1130 [ 641.950742][T14595] ? copyout_mc+0x110/0x110 [ 641.955351][T14595] ? __virt_addr_valid+0x188/0x540 [ 641.960517][T14595] ? __virt_addr_valid+0x188/0x540 [ 641.965683][T14595] ? __virt_addr_valid+0x467/0x540 [ 641.970848][T14595] ? __phys_addr_symbol+0x2b/0x70 [ 641.975928][T14595] ? __check_object_size+0x4f6/0xa70 [ 641.981268][T14595] kcm_sendmsg+0xc93/0x23f0 [ 641.985867][T14595] ? kcm_getsockopt+0x280/0x280 [ 641.990774][T14595] ? apparmor_socket_sendmsg+0x8a/0x330 [ 641.996371][T14595] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 642.001686][T14595] ? security_socket_sendmsg+0x7c/0xa0 [ 642.007273][T14595] ? kcm_getsockopt+0x280/0x280 [ 642.012150][T14595] ____sys_sendmsg+0x5ed/0x9a0 [ 642.016952][T14595] ? __sys_sendmsg_sock+0x30/0x30 [ 642.021997][T14595] ? __import_iovec+0x306/0x510 [ 642.026889][T14595] ? import_iovec+0x6f/0xa0 [ 642.031455][T14595] ___sys_sendmsg+0x2a2/0x360 [ 642.036167][T14595] ? __sys_sendmsg+0x2a0/0x2a0 [ 642.040976][T14595] ? __lock_acquire+0x7ea0/0x7ea0 [ 642.046055][T14595] __se_sys_sendmsg+0x1c3/0x2b0 [ 642.050937][T14595] ? __x64_sys_sendmsg+0x80/0x80 [ 642.055913][T14595] ? lockdep_hardirqs_on+0x94/0x140 [ 642.061153][T14595] do_syscall_64+0x4c/0xa0 [ 642.065603][T14595] ? clear_bhb_loop+0x60/0xb0 [ 642.070308][T14595] ? clear_bhb_loop+0x60/0xb0 [ 642.075017][T14595] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 642.080938][T14595] RIP: 0033:0x7fa63d79e1d9 [ 642.085382][T14595] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 642.105014][T14595] RSP: 002b:00007fa63e67f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 642.113452][T14595] RAX: ffffffffffffffda RBX: 00007fa63da26090 RCX: 00007fa63d79e1d9 [ 642.121454][T14595] RDX: 0000000000000000 RSI: 0000200000002080 RDI: 0000000000000004 [ 642.129450][T14595] RBP: 00007fa63e67f090 R08: 0000000000000000 R09: 0000000000000000 [ 642.137454][T14595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 642.145447][T14595] R13: 00007fa63da26128 R14: 00007fa63da26090 R15: 00007ffc2e023fc8 [ 642.153463][T14595] [ 642.160820][ T4280] Bluetooth: hci1: command 0x041b tx timeout [ 642.501343][T14513] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.674220][T14513] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.885741][T14513] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.975570][T14616] netlink: 'syz.4.3205': attribute type 41 has an invalid length. [ 643.097624][T14513] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.609563][T14513] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 643.678415][T14513] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 643.708720][T14513] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 643.744858][T14513] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 643.797839][T14630] netlink: 'syz.3.3210': attribute type 11 has an invalid length. [ 643.842664][T14630] netlink: 140 bytes leftover after parsing attributes in process `syz.3.3210'. [ 643.943069][T14630] netlink: 'syz.3.3210': attribute type 10 has an invalid length. [ 644.233563][ T4280] Bluetooth: hci1: command 0x040f tx timeout [ 644.950636][T14513] 8021q: adding VLAN 0 to HW filter on device bond0 [ 644.965650][ T6257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 645.003373][ T6257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 645.015430][T14646] FAULT_INJECTION: forcing a failure. [ 645.015430][T14646] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 645.031335][T14646] CPU: 0 PID: 14646 Comm: syz.0.3216 Not tainted syzkaller #0 [ 645.038843][T14646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 645.048929][T14646] Call Trace: [ 645.052239][T14646] [ 645.055202][T14646] dump_stack_lvl+0x188/0x24e [ 645.059919][T14646] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 645.066109][T14646] ? show_regs_print_info+0x12/0x12 [ 645.071335][T14646] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 645.077526][T14646] should_fail_ex+0x390/0x4c0 [ 645.082263][T14646] _copy_from_user+0x2c/0x170 [ 645.086969][T14646] __sys_bpf+0x2ea/0x780 [ 645.091241][T14646] ? bpf_link_show_fdinfo+0x380/0x380 [ 645.096649][T14646] ? lock_chain_count+0x20/0x20 [ 645.101537][T14646] __x64_sys_bpf+0x78/0x90 [ 645.105978][T14646] do_syscall_64+0x4c/0xa0 [ 645.110414][T14646] ? clear_bhb_loop+0x60/0xb0 [ 645.115115][T14646] ? clear_bhb_loop+0x60/0xb0 [ 645.119823][T14646] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 645.125737][T14646] RIP: 0033:0x7fa63d79e1d9 [ 645.130171][T14646] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 645.149799][T14646] RSP: 002b:00007fa63e6a0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 645.158236][T14646] RAX: ffffffffffffffda RBX: 00007fa63da25fa0 RCX: 00007fa63d79e1d9 [ 645.166264][T14646] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 645.174261][T14646] RBP: 00007fa63e6a0090 R08: 0000000000000000 R09: 0000000000000000 [ 645.182271][T14646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 645.190264][T14646] R13: 00007fa63da26038 R14: 00007fa63da25fa0 R15: 00007ffc2e023fc8 [ 645.198277][T14646] [ 645.215766][T14513] 8021q: adding VLAN 0 to HW filter on device team0 [ 645.266906][ T6249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 645.287040][ T6249] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 645.301337][ T6249] bridge0: port 1(bridge_slave_0) entered blocking state [ 645.308523][ T6249] bridge0: port 1(bridge_slave_0) entered forwarding state [ 645.366206][ T6249] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 645.393576][ T6249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 645.455593][ T6249] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 645.479725][ T6249] bridge0: port 2(bridge_slave_1) entered blocking state [ 645.486978][ T6249] bridge0: port 2(bridge_slave_1) entered forwarding state [ 645.540537][ T6249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 645.580140][T14652] dvmrp1: tun_chr_ioctl cmd 1074025694 [ 645.630087][ T6249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 645.683047][T12939] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 645.708465][T12939] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 645.813928][T12939] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 645.999166][ T6249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 646.034162][ T6249] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 646.058031][ T6249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 646.079399][ T6249] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 646.119552][T12939] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 646.141702][T12939] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 646.166522][T14513] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 646.313613][ T49] Bluetooth: hci1: command 0x0419 tx timeout [ 646.706185][T14666] netlink: 'syz.3.3223': attribute type 21 has an invalid length. [ 647.483705][T12939] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 647.501454][T12939] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 647.548839][T14513] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 647.573740][T14680] mac80211_hwsim hwsim28 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 647.629711][ T6257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 647.648162][ T6257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 647.693512][ T6257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 647.702431][ T6257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 647.729706][T14513] device veth0_vlan entered promiscuous mode [ 647.744116][ T6257] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 647.759663][ T6257] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 647.795085][T14513] device veth1_vlan entered promiscuous mode [ 647.865372][T14683] netlink: 'syz.1.3229': attribute type 41 has an invalid length. [ 647.997886][ T6257] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 648.010503][ T6257] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 648.038972][ T6257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 648.051696][ T6257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 648.065689][T14513] device veth0_macvtap entered promiscuous mode [ 648.080493][T14513] device veth1_macvtap entered promiscuous mode [ 648.118639][ T6257] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 648.131198][ T6257] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 648.177793][T14513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 648.192247][T14513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 648.218475][T14513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 648.236813][T14513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 648.250206][T14513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 648.264851][T14513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 648.290333][T14513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 648.313057][T14513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 648.325891][T14513] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 648.339125][ T6257] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 648.353998][ T6257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 648.376694][T14513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 648.395607][T14513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 648.413689][T14513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 648.424572][T14513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 648.435274][T14513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 648.446091][T14513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 648.457081][T14513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 648.467850][T14513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 648.483824][T14513] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 648.498140][T14513] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.507684][T14513] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.517963][T14513] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.528338][T14513] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.547092][T12939] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 648.562075][T12939] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 648.659374][T12939] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 648.676861][T12939] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 648.693788][T12937] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 648.745559][ T6257] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 648.761336][ T6257] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 648.771251][T12937] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 648.910695][T14709] dvmrp1: tun_chr_ioctl cmd 1074025694 [ 649.762424][T12650] wlan1: Trigger new scan to find an IBSS to join [ 650.071109][ T4280] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 650.086909][ T4280] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 650.094980][ T4280] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 650.129659][ T4280] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 650.139333][ T4280] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 650.147146][ T4280] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 650.608484][T12937] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.650895][T14733] chnl_net:caif_netlink_parms(): no params data found [ 650.800558][T14756] FAULT_INJECTION: forcing a failure. [ 650.800558][T14756] name failslab, interval 1, probability 0, space 0, times 0 [ 650.817717][T14756] CPU: 0 PID: 14756 Comm: syz.1.3253 Not tainted syzkaller #0 [ 650.825263][T14756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 650.835530][T14756] Call Trace: [ 650.838842][T14756] [ 650.841805][T14756] dump_stack_lvl+0x188/0x24e [ 650.846535][T14756] ? show_regs_print_info+0x12/0x12 [ 650.851780][T14756] ? load_image+0x410/0x410 [ 650.856342][T14756] ? __lock_acquire+0x7ea0/0x7ea0 [ 650.861443][T14756] should_fail_ex+0x390/0x4c0 [ 650.866173][T14756] should_failslab+0x5/0x20 [ 650.870698][T14756] slab_pre_alloc_hook+0x59/0x300 [ 650.875754][T14756] ? security_sk_alloc+0x47/0x130 [ 650.880811][T14756] __kmem_cache_alloc_node+0x4f/0x270 [ 650.886210][T14756] ? security_sk_alloc+0x47/0x130 [ 650.891267][T14756] __kmalloc+0xa3/0x240 [ 650.895460][T14756] ? sk_prot_alloc+0xe7/0x210 [ 650.900198][T14756] security_sk_alloc+0x47/0x130 [ 650.905091][T14756] sk_prot_alloc+0x101/0x210 [ 650.909710][T14756] ? sk_alloc+0x20/0x330 [ 650.913980][T14756] sk_alloc+0x36/0x330 [ 650.918097][T14756] ? bpf_ctx_init+0x154/0x190 [ 650.922848][T14756] bpf_prog_test_run_skb+0x36d/0x18e0 [ 650.928271][T14756] ? __fget_files+0x28/0x460 [ 650.932896][T14756] ? __fget_files+0x3fc/0x460 [ 650.937616][T14756] ? cpu_online+0xa0/0xa0 [ 650.941979][T14756] bpf_prog_test_run+0x31c/0x390 [ 650.946947][T14756] __sys_bpf+0x62b/0x780 [ 650.951222][T14756] ? bpf_link_show_fdinfo+0x380/0x380 [ 650.956648][T14756] ? lock_chain_count+0x20/0x20 [ 650.961526][T14756] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 650.967566][T14756] __x64_sys_bpf+0x78/0x90 [ 650.972022][T14756] do_syscall_64+0x4c/0xa0 [ 650.976455][T14756] ? clear_bhb_loop+0x60/0xb0 [ 650.981159][T14756] ? clear_bhb_loop+0x60/0xb0 [ 650.985873][T14756] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 650.991790][T14756] RIP: 0033:0x7f3b4bf9e1d9 [ 650.996327][T14756] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 651.015964][T14756] RSP: 002b:00007f3b4ce83028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 651.024400][T14756] RAX: ffffffffffffffda RBX: 00007f3b4c225fa0 RCX: 00007f3b4bf9e1d9 [ 651.032388][T14756] RDX: 0000000000000048 RSI: 0000200000000040 RDI: 000000000000000a [ 651.040380][T14756] RBP: 00007f3b4ce83090 R08: 0000000000000000 R09: 0000000000000000 [ 651.048370][T14756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 651.056356][T14756] R13: 00007f3b4c226038 R14: 00007f3b4c225fa0 R15: 00007ffd66cdf508 [ 651.064371][T14756] [ 651.114978][T12937] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.150429][T14733] bridge0: port 1(bridge_slave_0) entered blocking state [ 651.175344][T14733] bridge0: port 1(bridge_slave_0) entered disabled state [ 651.201736][T14733] device bridge_slave_0 entered promiscuous mode [ 651.242960][T12937] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.280029][T14733] bridge0: port 2(bridge_slave_1) entered blocking state [ 651.303054][T14733] bridge0: port 2(bridge_slave_1) entered disabled state [ 651.326745][T14733] device bridge_slave_1 entered promiscuous mode [ 651.381093][T12937] bond0: (slave netdevsim0): Releasing backup interface [ 651.425604][T12937] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.475339][T14733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 651.515350][T14733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 651.671720][T14733] team0: Port device team_slave_0 added [ 651.718979][T14733] team0: Port device team_slave_1 added [ 651.748903][T14765] dvmrp1: tun_chr_ioctl cmd 1074025694 [ 651.884993][T12937] tipc: Left network mode [ 651.932017][T14733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 651.950050][T14733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 651.987234][T14733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 652.181076][T14733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 652.190679][T14733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 652.232725][ T49] Bluetooth: hci4: command 0x0409 tx timeout [ 652.261017][T14733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 652.770513][T14733] device hsr_slave_0 entered promiscuous mode [ 652.806185][T14733] device hsr_slave_1 entered promiscuous mode [ 652.858124][T14733] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 652.880448][T14733] Cannot create hsr debugfs directory [ 654.313234][ T49] Bluetooth: hci4: command 0x041b tx timeout [ 654.803325][ T9] wlan1: Trigger new scan to find an IBSS to join [ 655.798522][ T6257] wlan1: Creating new IBSS network, BSSID 7a:7d:b2:28:74:e9 [ 656.392810][ T4280] Bluetooth: hci4: command 0x040f tx timeout [ 656.913159][T12937] team0: Port device wlan1 removed [ 657.205028][T14838] À: port 1(vlan0) entered blocking state [ 657.270244][T14838] À: port 1(vlan0) entered disabled state [ 657.295804][T14838] device vlan0 entered promiscuous mode [ 657.314402][T14733] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 657.480885][T14733] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 657.496842][T12937] device bridge_slave_1 left promiscuous mode [ 657.505704][T12937] bridge0: port 2(bridge_slave_1) entered disabled state [ 657.540527][T12937] device bridge_slave_0 left promiscuous mode [ 657.552039][T12937] bridge0: port 1(bridge_slave_0) entered disabled state [ 657.625426][T12937] device veth1_macvtap left promiscuous mode [ 657.645064][T12937] device veth0_macvtap left promiscuous mode [ 658.482843][ T4280] Bluetooth: hci4: command 0x0419 tx timeout [ 658.705713][T12937] team0 (unregistering): Port device team_slave_1 removed [ 658.864703][T14889] netlink: 'syz.0.3283': attribute type 4 has an invalid length. [ 658.928809][T12937] team0 (unregistering): Port device team_slave_0 removed [ 658.937420][T14889] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3283'. [ 659.103136][T12937] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 659.246215][T12937] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 659.705376][T12937] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 659.715143][T12937] bond0 (unregistering): Released all slaves [ 659.770087][T14733] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 659.797674][T14733] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 660.204248][T14733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 660.335632][T14733] 8021q: adding VLAN 0 to HW filter on device team0 [ 660.353500][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 660.391562][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 660.494892][T12935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 660.515225][T12935] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 660.587624][T12935] bridge0: port 1(bridge_slave_0) entered blocking state [ 660.594931][T12935] bridge0: port 1(bridge_slave_0) entered forwarding state [ 660.678425][T12935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 660.738921][T12935] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 660.768246][T12935] bridge0: port 2(bridge_slave_1) entered blocking state [ 660.775497][T12935] bridge0: port 2(bridge_slave_1) entered forwarding state [ 660.828906][T12935] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 660.892984][T12935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 660.957222][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 661.024447][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 661.064682][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 661.123562][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 661.163232][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 661.205887][T14909] netlink: 'syz.3.3291': attribute type 29 has an invalid length. [ 661.231986][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 661.277558][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 661.327181][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 661.446407][T12650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 661.471593][T12650] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 661.516148][T14909] netlink: 'syz.3.3291': attribute type 29 has an invalid length. [ 661.556530][T14733] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 661.575758][T14910] netlink: 'syz.3.3291': attribute type 29 has an invalid length. [ 661.633095][T14914] netlink: 'syz.3.3291': attribute type 29 has an invalid length. [ 661.698901][T14917] netlink: 'syz.3.3291': attribute type 29 has an invalid length. [ 662.092781][T12937] tipc: Left network mode [ 662.484024][T14941] netlink: 'syz.2.3296': attribute type 29 has an invalid length. [ 664.615731][T14941] netlink: 'syz.2.3296': attribute type 29 has an invalid length. [ 666.920226][T14996] mac80211_hwsim hwsim31 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 667.041556][T14733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 667.095912][ T6257] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 667.130678][ T6257] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 667.258271][T15006] device wlan1 entered promiscuous mode [ 668.362176][T12937] team0: Port device wlan1 removed [ 668.688672][T15053] netlink: 'syz.3.3317': attribute type 2 has an invalid length. [ 668.720373][T15053] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3317'. [ 668.799028][ T6257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 668.819936][ T6257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 668.891184][ T6257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 668.901677][ T6257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 668.954025][T14733] device veth0_vlan entered promiscuous mode [ 669.009514][ T6257] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 669.043155][ T6257] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 669.073042][T14733] device veth1_vlan entered promiscuous mode [ 669.100053][T15063] netlink: 'syz.1.3331': attribute type 10 has an invalid length. [ 669.302058][T15069] mac80211_hwsim hwsim33 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 669.329180][ T6257] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 669.343602][ T6257] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 669.368579][ T6257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 669.378861][ T6257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 669.400902][T14733] device veth0_macvtap entered promiscuous mode [ 669.442084][T14733] device veth1_macvtap entered promiscuous mode [ 669.490435][T14733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 669.545465][T14733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.578973][T14733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 669.609254][T14733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.630350][T14733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 669.661496][T14733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.673434][T14733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 669.702613][T14733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.731377][T14733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 669.750960][T14733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.769546][T14733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 669.798117][T15079] device wlan1 entered promiscuous mode [ 669.834987][T12935] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 669.858074][T12935] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 669.890332][T12935] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 669.920936][T12935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 670.056314][T15082] device syzkaller0 entered promiscuous mode [ 670.073449][T14733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 670.092623][T14733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.113695][T14733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 670.126492][T14733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.137210][T14733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 670.148343][T14733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.159553][T14733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 670.198178][T14733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.211439][T14733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 670.230508][T14733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.253742][T14733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 670.717694][ T6257] wlan1: Trigger new scan to find an IBSS to join [ 670.728562][T15111] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.3330'. [ 670.751523][T15111] net_ratelimit: 425 callbacks suppressed [ 670.751542][T15111] netlink: zone id is out of range [ 670.763711][T15111] netlink: zone id is out of range [ 670.769144][T15111] netlink: zone id is out of range [ 670.782612][T15111] netlink: zone id is out of range [ 670.788070][T15111] netlink: zone id is out of range [ 670.794704][T15111] netlink: zone id is out of range [ 670.800121][T15111] netlink: zone id is out of range [ 670.805481][T15111] netlink: zone id is out of range [ 670.810880][T15111] netlink: zone id is out of range [ 670.816365][T15111] netlink: zone id is out of range [ 671.752680][ T6257] wlan1: Trigger new scan to find an IBSS to join [ 672.407693][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 672.416696][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 672.434805][T15112] netlink: 'syz.1.3330': attribute type 10 has an invalid length. [ 672.568486][T15112] team0: Device gre0 is of different type [ 672.629012][T15111] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3330'. [ 672.650002][T14733] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.682742][T14733] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.710964][T14733] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.749226][T14733] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.164289][T12937] device hsr_slave_0 left promiscuous mode [ 673.190674][T12937] device hsr_slave_1 left promiscuous mode [ 673.201462][T12937] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 673.230953][T12937] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 673.259691][T12937] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 673.291256][T12937] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 673.311920][T12937] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 673.329602][T12937] batman_adv: batadv0: Removing interface: virt_wifi0 [ 673.390855][T12937] device veth1_macvtap left promiscuous mode [ 673.400762][T12937] device veth0_macvtap left promiscuous mode [ 673.753087][ T6247] wlan1: Trigger new scan to find an IBSS to join [ 674.265253][T12937] team0 (unregistering): Port device team_slave_1 removed [ 674.314093][T12937] team0 (unregistering): Port device team_slave_0 removed [ 674.402619][T12937] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 674.462292][T12937] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 674.715966][ T6247] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 675.066527][T12937] bond0 (unregistering): Released all slaves [ 675.168537][T15131] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 675.192723][T15131] syzkaller1: linktype set to 786 [ 675.236735][T15154] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3346'. [ 675.396874][ T6247] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 675.434256][ T6247] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 675.497259][ T6249] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 675.596292][T12935] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 675.625315][T12935] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 675.653359][T12935] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 676.041396][T15167] netlink: 'syz.4.3238': attribute type 21 has an invalid length. [ 676.119207][T15168] tap0: tun_chr_ioctl cmd 35111 [ 676.476945][T15175] device syzkaller0 entered promiscuous mode [ 676.576108][T15185] netlink: 194236 bytes leftover after parsing attributes in process `syz.0.3355'. [ 676.594089][T15185] net_ratelimit: 425 callbacks suppressed [ 676.594124][T15185] netlink: zone id is out of range [ 676.614638][T15185] netlink: zone id is out of range [ 676.620394][T15185] netlink: zone id is out of range [ 676.627589][T15185] netlink: zone id is out of range [ 676.634396][T15185] netlink: zone id is out of range [ 676.640246][T15185] netlink: get zone limit has 8 unknown bytes [ 676.829335][ T49] Bluetooth: hci5: Malformed Event: 0x13 [ 678.540064][T15183] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3356'. [ 678.549589][T15186] netlink: 'syz.2.3356': attribute type 12 has an invalid length. [ 678.558016][T15186] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3356'. [ 678.567414][T15188] netlink: 'syz.3.3357': attribute type 10 has an invalid length. [ 678.580355][T15188] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3357'. [ 679.916140][T15231] netlink: 'syz.1.3382': attribute type 10 has an invalid length. [ 679.940265][T15231] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3382'. [ 680.030083][ T49] Bluetooth: hci3: Malformed Event: 0x13 [ 680.298972][T15243] netlink: 194236 bytes leftover after parsing attributes in process `syz.1.3372'. [ 680.309765][T15243] netlink: zone id is out of range [ 680.317214][T15243] netlink: zone id is out of range [ 680.323675][T15243] netlink: zone id is out of range [ 680.329482][T15243] netlink: zone id is out of range [ 680.538424][T15245] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3374'. [ 680.556618][T15245] netlink: 'syz.1.3374': attribute type 12 has an invalid length. [ 680.580450][T15245] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3374'. [ 680.699710][T15247] tap0: tun_chr_ioctl cmd 35111 [ 685.699099][T15330] netlink: 'syz.0.3403': attribute type 2 has an invalid length. [ 685.729681][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.736173][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.930113][T15330] netlink: 'syz.0.3403': attribute type 8 has an invalid length. [ 685.953792][T15330] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3403'. [ 687.460804][T15362] netlink: 'syz.2.3425': attribute type 10 has an invalid length. [ 688.851827][T15382] device syzkaller0 entered promiscuous mode [ 688.860914][T15384] netlink: 'syz.2.3419': attribute type 2 has an invalid length. [ 688.899372][T15384] netlink: 'syz.2.3419': attribute type 8 has an invalid length. [ 688.928040][T15384] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3419'. [ 689.971117][T15404] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.3437'. [ 693.498820][T15430] netlink: 'syz.0.3432': attribute type 10 has an invalid length. [ 693.588075][ T6249] tipc: Left network mode [ 695.126475][T15449] netlink: 'syz.3.3440': attribute type 1 has an invalid length. [ 695.207768][T15449] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3440'. [ 695.245958][T15449] device syzkaller0 entered promiscuous mode [ 695.475092][T15457] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.3441'. [ 697.005080][T15484] tap0: tun_chr_ioctl cmd 35111 [ 697.042645][T15486] dvmrp1: tun_chr_ioctl cmd 1074025694 [ 697.840983][T15500] netlink: 'syz.2.3450': attribute type 2 has an invalid length. [ 698.035206][T15500] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3450'. [ 699.368522][T15511] FAULT_INJECTION: forcing a failure. [ 699.368522][T15511] name failslab, interval 1, probability 0, space 0, times 0 [ 699.420080][T15511] CPU: 1 PID: 15511 Comm: syz.2.3455 Not tainted syzkaller #0 [ 699.427633][T15511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 699.438779][T15511] Call Trace: [ 699.442107][T15511] [ 699.445087][T15511] dump_stack_lvl+0x188/0x24e [ 699.449828][T15511] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 699.456043][T15511] ? show_regs_print_info+0x12/0x12 [ 699.461294][T15511] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 699.467525][T15511] should_fail_ex+0x390/0x4c0 [ 699.472282][T15511] should_failslab+0x5/0x20 [ 699.476833][T15511] slab_pre_alloc_hook+0x59/0x300 [ 699.481920][T15511] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 699.487703][T15511] kmem_cache_alloc+0x56/0x2f0 [ 699.492527][T15511] ? skb_clone+0x1e7/0x370 [ 699.497005][T15511] skb_clone+0x1e7/0x370 [ 699.501297][T15511] bpf_clone_redirect+0x169/0x4a0 [ 699.506392][T15511] ? lock_chain_count+0x20/0x20 [ 699.511486][T15511] bpf_prog_6893982b85ceadf7+0x56/0x5b [ 699.516986][T15511] ? __kprobes_text_end+0x1e2e8/0x1e2e8 [ 699.522584][T15511] ? lockdep_hardirqs_on+0x94/0x140 [ 699.527841][T15511] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 699.534057][T15511] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 699.540372][T15511] ? seqcount_lockdep_reader_access+0x196/0x1d0 [ 699.546667][T15511] ? ktime_get_real_ts64+0x440/0x440 [ 699.552011][T15511] ? __cant_sleep+0x220/0x220 [ 699.556774][T15511] ? ktime_get+0x247/0x270 [ 699.561248][T15511] bpf_test_run+0x2b6/0x830 [ 699.565843][T15511] ? dst_hold+0xb0/0xb0 [ 699.570058][T15511] ? eth_get_headlen+0x200/0x200 [ 699.575054][T15511] ? __build_skb+0x24b/0x3b0 [ 699.579704][T15511] bpf_prog_test_run_skb+0xdaf/0x18e0 [ 699.585152][T15511] ? cpu_online+0xa0/0xa0 [ 699.589701][T15511] bpf_prog_test_run+0x31c/0x390 [ 699.594718][T15511] __sys_bpf+0x62b/0x780 [ 699.599017][T15511] ? bpf_link_show_fdinfo+0x380/0x380 [ 699.604499][T15511] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 699.610724][T15511] __x64_sys_bpf+0x78/0x90 [ 699.615194][T15511] do_syscall_64+0x4c/0xa0 [ 699.619661][T15511] ? clear_bhb_loop+0x60/0xb0 [ 699.624411][T15511] ? clear_bhb_loop+0x60/0xb0 [ 699.629149][T15511] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 699.635088][T15511] RIP: 0033:0x7f08c619e1d9 [ 699.639539][T15511] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 699.659185][T15511] RSP: 002b:00007f08c7103028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 699.667643][T15511] RAX: ffffffffffffffda RBX: 00007f08c6425fa0 RCX: 00007f08c619e1d9 [ 699.675690][T15511] RDX: 000000000000002a RSI: 0000200000000080 RDI: 000000000000000a [ 699.683704][T15511] RBP: 00007f08c7103090 R08: 0000000000000000 R09: 0000000000000000 [ 699.691715][T15511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 699.699732][T15511] R13: 00007f08c6426038 R14: 00007f08c6425fa0 R15: 00007ffe25eb5c58 [ 699.707773][T15511] [ 700.875939][T15518] FAULT_INJECTION: forcing a failure. [ 700.875939][T15518] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 700.912632][T15518] CPU: 0 PID: 15518 Comm: syz.4.3457 Not tainted syzkaller #0 [ 700.920171][T15518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 700.930279][T15518] Call Trace: [ 700.933618][T15518] [ 700.936618][T15518] dump_stack_lvl+0x188/0x24e [ 700.941364][T15518] ? show_regs_print_info+0x12/0x12 [ 700.946654][T15518] ? load_image+0x410/0x410 [ 700.951218][T15518] ? __lock_acquire+0x7ea0/0x7ea0 [ 700.956338][T15518] ? snprintf+0xe5/0x140 [ 700.960654][T15518] should_fail_ex+0x390/0x4c0 [ 700.965412][T15518] _copy_to_user+0x2c/0x130 [ 700.969985][T15518] simple_read_from_buffer+0xe3/0x150 [ 700.975454][T15518] proc_fail_nth_read+0x1a6/0x220 [ 700.980532][T15518] ? proc_fault_inject_write+0x310/0x310 [ 700.986227][T15518] ? fsnotify_perm+0x248/0x550 [ 700.991061][T15518] ? proc_fault_inject_write+0x310/0x310 [ 700.996761][T15518] vfs_read+0x2db/0x960 [ 701.000964][T15518] ? kernel_read+0x1e0/0x1e0 [ 701.005605][T15518] ? __fget_files+0x28/0x460 [ 701.010246][T15518] ? __fget_files+0x3fc/0x460 [ 701.014981][T15518] ? __fdget_pos+0x2ae/0x360 [ 701.019627][T15518] ? ksys_read+0x70/0x260 [ 701.024004][T15518] ksys_read+0x14d/0x260 [ 701.028304][T15518] ? vfs_write+0x9a0/0x9a0 [ 701.032778][T15518] ? lockdep_hardirqs_on+0x94/0x140 [ 701.038051][T15518] do_syscall_64+0x4c/0xa0 [ 701.042520][T15518] ? clear_bhb_loop+0x60/0xb0 [ 701.047261][T15518] ? clear_bhb_loop+0x60/0xb0 [ 701.051980][T15518] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 701.057913][T15518] RIP: 0033:0x7f479835ea0e [ 701.062360][T15518] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 701.082439][T15518] RSP: 002b:00007f47992fbfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 701.090908][T15518] RAX: ffffffffffffffda RBX: 00007f47992fc6c0 RCX: 00007f479835ea0e [ 701.098920][T15518] RDX: 000000000000000f RSI: 00007f47992fc0a0 RDI: 0000000000000006 [ 701.106936][T15518] RBP: 00007f47992fc090 R08: 0000000000000000 R09: 0000000000000000 [ 701.114964][T15518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 701.122979][T15518] R13: 00007f4798626218 R14: 00007f4798626180 R15: 00007ffd1da4f758 [ 701.131013][T15518] [ 701.804727][ T6249] device wlan1 left promiscuous mode [ 701.828745][ T6249] team0: Port device wlan1 removed [ 701.914012][T15528] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.3458'. [ 702.165732][T15533] tap0: tun_chr_ioctl cmd 35111 [ 702.323427][ T6249] device veth1_macvtap left promiscuous mode [ 702.761609][ T6249] device geneve1 left promiscuous mode [ 702.785018][ T6249] team0 (unregistering): Port device geneve1 removed [ 703.219315][T15560] netlink: 'syz.2.3471': attribute type 1 has an invalid length. [ 703.260104][T15560] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3471'. [ 703.395694][T15566] FAULT_INJECTION: forcing a failure. [ 703.395694][T15566] name failslab, interval 1, probability 0, space 0, times 0 [ 703.480540][T15566] CPU: 0 PID: 15566 Comm: syz.0.3472 Not tainted syzkaller #0 [ 703.488082][T15566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 703.498184][T15566] Call Trace: [ 703.501519][T15566] [ 703.504476][T15566] dump_stack_lvl+0x188/0x24e [ 703.509198][T15566] ? show_regs_print_info+0x12/0x12 [ 703.514471][T15566] ? load_image+0x410/0x410 [ 703.519015][T15566] ? __might_sleep+0xd0/0xd0 [ 703.523667][T15566] ? __lock_acquire+0x7ea0/0x7ea0 [ 703.528752][T15566] should_fail_ex+0x390/0x4c0 [ 703.533503][T15566] should_failslab+0x5/0x20 [ 703.538078][T15566] slab_pre_alloc_hook+0x59/0x300 [ 703.543202][T15566] kmem_cache_alloc_node+0x5a/0x310 [ 703.548486][T15566] ? __alloc_skb+0xf9/0x7d0 [ 703.553036][T15566] __alloc_skb+0xf9/0x7d0 [ 703.557404][T15566] netlink_sendmsg+0x654/0xbd0 [ 703.562252][T15566] ? netlink_getsockopt+0x550/0x550 [ 703.567501][T15566] ? apparmor_socket_sendmsg+0x8a/0x330 [ 703.573101][T15566] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 703.578429][T15566] ? security_socket_sendmsg+0x7c/0xa0 [ 703.583934][T15566] ? netlink_getsockopt+0x550/0x550 [ 703.589178][T15566] ____sys_sendmsg+0x5ed/0x9a0 [ 703.594002][T15566] ? __sys_sendmsg_sock+0x30/0x30 [ 703.599058][T15566] ? __import_iovec+0x306/0x510 [ 703.603970][T15566] ? import_iovec+0x6f/0xa0 [ 703.608523][T15566] ___sys_sendmsg+0x2a2/0x360 [ 703.613253][T15566] ? __sys_sendmsg+0x2a0/0x2a0 [ 703.618088][T15566] ? __lock_acquire+0x7ea0/0x7ea0 [ 703.623196][T15566] __se_sys_sendmsg+0x1c3/0x2b0 [ 703.628096][T15566] ? ct_nmi_exit+0x145/0x1c0 [ 703.632745][T15566] ? __x64_sys_sendmsg+0x80/0x80 [ 703.637753][T15566] ? lockdep_hardirqs_on+0x94/0x140 [ 703.643024][T15566] do_syscall_64+0x4c/0xa0 [ 703.647486][T15566] ? clear_bhb_loop+0x60/0xb0 [ 703.652213][T15566] ? clear_bhb_loop+0x60/0xb0 [ 703.656933][T15566] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 703.662870][T15566] RIP: 0033:0x7fa63d79e1d9 [ 703.667336][T15566] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 703.686987][T15566] RSP: 002b:00007fa63e6a0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 703.695450][T15566] RAX: ffffffffffffffda RBX: 00007fa63da25fa0 RCX: 00007fa63d79e1d9 [ 703.703469][T15566] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 703.711498][T15566] RBP: 00007fa63e6a0090 R08: 0000000000000000 R09: 0000000000000000 [ 703.719526][T15566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 703.727550][T15566] R13: 00007fa63da26038 R14: 00007fa63da25fa0 R15: 00007ffc2e023fc8 [ 703.735587][T15566] [ 704.347731][ T6249] device team_slave_1 left promiscuous mode [ 704.363838][ T6249] team0 (unregistering): Port device team_slave_1 removed [ 704.432102][ T6249] device team_slave_0 left promiscuous mode [ 704.444141][ T6249] team0 (unregistering): Port device team_slave_0 removed [ 704.533671][ T6249] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 704.665125][T15583] FAULT_INJECTION: forcing a failure. [ 704.665125][T15583] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 704.685937][T15583] CPU: 1 PID: 15583 Comm: syz.0.3475 Not tainted syzkaller #0 [ 704.693488][T15583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 704.703577][T15583] Call Trace: [ 704.706892][T15583] [ 704.709854][T15583] dump_stack_lvl+0x188/0x24e [ 704.714585][T15583] ? show_regs_print_info+0x12/0x12 [ 704.719827][T15583] ? load_image+0x410/0x410 [ 704.724395][T15583] ? __lock_acquire+0x7ea0/0x7ea0 [ 704.729472][T15583] should_fail_ex+0x390/0x4c0 [ 704.734212][T15583] _copy_from_user+0x2c/0x170 [ 704.738967][T15583] kstrtouint_from_user+0xda/0x170 [ 704.744147][T15583] ? kstrtol_from_user+0x190/0x190 [ 704.749317][T15583] proc_fail_nth_write+0x8b/0x200 [ 704.751289][T12650] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 704.754369][T15583] ? proc_fail_nth_read+0x220/0x220 [ 704.769802][T15583] ? common_file_perm+0x171/0x1c0 [ 704.774890][T15583] ? proc_fail_nth_read+0x220/0x220 [ 704.780151][T15583] vfs_write+0x2dc/0x9a0 [ 704.784435][T15583] ? file_end_write+0x250/0x250 [ 704.789313][T15583] ? __fget_files+0x28/0x460 [ 704.793929][T15583] ? __fget_files+0x3fc/0x460 [ 704.798634][T15583] ? __fdget_pos+0x2ae/0x360 [ 704.803248][T15583] ? ksys_write+0x70/0x260 [ 704.807694][T15583] ksys_write+0x14d/0x260 [ 704.812051][T15583] ? __ia32_sys_read+0x80/0x80 [ 704.816861][T15583] ? lockdep_hardirqs_on+0x94/0x140 [ 704.822083][T15583] do_syscall_64+0x4c/0xa0 [ 704.826518][T15583] ? clear_bhb_loop+0x60/0xb0 [ 704.831210][T15583] ? clear_bhb_loop+0x60/0xb0 [ 704.835908][T15583] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 704.841813][T15583] RIP: 0033:0x7fa63d75ea0e [ 704.846242][T15583] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 704.865866][T15583] RSP: 002b:00007fa63e69ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 704.874319][T15583] RAX: ffffffffffffffda RBX: 00007fa63e6a06c0 RCX: 00007fa63d75ea0e [ 704.882327][T15583] RDX: 0000000000000001 RSI: 00007fa63e6a00a0 RDI: 0000000000000005 [ 704.890316][T15583] RBP: 00007fa63e6a0090 R08: 0000000000000000 R09: 0000000000000000 [ 704.898391][T15583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 704.906394][T15583] R13: 00007fa63da26038 R14: 00007fa63da25fa0 R15: 00007ffc2e023fc8 [ 704.914397][T15583] [ 705.301915][ T6249] bond0 (unregistering): Released all slaves [ 705.418545][T15568] device syzkaller0 entered promiscuous mode [ 705.426266][T15568] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 706.792026][T15621] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3489'. [ 706.837524][T15621] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 706.932160][T15621] net_ratelimit: 2 callbacks suppressed [ 706.932179][T15621] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 707.273409][T15635] tap0: tun_chr_ioctl cmd 35111 [ 707.425765][T15639] netlink: 'syz.4.3495': attribute type 3 has an invalid length. [ 707.489128][T15639] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3495'. [ 707.501507][T15641] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3496'. [ 707.592929][T15641] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 707.684572][T15641] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 707.797532][T15642] netlink: 'syz.4.3495': attribute type 21 has an invalid length. [ 707.870587][T15642] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3495'. [ 707.887406][T15649] netlink: 154020 bytes leftover after parsing attributes in process `syz.2.3498'. [ 707.901252][T15642] netlink: 'syz.4.3495': attribute type 4 has an invalid length. [ 707.911222][T15649] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 707.927666][T15642] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3495'. [ 708.188691][T15657] can: request_module (can-proto-3) failed. [ 708.291941][T15666] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3504'. [ 708.330352][T15666] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3504'. [ 708.342164][T15666] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3504'. [ 708.360850][T15666] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3504'. [ 708.512817][T15672] netlink: 'syz.2.3505': attribute type 2 has an invalid length. [ 708.570894][T15672] device .*! entered promiscuous mode [ 708.801777][T15683] tap0: tun_chr_ioctl cmd 35111 [ 708.990116][T15687] netlink: 'syz.2.3510': attribute type 3 has an invalid length. [ 709.033042][T15687] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3510'. [ 709.969755][T15706] ipvlan0: mtu less than device minimum [ 710.562125][T15711] netlink: 'syz.0.3520': attribute type 10 has an invalid length. [ 710.605345][T15711] netlink: 'syz.0.3520': attribute type 10 has an invalid length. [ 710.683159][T15711] team0: Port device wlan1 added [ 710.742716][T15713] tap0: tun_chr_ioctl cmd 35111 [ 710.944881][T15726] netlink: 'syz.1.3523': attribute type 2 has an invalid length. [ 710.970496][T15726] device .*! entered promiscuous mode [ 711.312909][T15737] netlink: 'syz.3.3527': attribute type 10 has an invalid length. [ 711.343996][T15737] 8021q: adding VLAN 0 to HW filter on device team0 [ 711.383056][T15737] bond0: (slave team0): Enslaving as an active interface with an up link [ 712.708024][T15759] tap0: tun_chr_ioctl cmd 35111 [ 712.713525][ T9] wlan1: Trigger new scan to find an IBSS to join [ 712.759391][T15761] FAULT_INJECTION: forcing a failure. [ 712.759391][T15761] name failslab, interval 1, probability 0, space 0, times 0 [ 712.780790][T15761] CPU: 0 PID: 15761 Comm: syz.4.3535 Not tainted syzkaller #0 [ 712.788320][T15761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 712.798436][T15761] Call Trace: [ 712.801751][T15761] [ 712.804714][T15761] dump_stack_lvl+0x188/0x24e [ 712.809438][T15761] ? show_regs_print_info+0x12/0x12 [ 712.814673][T15761] ? load_image+0x410/0x410 [ 712.819207][T15761] ? __lock_acquire+0x7ea0/0x7ea0 [ 712.824269][T15761] should_fail_ex+0x390/0x4c0 [ 712.828979][T15761] should_failslab+0x5/0x20 [ 712.833509][T15761] slab_pre_alloc_hook+0x59/0x300 [ 712.838557][T15761] ? security_sk_alloc+0x47/0x130 [ 712.843617][T15761] __kmem_cache_alloc_node+0x4f/0x270 [ 712.849015][T15761] ? security_sk_alloc+0x47/0x130 [ 712.854066][T15761] __kmalloc+0xa3/0x240 [ 712.858242][T15761] ? sk_prot_alloc+0xe7/0x210 [ 712.862979][T15761] security_sk_alloc+0x47/0x130 [ 712.867862][T15761] sk_prot_alloc+0x101/0x210 [ 712.872491][T15761] ? sk_alloc+0x20/0x330 [ 712.876766][T15761] sk_alloc+0x36/0x330 [ 712.880856][T15761] ? bpf_ctx_init+0x154/0x190 [ 712.885576][T15761] bpf_prog_test_run_skb+0x36d/0x18e0 [ 712.890975][T15761] ? __fget_files+0x28/0x460 [ 712.895587][T15761] ? __fget_files+0x3fc/0x460 [ 712.900301][T15761] ? cpu_online+0xa0/0xa0 [ 712.904655][T15761] bpf_prog_test_run+0x31c/0x390 [ 712.909632][T15761] __sys_bpf+0x62b/0x780 [ 712.913908][T15761] ? bpf_link_show_fdinfo+0x380/0x380 [ 712.919324][T15761] ? lock_chain_count+0x20/0x20 [ 712.924209][T15761] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 712.930223][T15761] __x64_sys_bpf+0x78/0x90 [ 712.934666][T15761] do_syscall_64+0x4c/0xa0 [ 712.939104][T15761] ? clear_bhb_loop+0x60/0xb0 [ 712.943823][T15761] ? clear_bhb_loop+0x60/0xb0 [ 712.948526][T15761] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 712.954437][T15761] RIP: 0033:0x7f479839e1d9 [ 712.958865][T15761] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 712.978499][T15761] RSP: 002b:00007f479933e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 712.986941][T15761] RAX: ffffffffffffffda RBX: 00007f4798625fa0 RCX: 00007f479839e1d9 [ 712.994946][T15761] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 713.002945][T15761] RBP: 00007f479933e090 R08: 0000000000000000 R09: 0000000000000000 [ 713.010961][T15761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 713.018949][T15761] R13: 00007f4798626038 R14: 00007f4798625fa0 R15: 00007ffd1da4f758 [ 713.026955][T15761] [ 713.245531][T15763] __nla_validate_parse: 1 callbacks suppressed [ 713.245570][T15763] netlink: 16046 bytes leftover after parsing attributes in process `syz.3.3537'. [ 713.354864][ T4280] Bluetooth: hci0: command 0x0406 tx timeout [ 713.574716][T15784] netlink: 'syz.2.3543': attribute type 29 has an invalid length. [ 713.620233][T15784] netlink: 'syz.2.3543': attribute type 29 has an invalid length. [ 713.686488][T15785] netlink: 'syz.2.3543': attribute type 29 has an invalid length. [ 715.235801][T15809] ================================================================== [ 715.243965][T15809] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6c9/0x920 [ 715.251816][T15809] Write of size 72 at addr ffff888073626410 by task syz.0.3553/15809 [ 715.259911][T15809] [ 715.262260][T15809] CPU: 0 PID: 15809 Comm: syz.0.3553 Not tainted syzkaller #0 [ 715.269767][T15809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 715.279865][T15809] Call Trace: [ 715.283172][T15809] [ 715.286156][T15809] dump_stack_lvl+0x188/0x24e [ 715.290894][T15809] ? __lock_acquire+0x7ea0/0x7ea0 [ 715.295962][T15809] ? show_regs_print_info+0x12/0x12 [ 715.301197][T15809] ? load_image+0x410/0x410 [ 715.305767][T15809] ? __virt_addr_valid+0x467/0x540 [ 715.310949][T15809] ? __bpf_get_stackid+0x6c9/0x920 [ 715.316102][T15809] print_report+0xa8/0x210 [ 715.320543][T15809] kasan_report+0x10b/0x140 [ 715.325090][T15809] ? __bpf_get_stackid+0x6c9/0x920 [ 715.330243][T15809] kasan_check_range+0x235/0x290 [ 715.335202][T15809] ? __bpf_get_stackid+0x6c9/0x920 [ 715.340349][T15809] memcpy+0x3c/0x60 [ 715.344197][T15809] __bpf_get_stackid+0x6c9/0x920 [ 715.349150][T15809] bpf_get_stackid_pe+0x33f/0x400 [ 715.354206][T15809] bpf_prog_ee9fdca00c0e1e15+0x28/0x3d [ 715.359691][T15809] bpf_overflow_handler+0x50b/0x790 [ 715.364912][T15809] ? bpf_overflow_handler+0xd9/0x790 [ 715.370216][T15809] ? perf_swevent_overflow+0x230/0x230 [ 715.375691][T15809] ? mark_lock+0x94/0x320 [ 715.380046][T15809] ? __perf_event_account_interrupt+0x187/0x280 [ 715.386315][T15809] __perf_event_overflow+0x457/0x630 [ 715.391630][T15809] ? perf_swevent_event+0x1d5/0x570 [ 715.396854][T15809] perf_swevent_event+0x315/0x570 [ 715.401913][T15809] ? perf_tp_event+0xc10/0xc10 [ 715.406728][T15809] ___perf_sw_event+0x498/0x6d0 [ 715.411604][T15809] ? ___perf_sw_event+0x184/0x6d0 [ 715.416762][T15809] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 715.423216][T15809] ? __lock_acquire+0x142d/0x7ea0 [ 715.428269][T15809] ? copy_user_enhanced_fast_string+0xa/0x40 [ 715.434294][T15809] ? verify_lock_unused+0x140/0x140 [ 715.439515][T15809] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 715.445537][T15809] ? lock_chain_count+0x20/0x20 [ 715.450430][T15809] __perf_sw_event+0x135/0x260 [ 715.455223][T15809] do_user_addr_fault+0x497/0xb20 [ 715.460293][T15809] ? trace_hardirqs_off_finish+0x86/0x180 [ 715.466049][T15809] exc_page_fault+0x60/0x100 [ 715.470677][T15809] asm_exc_page_fault+0x22/0x30 [ 715.475554][T15809] RIP: 0010:copy_user_enhanced_fast_string+0xa/0x40 [ 715.482177][T15809] Code: ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 8d 0c ca 89 ca eb 20 0f 01 cb 83 fa 40 72 38 89 d1 a4 31 c0 0f 01 ca c3 89 ca eb 0a 90 90 90 90 90 90 90 90 90 90 [ 715.501811][T15809] RSP: 0018:ffffc9000341fb40 EFLAGS: 00050202 [ 715.507907][T15809] RAX: ffffffff8416c501 RBX: 0000000000000060 RCX: 0000000000000060 [ 715.515915][T15809] RDX: 0000000000000060 RSI: 0000000000000000 RDI: ffffc90003435048 [ 715.523907][T15809] RBP: 0000000000000000 R08: ffffc900034350a7 R09: 1ffff92000686a14 [ 715.531902][T15809] R10: dffffc0000000000 R11: fffff52000686a15 R12: 00007fffffffefa0 [ 715.539897][T15809] R13: 0000000000000060 R14: ffffc90003435048 R15: 0000000000000000 [ 715.547890][T15809] ? _copy_from_user+0xa1/0x170 [ 715.552778][T15809] _copy_from_user+0xf4/0x170 [ 715.557485][T15809] copy_from_bpfptr+0x67/0x80 [ 715.562199][T15809] bpf_prog_load+0xb40/0x1530 [ 715.566907][T15809] ? map_freeze+0x390/0x390 [ 715.571435][T15809] ? __might_fault+0xa6/0x120 [ 715.576135][T15809] ? __might_fault+0xa6/0x120 [ 715.580833][T15809] ? __might_fault+0xc2/0x120 [ 715.585531][T15809] ? __might_fault+0xa6/0x120 [ 715.590223][T15809] ? bpf_lsm_bpf+0x5/0x10 [ 715.594569][T15809] ? security_bpf+0x7a/0xa0 [ 715.599086][T15809] __sys_bpf+0x5b8/0x780 [ 715.603348][T15809] ? bpf_link_show_fdinfo+0x380/0x380 [ 715.608749][T15809] ? lock_chain_count+0x20/0x20 [ 715.613645][T15809] __x64_sys_bpf+0x78/0x90 [ 715.618091][T15809] do_syscall_64+0x4c/0xa0 [ 715.622534][T15809] ? clear_bhb_loop+0x60/0xb0 [ 715.627248][T15809] ? clear_bhb_loop+0x60/0xb0 [ 715.631949][T15809] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 715.637870][T15809] RIP: 0033:0x7fa63d79e1d9 [ 715.642315][T15809] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 715.661971][T15809] RSP: 002b:00007fa63e6a0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 715.670407][T15809] RAX: ffffffffffffffda RBX: 00007fa63da25fa0 RCX: 00007fa63d79e1d9 [ 715.678415][T15809] RDX: 0000000000000094 RSI: 00002000000005c0 RDI: 0000000000000005 [ 715.686401][T15809] RBP: 00007fa63d835888 R08: 0000000000000000 R09: 0000000000000000 [ 715.694397][T15809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 715.702387][T15809] R13: 00007fa63da26038 R14: 00007fa63da25fa0 R15: 00007ffc2e023fc8 [ 715.710381][T15809] [ 715.713411][T15809] [ 715.715751][T15809] Allocated by task 15809: [ 715.720186][T15809] kasan_set_track+0x4b/0x70 [ 715.724801][T15809] __kasan_kmalloc+0x8e/0xa0 [ 715.729415][T15809] __kmalloc_node+0xb2/0x240 [ 715.734024][T15809] bpf_map_area_alloc+0x47/0xe0 [ 715.738905][T15809] prealloc_elems_and_freelist+0x86/0x1c0 [ 715.744640][T15809] stack_map_alloc+0x386/0x510 [ 715.749423][T15809] map_create+0x524/0xff0 [ 715.753767][T15809] __sys_bpf+0x38b/0x780 [ 715.758034][T15809] __x64_sys_bpf+0x78/0x90 [ 715.762477][T15809] do_syscall_64+0x4c/0xa0 [ 715.766918][T15809] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 715.772833][T15809] [ 715.775176][T15809] Last potentially related work creation: [ 715.780895][T15809] kasan_save_stack+0x3a/0x60 [ 715.785597][T15809] __kasan_record_aux_stack+0xb2/0xc0 [ 715.790986][T15809] call_rcu+0x14f/0x950 [ 715.795185][T15809] __nf_register_net_hook+0x787/0x910 [ 715.800572][T15809] nf_register_net_hook+0xae/0x190 [ 715.805771][T15809] nf_register_net_hooks+0x40/0x1a0 [ 715.811003][T15809] ipvlan_l3s_register+0x130/0x1d0 [ 715.816146][T15809] ipvlan_set_port_mode+0x1a1/0x3f0 [ 715.821365][T15809] ipvlan_link_new+0x732/0xae0 [ 715.826154][T15809] rtnl_newlink+0x14b3/0x1f90 [ 715.830857][T15809] rtnetlink_rcv_msg+0x863/0xfb0 [ 715.835931][T15809] netlink_rcv_skb+0x1ef/0x440 [ 715.840741][T15809] netlink_unicast+0x7ad/0x920 [ 715.845519][T15809] netlink_sendmsg+0x8ad/0xbd0 [ 715.850297][T15809] __sys_sendto+0x497/0x650 [ 715.854813][T15809] __x64_sys_sendto+0xda/0xf0 [ 715.859519][T15809] do_syscall_64+0x4c/0xa0 [ 715.863954][T15809] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 715.869861][T15809] [ 715.872205][T15809] The buggy address belongs to the object at ffff888073626400 [ 715.872205][T15809] which belongs to the cache kmalloc-cg-64 of size 64 [ 715.886386][T15809] The buggy address is located 16 bytes inside of [ 715.886386][T15809] 64-byte region [ffff888073626400, ffff888073626440) [ 715.899503][T15809] [ 715.901846][T15809] The buggy address belongs to the physical page: [ 715.908299][T15809] page:ffffea0001cd8980 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x73626 [ 715.918506][T15809] memcg:ffff888074607a01 [ 715.922764][T15809] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 715.930348][T15809] raw: 00fff00000000200 0000000000000000 dead000000000001 ffff888018442780 [ 715.938944][T15809] raw: 0000000000000000 0000000080200020 00000001ffffffff ffff888074607a01 [ 715.947540][T15809] page dumped because: kasan: bad access detected [ 715.953974][T15809] page_owner tracks the page as allocated [ 715.959694][T15809] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 4279, tgid 4279 (syz-executor), ts 494287651788, free_ts 494287278592 [ 715.978120][T15809] post_alloc_hook+0x173/0x1a0 [ 715.982918][T15809] get_page_from_freelist+0x206b/0x2180 [ 715.988494][T15809] __alloc_pages+0x1ec/0x4f0 [ 715.993113][T15809] alloc_slab_page+0x5d/0x180 [ 715.997818][T15809] new_slab+0x87/0x2d0 [ 716.001929][T15809] ___slab_alloc+0xbc5/0x1240 [ 716.006633][T15809] __kmem_cache_alloc_node+0x126/0x270 [ 716.012115][T15809] kmalloc_trace+0x26/0xe0 [ 716.016550][T15809] alloc_fdtable+0xca/0x2c0 [ 716.021082][T15809] dup_fd+0x743/0xa20 [ 716.025089][T15809] copy_files+0x72/0xe0 [ 716.029271][T15809] copy_process+0x180e/0x4070 [ 716.033979][T15809] kernel_clone+0x24b/0x900 [ 716.038493][T15809] __x64_sys_clone+0x1a7/0x220 [ 716.043293][T15809] do_syscall_64+0x4c/0xa0 [ 716.047744][T15809] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 716.053657][T15809] page last free stack trace: [ 716.058360][T15809] free_unref_page_prepare+0x8e5/0x9e0 [ 716.063859][T15809] free_unref_page+0x2e/0x3f0 [ 716.068559][T15809] __vunmap+0x874/0xa40 [ 716.072735][T15809] __do_replace+0x86d/0x980 [ 716.077260][T15809] do_ip6t_set_ctl+0xb3d/0xe10 [ 716.082043][T15809] nf_setsockopt+0x25f/0x280 [ 716.086696][T15809] __sys_setsockopt+0x2bf/0x3d0 [ 716.091569][T15809] __x64_sys_setsockopt+0xb1/0xc0 [ 716.096606][T15809] do_syscall_64+0x4c/0xa0 [ 716.101045][T15809] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 716.106965][T15809] [ 716.109307][T15809] Memory state around the buggy address: [ 716.114947][T15809] ffff888073626300: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 716.123031][T15809] ffff888073626380: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 716.131152][T15809] >ffff888073626400: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 716.139221][T15809] ^ [ 716.144603][T15809] ffff888073626480: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 716.152685][T15809] ffff888073626500: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 716.160760][T15809] ================================================================== [ 716.168861][T15809] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 716.176073][T15809] CPU: 0 PID: 15809 Comm: syz.0.3553 Not tainted syzkaller #0 [ 716.184422][T15809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 716.194507][T15809] Call Trace: [ 716.197820][T15809] [ 716.200787][T15809] dump_stack_lvl+0x188/0x24e [ 716.205500][T15809] ? memcpy+0x3c/0x60 [ 716.209510][T15809] ? show_regs_print_info+0x12/0x12 [ 716.214732][T15809] ? load_image+0x410/0x410 [ 716.219264][T15809] panic+0x2d3/0x710 [ 716.223192][T15809] ? bpf_jit_dump+0xd0/0xd0 [ 716.227730][T15809] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 716.233652][T15809] ? _raw_spin_unlock+0x40/0x40 [ 716.238531][T15809] ? print_memory_metadata+0x314/0x400 [ 716.244023][T15809] check_panic_on_warn+0x80/0xa0 [ 716.249030][T15809] ? __bpf_get_stackid+0x6c9/0x920 [ 716.254168][T15809] end_report+0x66/0x110 [ 716.258438][T15809] kasan_report+0x118/0x140 [ 716.262965][T15809] ? __bpf_get_stackid+0x6c9/0x920 [ 716.268116][T15809] kasan_check_range+0x235/0x290 [ 716.273090][T15809] ? __bpf_get_stackid+0x6c9/0x920 [ 716.278221][T15809] memcpy+0x3c/0x60 [ 716.282057][T15809] __bpf_get_stackid+0x6c9/0x920 [ 716.287034][T15809] bpf_get_stackid_pe+0x33f/0x400 [ 716.292097][T15809] bpf_prog_ee9fdca00c0e1e15+0x28/0x3d [ 716.297577][T15809] bpf_overflow_handler+0x50b/0x790 [ 716.302803][T15809] ? bpf_overflow_handler+0xd9/0x790 [ 716.308110][T15809] ? perf_swevent_overflow+0x230/0x230 [ 716.313590][T15809] ? mark_lock+0x94/0x320 [ 716.317945][T15809] ? __perf_event_account_interrupt+0x187/0x280 [ 716.324217][T15809] __perf_event_overflow+0x457/0x630 [ 716.329528][T15809] ? perf_swevent_event+0x1d5/0x570 [ 716.334757][T15809] perf_swevent_event+0x315/0x570 [ 716.339806][T15809] ? perf_tp_event+0xc10/0xc10 [ 716.344606][T15809] ___perf_sw_event+0x498/0x6d0 [ 716.349493][T15809] ? ___perf_sw_event+0x184/0x6d0 [ 716.354539][T15809] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 716.360977][T15809] ? __lock_acquire+0x142d/0x7ea0 [ 716.366199][T15809] ? copy_user_enhanced_fast_string+0xa/0x40 [ 716.372225][T15809] ? verify_lock_unused+0x140/0x140 [ 716.377455][T15809] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 716.383461][T15809] ? lock_chain_count+0x20/0x20 [ 716.388341][T15809] __perf_sw_event+0x135/0x260 [ 716.393131][T15809] do_user_addr_fault+0x497/0xb20 [ 716.398176][T15809] ? trace_hardirqs_off_finish+0x86/0x180 [ 716.403916][T15809] exc_page_fault+0x60/0x100 [ 716.408524][T15809] asm_exc_page_fault+0x22/0x30 [ 716.413392][T15809] RIP: 0010:copy_user_enhanced_fast_string+0xa/0x40 [ 716.420004][T15809] Code: ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 8d 0c ca 89 ca eb 20 0f 01 cb 83 fa 40 72 38 89 d1 a4 31 c0 0f 01 ca c3 89 ca eb 0a 90 90 90 90 90 90 90 90 90 90 [ 716.439624][T15809] RSP: 0018:ffffc9000341fb40 EFLAGS: 00050202 [ 716.445704][T15809] RAX: ffffffff8416c501 RBX: 0000000000000060 RCX: 0000000000000060 [ 716.453698][T15809] RDX: 0000000000000060 RSI: 0000000000000000 RDI: ffffc90003435048 [ 716.461683][T15809] RBP: 0000000000000000 R08: ffffc900034350a7 R09: 1ffff92000686a14 [ 716.469683][T15809] R10: dffffc0000000000 R11: fffff52000686a15 R12: 00007fffffffefa0 [ 716.477682][T15809] R13: 0000000000000060 R14: ffffc90003435048 R15: 0000000000000000 [ 716.485682][T15809] ? _copy_from_user+0xa1/0x170 [ 716.490582][T15809] _copy_from_user+0xf4/0x170 [ 716.495293][T15809] copy_from_bpfptr+0x67/0x80 [ 716.500015][T15809] bpf_prog_load+0xb40/0x1530 [ 716.504728][T15809] ? map_freeze+0x390/0x390 [ 716.509255][T15809] ? __might_fault+0xa6/0x120 [ 716.513969][T15809] ? __might_fault+0xa6/0x120 [ 716.518661][T15809] ? __might_fault+0xc2/0x120 [ 716.523351][T15809] ? __might_fault+0xa6/0x120 [ 716.528061][T15809] ? bpf_lsm_bpf+0x5/0x10 [ 716.532413][T15809] ? security_bpf+0x7a/0xa0 [ 716.536937][T15809] __sys_bpf+0x5b8/0x780 [ 716.541206][T15809] ? bpf_link_show_fdinfo+0x380/0x380 [ 716.546601][T15809] ? lock_chain_count+0x20/0x20 [ 716.551474][T15809] __x64_sys_bpf+0x78/0x90 [ 716.555923][T15809] do_syscall_64+0x4c/0xa0 [ 716.560379][T15809] ? clear_bhb_loop+0x60/0xb0 [ 716.565080][T15809] ? clear_bhb_loop+0x60/0xb0 [ 716.569786][T15809] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 716.575701][T15809] RIP: 0033:0x7fa63d79e1d9 [ 716.580134][T15809] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 716.599861][T15809] RSP: 002b:00007fa63e6a0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 716.608300][T15809] RAX: ffffffffffffffda RBX: 00007fa63da25fa0 RCX: 00007fa63d79e1d9 [ 716.616307][T15809] RDX: 0000000000000094 RSI: 00002000000005c0 RDI: 0000000000000005 [ 716.624301][T15809] RBP: 00007fa63d835888 R08: 0000000000000000 R09: 0000000000000000 [ 716.632298][T15809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 716.640287][T15809] R13: 00007fa63da26038 R14: 00007fa63da25fa0 R15: 00007ffc2e023fc8 [ 716.648303][T15809] [ 716.651937][T15809] Kernel Offset: disabled [ 716.656281][T15809] Rebooting in 86400 seconds..