last executing test programs: 17.338191461s ago: executing program 1 (id=1514): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x4, 0xffffffffffffffff}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000068115fb758d46eb20055090100000000009500000000000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)=""/43, 0x2b}], 0x1, 0x0, 0xae}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2420, 0x0, 0x0, 0x3, 0x3, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000001c0), 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuset.memory_pressure\x00', 0x26e1, 0x0) close(r2) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f00000006c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8948, &(0x7f0000000000)='lo:\x96o8\x14d\xa1\xe3\xd7\\b}\x1f\xa1Y\xad4\x00 \'Y\x17]\x15c\xcaR\xdd\x98OGK\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb7s\xb0\x00\x00\x00\x00\xf5\a\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'5\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0R\xd3\x8a\xe1n\x97\xea\xf1\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB\x01\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\tb\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18\x00\b\x00\x00Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5\xdcZ\xb9\xd7Z\x88\x9b\xdff[\x90\xfa\x9a{b\xf4Dq') r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="f783c9cf8c834faab76d7515e600000000009346", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000009c0)=ANY=[@ANYBLOB="180000008f000000000000000100000018110000", @ANYRES32=r3, @ANYBLOB="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"], &(0x7f0000000680)='syzkaller\x00', 0xa, 0x1016, &(0x7f0000001880)=""/4118, 0x41100}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000000)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x300060c1) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r4, 0x6, 0x3, &(0x7f00000000c0), 0x4) close(r4) ioctl$SIOCSIFHWADDR(r2, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) close(0xffffffffffffffff) 17.042769948s ago: executing program 1 (id=1518): bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) socketpair(0x1d, 0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x1000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x2000}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r0, @ANYBLOB="df8c4051ebe070c61d5d7e4fe466fe0ca1a813c14ac440ce4c6d762d9de792eb5a3152a6820b35d4f2e74619b45dd88ef532d4d6c229fcfdac8c9d02e019ba7badd44e416214d1cc5bc10e0c0a146f41bd66a3", @ANYRES8], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x4030582b, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x143}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000640), 0x4) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x9, 0xe, &(0x7f00000003c0)=ANY=[@ANYBLOB="18110000", @ANYRES32, @ANYBLOB="0000000000000000b70200000000000085000000860000001285feff0100000006830300f200000095000000000000003c5b0200100000001842000002000000000000000000000018240000", @ANYRES32=r2, @ANYBLOB="000000000600000018650000020000000000000009a32d24"], &(0x7f00000004c0)='GPL\x00', 0xfffff000, 0x35, &(0x7f00000006c0)=""/53, 0x40f00, 0x13, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, &(0x7f0000000980)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000b00)={0x1, 0x2, 0x9}, 0x10, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r4 = openat$cgroup_int(r3, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) r5 = openat$cgroup_procs(r3, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000880), 0x12) write$cgroup_int(r4, &(0x7f0000000040)=0x900, 0x1) 16.414135325s ago: executing program 1 (id=1522): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x300440c4) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x894b, 0x0) 16.129711081s ago: executing program 1 (id=1525): ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x5, 0x80, 0x0, 0x9, 0x5, 0x0, 0x0, 0x8, 0x40, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'sit0\x00', @local}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x24800, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r2, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x40000000) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000035000b63d25a80643d66b7d80df2e2ff", 0x14}], 0x1}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x9, 0x7, &(0x7f0000000c00)=ANY=[@ANYBLOB="05c580000100000018520000060000000000000000000000186800000600000000000000030000001864000000000000000000000000000047f5c01d28d9f026cce0417316b07ab6d8a5bd7e37be845387bbea8b2178d2d3d6e896126251d729fb0a4c13282e6d2b4ff97a57bcdd390a91b5bb1edc244beb3720650be6bfe524b76d3a35283da41dbd9e816b8d936b1aeaf18071ad3b84e46d498823c778bef69feae24fa88a3c2fddb7bee54572e0c4f2c49a254212d8d790f53b74185fcd2f04262159738f9d90443045eb7677286c138d69ee3525ba4bb5"], &(0x7f0000000280)='GPL\x00', 0x6, 0x4, &(0x7f00000002c0)=""/4, 0x40f00, 0x41, '\x00', 0x0, @cgroup_sock=0x2, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0xf, 0x62, 0x7}, 0x10, 0x0, 0xffffffffffffffff, 0x6, &(0x7f0000000380)=[0x1], &(0x7f0000000400)=[{0x0, 0x2, 0x4, 0x2}, {0x4, 0x4, 0x1, 0x1}, {0x4, 0x5, 0x4, 0x9}, {0x2, 0x4, 0x2, 0x2}, {0x5, 0x2, 0x6, 0x6}, {0x5, 0x2, 0x9, 0x8}], 0x10, 0x7}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000fbffffff0000000000000000850000002c000000850000000800000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000d40)=@name={0x1e, 0x2, 0x1, {{0x41, 0x2}}}, 0x10, &(0x7f0000000d80)=[{&(0x7f0000000e40)="877afce49c7f8f3d646625edcf25ec0ca804d6ad060f3ae404ec42085294d14a8f8e551853adcc3eb40194bc9282e680fa94e7d7ddd174b9c03c4a208c69d3b50ae22743ee5739e7ce493c6a3edc01564a6497b4cd9b5655ebdfb3c65ce872d6a0a6798b132c590bebbadaa41986ee695123b866ae750c0bd55a818fc8dcc46403096b8c0bd1dc87117bca0959b383b5938d", 0x92}], 0x1, &(0x7f0000000dc0)="d968e1ce7b153c59137a5485ee2107fdfab4f907", 0x14, 0x8010}, 0x84) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000540)=r3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, @perf_bp={&(0x7f0000000bc0), 0xc}, 0x104080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'sit0\x00', @random="4f33e363a4b1"}) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000005a34bfc9fbfac8bd4040d4397c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2000}, 0x80) r8 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r6, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x40082406, &(0x7f00000001c0)='cpu&00\t&&') syz_clone(0x44208400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r10 = bpf$ITER_CREATE(0x21, &(0x7f0000000580), 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={0xffffffffffffffff, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000780)=[0x0, 0x0, 0x0], &(0x7f00000007c0)=[0x0, 0x0], 0x0, 0x3, &(0x7f0000000800)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000840), &(0x7f0000000880), 0x8, 0xb5, 0x8, 0x8, &(0x7f00000008c0)}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0xfffffffffffffe62, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r12, @fallback=0x21, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r13, 0xffffffffffffffff, 0x0, &(0x7f0000000500)=[0x1], 0x0, 0x10, 0x3ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x20, 0x25, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000008000000000000000600000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000010000008500000006000000251ac0ff0200000018250000", @ANYRES32=r9, @ANYBLOB='\x00'/12, @ANYRES32=r7, @ANYBLOB="000000006700000000c1050000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000700)='syzkaller\x00', 0x74, 0x0, 0x0, 0x40f00, 0x58, '\x00', r11, @netfilter=0x2d, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a40)={0x5, 0xc, 0x7, 0x6}, 0x10, r13, r3, 0x4, &(0x7f0000000a80)=[r7], &(0x7f0000000ac0)=[{0x0, 0x5, 0xb, 0xb}, {0x1, 0x3, 0x0, 0x6}, {0x0, 0x5, 0x1, 0xc}, {0x4, 0x5, 0x3, 0x2}], 0x10, 0x1}, 0x94) 14.159176795s ago: executing program 0 (id=1532): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e120500210000000401a8001600a400014020000300feffff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7ce", 0x6c}], 0x1}, 0x0) 14.001117264s ago: executing program 0 (id=1534): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000022bf000000000000ff7f000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf29000000000000550901000000000095000000000000007617040007000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x4, 0xd4, &(0x7f0000000040)=""/212, 0x0, 0x40, '\x00', 0x0, 0x25, r0}, 0x94) socket$kcm(0x29, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r3 = socket$kcm(0x2b, 0x1, 0x0) close(0x3) socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r3, 0x0, 0x4, 0x0, 0x0) setsockopt$sock_attach_bpf(r3, 0x0, 0x4, 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81e6978800fe08000e40000200875a65969ff57b00ff020000000000000000000000000001e2607e150007ab"], 0xfdef) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@ifindex, 0x3, 0x0, 0x4, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) 13.597400397s ago: executing program 3 (id=1538): socket$kcm(0x15, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0xff, [{0x5, 0x4, 0x40}]}]}, {0x0, [0x0, 0x0, 0x2e, 0x0, 0x61]}}, &(0x7f0000000000)=""/11, 0x37, 0xb, 0x1}, 0x28) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xa, 0x1, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x1, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x20, 0x0, &(0x7f00000002c0)="b90103616908068c3c270040e700009e0dc5cf1d66fff2fcffff8100632f2991", 0x0, 0x8104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 13.072803717s ago: executing program 0 (id=1540): openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000040)='GPL\x00', 0x8, 0x1009, &(0x7f0000002500)=""/4105, 0x0, 0x24}, 0x94) 12.984074872s ago: executing program 0 (id=1541): r0 = socket$kcm(0x15, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x5c, 0x5c, 0x7, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0xff, [{0x5, 0x4, 0x40}]}, @func_proto={0x0, 0x7, 0x0, 0xd, 0x0, [{0xcf8, 0x4}, {0x8, 0x4}, {0xe, 0x3}, {0x5, 0x3}, {0xd, 0x1}, {0x4, 0x5}, {0x3, 0x4}]}]}, {0x0, [0x0, 0x0, 0x2e, 0x0, 0x61]}}, &(0x7f0000000000)=""/11, 0x7b, 0xb, 0x1}, 0x28) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xa, 0x1, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x1, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f000404000001007d60b7030000000000006a0a00fe00000100850000000d000000b7000000000000009500000000000000c74396c8e3ebbadc20e5a7ef8c9ac1465cbf188ef10871b81ac7553358380b3a1f59916ffc9bf0bdf81524f07fb2819bf5774fedda52e39c90af27db5b56024df96b4673b4e8d5467e114604ea09b290a248a120c9c6cd87cef9000000a39c15a7ef365cc27dfeac7b9b0e9048517354b0ca4f9cf8b59ee6fa003fe1f2c4c15f20a07db4583a462d8be6602186fd68ee14a19ea2eb42122b8635a66ce6b5b92356081bc0f18a0ca83dbc089a9813c1efa26001b3f486ebfaae85c4d0b96778478ae5355e6f923b11056969f486f80a35f7f2339704fa93fa915ab8e1e0d7f31ebd19455e6827cd493907bf9d0000000000000000000000004e1fa60acabcf0553910ca2e5ea499fd5889dde9261f0848a5b8af657bfc96049308e8953431b269053627a1523551c160c813969925a892d266792352ec0204596a37ce8d6d260b32239bddbce2e79f93cb5a0ad897adb53b397d07c50f84b74f2605a565ee149016aa75ea31c0087dcd821b47c8b36efc6da4fb2ea7f1f36c85856b73ac9872babc62149699b6b8c796a79d833eb4b5ca668d430db5653a2b3c5b87e17ca1"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) setsockopt$sock_attach_bpf(r0, 0x114, 0x7, 0x0, 0xa0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8904, &(0x7f0000000080)) 12.866739789s ago: executing program 0 (id=1542): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000009c0)) r3 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r3, 0x84, 0x9, &(0x7f0000000380), 0x9c) r4 = socket$kcm(0xa, 0x3, 0x3a) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x4, 0x4, 0xf, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="110000005a0033"], 0xfe33) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r5], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r7}, 0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r2, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000640)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, &(0x7f0000000680)=[0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5e, &(0x7f0000000780)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000007c0), &(0x7f0000000800), 0x8, 0xd0, 0x8, 0x8, &(0x7f0000000840)}}, 0x10) sendmsg$kcm(r4, &(0x7f00000031c0)={&(0x7f00000006c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000b40)="b5640a", 0x3}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="1800"], 0x18}, 0x8080) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) sendmsg$inet(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000200)=[{&(0x7f00000005c0)="59a60df75092dc31aa641aec222a8e6787ef0f18d3ae57b0c14fb60bdb55a11ca5a2579ecae8dc36881f4555ab3b1a53d7a2a65225ac1c4eba2dcf827093b083700988c56c5961be3b9ad33144068536a3eb339cafcaa011fcb9fdb27bd2c4f4e3619278090b42584d8226686165f6f9ff571766c25efe4c060e35", 0x7b}], 0x1}, 0x104) ioctl$TUNSETIFINDEX(r8, 0x400454da, &(0x7f0000000040)) sendmsg$kcm(r4, &(0x7f0000000440)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)='S\x00', 0x2}], 0x1, 0x0, 0x0, 0x900}, 0x0) 12.623215943s ago: executing program 3 (id=1543): bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0a00000004000600080000000151dba1e7a9ae7d", @ANYRES32, @ANYBLOB="ba0700"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000024000000100"/28], 0x50) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0xd, &(0x7f0000000040)=@raw=[@btf_id={0x18, 0x8, 0x3, 0x0, 0x5}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x38}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}], &(0x7f0000000240)='GPL\x00', 0x7ff, 0x37, &(0x7f0000000280)=""/55, 0x41000, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x4, 0x7, 0x6, 0x3}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000380)=[r0, r0, r0, 0xffffffffffffffff, r0, r0, r0, r0], &(0x7f00000003c0)=[{0x2, 0x4, 0x10, 0x4}, {0x0, 0x2, 0x3, 0x1}, {0x5, 0x5, 0x10, 0x7}, {0x2, 0x1, 0x6, 0x2}], 0x10, 0x2f7b}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x40}, [@call={0x85, 0x0, 0x0, 0x27}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x25}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x40, 0x0, &(0x7f0000000240)="e0b9547ed387dbe9abc89b6f5bec62ed86919f4c14de92a4eaead82d1fa1b3dcf4da9c37f50a62e170bb2071ff564a74d98d5dc2c0f5e42c1513b7e4c8c96787", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000500)='syz0\x00', 0x200002, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0], 0x0, 0x7f, &(0x7f0000000600)=[{}, {}], 0x10, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xe4, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)={@cgroup=r3, r1, 0x34, 0x38, 0x0, @void, @void, @void, @value=r4}, 0x20) r5 = openat$cgroup_subtree(r3, &(0x7f0000000840), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x3f}, 0x90) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f0, &(0x7f0000000080)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f1, &(0x7f0000000080)) write$cgroup_subtree(r5, &(0x7f0000000880)={[{0x2d, 'memory'}, {0x6, 'cpu'}, {0x2b, 'pids'}, {0x2b, 'devices'}, {0x2b, 'cpuacct'}, {0x2b, 'rdma'}]}, 0x2b) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r0, 0x58, &(0x7f00000000c0)}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xfffffffffffffdc6, 0x18, 0x5, [@enum64={0x0, 0x1, 0x0, 0x13, 0x1, 0x1, [{0x1, 0x20003, 0x1}]}]}, {0x0, [0x2e, 0x30, 0x30]}}, 0x0, 0x35, 0x0, 0x1}, 0x28) 12.565090226s ago: executing program 2 (id=1544): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x1, @perf_bp={0x0, 0x3}, 0x108010, 0xfffffffffffffff9, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x2, 0x3a) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000c80)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000060000000400000000000007000000000000000061"], 0x0, 0x2a}, 0x20) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890b, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000080)='\xd2^\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002380)}, 0x2000) sendmsg$inet(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000300)="ffbc", 0x2}], 0x1}, 0xc001) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) sendmsg$kcm(r1, &(0x7f00000004c0)={&(0x7f0000000800)=@in6={0xa, 0xfffe, 0x80, @mcast2, 0x1a}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000500)="80005b020eaa4da2", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x16}, 0x94) r7 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r7, 0x84, 0x2, &(0x7f0000000000)=r10, 0x8) recvmsg$kcm(r1, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x100) sendmsg$kcm(r1, 0x0, 0x4000) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000140)) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x1) close(r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) 12.420252845s ago: executing program 3 (id=1545): bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e01f3440cee51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cad32b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337602d3e5a815232f5e16c1b30c3a6abc85018e5ff2c91018afc9ffc2cc788bee1b47683db012469398685211dfbbae3e2ed0a50e7393bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d300006aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7af22e30d46a9d26d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977fb536a9caab37d9ac4cfc1c7b400000000000007ffc826b956ba859ac8e3c177b91bd7d5e41ff83ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d000069a16203a967c1bbe09315c29877a308bcc87dc3addb08142bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8240000e3428d2129369ee1b85af9ffffff0d0df414b315f651c8412392191fa83ee830548f11be359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92000000000f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb74d4ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905de328c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a978ee56c83a3466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342e0eaf6f330e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea95ec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf81700cd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be3827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f969369de47422604e2fc5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293b6c833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b612272d40f522d8c98c879aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbe71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd46dbd61627a2e0a74b5e6aefb7eee403502734137ff47a57f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a125e3af1130d66a7b66837ae7e7123dde7404a067ad0a6a2d6bec9411b61cad4121be3c72ff3a04713042253d438e7becf8120de3895b8ce974958bde39cb8da3427a2e9e2de936431e67fed5ab5684db07de39083d8948cc4c8a2608100000000000000000000aecb8b0b7941088f971ce17427eec32a012295cc0cdd32955176b6ad5a4bb953e58ccfa9428f452cfb5a48a9fda26db3985c8be3c2f99827da074825b01c4a3a71fb59d5798100000000000000c76b05a45d2dd8c20d971e2f3e4369168f5cb83d6ff3a18733fec726034fbfa95624135bee374414b2c8c61f52357a520efd6a10aff244bc8a62ed367981fb4d5d77f7bc093958ff46527499957da4934cd4b370cf76f72dd05fa80cdfb68c836fd81be7a58532e041a87f9222f157610a4bcdc05b2a55308c8e7568b90f7a338557e816a16972aea79dff5becefa6f9c5ce6c58"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) socketpair(0x1d, 0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x1000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x2000}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYRES32=r3, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r0, @ANYBLOB="df8c4051ebe070c61d5d7e4fe466fe0ca1a813c14ac440ce4c6d762d9de792eb5a3152a6820b35d4f2e74619b45dd88ef532d4d6c229fcfdac8c9d02e019ba7badd44e416214d1cc5bc10e0c0a146f41bd66a3", @ANYRES8], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x4030582b, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001300)=ANY=[@ANYBLOB="b7020000f53f6314bfa300000000000024020000fffeff7f7a0300fef0ffffff79a4f0ff00000000b7060000ffffffff2e640500000000007502faff07cd02020404000000247d60b7030000030a00006a0a00fe0000000c8500000026000000b70000000000002995000000000000001da5ad3548ebb63d18db6a1c7e821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdbb126eb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b782ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a6211e52bb3598e9b5d4f22d8c19f958e8b34de35949a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75b0100000042127a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d32e3f4ee367c5a769c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c436432b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbbb512218c98442406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45576c205c70631e8ad585951950e521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8ed6b8d43400eaa00ff9bc46e1cfecbdc0e451ac53b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404e0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37deee7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b3f7c65c902499227c087301643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e77a0de32e356521df06f995cb57f97052fc4158250ccecfb67ea8faf509593fadc7eafb613327b052397af1ede94d87590ce90a0a7579766f7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535c87dbdeb0dcca5303eed6689ea91e1665c691df736368dde47e6672e93a314c5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f99126324ea02baea5808c430985749901b09e4902a6f5addc0103756b894418e4591c624a9b206abbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6d5b4212b6cb55b9c207bbe08f483b1bea05f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b7718384eebd5fc19928cea713ff09e179c308fbe9bd64374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521fbe93963e9536d16f3db211fca7dd99c0a0125ff8c18119a6926083f4a2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471667f82f5e250b979b9f2bd0d1b6bc03d11811ac6eec9a3ecd9e3c3299ee5eb3c6cac8fbd06514b7ee743ece79c04566d02a08fd5fcabbab3d129c0cced3ce11dafa387a8077927a1ad367c114d0b423e64c6157fac5e4e2168f33541daeff9983d0e488a78bef538f870b84798272b2101e0abf1cd64500b79e01e11d727389653bd80a39d5bbe2e23d2f5ff10047423429981bd9b4ce680e174c266391e3e7689452654e5cd5ada6e025327a1942b5a068f15fa58eaa267d4e0881783dddbdd777f8be0824ffdf6d06c621880dbbe9534f15e8c2e364d3ec67deb6ab9f2a0f03212972dbd38500000008173553a67be48633103809eee0be51d67d7ce230b389607b4c3b18da1c48f3180f2e0d79e54565fdd9a099b5b5ba2761905b88b7cbfc39c35dd153609da3da263438f12769602c2195245ff83e249119d4f6cabfbdef84ada19ef4a67ed66d7043036515d0be5a231f99e71aba5d5ae04676eff3e85f0844c41bbcfde7a931d1ec55c01f703bfd1b97756bfe55a91f6b379f34a018906339771157c66dbd7471d1beec7f029ef552cf5e92a1a0db21b59355763967ce26a577bc514b6d22a09c385c5ba6caf524e1688fc0f20002b35ae7bc8eb5ba51aebdf7d972c3267cedbe77ed70d9c539bc455a6f88b39196c8a224b0acf4d796fea59a07baa34cc270fb096ef330fbebdf872d7d0bc4f9a963355c554abc5cdb91464faabcd09cd9a53f5d1b2ea7e96f428f7cd6735c19c61dc9942d30bf29ef85ed01c2fcd6060aa40eeff971477b4fde48507b7bad95a496540adff7e4a72fd1f94d7c703ab1525c946c54e0da3d7ebfcc8c367d1bfd1aea2e84c3b310aaea5a1627df898c00a9aaf2d88a36afa4c5b1816384310600001c33125ad7f7970beeb256aec06e39fc6c66544e1d1dc5fea4b68a82dc568ca30aea9a1d097f06f11dc362f4bae5ef57c67686a15855cd351bf26f40fb1348cfce79897682228e6d9643530c81bab27bf7b1c4a76a5be180bb830cf06827c3f38a9c9c580c732c30aaceda78b0297de35a922b1375b129655beb31899e26052cc216f832fdb0a0015f93c9cff77f59cda1ec5f3e358848756cebb074266a47e39ae26e80e8c65aaf73c24925458520a9ca98760d1005c9f81846459ae6d5baa4f02807939ddc29c3520f7c58ed9bc5a569c7a1bc33cf4f330a18276ffb4550b9166c3939e8041094bec034aa0ec6638b74fe34f0f1ec6903a1135808d5d8d26c9203c3f87e66c407b7c5c0888d4558dd657cc0213efad68e76fdd7b23e68064fd4b271ed79c50abacdd2871b0c1f8c971df59a5a1901ddf804bed43e391f882d2a45c51cdbba86b2a1b7c0c4923642a731ea4dcbad2b6ebbebe787a8e28e781d75beee924b3b1e390750f316648133922c021f98fd2d5d71a7a3679397ef6cf432837b7e264831ec01c4c3146ba0caac3b13d55945ec00e978a1c1712cd51187936200606c9cd6877b2f72125295c54721f8e15df2ae282a8becb99a726fd92acc92141e1f574b4b0b3c992a61af3372d0d9217776b1a42cd2cee816a70bf1ddd69b590d53e28ba356e74b38e23e50d898e95cdc7cc809e462c884b53f672aab1411ecfd4c91e7a9782fc6763f0efd4bcbaf1fc3a00000000000000000000000000000000000000000000000000000000048e510340087caf22439d5304bd704a6a78a512269a9b1cbd13bea78c807bbc73853ae187cbb768673e9d1bf74a3b0a6c234accd8506adf314f4c5e08174540b69d3c0da660052b43b86baf49e7ac6f09c21598b1e01dc1e1b5a53626b090496dbf7af441e397016c3c094d5c91ffe0a7ceacfd225ed9a6c905f79ad7052747dd6cceef4c310e0e935311118bc6bf0e5ca6c7cca7d5c03be570308da8a40578b4db14961fbccf6e2f2d56e9509c434126515b56d032e20c12e830d1bc64826fc9b318da5911e466878dbb81edeff69363fb75af5cd80536f14d2eaa7764db23acdbd394bbbbccf5e882602897a85bf8523d891080593d831d758deb4f2c7e49c6d6b35d8fd92601c8500febb0c5fe0be294bf6bbbecad444695277a9e3992a354492513b43091d161c7c7cdbbe44e8e83b4cf333238a52f214b278c6485236ea880db2f113f6381187679a4620d6149808b0af024b3b3e6ba99b4b15ca"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x143}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000640), 0x4) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x9, 0xe, &(0x7f00000003c0)=ANY=[@ANYBLOB="18110000", @ANYRES32, @ANYBLOB="0000000000000000b70200000000000085000000860000001285feff0100000006830300f200000095000000000000003c5b0200100000001842000002000000000000000000000018240000", @ANYRES32=r4, @ANYBLOB="000000000600000018650000020000000000000009a32d24"], &(0x7f00000004c0)='GPL\x00', 0xfffff000, 0x35, &(0x7f00000006c0)=""/53, 0x40f00, 0x13, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, &(0x7f0000000980)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000b00)={0x1, 0x2, 0x9}, 0x10, 0x0, r2, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r6 = openat$cgroup_int(r5, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) r7 = openat$cgroup_procs(r5, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000880), 0x12) write$cgroup_int(r6, &(0x7f0000000040)=0x900, 0x1) 12.408535616s ago: executing program 1 (id=1546): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r2, &(0x7f00000031c0)={&(0x7f00000006c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000b40)}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="180000"], 0x18}, 0x8080) sendmsg$kcm(r2, &(0x7f0000000440)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)='S\x00', 0x2}], 0x1, 0x0, 0x0, 0x900}, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000003c0)=@o_path={&(0x7f0000000240)='./file0\x00', 0x0, 0x10, r1}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018010000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r5 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000002c0)}, {&(0x7f0000000580)="609915269c4e84624ef81783f9aebef576ec61e6f496dc32e8fc13126975caa38d110a3f11bd683ae48b2107c82aa5cdbd7dac20398457adf59be3e3a5dee0301cc26e6678a1de72c0dd6e82c3b1a6fabacba5076baa24bf1c4ec9ae9acc5ce579736b70ce0380eb3e57e834712d414fad667545aa7f9ef87f93263ee4f8a837b6b6fbd5fd269205bde13bc0cabd5f83d275c1ae24aa824160ff1e9d", 0x9c}, {&(0x7f0000000040)="b1245bdf55eaf94ab9a6b1a222d5858329ccaf118b1633d050bc888a2b9e56fe685fc39dec0c7a926925826c46c837853dd6b434aab961850893cf3542017258685c06dc6eaa2f576f90ec1e30566a39eefb2f5485a297ade9526202b5bdfe6ef98fa8289ad59a69d726099e0cc169291445ca7d1873040af60c7a7190bd2a86ff60a7b989f4e2b77c477a15b0845e7862d4", 0x92}], 0x3, &(0x7f00000001c0)=[{0x30, 0x112, 0x47f, "a9543525c2f1ceabcbb5f298fa9d024799954748b1e909026227cbd09fea74"}], 0x30}, 0x80) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000000000000000200000000000000000000001c0000000000000000000000080000", @ANYBLOB="7f0000017f000001000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f000001ac141400000000001c000000000000000000000047"], 0x230}, 0x0) socket$kcm(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81ea033c00fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) socket$kcm(0x10, 0x2, 0x0) 12.227156326s ago: executing program 2 (id=1547): r0 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040200080211000000040000a118000200e000000114000e1208000f0100810401a80016ea1f000840032e5f54c92011144dcf5c0461c1d67f6f940071343daec6a100a0e408e8d8ef075c01000000000020e2cb090000001fb79101015ee4bd31445a7ba9599763001b14620d9de656d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9e5e6d98031b68c76f9cefbbcbee5de6ccd40d", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x24001800) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg$inet(r2, &(0x7f0000000f00)={&(0x7f00000000c0)={0x2, 0x0, @rand_addr=0x64010102}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000100)='f', 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="20000000000000008400000008"], 0x20}, 0x0) sendmsg$inet(r2, &(0x7f0000000f00)={&(0x7f0000000180)={0x2, 0x0, @dev}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)='&', 0x1}], 0x1, &(0x7f0000000000)=ANY=[], 0x20}, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x7, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084) 12.051034556s ago: executing program 1 (id=1548): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000006c0)={0x0, 0x80, 0x23, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f00000002c0), 0xa}, 0x1000, 0x32, 0x10001, 0x4, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB=',\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a'], 0x30}, 0x40880) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffffffffffd8e, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x80) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x10000000004, 0x5b0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) close(r4) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0x1}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x6, 0x0, 0xffda, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={&(0x7f0000000300), 0x6}, 0x100e6c, 0xc76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0xf0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x1, &(0x7f0000000200)) 11.866872806s ago: executing program 2 (id=1549): openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000040)='GPL\x00', 0x8, 0x1009, &(0x7f0000002500)=""/4105, 0x0, 0x24}, 0x94) 11.846609077s ago: executing program 0 (id=1550): r0 = socket$kcm(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x5000000000000, 0x2105, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x215, 0x3ff, 0xfffffffa, 0x0, 0xfffffffffffffffd, 0x0, 0xffff, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x80) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d0002117ea6e070d6064e22000300000001250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x14, &(0x7f0000000040)=r3, 0x3b) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x3f00, &(0x7f0000000000)=[{&(0x7f0000000040)="020b000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x13, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8, 0x3, 0x0, 0x0, 0x7fff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) close(0x3) 11.732441554s ago: executing program 3 (id=1551): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e120500210000000401a8001600a400014020000300feffff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040", 0xa2}], 0x1}, 0x0) 11.674038657s ago: executing program 2 (id=1552): socket$kcm(0x15, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0xff, [{0x5, 0x4, 0x40}]}]}, {0x0, [0x0, 0x0, 0x2e, 0x0, 0x61]}}, &(0x7f0000000000)=""/11, 0x37, 0xb, 0x1}, 0x28) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xa, 0x1, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x1, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x20, 0x0, &(0x7f00000002c0)="b90103616908068c3c270040e700009e0dc5cf1d66fff2fcffff8100632f2991", 0x0, 0x8104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 7.775532992s ago: executing program 3 (id=1553): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000000)={'vlan0\x00', @random="010000201000"}) 6.94793689s ago: executing program 3 (id=1554): ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x5, 0x80, 0x0, 0x9, 0x5, 0x0, 0x0, 0x8, 0x40, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'sit0\x00', @local}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x24800, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r2, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x40000000) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000035000b63d25a80643d66b7d80df2e2ff", 0x14}], 0x1}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x9, 0x7, &(0x7f0000000c00)=ANY=[@ANYBLOB="05c580000100000018520000060000000000000000000000186800000600000000000000030000001864000000000000000000000000000047f5c01d28d9f026cce0417316b07ab6d8a5bd7e37be845387bbea8b2178d2d3d6e896126251d729fb0a4c13282e6d2b4ff97a57bcdd390a91b5bb1edc244beb3720650be6bfe524b76d3a35283da41dbd9e816b8d936b1aeaf18071ad3b84e46d498823c778bef69feae24fa88a3c2fddb7bee54572e0c4f2c49a254212d8d790f53b74185fcd2f04262159738f9d90443045eb7677286c138d69ee3525ba4bb5"], &(0x7f0000000280)='GPL\x00', 0x6, 0x4, &(0x7f00000002c0)=""/4, 0x40f00, 0x41, '\x00', 0x0, @cgroup_sock=0x2, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0xf, 0x62, 0x7}, 0x10, 0x0, 0xffffffffffffffff, 0x6, &(0x7f0000000380)=[0x1], &(0x7f0000000400)=[{0x0, 0x2, 0x4, 0x2}, {0x4, 0x4, 0x1, 0x1}, {0x4, 0x5, 0x4, 0x9}, {0x2, 0x4, 0x2, 0x2}, {0x5, 0x2, 0x6, 0x6}, {0x5, 0x2, 0x9, 0x8}], 0x10, 0x7}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000fbffffff0000000000000000850000002c000000850000000800000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000d40)=@name={0x1e, 0x2, 0x1, {{0x41, 0x2}}}, 0x10, &(0x7f0000000d80)=[{&(0x7f0000000e40)="877afce49c7f8f3d646625edcf25ec0ca804d6ad060f3ae404ec42085294d14a8f8e551853adcc3eb40194bc9282e680fa94e7d7ddd174b9c03c4a208c69d3b50ae22743ee5739e7ce493c6a3edc01564a6497b4cd9b5655ebdfb3c65ce872d6a0a6798b132c590bebbadaa41986ee695123b866ae750c0bd55a818fc8dcc46403096b8c0bd1dc87117bca0959b383b5938d", 0x92}], 0x1, &(0x7f0000000dc0)="d968e1ce7b153c59137a5485ee2107fdfab4f907", 0x14, 0x8010}, 0x84) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000540)=r3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, @perf_bp={&(0x7f0000000bc0), 0xc}, 0x104080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'sit0\x00', @random="4f33e363a4b1"}) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000005a34bfc9fbfac8bd4040d4397c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2000}, 0x80) r8 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r6, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x40082406, &(0x7f00000001c0)='cpu&00\t&&') syz_clone(0x44208400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r10 = bpf$ITER_CREATE(0x21, &(0x7f0000000580), 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={0xffffffffffffffff, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000780)=[0x0, 0x0, 0x0], &(0x7f00000007c0)=[0x0, 0x0], 0x0, 0x3, &(0x7f0000000800)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000840), &(0x7f0000000880), 0x8, 0xb5, 0x8, 0x8, &(0x7f00000008c0)}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0xfffffffffffffe62, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r12, @fallback=0x21, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r13, 0xffffffffffffffff, 0x0, &(0x7f0000000500)=[0x1], 0x0, 0x10, 0x3ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x20, 0x25, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000008000000000000000600000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000010000008500000006000000251ac0ff0200000018250000", @ANYRES32=r9, @ANYBLOB='\x00'/12, @ANYRES32=r7, @ANYBLOB="000000006700000000c1050000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000700)='syzkaller\x00', 0x74, 0x0, 0x0, 0x40f00, 0x58, '\x00', r11, @netfilter=0x2d, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a40)={0x5, 0xc, 0x7, 0x6}, 0x10, r13, r3, 0x4, &(0x7f0000000a80)=[r7], &(0x7f0000000ac0)=[{0x0, 0x5, 0xb, 0xb}, {0x1, 0x3, 0x0, 0x6}, {0x0, 0x5, 0x1, 0xc}, {0x4, 0x5, 0x3, 0x2}], 0x10, 0x1}, 0x94) 5.677020083s ago: executing program 2 (id=1555): perf_event_open$cgroup(&(0x7f00000000c0)={0x1, 0x80, 0x2d, 0x8, 0x7, 0x6, 0x0, 0x7fffffff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5caf, 0x1, @perf_bp={&(0x7f0000000040), 0x1}, 0x1001, 0x2, 0x101, 0x0, 0x747, 0xc, 0x1ff, 0x0, 0x6, 0x0, 0x2f4}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000000}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000860000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704004000000000850000008200000095000000000000008174a8a8372b7088087377f1ad4719cb2f577cce959f942ced5e216de770f6787dc80730c76d24a197a6e661c26f6aed038a93aec541664a4dc125b5cc1051b75202ff011d12c8377b34616e76aa8b1d2e32653541076fd62093543da8da1930d1"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000010000003f0000004000000042000000", @ANYRES32, @ANYBLOB="0000000300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000001a40), 0x1003, r1}, 0x38) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d80000001c0081044e81f782db44b904271d080201000000207e12a118000c000600142603600e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c13223e3f52a98516277ce06bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x8, 0x30001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50) close(r3) ioctl$SIOCSIFHWADDR(r3, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100ffffffff"}) 0s ago: executing program 2 (id=1556): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r2, &(0x7f00000031c0)={&(0x7f00000006c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000b40)}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="180000"], 0x18}, 0x8080) sendmsg$kcm(r2, &(0x7f0000000440)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)='S\x00', 0x2}], 0x1, 0x0, 0x0, 0x900}, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000003c0)=@o_path={&(0x7f0000000240)='./file0\x00', 0x0, 0x10, r1}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018010000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r5 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000002c0)}, {&(0x7f0000000580)="609915269c4e84624ef81783f9aebef576ec61e6f496dc32e8fc13126975caa38d110a3f11bd683ae48b2107c82aa5cdbd7dac20398457adf59be3e3a5dee0301cc26e6678a1de72c0dd6e82c3b1a6fabacba5076baa24bf1c4ec9ae9acc5ce579736b70ce0380eb3e57e834712d414fad667545aa7f9ef87f93263ee4f8a837b6b6fbd5fd269205bde13bc0cabd5f83d275c1ae24aa824160ff1e9d", 0x9c}, {&(0x7f0000000040)="b1245bdf55eaf94ab9a6b1a222d5858329ccaf118b1633d050bc888a2b9e56fe685fc39dec0c7a926925826c46c837853dd6b434aab961850893cf3542017258685c06dc6eaa2f576f90ec1e30566a39eefb2f5485a297ade9526202b5bdfe6ef98fa8289ad59a69d726099e0cc169291445ca7d1873040af60c7a7190bd2a86ff60a7b989f4e2b77c477a15b0845e7862d4", 0x92}], 0x3, &(0x7f00000001c0)=[{0x30, 0x112, 0x47f, "a9543525c2f1ceabcbb5f298fa9d024799954748b1e909026227cbd09fea74"}], 0x30}, 0x80) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="7c00000000000000000000000700000044140001ac1414aa00000000ac1414000000000000441c0003e0000001000000007f000001000000000000000000000000442c000000000000000000000000000000000000000000000000000000000000000000000000000000000000440c0001000000000000000000000000000000a400000000000000000000000700000044280000000000000000000000000000000000000000000000000000000000000000000000000000071700e0000002ac1414bb00000000e0000002ac1414bb018616000000000010c986d78e6c4b9394b247217b87cb00830b00000000007f000001861f0000000000020010421487f84baabcbcfb42a4d90bab000748c68c4c31001089ca45d9612e5b5c11f12bc78a41000000000000006c000000000000000000000007000000441c0003ffff", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000000000000000200000000000000000000001c0000000000000000000000080000", @ANYBLOB="7f0000017f000001000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f000001ac141400000000001c000000000000000000000047"], 0x230}, 0x0) socket$kcm(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81ea033c00fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) socket$kcm(0x10, 0x2, 0x0) kernel console output (not intermixed with test programs): ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 245.901802][ T8593] ? security_socket_sendmsg+0x80/0xa0 [ 245.907275][ T8593] ? netlink_getsockopt+0x590/0x590 [ 245.912487][ T8593] ____sys_sendmsg+0x5ba/0x960 [ 245.917279][ T8593] ? __asan_memset+0x22/0x40 [ 245.921888][ T8593] ? __sys_sendmsg_sock+0x30/0x30 [ 245.926933][ T8593] ? __import_iovec+0x5f2/0x850 [ 245.931825][ T8593] ? import_iovec+0x73/0xa0 [ 245.936357][ T8593] ___sys_sendmsg+0x2a6/0x360 [ 245.941041][ T8593] ? get_pid_task+0x20/0x1e0 [ 245.945657][ T8593] ? __sys_sendmsg+0x2a0/0x2a0 [ 245.950461][ T8593] ? __lock_acquire+0x7d40/0x7d40 [ 245.955519][ T8593] __se_sys_sendmsg+0x1c2/0x2b0 [ 245.960384][ T8593] ? __x64_sys_sendmsg+0x80/0x80 [ 245.965372][ T8593] ? lockdep_hardirqs_on+0x98/0x150 [ 245.970599][ T8593] do_syscall_64+0x55/0xa0 [ 245.975084][ T8593] ? clear_bhb_loop+0x40/0x90 [ 245.979899][ T8593] ? clear_bhb_loop+0x40/0x90 [ 245.984618][ T8593] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 245.990564][ T8593] RIP: 0033:0x7f704659aeb9 [ 245.994998][ T8593] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 246.014622][ T8593] RSP: 002b:00007f70473ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 246.023084][ T8593] RAX: ffffffffffffffda RBX: 00007f7046815fa0 RCX: 00007f704659aeb9 [ 246.031077][ T8593] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 246.039059][ T8593] RBP: 00007f70473ee090 R08: 0000000000000000 R09: 0000000000000000 [ 246.047044][ T8593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 246.055113][ T8593] R13: 00007f7046816038 R14: 00007f7046815fa0 R15: 00007ffcbb5511e8 [ 246.063123][ T8593] [ 246.144108][ T8593] team0: Device ipvlan1 failed to register rx_handler [ 246.194388][ T8595] netlink: 132 bytes leftover after parsing attributes in process `syz.0.953'. [ 246.734707][ T8610] netlink: 'syz.2.959': attribute type 4 has an invalid length. [ 246.742464][ T8610] netlink: 140 bytes leftover after parsing attributes in process `syz.2.959'. [ 246.875403][ T8610] netlink: 'syz.2.959': attribute type 10 has an invalid length. [ 246.973677][ T8610] team0: Device ipvlan1 failed to register rx_handler [ 247.212431][ T8602] delete_channel: no stack [ 247.218584][ T8602] delete_channel: no stack [ 251.238205][ T8666] FAULT_INJECTION: forcing a failure. [ 251.238205][ T8666] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 251.262779][ T8666] CPU: 1 PID: 8666 Comm: syz.0.980 Not tainted syzkaller #0 [ 251.270138][ T8666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 251.280220][ T8666] Call Trace: [ 251.283572][ T8666] [ 251.286537][ T8666] dump_stack_lvl+0x18c/0x250 [ 251.291258][ T8666] ? show_regs_print_info+0x20/0x20 [ 251.296489][ T8666] ? load_image+0x400/0x400 [ 251.301019][ T8666] ? __might_fault+0xaa/0x120 [ 251.305726][ T8666] ? __lock_acquire+0x7d40/0x7d40 [ 251.310786][ T8666] should_fail_ex+0x39d/0x4d0 [ 251.315508][ T8666] _copy_to_user+0x2f/0xa0 [ 251.319958][ T8666] bpf_prog_test_run_raw_tp+0x4ca/0x660 [ 251.325540][ T8666] ? trace_bpf_test_finish+0x1a0/0x1a0 [ 251.331035][ T8666] ? trace_bpf_test_finish+0x1a0/0x1a0 [ 251.336525][ T8666] bpf_prog_test_run+0x321/0x390 [ 251.341514][ T8666] __sys_bpf+0x49d/0x890 [ 251.345795][ T8666] ? bpf_link_show_fdinfo+0x390/0x390 [ 251.351204][ T8666] ? lock_chain_count+0x20/0x20 [ 251.356090][ T8666] __x64_sys_bpf+0x7c/0x90 [ 251.360554][ T8666] do_syscall_64+0x55/0xa0 [ 251.365006][ T8666] ? clear_bhb_loop+0x40/0x90 [ 251.369706][ T8666] ? clear_bhb_loop+0x40/0x90 [ 251.374415][ T8666] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 251.380356][ T8666] RIP: 0033:0x7f66fd19aeb9 [ 251.384801][ T8666] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 251.404443][ T8666] RSP: 002b:00007f66fdf82028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 251.412901][ T8666] RAX: ffffffffffffffda RBX: 00007f66fd415fa0 RCX: 00007f66fd19aeb9 [ 251.420904][ T8666] RDX: 0000000000000070 RSI: 0000200000000640 RDI: 000000000000000a [ 251.428899][ T8666] RBP: 00007f66fdf82090 R08: 0000000000000000 R09: 0000000000000000 [ 251.436896][ T8666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 251.444896][ T8666] R13: 00007f66fd416038 R14: 00007f66fd415fa0 R15: 00007fff36c86098 [ 251.452907][ T8666] [ 252.475630][ T8711] netlink: 'syz.2.997': attribute type 3 has an invalid length. [ 252.483655][ T8711] netlink: 132 bytes leftover after parsing attributes in process `syz.2.997'. [ 253.087350][ T5780] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 253.230168][ T8742] FAULT_INJECTION: forcing a failure. [ 253.230168][ T8742] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 253.254012][ T8742] CPU: 1 PID: 8742 Comm: syz.1.1011 Not tainted syzkaller #0 [ 253.261442][ T8742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 253.271536][ T8742] Call Trace: [ 253.274841][ T8742] [ 253.277795][ T8742] dump_stack_lvl+0x18c/0x250 [ 253.282520][ T8742] ? show_regs_print_info+0x20/0x20 [ 253.287765][ T8742] ? load_image+0x400/0x400 [ 253.292321][ T8742] ? __lock_acquire+0x7d40/0x7d40 [ 253.297397][ T8742] should_fail_ex+0x39d/0x4d0 [ 253.302129][ T8742] _copy_from_user+0x2f/0xe0 [ 253.306789][ T8742] __copy_msghdr+0x3bb/0x580 [ 253.311446][ T8742] ___sys_sendmsg+0x214/0x360 [ 253.316170][ T8742] ? get_pid_task+0x20/0x1e0 [ 253.320824][ T8742] ? __sys_sendmsg+0x2a0/0x2a0 [ 253.325687][ T8742] ? __lock_acquire+0x7d40/0x7d40 [ 253.330799][ T8742] __se_sys_sendmsg+0x1c2/0x2b0 [ 253.335703][ T8742] ? __x64_sys_sendmsg+0x80/0x80 [ 253.340703][ T8742] ? lockdep_hardirqs_on+0x98/0x150 [ 253.345953][ T8742] do_syscall_64+0x55/0xa0 [ 253.350418][ T8742] ? clear_bhb_loop+0x40/0x90 [ 253.355150][ T8742] ? clear_bhb_loop+0x40/0x90 [ 253.359879][ T8742] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 253.365807][ T8742] RIP: 0033:0x7f991759aeb9 [ 253.370265][ T8742] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 253.389914][ T8742] RSP: 002b:00007f99184ae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 253.398354][ T8742] RAX: ffffffffffffffda RBX: 00007f9917815fa0 RCX: 00007f991759aeb9 [ 253.406348][ T8742] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 253.414348][ T8742] RBP: 00007f99184ae090 R08: 0000000000000000 R09: 0000000000000000 [ 253.422351][ T8742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.430344][ T8742] R13: 00007f9917816038 R14: 00007f9917815fa0 R15: 00007ffc84ccb398 [ 253.438362][ T8742] [ 253.542113][ T8747] ip6_vti0: mtu greater than device maximum [ 253.810784][ T8758] netlink: 'syz.3.1019': attribute type 27 has an invalid length. [ 253.825051][ T8758] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1019'. [ 253.835426][ T8758] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 253.852963][ T8757] netlink: 'syz.0.1020': attribute type 21 has an invalid length. [ 253.882880][ T8757] FAULT_INJECTION: forcing a failure. [ 253.882880][ T8757] name failslab, interval 1, probability 0, space 0, times 0 [ 253.898813][ T8758] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1019'. [ 253.920177][ T8757] CPU: 1 PID: 8757 Comm: syz.0.1020 Not tainted syzkaller #0 [ 253.927605][ T8757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 253.937693][ T8757] Call Trace: [ 253.941001][ T8757] [ 253.943975][ T8757] dump_stack_lvl+0x18c/0x250 [ 253.948733][ T8757] ? show_regs_print_info+0x20/0x20 [ 253.953986][ T8757] ? load_image+0x400/0x400 [ 253.958563][ T8757] ? __lock_acquire+0x7d40/0x7d40 [ 253.963648][ T8757] should_fail_ex+0x39d/0x4d0 [ 253.968420][ T8757] should_failslab+0x9/0x20 [ 253.972973][ T8757] slab_pre_alloc_hook+0x59/0x310 [ 253.978043][ T8757] ? __lock_acquire+0x7d40/0x7d40 [ 253.983111][ T8757] ? mark_lock+0x94/0x320 [ 253.987481][ T8757] ? fib_create_info+0xa61/0x2460 [ 253.992549][ T8757] ? fib_create_info+0xa61/0x2460 [ 253.997621][ T8757] __kmem_cache_alloc_node+0x53/0x250 [ 254.003044][ T8757] ? fib_create_info+0xa61/0x2460 [ 254.008099][ T8757] __kmalloc+0xa4/0x230 [ 254.012297][ T8757] fib_create_info+0xa61/0x2460 [ 254.017219][ T8757] ? _raw_spin_unlock+0x40/0x40 [ 254.022126][ T8757] ? pcpu_alloc+0x11db/0x1860 [ 254.026844][ T8757] fib_table_insert+0xc6/0x1b20 [ 254.031759][ T8757] ? fib_trie_table+0x138/0x1c0 [ 254.036655][ T8757] ? fib_new_table+0x27f/0x2d0 [ 254.041574][ T8757] inet_rtm_newroute+0x14b/0x240 [ 254.046566][ T8757] ? __mutex_lock+0x4f9/0xcc0 [ 254.051285][ T8757] ? rcu_read_unlock+0xa0/0xa0 [ 254.056105][ T8757] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 254.061255][ T8757] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 254.066422][ T8757] ? rcu_read_unlock+0xa0/0xa0 [ 254.071234][ T8757] rtnetlink_rcv_msg+0x869/0xfa0 [ 254.076273][ T8757] ? rtnetlink_bind+0x80/0x80 [ 254.081007][ T8757] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 254.087021][ T8757] ? __dev_queue_xmit+0x26b/0x36b0 [ 254.092178][ T8757] ? lock_chain_count+0x20/0x20 [ 254.097075][ T8757] ? __local_bh_enable_ip+0x13a/0x1c0 [ 254.102564][ T8757] ? lockdep_hardirqs_on+0x98/0x150 [ 254.107818][ T8757] ? __local_bh_enable_ip+0x13a/0x1c0 [ 254.113250][ T8757] ? _local_bh_enable+0xa0/0xa0 [ 254.118186][ T8757] ? __dev_queue_xmit+0x26b/0x36b0 [ 254.123345][ T8757] ? __dev_queue_xmit+0x26b/0x36b0 [ 254.128495][ T8757] ? __dev_queue_xmit+0x124f/0x36b0 [ 254.133741][ T8757] ? __dev_queue_xmit+0x26b/0x36b0 [ 254.138920][ T8757] ? perf_trace_lock+0xfc/0x3b0 [ 254.143831][ T8757] netlink_rcv_skb+0x241/0x4d0 [ 254.148646][ T8757] ? rtnetlink_bind+0x80/0x80 [ 254.153358][ T8757] ? netlink_ack+0x1180/0x1180 [ 254.158190][ T8757] ? __lock_acquire+0x7d40/0x7d40 [ 254.163261][ T8757] ? netlink_deliver_tap+0x2e/0x1b0 [ 254.168528][ T8757] netlink_unicast+0x751/0x8d0 [ 254.173347][ T8757] netlink_sendmsg+0x8d0/0xbf0 [ 254.178167][ T8757] ? netlink_getsockopt+0x590/0x590 [ 254.183413][ T8757] ? aa_sock_msg_perm+0x94/0x150 [ 254.188455][ T8757] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 254.193787][ T8757] ? security_socket_sendmsg+0x80/0xa0 [ 254.199285][ T8757] ? netlink_getsockopt+0x590/0x590 [ 254.204525][ T8757] ____sys_sendmsg+0x5ba/0x960 [ 254.209356][ T8757] ? __asan_memset+0x22/0x40 [ 254.213997][ T8757] ? __sys_sendmsg_sock+0x30/0x30 [ 254.219064][ T8757] ? __import_iovec+0x5f2/0x850 [ 254.223979][ T8757] ? import_iovec+0x73/0xa0 [ 254.228555][ T8757] ___sys_sendmsg+0x2a6/0x360 [ 254.233285][ T8757] ? __sys_sendmsg+0x2a0/0x2a0 [ 254.238116][ T8757] ? __lock_acquire+0x7d40/0x7d40 [ 254.243212][ T8757] __se_sys_sendmsg+0x1c2/0x2b0 [ 254.248120][ T8757] ? __x64_sys_sendmsg+0x80/0x80 [ 254.253111][ T8757] ? lockdep_hardirqs_on+0x98/0x150 [ 254.258358][ T8757] do_syscall_64+0x55/0xa0 [ 254.262829][ T8757] ? clear_bhb_loop+0x40/0x90 [ 254.267554][ T8757] ? clear_bhb_loop+0x40/0x90 [ 254.272273][ T8757] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 254.278201][ T8757] RIP: 0033:0x7f66fd19aeb9 [ 254.282654][ T8757] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 254.302299][ T8757] RSP: 002b:00007f66fdf82028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 254.310738][ T8757] RAX: ffffffffffffffda RBX: 00007f66fd415fa0 RCX: 00007f66fd19aeb9 [ 254.318766][ T8757] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000003 [ 254.326759][ T8757] RBP: 00007f66fdf82090 R08: 0000000000000000 R09: 0000000000000000 [ 254.334772][ T8757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 254.342775][ T8757] R13: 00007f66fd416038 R14: 00007f66fd415fa0 R15: 00007fff36c86098 [ 254.350810][ T8757] [ 254.358734][ T4484] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 254.593669][ T34] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 254.633974][ T8772] netlink: 'syz.3.1025': attribute type 3 has an invalid length. [ 254.649946][ T8772] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.1025'. [ 254.702473][ T8773] netlink: 'syz.2.1024': attribute type 21 has an invalid length. [ 254.750113][ T8773] IPv6: NLM_F_CREATE should be specified when creating new route [ 254.772821][ T8773] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 254.780439][ T8773] IPv6: NLM_F_CREATE should be set when creating new route [ 254.787797][ T8773] IPv6: NLM_F_CREATE should be set when creating new route [ 254.795117][ T8773] IPv6: NLM_F_CREATE should be set when creating new route [ 255.031314][ T8779] lo: entered allmulticast mode [ 255.146037][ T8784] lo: entered promiscuous mode [ 255.163789][ T8784] lo: left allmulticast mode [ 255.887751][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.894609][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.996353][ T8806] netlink: 'syz.1.1036': attribute type 12 has an invalid length. [ 256.037337][ T8806] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1036'. [ 256.059841][ T8805] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 256.116614][ T8811] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1038'. [ 256.136538][ T8811] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 256.514996][ T8817] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1041'. [ 256.664022][ T8828] netlink: 'syz.0.1044': attribute type 33 has an invalid length. [ 256.672349][ T8828] netlink: 'syz.0.1044': attribute type 3 has an invalid length. [ 256.700953][ T8828] netlink: 153952 bytes leftover after parsing attributes in process `syz.0.1044'. [ 258.299904][ T8817] netlink: 'syz.3.1041': attribute type 1 has an invalid length. [ 259.368469][ T8837] delete_channel: no stack [ 259.549926][ T8843] delete_channel: no stack [ 260.488620][ T8891] sit0: left promiscuous mode [ 260.707527][ T8899] netlink: 'syz.0.1071': attribute type 17 has an invalid length. [ 260.744519][ T8891] sit0: entered promiscuous mode [ 263.976585][ T8942] FAULT_INJECTION: forcing a failure. [ 263.976585][ T8942] name failslab, interval 1, probability 0, space 0, times 0 [ 263.996424][ T8942] CPU: 0 PID: 8942 Comm: syz.0.1084 Not tainted syzkaller #0 [ 264.003878][ T8942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 264.013983][ T8942] Call Trace: [ 264.017297][ T8942] [ 264.020262][ T8942] dump_stack_lvl+0x18c/0x250 [ 264.025002][ T8942] ? show_regs_print_info+0x20/0x20 [ 264.030247][ T8942] ? load_image+0x400/0x400 [ 264.034824][ T8942] ? __might_sleep+0xe0/0xe0 [ 264.039456][ T8942] ? __lock_acquire+0x7d40/0x7d40 [ 264.044532][ T8942] should_fail_ex+0x39d/0x4d0 [ 264.049273][ T8942] should_failslab+0x9/0x20 [ 264.053831][ T8942] slab_pre_alloc_hook+0x59/0x310 [ 264.058911][ T8942] ? bpf_prog_test_run_skb+0x238/0x12b0 [ 264.064494][ T8942] ? bpf_prog_test_run_skb+0x238/0x12b0 [ 264.070081][ T8942] __kmem_cache_alloc_node+0x53/0x250 [ 264.075506][ T8942] ? bpf_prog_test_run_skb+0x238/0x12b0 [ 264.081093][ T8942] __kmalloc+0xa4/0x230 [ 264.085316][ T8942] bpf_prog_test_run_skb+0x238/0x12b0 [ 264.090736][ T8942] ? __fget_files+0x28/0x4b0 [ 264.095363][ T8942] ? __fget_files+0x28/0x4b0 [ 264.100001][ T8942] ? __fget_files+0x43d/0x4b0 [ 264.104734][ T8942] ? cpu_online+0x60/0x60 [ 264.109108][ T8942] bpf_prog_test_run+0x321/0x390 [ 264.114098][ T8942] __sys_bpf+0x49d/0x890 [ 264.118399][ T8942] ? bpf_link_show_fdinfo+0x390/0x390 [ 264.123840][ T8942] ? lock_chain_count+0x20/0x20 [ 264.128750][ T8942] __x64_sys_bpf+0x7c/0x90 [ 264.133210][ T8942] do_syscall_64+0x55/0xa0 [ 264.137690][ T8942] ? clear_bhb_loop+0x40/0x90 [ 264.142423][ T8942] ? clear_bhb_loop+0x40/0x90 [ 264.147143][ T8942] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 264.153074][ T8942] RIP: 0033:0x7f66fd19aeb9 [ 264.157524][ T8942] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 264.177183][ T8942] RSP: 002b:00007f66fdf82028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 264.185653][ T8942] RAX: ffffffffffffffda RBX: 00007f66fd415fa0 RCX: 00007f66fd19aeb9 [ 264.193672][ T8942] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 264.201687][ T8942] RBP: 00007f66fdf82090 R08: 0000000000000000 R09: 0000000000000000 [ 264.209692][ T8942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 264.217696][ T8942] R13: 00007f66fd416038 R14: 00007f66fd415fa0 R15: 00007fff36c86098 [ 264.225763][ T8942] [ 264.373064][ T8941] sit0: left promiscuous mode [ 264.506519][ T8944] sit0: entered promiscuous mode [ 264.823793][ T8955] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 264.840090][ T8955] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 264.856565][ T8955] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 264.867862][ T8955] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 264.881392][ T8955] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 264.900898][ T8955] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 264.934712][ T8955] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 264.950364][ T8955] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 264.963334][ T8955] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 264.975536][ T8955] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 268.235670][ T8973] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.1094'. [ 268.282422][ T8973] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.832686][ T8987] net_ratelimit: 13285 callbacks suppressed [ 269.832705][ T8987] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 269.848651][ T8987] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 269.858669][ T8987] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 269.868651][ T8987] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 269.878584][ T8987] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 269.890485][ T8987] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 269.900435][ T8987] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 269.910381][ T8987] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 269.920326][ T8987] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 269.930499][ T8987] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 271.887501][ T8999] FAULT_INJECTION: forcing a failure. [ 271.887501][ T8999] name failslab, interval 1, probability 0, space 0, times 0 [ 271.957455][ T8999] CPU: 1 PID: 8999 Comm: syz.3.1104 Not tainted syzkaller #0 [ 271.964910][ T8999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 271.975002][ T8999] Call Trace: [ 271.978312][ T8999] [ 271.981280][ T8999] dump_stack_lvl+0x18c/0x250 [ 271.986004][ T8999] ? show_regs_print_info+0x20/0x20 [ 271.991249][ T8999] ? load_image+0x400/0x400 [ 271.995792][ T8999] ? __might_sleep+0xe0/0xe0 [ 272.000418][ T8999] ? __lock_acquire+0x7d40/0x7d40 [ 272.005494][ T8999] should_fail_ex+0x39d/0x4d0 [ 272.010251][ T8999] should_failslab+0x9/0x20 [ 272.014803][ T8999] slab_pre_alloc_hook+0x59/0x310 [ 272.019884][ T8999] ? bpf_prog_test_run_skb+0x238/0x12b0 [ 272.025478][ T8999] ? bpf_prog_test_run_skb+0x238/0x12b0 [ 272.031052][ T8999] __kmem_cache_alloc_node+0x53/0x250 [ 272.036484][ T8999] ? bpf_prog_test_run_skb+0x238/0x12b0 [ 272.042048][ T8999] __kmalloc+0xa4/0x230 [ 272.046229][ T8999] bpf_prog_test_run_skb+0x238/0x12b0 [ 272.051614][ T8999] ? __fget_files+0x28/0x4b0 [ 272.056236][ T8999] ? __fget_files+0x28/0x4b0 [ 272.060880][ T8999] ? __fget_files+0x43d/0x4b0 [ 272.065621][ T8999] ? cpu_online+0x60/0x60 [ 272.069977][ T8999] bpf_prog_test_run+0x321/0x390 [ 272.074949][ T8999] __sys_bpf+0x49d/0x890 [ 272.079216][ T8999] ? bpf_link_show_fdinfo+0x390/0x390 [ 272.084637][ T8999] ? lock_chain_count+0x20/0x20 [ 272.089567][ T8999] __x64_sys_bpf+0x7c/0x90 [ 272.094009][ T8999] do_syscall_64+0x55/0xa0 [ 272.098486][ T8999] ? clear_bhb_loop+0x40/0x90 [ 272.103185][ T8999] ? clear_bhb_loop+0x40/0x90 [ 272.107885][ T8999] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 272.113803][ T8999] RIP: 0033:0x7f704659aeb9 [ 272.118243][ T8999] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 272.137895][ T8999] RSP: 002b:00007f70473ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 272.146330][ T8999] RAX: ffffffffffffffda RBX: 00007f7046815fa0 RCX: 00007f704659aeb9 [ 272.154333][ T8999] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 272.162320][ T8999] RBP: 00007f70473ee090 R08: 0000000000000000 R09: 0000000000000000 [ 272.170306][ T8999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 272.178301][ T8999] R13: 00007f7046816038 R14: 00007f7046815fa0 R15: 00007ffcbb5511e8 [ 272.186313][ T8999] [ 275.572879][ T9034] sit0: left promiscuous mode [ 275.590875][ T9035] net_ratelimit: 21926 callbacks suppressed [ 275.590908][ T9035] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 275.630776][ T9035] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 275.654526][ T9035] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 275.670211][ T9035] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 275.688321][ T9035] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 275.704403][ T9035] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 275.727294][ T9035] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 275.748391][ T9035] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 275.770658][ T9035] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 275.802023][ T9035] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 275.898075][ T9037] sit0: entered promiscuous mode [ 276.178415][ T9044] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1115'. [ 279.711206][ T9071] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1126'. [ 280.505645][ T9076] sit0: left promiscuous mode [ 280.655433][ T9076] sit0: entered promiscuous mode [ 280.885083][ T9082] net_ratelimit: 9331 callbacks suppressed [ 280.885129][ T9082] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 280.906062][ T9082] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 280.921679][ T9082] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 280.932012][ T9082] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 280.948929][ T9082] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 280.959526][ T9082] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 280.983187][ T9082] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 280.994503][ T9082] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 281.012916][ T9082] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 281.102793][ T9082] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 283.875112][ T9084] sit0: left promiscuous mode [ 284.063389][ T9095] sit0: entered promiscuous mode [ 284.210117][ T9106] FAULT_INJECTION: forcing a failure. [ 284.210117][ T9106] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 284.247867][ T9106] CPU: 1 PID: 9106 Comm: syz.3.1132 Not tainted syzkaller #0 [ 284.255324][ T9106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 284.265414][ T9106] Call Trace: [ 284.268721][ T9106] [ 284.271691][ T9106] dump_stack_lvl+0x18c/0x250 [ 284.276431][ T9106] ? show_regs_print_info+0x20/0x20 [ 284.281671][ T9106] ? load_image+0x400/0x400 [ 284.286221][ T9106] ? __might_fault+0xaa/0x120 [ 284.290936][ T9106] ? __lock_acquire+0x7d40/0x7d40 [ 284.295997][ T9106] should_fail_ex+0x39d/0x4d0 [ 284.300721][ T9106] _copy_from_user+0x2f/0xe0 [ 284.305348][ T9106] ___sys_sendmsg+0x1c7/0x360 [ 284.310067][ T9106] ? __sys_sendmsg+0x2a0/0x2a0 [ 284.314866][ T9106] ? __lock_acquire+0x7d40/0x7d40 [ 284.319929][ T9106] __se_sys_sendmsg+0x1c2/0x2b0 [ 284.324812][ T9106] ? __x64_sys_sendmsg+0x80/0x80 [ 284.329773][ T9106] ? lockdep_hardirqs_on+0x98/0x150 [ 284.334997][ T9106] do_syscall_64+0x55/0xa0 [ 284.339453][ T9106] ? clear_bhb_loop+0x40/0x90 [ 284.344154][ T9106] ? clear_bhb_loop+0x40/0x90 [ 284.348857][ T9106] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 284.354775][ T9106] RIP: 0033:0x7f704659aeb9 [ 284.359201][ T9106] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 284.378826][ T9106] RSP: 002b:00007f70473ac028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 284.387261][ T9106] RAX: ffffffffffffffda RBX: 00007f7046816180 RCX: 00007f704659aeb9 [ 284.395242][ T9106] RDX: 0000000000000011 RSI: 0000200000000040 RDI: 0000000000000005 [ 284.403226][ T9106] RBP: 00007f70473ac090 R08: 0000000000000000 R09: 0000000000000000 [ 284.411204][ T9106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 284.419208][ T9106] R13: 00007f7046816218 R14: 00007f7046816180 R15: 00007ffcbb5511e8 [ 284.427210][ T9106] [ 284.585208][ T9112] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.1135'. [ 284.606177][ T9112] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.1135'. [ 285.097318][ T9120] FAULT_INJECTION: forcing a failure. [ 285.097318][ T9120] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 285.112578][ T9120] CPU: 0 PID: 9120 Comm: syz.3.1139 Not tainted syzkaller #0 [ 285.119998][ T9120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 285.130081][ T9120] Call Trace: [ 285.133398][ T9120] [ 285.136350][ T9120] dump_stack_lvl+0x18c/0x250 [ 285.141070][ T9120] ? show_regs_print_info+0x20/0x20 [ 285.146305][ T9120] ? load_image+0x400/0x400 [ 285.150842][ T9120] ? __might_fault+0xaa/0x120 [ 285.155555][ T9120] ? __lock_acquire+0x7d40/0x7d40 [ 285.160634][ T9120] should_fail_ex+0x39d/0x4d0 [ 285.165360][ T9120] _copy_from_user+0x2f/0xe0 [ 285.169983][ T9120] ___sys_sendmsg+0x1c7/0x360 [ 285.174693][ T9120] ? get_pid_task+0x20/0x1e0 [ 285.179342][ T9120] ? __sys_sendmsg+0x2a0/0x2a0 [ 285.184165][ T9120] ? __lock_acquire+0x7d40/0x7d40 [ 285.189257][ T9120] __se_sys_sendmsg+0x1c2/0x2b0 [ 285.194150][ T9120] ? __x64_sys_sendmsg+0x80/0x80 [ 285.199145][ T9120] ? lockdep_hardirqs_on+0x98/0x150 [ 285.204384][ T9120] do_syscall_64+0x55/0xa0 [ 285.208842][ T9120] ? clear_bhb_loop+0x40/0x90 [ 285.213564][ T9120] ? clear_bhb_loop+0x40/0x90 [ 285.218293][ T9120] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 285.224221][ T9120] RIP: 0033:0x7f704659aeb9 [ 285.228678][ T9120] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 285.248313][ T9120] RSP: 002b:00007f70473ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 285.256758][ T9120] RAX: ffffffffffffffda RBX: 00007f7046815fa0 RCX: 00007f704659aeb9 [ 285.264788][ T9120] RDX: 0000000020000041 RSI: 0000200000000100 RDI: 0000000000000004 [ 285.272786][ T9120] RBP: 00007f70473ee090 R08: 0000000000000000 R09: 0000000000000000 [ 285.280786][ T9120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 285.288771][ T9120] R13: 00007f7046816038 R14: 00007f7046815fa0 R15: 00007ffcbb5511e8 [ 285.296767][ T9120] [ 285.300381][ T49] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 285.947756][ T9137] FAULT_INJECTION: forcing a failure. [ 285.947756][ T9137] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 285.985081][ T9137] CPU: 1 PID: 9137 Comm: syz.0.1146 Not tainted syzkaller #0 [ 285.992609][ T9137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 286.002689][ T9137] Call Trace: [ 286.005995][ T9137] [ 286.008950][ T9137] dump_stack_lvl+0x18c/0x250 [ 286.013675][ T9137] ? show_regs_print_info+0x20/0x20 [ 286.018922][ T9137] ? load_image+0x400/0x400 [ 286.023458][ T9137] ? __might_fault+0xaa/0x120 [ 286.028212][ T9137] ? __lock_acquire+0x7d40/0x7d40 [ 286.033289][ T9137] should_fail_ex+0x39d/0x4d0 [ 286.038012][ T9137] _copy_from_user+0x2f/0xe0 [ 286.042636][ T9137] ___sys_sendmsg+0x1c7/0x360 [ 286.047387][ T9137] ? __sys_sendmsg+0x2a0/0x2a0 [ 286.052191][ T9137] ? perf_trace_preemptirq_template+0xac/0x330 [ 286.058382][ T9137] ? irqentry_enter+0x37/0x50 [ 286.063110][ T9137] ? __se_sys_sendmsg+0xd9/0x2b0 [ 286.068120][ T9137] __se_sys_sendmsg+0x1c2/0x2b0 [ 286.072992][ T9137] ? __x64_sys_sendmsg+0x80/0x80 [ 286.077962][ T9137] ? lockdep_hardirqs_on+0x98/0x150 [ 286.083180][ T9137] do_syscall_64+0x55/0xa0 [ 286.087612][ T9137] ? clear_bhb_loop+0x40/0x90 [ 286.092389][ T9137] ? clear_bhb_loop+0x40/0x90 [ 286.097086][ T9137] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 286.102989][ T9137] RIP: 0033:0x7f66fd19aeb9 [ 286.107419][ T9137] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 286.127043][ T9137] RSP: 002b:00007f66fdf82028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 286.135468][ T9137] RAX: ffffffffffffffda RBX: 00007f66fd415fa0 RCX: 00007f66fd19aeb9 [ 286.143456][ T9137] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 286.151466][ T9137] RBP: 00007f66fdf82090 R08: 0000000000000000 R09: 0000000000000000 [ 286.159445][ T9137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 286.167423][ T9137] R13: 00007f66fd416038 R14: 00007f66fd415fa0 R15: 00007fff36c86098 [ 286.175426][ T9137] [ 286.352266][ T9144] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.1147'. [ 286.488637][ T9144] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.1147'. [ 286.505569][ T9149] FAULT_INJECTION: forcing a failure. [ 286.505569][ T9149] name failslab, interval 1, probability 0, space 0, times 0 [ 286.534064][ T9149] CPU: 1 PID: 9149 Comm: syz.2.1151 Not tainted syzkaller #0 [ 286.541507][ T9149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 286.551593][ T9149] Call Trace: [ 286.554910][ T9149] [ 286.557878][ T9149] dump_stack_lvl+0x18c/0x250 [ 286.562611][ T9149] ? show_regs_print_info+0x20/0x20 [ 286.567850][ T9149] ? load_image+0x400/0x400 [ 286.572387][ T9149] ? __might_sleep+0xe0/0xe0 [ 286.577009][ T9149] ? __lock_acquire+0x7d40/0x7d40 [ 286.582100][ T9149] ? __lock_acquire+0x1273/0x7d40 [ 286.587194][ T9149] should_fail_ex+0x39d/0x4d0 [ 286.591907][ T9149] should_failslab+0x9/0x20 [ 286.596445][ T9149] slab_pre_alloc_hook+0x59/0x310 [ 286.602046][ T9149] ? ip_options_get+0x52/0x4a0 [ 286.606860][ T9149] ? ip_options_get+0x52/0x4a0 [ 286.611667][ T9149] __kmem_cache_alloc_node+0x53/0x250 [ 286.617085][ T9149] ? ip_options_get+0x52/0x4a0 [ 286.621888][ T9149] __kmalloc+0xa4/0x230 [ 286.626091][ T9149] ip_options_get+0x52/0x4a0 [ 286.630732][ T9149] ip_cmsg_send+0x591/0xa70 [ 286.635276][ T9149] udp_sendmsg+0xc1f/0x23b0 [ 286.639824][ T9149] ? __lock_acquire+0x1347/0x7d40 [ 286.644891][ T9149] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 286.649779][ T9149] ? udp_cmsg_send+0x350/0x350 [ 286.654587][ T9149] ? __lock_acquire+0x1273/0x7d40 [ 286.659659][ T9149] ? verify_lock_unused+0x140/0x140 [ 286.664909][ T9149] ? lock_chain_count+0x20/0x20 [ 286.669786][ T9149] ? verify_lock_unused+0x140/0x140 [ 286.675032][ T9149] udpv6_sendmsg+0x790/0x2390 [ 286.679764][ T9149] ? print_unlock_imbalance_bug+0x160/0x160 [ 286.685705][ T9149] ? udp_v6_early_demux+0xf80/0xf80 [ 286.690947][ T9149] ? perf_trace_preemptirq_template+0xac/0x330 [ 286.697158][ T9149] ? lock_chain_count+0x20/0x20 [ 286.702073][ T9149] ? _local_bh_enable+0xa0/0xa0 [ 286.706966][ T9149] ? inet_send_prepare+0x1b3/0x260 [ 286.712112][ T9149] ? inet_send_prepare+0x1b3/0x260 [ 286.717262][ T9149] ? inet6_sendmsg+0x5f/0xd0 [ 286.721879][ T9149] ? inet6_compat_ioctl+0x3c0/0x3c0 [ 286.727116][ T9149] ____sys_sendmsg+0x5ba/0x960 [ 286.731922][ T9149] ? __lock_acquire+0x7d40/0x7d40 [ 286.736981][ T9149] ? __sys_sendmsg_sock+0x30/0x30 [ 286.742046][ T9149] ? __import_iovec+0x3fa/0x850 [ 286.746944][ T9149] ? import_iovec+0x73/0xa0 [ 286.751475][ T9149] ___sys_sendmsg+0x2a6/0x360 [ 286.756171][ T9149] ? get_pid_task+0x20/0x1e0 [ 286.760795][ T9149] ? __sys_sendmsg+0x2a0/0x2a0 [ 286.765591][ T9149] ? __lock_acquire+0x7d40/0x7d40 [ 286.770650][ T9149] __se_sys_sendmsg+0x1c2/0x2b0 [ 286.775517][ T9149] ? __x64_sys_sendmsg+0x80/0x80 [ 286.780477][ T9149] ? lockdep_hardirqs_on+0x98/0x150 [ 286.785686][ T9149] do_syscall_64+0x55/0xa0 [ 286.790116][ T9149] ? clear_bhb_loop+0x40/0x90 [ 286.794812][ T9149] ? clear_bhb_loop+0x40/0x90 [ 286.799502][ T9149] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 286.805426][ T9149] RIP: 0033:0x7ff8f819aeb9 [ 286.809975][ T9149] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 286.829612][ T9149] RSP: 002b:00007ff8f63f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 286.838044][ T9149] RAX: ffffffffffffffda RBX: 00007ff8f8415fa0 RCX: 00007ff8f819aeb9 [ 286.846029][ T9149] RDX: 0000000002000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 286.854022][ T9149] RBP: 00007ff8f63f6090 R08: 0000000000000000 R09: 0000000000000000 [ 286.862013][ T9149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 286.869998][ T9149] R13: 00007ff8f8416038 R14: 00007ff8f8415fa0 R15: 00007fffe2410ca8 [ 286.877999][ T9149] [ 286.884343][ T49] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 287.008905][ T9158] sit0: left promiscuous mode [ 287.177352][ T9164] FAULT_INJECTION: forcing a failure. [ 287.177352][ T9164] name failslab, interval 1, probability 0, space 0, times 0 [ 287.192884][ T9164] CPU: 1 PID: 9164 Comm: syz.0.1156 Not tainted syzkaller #0 [ 287.200323][ T9164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 287.210758][ T9164] Call Trace: [ 287.214063][ T9164] [ 287.217012][ T9164] dump_stack_lvl+0x18c/0x250 [ 287.221715][ T9164] ? show_regs_print_info+0x20/0x20 [ 287.226931][ T9164] ? load_image+0x400/0x400 [ 287.231456][ T9164] ? __might_sleep+0xe0/0xe0 [ 287.236068][ T9164] ? __lock_acquire+0x7d40/0x7d40 [ 287.241216][ T9164] should_fail_ex+0x39d/0x4d0 [ 287.245916][ T9164] should_failslab+0x9/0x20 [ 287.250444][ T9164] slab_pre_alloc_hook+0x59/0x310 [ 287.255487][ T9164] ? ip_options_get+0x52/0x4a0 [ 287.260265][ T9164] ? ip_options_get+0x52/0x4a0 [ 287.265057][ T9164] __kmem_cache_alloc_node+0x53/0x250 [ 287.270454][ T9164] ? ip_options_get+0x52/0x4a0 [ 287.275249][ T9164] __kmalloc+0xa4/0x230 [ 287.279509][ T9164] ip_options_get+0x52/0x4a0 [ 287.284131][ T9164] ip_cmsg_send+0x591/0xa70 [ 287.288659][ T9164] udp_sendmsg+0xc1f/0x23b0 [ 287.293213][ T9164] ? __lock_acquire+0x1347/0x7d40 [ 287.298254][ T9164] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 287.303121][ T9164] ? udp_cmsg_send+0x350/0x350 [ 287.307904][ T9164] ? __lock_acquire+0x1273/0x7d40 [ 287.312952][ T9164] ? verify_lock_unused+0x140/0x140 [ 287.318172][ T9164] ? lock_chain_count+0x20/0x20 [ 287.323050][ T9164] ? verify_lock_unused+0x140/0x140 [ 287.328290][ T9164] udpv6_sendmsg+0x790/0x2390 [ 287.333010][ T9164] ? print_unlock_imbalance_bug+0x160/0x160 [ 287.338959][ T9164] ? udp_v6_early_demux+0xf80/0xf80 [ 287.344185][ T9164] ? perf_trace_preemptirq_template+0xac/0x330 [ 287.350387][ T9164] ? lock_chain_count+0x20/0x20 [ 287.355295][ T9164] ? _local_bh_enable+0xa0/0xa0 [ 287.360200][ T9164] ? inet_send_prepare+0x1b3/0x260 [ 287.365329][ T9164] ? inet_send_prepare+0x1b3/0x260 [ 287.370461][ T9164] ? inet6_sendmsg+0x5f/0xd0 [ 287.375064][ T9164] ? inet6_compat_ioctl+0x3c0/0x3c0 [ 287.380285][ T9164] ____sys_sendmsg+0x5ba/0x960 [ 287.385077][ T9164] ? __lock_acquire+0x7d40/0x7d40 [ 287.390125][ T9164] ? __sys_sendmsg_sock+0x30/0x30 [ 287.395183][ T9164] ? __import_iovec+0x3fa/0x850 [ 287.400098][ T9164] ? import_iovec+0x73/0xa0 [ 287.404654][ T9164] ___sys_sendmsg+0x2a6/0x360 [ 287.409383][ T9164] ? get_pid_task+0x20/0x1e0 [ 287.414046][ T9164] ? __sys_sendmsg+0x2a0/0x2a0 [ 287.418859][ T9164] ? __lock_acquire+0x7d40/0x7d40 [ 287.423932][ T9164] __se_sys_sendmsg+0x1c2/0x2b0 [ 287.428820][ T9164] ? __x64_sys_sendmsg+0x80/0x80 [ 287.433797][ T9164] ? lockdep_hardirqs_on+0x98/0x150 [ 287.439022][ T9164] do_syscall_64+0x55/0xa0 [ 287.443468][ T9164] ? clear_bhb_loop+0x40/0x90 [ 287.448187][ T9164] ? clear_bhb_loop+0x40/0x90 [ 287.452883][ T9164] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 287.458797][ T9164] RIP: 0033:0x7f66fd19aeb9 [ 287.463283][ T9164] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 287.482910][ T9164] RSP: 002b:00007f66fdf82028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 287.491350][ T9164] RAX: ffffffffffffffda RBX: 00007f66fd415fa0 RCX: 00007f66fd19aeb9 [ 287.499329][ T9164] RDX: 0000000002000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 287.507307][ T9164] RBP: 00007f66fdf82090 R08: 0000000000000000 R09: 0000000000000000 [ 287.515289][ T9164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 287.523267][ T9164] R13: 00007f66fd416038 R14: 00007f66fd415fa0 R15: 00007fff36c86098 [ 287.531259][ T9164] [ 287.542308][ T9158] sit0: entered promiscuous mode [ 287.805642][ T9166] netlink: 'syz.1.1157': attribute type 4 has an invalid length. [ 287.825701][ T9166] netlink: 'syz.1.1157': attribute type 16 has an invalid length. [ 287.847052][ T9166] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1157'. [ 289.425191][ T9193] net_ratelimit: 13205 callbacks suppressed [ 289.425232][ T9193] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 289.473352][ T9193] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 289.511492][ T9193] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 289.527259][ T9193] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 289.538896][ T9193] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 289.554068][ T9193] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 289.567861][ T9193] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 289.579899][ T9193] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 289.591643][ T9193] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 289.602409][ T9193] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 289.793861][ T9202] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1167'. [ 290.259560][ T9202] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1167'. [ 290.269822][ T9207] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1167'. [ 290.427194][ T9212] FAULT_INJECTION: forcing a failure. [ 290.427194][ T9212] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 290.462877][ T9212] CPU: 0 PID: 9212 Comm: syz.3.1171 Not tainted syzkaller #0 [ 290.470324][ T9212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 290.480415][ T9212] Call Trace: [ 290.483726][ T9212] [ 290.486689][ T9212] dump_stack_lvl+0x18c/0x250 [ 290.491413][ T9212] ? show_regs_print_info+0x20/0x20 [ 290.496650][ T9212] ? load_image+0x400/0x400 [ 290.501227][ T9212] ? __lock_acquire+0x7d40/0x7d40 [ 290.506308][ T9212] should_fail_ex+0x39d/0x4d0 [ 290.511041][ T9212] _copy_from_user+0x2f/0xe0 [ 290.515667][ T9212] __copy_msghdr+0x3bb/0x580 [ 290.520364][ T9212] ___sys_sendmsg+0x214/0x360 [ 290.525082][ T9212] ? __sys_sendmsg+0x2a0/0x2a0 [ 290.529875][ T9212] ? trace_call_bpf+0xc3/0x6c0 [ 290.534679][ T9212] __se_sys_sendmsg+0x1c2/0x2b0 [ 290.539556][ T9212] ? __x64_sys_sendmsg+0x80/0x80 [ 290.544507][ T9212] ? lockdep_hardirqs_on+0x98/0x150 [ 290.549729][ T9212] do_syscall_64+0x55/0xa0 [ 290.554263][ T9212] ? clear_bhb_loop+0x40/0x90 [ 290.558973][ T9212] ? clear_bhb_loop+0x40/0x90 [ 290.563657][ T9212] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 290.569560][ T9212] RIP: 0033:0x7f704659aeb9 [ 290.573993][ T9212] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 290.593626][ T9212] RSP: 002b:00007f70473ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 290.602095][ T9212] RAX: ffffffffffffffda RBX: 00007f7046815fa0 RCX: 00007f704659aeb9 [ 290.610109][ T9212] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000003 [ 290.618116][ T9212] RBP: 00007f70473ee090 R08: 0000000000000000 R09: 0000000000000000 [ 290.626150][ T9212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 290.634159][ T9212] R13: 00007f7046816038 R14: 00007f7046815fa0 R15: 00007ffcbb5511e8 [ 290.642183][ T9212] [ 290.665141][ T9214] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.1172'. [ 293.895161][ T9225] netlink: 'syz.0.1175': attribute type 21 has an invalid length. [ 293.918033][ T9225] netlink: 16162 bytes leftover after parsing attributes in process `syz.0.1175'. [ 294.445178][ T9243] net_ratelimit: 32590 callbacks suppressed [ 294.445214][ T9243] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 294.491578][ T9243] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 294.514405][ T9243] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 294.551776][ T9243] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 294.578156][ T9243] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 294.599040][ T9243] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 294.626484][ T9243] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 294.662761][ T9243] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 294.665947][ T9250] netlink: 'syz.0.1183': attribute type 12 has an invalid length. [ 294.708780][ T9250] netlink: 197276 bytes leftover after parsing attributes in process `syz.0.1183'. [ 294.713990][ T9243] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 294.803400][ T9243] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 294.895520][ T9257] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1181'. [ 294.917121][ T9254] netlink: 'syz.0.1183': attribute type 9 has an invalid length. [ 294.953362][ T9254] netlink: 399 bytes leftover after parsing attributes in process `syz.0.1183'. [ 297.809450][ T9262] sit0: left promiscuous mode [ 297.882788][ T9265] sit0: entered promiscuous mode [ 298.154157][ T9273] FAULT_INJECTION: forcing a failure. [ 298.154157][ T9273] name failslab, interval 1, probability 0, space 0, times 0 [ 298.182854][ T9273] CPU: 0 PID: 9273 Comm: syz.3.1187 Not tainted syzkaller #0 [ 298.190281][ T9273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 298.200369][ T9273] Call Trace: [ 298.203683][ T9273] [ 298.206645][ T9273] dump_stack_lvl+0x18c/0x250 [ 298.211368][ T9273] ? show_regs_print_info+0x20/0x20 [ 298.216607][ T9273] ? load_image+0x400/0x400 [ 298.221144][ T9273] ? __might_sleep+0xe0/0xe0 [ 298.225801][ T9273] ? __lock_acquire+0x7d40/0x7d40 [ 298.230854][ T9273] ? __lock_acquire+0x1273/0x7d40 [ 298.235897][ T9273] should_fail_ex+0x39d/0x4d0 [ 298.240580][ T9273] should_failslab+0x9/0x20 [ 298.245091][ T9273] slab_pre_alloc_hook+0x59/0x310 [ 298.250127][ T9273] ? ip_options_get+0x52/0x4a0 [ 298.254900][ T9273] ? ip_options_get+0x52/0x4a0 [ 298.259668][ T9273] __kmem_cache_alloc_node+0x53/0x250 [ 298.265047][ T9273] ? ip_options_get+0x52/0x4a0 [ 298.269815][ T9273] __kmalloc+0xa4/0x230 [ 298.273978][ T9273] ip_options_get+0x52/0x4a0 [ 298.278594][ T9273] ip_cmsg_send+0x591/0xa70 [ 298.283123][ T9273] udp_sendmsg+0xc1f/0x23b0 [ 298.287653][ T9273] ? __lock_acquire+0x1347/0x7d40 [ 298.292695][ T9273] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 298.297569][ T9273] ? udp_cmsg_send+0x350/0x350 [ 298.302345][ T9273] ? __lock_acquire+0x1273/0x7d40 [ 298.307438][ T9273] ? verify_lock_unused+0x140/0x140 [ 298.312672][ T9273] ? lock_chain_count+0x20/0x20 [ 298.317556][ T9273] ? verify_lock_unused+0x140/0x140 [ 298.322781][ T9273] udpv6_sendmsg+0x790/0x2390 [ 298.327485][ T9273] ? print_unlock_imbalance_bug+0x160/0x160 [ 298.333409][ T9273] ? udp_v6_early_demux+0xf80/0xf80 [ 298.338633][ T9273] ? perf_trace_preemptirq_template+0xac/0x330 [ 298.344810][ T9273] ? lock_chain_count+0x20/0x20 [ 298.349680][ T9273] ? _local_bh_enable+0xa0/0xa0 [ 298.354553][ T9273] ? inet_send_prepare+0x1b3/0x260 [ 298.359690][ T9273] ? inet_send_prepare+0x1b3/0x260 [ 298.364819][ T9273] ? inet6_sendmsg+0x5f/0xd0 [ 298.369445][ T9273] ? inet6_compat_ioctl+0x3c0/0x3c0 [ 298.374677][ T9273] ____sys_sendmsg+0x5ba/0x960 [ 298.379474][ T9273] ? __lock_acquire+0x7d40/0x7d40 [ 298.384521][ T9273] ? __sys_sendmsg_sock+0x30/0x30 [ 298.389584][ T9273] ? __import_iovec+0x3fa/0x850 [ 298.394469][ T9273] ? import_iovec+0x73/0xa0 [ 298.399002][ T9273] ___sys_sendmsg+0x2a6/0x360 [ 298.403694][ T9273] ? get_pid_task+0x20/0x1e0 [ 298.408311][ T9273] ? __sys_sendmsg+0x2a0/0x2a0 [ 298.413117][ T9273] ? __lock_acquire+0x7d40/0x7d40 [ 298.418185][ T9273] __se_sys_sendmsg+0x1c2/0x2b0 [ 298.423052][ T9273] ? __x64_sys_sendmsg+0x80/0x80 [ 298.428013][ T9273] ? lockdep_hardirqs_on+0x98/0x150 [ 298.433250][ T9273] do_syscall_64+0x55/0xa0 [ 298.437694][ T9273] ? clear_bhb_loop+0x40/0x90 [ 298.442378][ T9273] ? clear_bhb_loop+0x40/0x90 [ 298.447085][ T9273] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 298.452994][ T9273] RIP: 0033:0x7f704659aeb9 [ 298.457420][ T9273] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 298.477035][ T9273] RSP: 002b:00007f70473ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 298.485458][ T9273] RAX: ffffffffffffffda RBX: 00007f7046815fa0 RCX: 00007f704659aeb9 [ 298.493447][ T9273] RDX: 0000000002000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 298.501446][ T9273] RBP: 00007f70473ee090 R08: 0000000000000000 R09: 0000000000000000 [ 298.509440][ T9273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 298.517422][ T9273] R13: 00007f7046816038 R14: 00007f7046815fa0 R15: 00007ffcbb5511e8 [ 298.525416][ T9273] [ 298.552145][ T9275] netlink: 'syz.1.1188': attribute type 46 has an invalid length. [ 298.560685][ T9275] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1188'. [ 299.280198][ T9294] netlink: 209820 bytes leftover after parsing attributes in process `syz.3.1194'. [ 299.581216][ T9304] netlink: 'syz.2.1198': attribute type 9 has an invalid length. [ 299.589666][ T9304] FAULT_INJECTION: forcing a failure. [ 299.589666][ T9304] name failslab, interval 1, probability 0, space 0, times 0 [ 299.608602][ T9302] net_ratelimit: 32389 callbacks suppressed [ 299.608680][ T9302] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 299.630617][ T9302] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 299.642483][ T9302] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 299.651168][ T9304] CPU: 1 PID: 9304 Comm: syz.2.1198 Not tainted syzkaller #0 [ 299.659668][ T9304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 299.669729][ T9304] Call Trace: [ 299.673017][ T9304] [ 299.675958][ T9304] dump_stack_lvl+0x18c/0x250 [ 299.680661][ T9304] ? show_regs_print_info+0x20/0x20 [ 299.685888][ T9304] ? load_image+0x400/0x400 [ 299.690431][ T9304] ? verify_lock_unused+0x140/0x140 [ 299.695673][ T9304] should_fail_ex+0x39d/0x4d0 [ 299.700378][ T9304] should_failslab+0x9/0x20 [ 299.704919][ T9304] slab_pre_alloc_hook+0x59/0x310 [ 299.709970][ T9304] kmem_cache_alloc+0x5a/0x2d0 [ 299.714756][ T9304] ? skb_clone+0x1eb/0x370 [ 299.719206][ T9304] skb_clone+0x1eb/0x370 [ 299.723481][ T9304] __netlink_deliver_tap+0x41c/0x830 [ 299.728812][ T9304] ? netlink_deliver_tap+0x2e/0x1b0 [ 299.734039][ T9304] netlink_deliver_tap+0x19c/0x1b0 [ 299.739177][ T9304] __netlink_sendskb+0x4b/0x90 [ 299.743975][ T9304] netlink_dump+0xa75/0xe50 [ 299.748509][ T9304] ? netlink_lookup+0x200/0x200 [ 299.753400][ T9304] ? netlink_autobind+0x300/0x300 [ 299.758468][ T9304] ? netlink_lookup+0x30/0x200 [ 299.763270][ T9304] ? netlink_lookup+0x30/0x200 [ 299.768085][ T9304] __netlink_dump_start+0x5f1/0x810 [ 299.773316][ T9304] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 299.778450][ T9304] rtnetlink_rcv_msg+0xe1d/0xfa0 [ 299.783407][ T9304] ? neigh_get+0xd80/0xd80 [ 299.787846][ T9304] ? rtnetlink_bind+0x80/0x80 [ 299.792540][ T9304] ? perf_trace_preemptirq_template+0x269/0x330 [ 299.798820][ T9304] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 299.804824][ T9304] ? lock_chain_count+0x20/0x20 [ 299.809687][ T9304] ? __local_bh_enable_ip+0x13a/0x1c0 [ 299.815084][ T9304] ? lockdep_hardirqs_on+0x98/0x150 [ 299.820302][ T9304] ? __local_bh_enable_ip+0x13a/0x1c0 [ 299.825691][ T9304] ? _local_bh_enable+0xa0/0xa0 [ 299.830560][ T9304] ? __dev_queue_xmit+0x26b/0x36b0 [ 299.835692][ T9304] ? __dev_queue_xmit+0x26b/0x36b0 [ 299.840819][ T9304] ? __dev_queue_xmit+0x124f/0x36b0 [ 299.846034][ T9304] ? __dev_queue_xmit+0x26b/0x36b0 [ 299.851189][ T9304] ? neigh_get+0xd80/0xd80 [ 299.855636][ T9304] ? ref_tracker_free+0x690/0x840 [ 299.860688][ T9304] netlink_rcv_skb+0x241/0x4d0 [ 299.865496][ T9304] ? rtnetlink_bind+0x80/0x80 [ 299.870207][ T9304] ? netlink_ack+0x1180/0x1180 [ 299.875020][ T9304] ? __lock_acquire+0x7d40/0x7d40 [ 299.880094][ T9304] ? netlink_deliver_tap+0x2e/0x1b0 [ 299.885323][ T9304] netlink_unicast+0x751/0x8d0 [ 299.890113][ T9304] netlink_sendmsg+0x8d0/0xbf0 [ 299.894915][ T9304] ? netlink_getsockopt+0x590/0x590 [ 299.900148][ T9304] ? aa_sock_msg_perm+0x94/0x150 [ 299.905106][ T9304] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 299.910404][ T9304] ? security_socket_sendmsg+0x80/0xa0 [ 299.915890][ T9304] ? netlink_getsockopt+0x590/0x590 [ 299.921132][ T9304] ____sys_sendmsg+0x5ba/0x960 [ 299.925933][ T9304] ? __asan_memset+0x22/0x40 [ 299.930557][ T9304] ? __sys_sendmsg_sock+0x30/0x30 [ 299.935602][ T9304] ? __import_iovec+0x5f2/0x850 [ 299.940483][ T9304] ? import_iovec+0x73/0xa0 [ 299.945012][ T9304] ___sys_sendmsg+0x2a6/0x360 [ 299.949711][ T9304] ? __sys_sendmsg+0x2a0/0x2a0 [ 299.954518][ T9304] ? trace_call_bpf+0xc3/0x6c0 [ 299.959345][ T9304] __se_sys_sendmsg+0x1c2/0x2b0 [ 299.964226][ T9304] ? __x64_sys_sendmsg+0x80/0x80 [ 299.969199][ T9304] ? lockdep_hardirqs_on+0x98/0x150 [ 299.974421][ T9304] do_syscall_64+0x55/0xa0 [ 299.978859][ T9304] ? clear_bhb_loop+0x40/0x90 [ 299.983571][ T9304] ? clear_bhb_loop+0x40/0x90 [ 299.988290][ T9304] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 299.994210][ T9304] RIP: 0033:0x7ff8f819aeb9 [ 299.998647][ T9304] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 300.018266][ T9304] RSP: 002b:00007ff8f63f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 300.026695][ T9304] RAX: ffffffffffffffda RBX: 00007ff8f8415fa0 RCX: 00007ff8f819aeb9 [ 300.034700][ T9304] RDX: 0000000024000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 300.042702][ T9304] RBP: 00007ff8f63f6090 R08: 0000000000000000 R09: 0000000000000000 [ 300.050693][ T9304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 300.058679][ T9304] R13: 00007ff8f8416038 R14: 00007ff8f8415fa0 R15: 00007fffe2410ca8 [ 300.066694][ T9304] [ 300.073901][ T9302] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 300.085508][ T9302] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 300.098347][ T9302] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 300.146220][ T9302] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 300.171720][ T9302] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 300.203870][ T5780] Bluetooth: hci0: unexpected event 0x1d length: 15 > 5 [ 300.235079][ T9302] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 300.265484][ T9302] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 302.677477][ T9314] FAULT_INJECTION: forcing a failure. [ 302.677477][ T9314] name failslab, interval 1, probability 0, space 0, times 0 [ 302.712844][ T9314] CPU: 1 PID: 9314 Comm: syz.2.1201 Not tainted syzkaller #0 [ 302.720288][ T9314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 302.730379][ T9314] Call Trace: [ 302.733691][ T9314] [ 302.736649][ T9314] dump_stack_lvl+0x18c/0x250 [ 302.741363][ T9314] ? show_regs_print_info+0x20/0x20 [ 302.746602][ T9314] ? load_image+0x400/0x400 [ 302.751156][ T9314] ? perf_trace_lock_acquire+0x104/0x410 [ 302.756828][ T9314] ? verify_lock_unused+0x140/0x140 [ 302.762055][ T9314] ? perf_trace_lock_acquire+0x104/0x410 [ 302.767742][ T9314] should_fail_ex+0x39d/0x4d0 [ 302.772465][ T9314] should_failslab+0x9/0x20 [ 302.777018][ T9314] slab_pre_alloc_hook+0x59/0x310 [ 302.782102][ T9314] kmem_cache_alloc+0x5a/0x2d0 [ 302.786904][ T9314] ? skb_clone+0x1eb/0x370 [ 302.791391][ T9314] skb_clone+0x1eb/0x370 [ 302.795685][ T9314] __netlink_deliver_tap+0x41c/0x830 [ 302.801021][ T9314] ? netlink_deliver_tap+0x2e/0x1b0 [ 302.806270][ T9314] netlink_deliver_tap+0x19c/0x1b0 [ 302.811438][ T9314] netlink_unicast+0x72c/0x8d0 [ 302.816259][ T9314] netlink_sendmsg+0x8d0/0xbf0 [ 302.821089][ T9314] ? netlink_getsockopt+0x590/0x590 [ 302.826315][ T9314] ? aa_sock_msg_perm+0x94/0x150 [ 302.831269][ T9314] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 302.836566][ T9314] ? security_socket_sendmsg+0x80/0xa0 [ 302.842038][ T9314] ? netlink_getsockopt+0x590/0x590 [ 302.847358][ T9314] ____sys_sendmsg+0x5ba/0x960 [ 302.852169][ T9314] ? __asan_memset+0x22/0x40 [ 302.856773][ T9314] ? __sys_sendmsg_sock+0x30/0x30 [ 302.861816][ T9314] ? __import_iovec+0x5f2/0x850 [ 302.866698][ T9314] ? import_iovec+0x73/0xa0 [ 302.871242][ T9314] ___sys_sendmsg+0x2a6/0x360 [ 302.875938][ T9314] ? get_pid_task+0x20/0x1e0 [ 302.880553][ T9314] ? __sys_sendmsg+0x2a0/0x2a0 [ 302.885340][ T9314] ? __lock_acquire+0x7d40/0x7d40 [ 302.890400][ T9314] __se_sys_sendmsg+0x1c2/0x2b0 [ 302.895272][ T9314] ? __x64_sys_sendmsg+0x80/0x80 [ 302.900320][ T9314] ? lockdep_hardirqs_on+0x98/0x150 [ 302.905537][ T9314] do_syscall_64+0x55/0xa0 [ 302.909970][ T9314] ? clear_bhb_loop+0x40/0x90 [ 302.914677][ T9314] ? clear_bhb_loop+0x40/0x90 [ 302.919382][ T9314] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 302.925285][ T9314] RIP: 0033:0x7ff8f819aeb9 [ 302.929732][ T9314] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 302.949361][ T9314] RSP: 002b:00007ff8f63f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 302.957793][ T9314] RAX: ffffffffffffffda RBX: 00007ff8f8415fa0 RCX: 00007ff8f819aeb9 [ 302.965783][ T9314] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 302.973787][ T9314] RBP: 00007ff8f63f6090 R08: 0000000000000000 R09: 0000000000000000 [ 302.981780][ T9314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 302.989769][ T9314] R13: 00007ff8f8416038 R14: 00007ff8f8415fa0 R15: 00007fffe2410ca8 [ 302.997797][ T9314] [ 303.018782][ T9316] netlink: 'syz.0.1202': attribute type 9 has an invalid length. [ 303.222376][ T9323] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1205'. [ 303.606897][ T9318] syzkaller0: entered promiscuous mode [ 303.616322][ T9318] syzkaller0: entered allmulticast mode [ 303.638652][ T9319] netlink: 'syz.1.1203': attribute type 30 has an invalid length. [ 303.672113][ T9323] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1205'. [ 303.684308][ T9325] sit0: left promiscuous mode [ 305.282902][ T9331] sit0: entered promiscuous mode [ 305.310447][ T9337] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.1207'. [ 305.337807][ T9326] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1205'. [ 305.594534][ T9347] netlink: 209820 bytes leftover after parsing attributes in process `syz.2.1209'. [ 306.567175][ T9358] net_ratelimit: 25067 callbacks suppressed [ 306.567213][ T9358] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 306.702911][ T9358] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 306.729287][ T9358] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 306.790098][ T9358] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 306.801857][ T9358] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 306.817335][ T9358] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 306.828771][ T9358] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 306.875797][ T9358] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 306.942936][ T9358] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 306.999520][ T9358] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 309.734292][ T9372] FAULT_INJECTION: forcing a failure. [ 309.734292][ T9372] name failslab, interval 1, probability 0, space 0, times 0 [ 309.765101][ T9372] CPU: 0 PID: 9372 Comm: syz.3.1214 Not tainted syzkaller #0 [ 309.772568][ T9372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 309.782692][ T9372] Call Trace: [ 309.786012][ T9372] [ 309.788984][ T9372] dump_stack_lvl+0x18c/0x250 [ 309.793725][ T9372] ? show_regs_print_info+0x20/0x20 [ 309.798984][ T9372] ? load_image+0x400/0x400 [ 309.803574][ T9372] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 309.809612][ T9372] ? __asan_memset+0x22/0x40 [ 309.814252][ T9372] should_fail_ex+0x39d/0x4d0 [ 309.818985][ T9372] should_failslab+0x9/0x20 [ 309.823600][ T9372] slab_pre_alloc_hook+0x59/0x310 [ 309.828688][ T9372] ? __debug_object_init+0xec/0x450 [ 309.833931][ T9372] kmem_cache_alloc+0x5a/0x2d0 [ 309.838728][ T9372] ? slab_build_skb+0x2b/0x3f0 [ 309.843580][ T9372] slab_build_skb+0x2b/0x3f0 [ 309.848235][ T9372] bpf_prog_test_run_skb+0x3c8/0x12b0 [ 309.853648][ T9372] ? __fget_files+0x28/0x4b0 [ 309.858268][ T9372] ? __fget_files+0x28/0x4b0 [ 309.862904][ T9372] ? __fget_files+0x43d/0x4b0 [ 309.867601][ T9372] ? cpu_online+0x60/0x60 [ 309.871952][ T9372] bpf_prog_test_run+0x321/0x390 [ 309.877171][ T9372] __sys_bpf+0x49d/0x890 [ 309.881446][ T9372] ? bpf_link_show_fdinfo+0x390/0x390 [ 309.886852][ T9372] ? lock_chain_count+0x20/0x20 [ 309.891769][ T9372] __x64_sys_bpf+0x7c/0x90 [ 309.896218][ T9372] do_syscall_64+0x55/0xa0 [ 309.900674][ T9372] ? clear_bhb_loop+0x40/0x90 [ 309.905372][ T9372] ? clear_bhb_loop+0x40/0x90 [ 309.910067][ T9372] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 309.915974][ T9372] RIP: 0033:0x7f704659aeb9 [ 309.920405][ T9372] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 309.940028][ T9372] RSP: 002b:00007f70473ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 309.948561][ T9372] RAX: ffffffffffffffda RBX: 00007f7046815fa0 RCX: 00007f704659aeb9 [ 309.956557][ T9372] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 309.964652][ T9372] RBP: 00007f70473ee090 R08: 0000000000000000 R09: 0000000000000000 [ 309.972654][ T9372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 309.980660][ T9372] R13: 00007f7046816038 R14: 00007f7046815fa0 R15: 00007ffcbb5511e8 [ 309.988678][ T9372] [ 310.008032][ T9371] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 310.020200][ T9374] FAULT_INJECTION: forcing a failure. [ 310.020200][ T9374] name failslab, interval 1, probability 0, space 0, times 0 [ 310.032863][ T9374] CPU: 1 PID: 9374 Comm: syz.2.1215 Not tainted syzkaller #0 [ 310.040249][ T9374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 310.050330][ T9374] Call Trace: [ 310.053640][ T9374] [ 310.056608][ T9374] dump_stack_lvl+0x18c/0x250 [ 310.061319][ T9374] ? show_regs_print_info+0x20/0x20 [ 310.066554][ T9374] ? load_image+0x400/0x400 [ 310.071095][ T9374] ? netdev_core_pick_tx+0x340/0x340 [ 310.076444][ T9374] should_fail_ex+0x39d/0x4d0 [ 310.081184][ T9374] should_failslab+0x9/0x20 [ 310.085728][ T9374] slab_pre_alloc_hook+0x59/0x310 [ 310.090794][ T9374] kmem_cache_alloc+0x5a/0x2d0 [ 310.095600][ T9374] ? skb_clone+0x1eb/0x370 [ 310.100054][ T9374] skb_clone+0x1eb/0x370 [ 310.104353][ T9374] bpf_clone_redirect+0x167/0x4a0 [ 310.109432][ T9374] bpf_prog_0603bb54b9d884a9+0x5e/0x63 [ 310.114931][ T9374] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 310.120973][ T9374] ? perf_trace_preemptirq_template+0xac/0x330 [ 310.127163][ T9374] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 310.133163][ T9374] ? lockdep_softirqs_on+0x580/0x580 [ 310.138479][ T9374] ? lock_chain_count+0x20/0x20 [ 310.143356][ T9374] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 310.149631][ T9374] ? __local_bh_disable_ip+0x108/0x1a0 [ 310.155113][ T9374] ? __cant_sleep+0x220/0x220 [ 310.159818][ T9374] ? __local_bh_enable_ip+0x13a/0x1c0 [ 310.165254][ T9374] ? _local_bh_enable+0xa0/0xa0 [ 310.170162][ T9374] ? bpf_test_timer_continue+0x135/0x380 [ 310.175811][ T9374] ? bpf_test_run+0x174/0x870 [ 310.180501][ T9374] bpf_test_run+0x2df/0x870 [ 310.185021][ T9374] ? bpf_test_run+0x174/0x870 [ 310.189718][ T9374] ? convert___skb_to_skb+0x590/0x590 [ 310.195108][ T9374] ? eth_get_headlen+0x210/0x210 [ 310.200077][ T9374] ? slab_build_skb+0x25f/0x3f0 [ 310.204955][ T9374] ? convert___skb_to_skb+0x3d/0x590 [ 310.210255][ T9374] bpf_prog_test_run_skb+0xad2/0x12b0 [ 310.215647][ T9374] ? cpu_online+0x60/0x60 [ 310.219991][ T9374] bpf_prog_test_run+0x321/0x390 [ 310.224949][ T9374] __sys_bpf+0x49d/0x890 [ 310.229205][ T9374] ? bpf_link_show_fdinfo+0x390/0x390 [ 310.234620][ T9374] ? lock_chain_count+0x20/0x20 [ 310.239511][ T9374] __x64_sys_bpf+0x7c/0x90 [ 310.243947][ T9374] do_syscall_64+0x55/0xa0 [ 310.248390][ T9374] ? clear_bhb_loop+0x40/0x90 [ 310.253103][ T9374] ? clear_bhb_loop+0x40/0x90 [ 310.257792][ T9374] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 310.263707][ T9374] RIP: 0033:0x7ff8f819aeb9 [ 310.268589][ T9374] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 310.288341][ T9374] RSP: 002b:00007ff8f63f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 310.296804][ T9374] RAX: ffffffffffffffda RBX: 00007ff8f8415fa0 RCX: 00007ff8f819aeb9 [ 310.304801][ T9374] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 310.312809][ T9374] RBP: 00007ff8f63f6090 R08: 0000000000000000 R09: 0000000000000000 [ 310.320791][ T9374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 310.328786][ T9374] R13: 00007ff8f8416038 R14: 00007ff8f8415fa0 R15: 00007fffe2410ca8 [ 310.336789][ T9374] [ 310.598034][ T9381] netlink: 'syz.3.1218': attribute type 2 has an invalid length. [ 310.653044][ T9381] netlink: 'syz.3.1218': attribute type 1 has an invalid length. [ 310.679527][ T9381] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.1218'. [ 313.122536][ T9386] sit0: left promiscuous mode [ 313.150182][ T9376] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 313.205724][ T9388] netlink: 'syz.2.1221': attribute type 21 has an invalid length. [ 313.226766][ T9388] netlink: 'syz.2.1221': attribute type 12 has an invalid length. [ 313.242774][ T9388] netlink: 'syz.2.1221': attribute type 13 has an invalid length. [ 313.250636][ T9388] netlink: 'syz.2.1221': attribute type 14 has an invalid length. [ 313.270756][ T9388] netlink: 'syz.2.1221': attribute type 15 has an invalid length. [ 313.280045][ T9388] netlink: 'syz.2.1221': attribute type 16 has an invalid length. [ 313.292789][ T9388] netlink: 12914 bytes leftover after parsing attributes in process `syz.2.1221'. [ 313.307821][ T9391] netlink: 'syz.2.1221': attribute type 10 has an invalid length. [ 313.341996][ T9391] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.352171][ T9391] bridge_slave_1: left allmulticast mode [ 313.368552][ T9391] bridge_slave_1: left promiscuous mode [ 313.375220][ T9391] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.408248][ T9391] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 313.447046][ T9394] sit0: entered promiscuous mode [ 313.674837][ T9408] netlink: 209820 bytes leftover after parsing attributes in process `syz.0.1225'. [ 314.135830][ T9413] net_ratelimit: 1575 callbacks suppressed [ 314.135898][ T9413] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 314.155199][ T9413] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 314.172387][ T9413] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 314.196647][ T9413] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 314.218564][ T9413] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 314.237450][ T9413] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 314.255435][ T9413] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 314.272511][ T9413] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 314.284706][ T9413] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 314.296466][ T9413] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 317.369344][ T9493] pim6reg1: entered promiscuous mode [ 317.375306][ T9493] pim6reg1: entered allmulticast mode [ 317.379951][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.389764][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.399548][ T9494] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1231'. [ 317.811475][ T9505] sit0: left promiscuous mode [ 319.142904][ T9509] net_ratelimit: 13161 callbacks suppressed [ 319.142932][ T9509] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 319.161127][ T9509] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 319.172522][ T9509] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 319.184385][ T9509] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 319.195189][ T9509] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 319.206336][ T9509] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 319.216406][ T9509] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 319.226806][ T9509] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 319.237574][ T9509] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 319.247925][ T9432] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 319.249978][ T9509] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 321.008420][ T9507] sit0: entered promiscuous mode [ 321.303721][ T9524] netlink: 209820 bytes leftover after parsing attributes in process `syz.1.1240'. [ 322.788017][ T9548] netlink: 'syz.0.1247': attribute type 10 has an invalid length. [ 322.812818][ T9548] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.1247'. [ 323.052830][ T9555] sit0: left promiscuous mode [ 323.305368][ T9559] sit0: entered promiscuous mode [ 324.152732][ T9573] net_ratelimit: 8436 callbacks suppressed [ 324.152779][ T9573] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 324.178611][ T9573] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 324.189926][ T9573] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 324.204914][ T9573] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 324.227989][ T9573] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 324.240160][ T9573] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 324.367396][ T9573] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 324.453468][ T9573] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 324.464809][ T9573] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 324.475457][ T9573] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 327.366257][ T9589] netlink: 'syz.1.1258': attribute type 10 has an invalid length. [ 327.405024][ T9589] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.1258'. [ 329.003872][ T9609] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1264'. [ 329.162895][ T9606] net_ratelimit: 15226 callbacks suppressed [ 329.162950][ T9606] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 329.196530][ T9606] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 329.223887][ T9606] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 329.234789][ T9606] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 329.253175][ T9606] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 329.273712][ T9606] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 329.284243][ T9606] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 329.298276][ T9606] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 329.312860][ T9606] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 329.328304][ T9606] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 334.172706][ T9621] net_ratelimit: 18679 callbacks suppressed [ 334.172745][ T9621] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 334.189769][ T9621] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 334.200308][ T9621] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 334.210878][ T9621] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 334.221228][ T9621] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 334.232754][ T9621] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 334.244652][ T9621] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 334.255138][ T9621] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 334.265445][ T9621] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 334.275777][ T9621] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 336.002560][ T9640] netlink: 'syz.1.1275': attribute type 10 has an invalid length. [ 336.012726][ T9640] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1275'. [ 336.021773][ T9640] dummy0: entered promiscuous mode [ 336.032391][ T9640] dummy0: entered allmulticast mode [ 336.039006][ T9640] bridge0: port 3(dummy0) entered blocking state [ 336.063099][ T9640] bridge0: port 3(dummy0) entered disabled state [ 336.085033][ T9640] bridge0: port 3(dummy0) entered blocking state [ 336.091542][ T9640] bridge0: port 3(dummy0) entered forwarding state [ 336.184382][ T9647] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1278'. [ 336.199260][ T9648] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1277'. [ 336.225850][ T9648] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1277'. [ 336.239937][ T9649] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1276'. [ 336.250285][ T9644] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1276'. [ 336.283478][ T9650] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1277'. [ 337.704020][ T9672] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.1288'. [ 337.835039][ T9674] FAULT_INJECTION: forcing a failure. [ 337.835039][ T9674] name failslab, interval 1, probability 0, space 0, times 0 [ 337.874083][ T9674] CPU: 1 PID: 9674 Comm: syz.1.1289 Not tainted syzkaller #0 [ 337.881545][ T9674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 337.891670][ T9674] Call Trace: [ 337.894987][ T9674] [ 337.897969][ T9674] dump_stack_lvl+0x18c/0x250 [ 337.902715][ T9674] ? show_regs_print_info+0x20/0x20 [ 337.907961][ T9674] ? load_image+0x400/0x400 [ 337.912507][ T9674] ? __might_sleep+0xe0/0xe0 [ 337.917129][ T9674] ? __lock_acquire+0x7d40/0x7d40 [ 337.922190][ T9674] should_fail_ex+0x39d/0x4d0 [ 337.926900][ T9674] should_failslab+0x9/0x20 [ 337.931433][ T9674] slab_pre_alloc_hook+0x59/0x310 [ 337.936513][ T9674] kmem_cache_alloc+0x5a/0x2d0 [ 337.941299][ T9674] ? security_inode_alloc+0x34/0x110 [ 337.946617][ T9674] security_inode_alloc+0x34/0x110 [ 337.951768][ T9674] inode_init_always+0x8fc/0xc90 [ 337.956762][ T9674] new_inode_pseudo+0x95/0x1d0 [ 337.961554][ T9674] __sock_create+0x12d/0x940 [ 337.966185][ T9674] mptcp_subflow_create_socket+0x10b/0xac0 [ 337.972034][ T9674] ? __mptcp_subflow_connect+0x1450/0x1450 [ 337.977869][ T9674] ? mark_lock+0x94/0x320 [ 337.982229][ T9674] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 337.988315][ T9674] __mptcp_nmpc_sk+0x157/0x740 [ 337.993151][ T9674] ? __bpf_trace_subflow_check_data_avail+0x160/0x160 [ 338.000022][ T9674] ? __local_bh_enable_ip+0x13a/0x1c0 [ 338.005431][ T9674] ? lockdep_hardirqs_on+0x98/0x150 [ 338.010704][ T9674] ? __local_bh_enable_ip+0x13a/0x1c0 [ 338.016110][ T9674] mptcp_sendmsg_fastopen+0x7f/0x4d0 [ 338.021434][ T9674] mptcp_sendmsg+0x14b2/0x16d0 [ 338.026225][ T9674] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 338.032002][ T9674] ? aa_sk_perm+0x83c/0x970 [ 338.036568][ T9674] ? aa_af_perm+0x330/0x330 [ 338.041108][ T9674] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 338.047545][ T9674] ? mptcp_shutdown+0x80/0x80 [ 338.052289][ T9674] ? inet6_sendmsg+0x5f/0xd0 [ 338.056902][ T9674] ? inet6_compat_ioctl+0x3c0/0x3c0 [ 338.062138][ T9674] ____sys_sendmsg+0x5ba/0x960 [ 338.066977][ T9674] ? __lock_acquire+0x7d40/0x7d40 [ 338.072032][ T9674] ? __asan_memset+0x22/0x40 [ 338.076655][ T9674] ? __sys_sendmsg_sock+0x30/0x30 [ 338.081709][ T9674] ? __import_iovec+0x3fa/0x850 [ 338.086608][ T9674] ? import_iovec+0x73/0xa0 [ 338.091165][ T9674] ___sys_sendmsg+0x2a6/0x360 [ 338.095869][ T9674] ? __sys_sendmsg+0x2a0/0x2a0 [ 338.100683][ T9674] ? __lock_acquire+0x7d40/0x7d40 [ 338.105767][ T9674] __se_sys_sendmsg+0x1c2/0x2b0 [ 338.110660][ T9674] ? __x64_sys_sendmsg+0x80/0x80 [ 338.115663][ T9674] ? lockdep_hardirqs_on+0x98/0x150 [ 338.120891][ T9674] do_syscall_64+0x55/0xa0 [ 338.125346][ T9674] ? clear_bhb_loop+0x40/0x90 [ 338.130044][ T9674] ? clear_bhb_loop+0x40/0x90 [ 338.134764][ T9674] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 338.140685][ T9674] RIP: 0033:0x7f991759aeb9 [ 338.145125][ T9674] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 338.164802][ T9674] RSP: 002b:00007f99184ae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 338.173256][ T9674] RAX: ffffffffffffffda RBX: 00007f9917815fa0 RCX: 00007f991759aeb9 [ 338.181283][ T9674] RDX: 00000000240428f8 RSI: 00002000000001c0 RDI: 0000000000000005 [ 338.189286][ T9674] RBP: 00007f99184ae090 R08: 0000000000000000 R09: 0000000000000000 [ 338.197289][ T9674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 338.205297][ T9674] R13: 00007f9917816038 R14: 00007f9917815fa0 R15: 00007ffc84ccb398 [ 338.213315][ T9674] [ 338.933947][ T9699] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1299'. [ 338.947192][ T9699] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1299'. [ 339.183018][ T9689] net_ratelimit: 11857 callbacks suppressed [ 339.183052][ T9689] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 339.199934][ T9695] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 339.210515][ T9695] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 339.221252][ T9689] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 339.231917][ T9695] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 339.242308][ T9689] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 339.254782][ T9695] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 339.265451][ T9689] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 339.276891][ T9695] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 339.287369][ T9689] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 342.159493][ T9723] __nla_validate_parse: 2 callbacks suppressed [ 342.159509][ T9723] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1306'. [ 342.264979][ T9723] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.1306'. [ 342.442778][ T9726] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1305'. [ 342.506364][ T9732] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1308'. [ 342.934452][ T9742] sit0: left promiscuous mode [ 343.171017][ T9743] sit0: entered promiscuous mode [ 343.340043][ T9749] FAULT_INJECTION: forcing a failure. [ 343.340043][ T9749] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 343.375311][ T9749] CPU: 1 PID: 9749 Comm: syz.3.1313 Not tainted syzkaller #0 [ 343.382769][ T9749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 343.392849][ T9749] Call Trace: [ 343.396183][ T9749] [ 343.399147][ T9749] dump_stack_lvl+0x18c/0x250 [ 343.403874][ T9749] ? show_regs_print_info+0x20/0x20 [ 343.409122][ T9749] ? load_image+0x400/0x400 [ 343.413670][ T9749] ? __might_fault+0xaa/0x120 [ 343.418407][ T9749] should_fail_ex+0x39d/0x4d0 [ 343.423162][ T9749] copyin+0x1a/0x90 [ 343.427020][ T9749] _copy_from_iter+0x404/0x12e0 [ 343.431923][ T9749] ? lockdep_hardirqs_on+0x98/0x150 [ 343.437161][ T9749] ? copyout_mc+0x70/0x70 [ 343.441530][ T9749] ? __sk_mem_raise_allocated+0xa24/0x1340 [ 343.447370][ T9749] ? __sk_mem_raise_allocated+0xa29/0x1340 [ 343.453230][ T9749] ? page_copy_sane+0x16a/0x270 [ 343.458187][ T9749] copy_page_from_iter+0x7b/0x100 [ 343.463250][ T9749] mptcp_sendmsg+0x9f2/0x16d0 [ 343.467993][ T9749] ? mptcp_shutdown+0x80/0x80 [ 343.472708][ T9749] ? inet_send_prepare+0x5c/0x260 [ 343.477772][ T9749] ? inet6_sendmsg+0x5f/0xd0 [ 343.482397][ T9749] ? inet6_compat_ioctl+0x3c0/0x3c0 [ 343.487631][ T9749] ____sys_sendmsg+0x5ba/0x960 [ 343.492443][ T9749] ? __asan_memset+0x22/0x40 [ 343.497073][ T9749] ? __sys_sendmsg_sock+0x30/0x30 [ 343.502139][ T9749] ? __import_iovec+0x3fa/0x850 [ 343.507043][ T9749] ? import_iovec+0x73/0xa0 [ 343.511594][ T9749] ___sys_sendmsg+0x2a6/0x360 [ 343.516317][ T9749] ? __sys_sendmsg+0x2a0/0x2a0 [ 343.521150][ T9749] ? __lock_acquire+0x7d40/0x7d40 [ 343.526237][ T9749] __se_sys_sendmsg+0x1c2/0x2b0 [ 343.531127][ T9749] ? __x64_sys_sendmsg+0x80/0x80 [ 343.536116][ T9749] ? lockdep_hardirqs_on+0x98/0x150 [ 343.541356][ T9749] do_syscall_64+0x55/0xa0 [ 343.545809][ T9749] ? clear_bhb_loop+0x40/0x90 [ 343.550520][ T9749] ? clear_bhb_loop+0x40/0x90 [ 343.555230][ T9749] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 343.561157][ T9749] RIP: 0033:0x7f704659aeb9 [ 343.565604][ T9749] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 343.585249][ T9749] RSP: 002b:00007f70473ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 343.593707][ T9749] RAX: ffffffffffffffda RBX: 00007f7046815fa0 RCX: 00007f704659aeb9 [ 343.601717][ T9749] RDX: 00000000000400c0 RSI: 0000200000000580 RDI: 0000000000000009 [ 343.609725][ T9749] RBP: 00007f70473ee090 R08: 0000000000000000 R09: 0000000000000000 [ 343.617730][ T9749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 343.625724][ T9749] R13: 00007f7046816038 R14: 00007f7046815fa0 R15: 00007ffcbb5511e8 [ 343.633747][ T9749] [ 344.551846][ T9774] FAULT_INJECTION: forcing a failure. [ 344.551846][ T9774] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 344.590305][ T9774] CPU: 0 PID: 9774 Comm: syz.0.1321 Not tainted syzkaller #0 [ 344.597831][ T9774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 344.607920][ T9774] Call Trace: [ 344.611229][ T9774] [ 344.614194][ T9774] dump_stack_lvl+0x18c/0x250 [ 344.618932][ T9774] ? show_regs_print_info+0x20/0x20 [ 344.624185][ T9774] ? load_image+0x400/0x400 [ 344.628733][ T9774] ? __might_fault+0xaa/0x120 [ 344.633458][ T9774] ? __lock_acquire+0x7d40/0x7d40 [ 344.638539][ T9774] should_fail_ex+0x39d/0x4d0 [ 344.643276][ T9774] _copy_from_user+0x2f/0xe0 [ 344.647900][ T9774] ____sys_sendmsg+0x2fd/0x960 [ 344.652708][ T9774] ? __lock_acquire+0x7d40/0x7d40 [ 344.657779][ T9774] ? __sys_sendmsg_sock+0x30/0x30 [ 344.662847][ T9774] ? __import_iovec+0x3fa/0x850 [ 344.667836][ T9774] ? import_iovec+0x73/0xa0 [ 344.672373][ T9774] ___sys_sendmsg+0x2a6/0x360 [ 344.677077][ T9774] ? get_pid_task+0x20/0x1e0 [ 344.681701][ T9774] ? __sys_sendmsg+0x2a0/0x2a0 [ 344.686494][ T9774] ? __lock_acquire+0x7d40/0x7d40 [ 344.691556][ T9774] __se_sys_sendmsg+0x1c2/0x2b0 [ 344.696428][ T9774] ? __x64_sys_sendmsg+0x80/0x80 [ 344.701392][ T9774] ? lockdep_hardirqs_on+0x98/0x150 [ 344.706609][ T9774] do_syscall_64+0x55/0xa0 [ 344.711043][ T9774] ? clear_bhb_loop+0x40/0x90 [ 344.715747][ T9774] ? clear_bhb_loop+0x40/0x90 [ 344.720449][ T9774] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 344.726370][ T9774] RIP: 0033:0x7f66fd19aeb9 [ 344.730804][ T9774] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 344.750426][ T9774] RSP: 002b:00007f66fdf82028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 344.758855][ T9774] RAX: ffffffffffffffda RBX: 00007f66fd415fa0 RCX: 00007f66fd19aeb9 [ 344.766837][ T9774] RDX: 0000000000004840 RSI: 0000200000000380 RDI: 0000000000000003 [ 344.774824][ T9774] RBP: 00007f66fdf82090 R08: 0000000000000000 R09: 0000000000000000 [ 344.782816][ T9774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 344.790807][ T9774] R13: 00007f66fd416038 R14: 00007f66fd415fa0 R15: 00007fff36c86098 [ 344.798823][ T9774] [ 344.863374][ T9765] delete_channel: no stack [ 344.938286][ T9777] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.1322'. [ 345.118535][ T9783] sit0: left promiscuous mode [ 345.346461][ T9787] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.1334'. [ 345.361112][ T9788] net_ratelimit: 28318 callbacks suppressed [ 345.361144][ T9788] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 345.389777][ T9788] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 345.404131][ T9784] sit0: entered promiscuous mode [ 345.431353][ T9788] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 345.463955][ T9788] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 345.497513][ T9788] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 345.523239][ T9788] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 345.555067][ T9788] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 345.580570][ T9788] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 345.611874][ T9788] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 345.639244][ T9788] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 348.459731][ T9805] netlink: 'syz.1.1332': attribute type 2 has an invalid length. [ 348.529907][ T9804] netlink: 'syz.3.1331': attribute type 1 has an invalid length. [ 348.540397][ T9801] netlink: 'syz.0.1330': attribute type 28 has an invalid length. [ 348.561803][ T9804] netlink: 15487 bytes leftover after parsing attributes in process `syz.3.1331'. [ 348.572335][ T9801] netlink: 'syz.0.1330': attribute type 29 has an invalid length. [ 348.593566][ T9801] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1330'. [ 348.650079][ T9804] netlink: 'syz.3.1331': attribute type 10 has an invalid length. [ 348.660221][ T9804] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1331'. [ 349.439900][ T9819] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.1338'. [ 350.727213][ T9854] netlink: 'syz.0.1346': attribute type 10 has an invalid length. [ 350.758933][ T9854] bond0: (slave bond_slave_0): Releasing backup interface [ 350.782435][ T9858] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.1349'. [ 351.266043][ T9863] FAULT_INJECTION: forcing a failure. [ 351.266043][ T9863] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 351.302822][ T9863] CPU: 1 PID: 9863 Comm: syz.1.1351 Not tainted syzkaller #0 [ 351.310258][ T9863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 351.320367][ T9863] Call Trace: [ 351.323677][ T9863] [ 351.326644][ T9863] dump_stack_lvl+0x18c/0x250 [ 351.331364][ T9863] ? show_regs_print_info+0x20/0x20 [ 351.336671][ T9863] ? load_image+0x400/0x400 [ 351.341202][ T9863] ? __might_fault+0xaa/0x120 [ 351.345893][ T9863] ? __lock_acquire+0x7d40/0x7d40 [ 351.350936][ T9863] ? seqcount_lockdep_reader_access+0x17b/0x1d0 [ 351.357298][ T9863] should_fail_ex+0x39d/0x4d0 [ 351.362010][ T9863] _copy_from_user+0x2f/0xe0 [ 351.366621][ T9863] __sys_bpf+0x23e/0x890 [ 351.370885][ T9863] ? bpf_link_show_fdinfo+0x390/0x390 [ 351.376300][ T9863] ? lock_chain_count+0x20/0x20 [ 351.381169][ T9863] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 351.387183][ T9863] __x64_sys_bpf+0x7c/0x90 [ 351.391664][ T9863] do_syscall_64+0x55/0xa0 [ 351.396106][ T9863] ? clear_bhb_loop+0x40/0x90 [ 351.400797][ T9863] ? clear_bhb_loop+0x40/0x90 [ 351.405496][ T9863] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 351.411422][ T9863] RIP: 0033:0x7f991759aeb9 [ 351.415863][ T9863] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 351.435493][ T9863] RSP: 002b:00007f99184ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 351.443933][ T9863] RAX: ffffffffffffffda RBX: 00007f9917815fa0 RCX: 00007f991759aeb9 [ 351.451930][ T9863] RDX: 0000000000000050 RSI: 0000200000002300 RDI: 000000000000000a [ 351.459916][ T9863] RBP: 00007f99184ae090 R08: 0000000000000000 R09: 0000000000000000 [ 351.467902][ T9863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 351.475896][ T9863] R13: 00007f9917816038 R14: 00007f9917815fa0 R15: 00007ffc84ccb398 [ 351.483903][ T9863] [ 351.580794][ T9868] sit0: left promiscuous mode [ 351.801205][ T9876] sit0: entered promiscuous mode [ 352.598342][ T9884] sit0: left promiscuous mode [ 353.687991][ T9884] sit0: entered promiscuous mode [ 353.914099][ T9895] net_ratelimit: 23441 callbacks suppressed [ 353.914136][ T9895] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 353.971605][ T9895] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 354.033277][ T9895] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 354.086576][ T9895] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 354.119357][ T9895] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 354.146490][ T9895] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 354.173023][ T9895] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 354.199251][ T9895] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 354.226784][ T9895] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 354.263147][ T9895] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 355.813048][ T9905] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.1360'. [ 356.284283][ T9911] netlink: 'syz.3.1365': attribute type 29 has an invalid length. [ 356.292461][ T9911] netlink: 'syz.3.1365': attribute type 29 has an invalid length. [ 356.340789][ T9911] netlink: 'syz.3.1365': attribute type 29 has an invalid length. [ 356.377535][ T9909] netlink: 'syz.2.1362': attribute type 28 has an invalid length. [ 356.402997][ T9909] netlink: 'syz.2.1362': attribute type 29 has an invalid length. [ 356.411158][ T9909] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1362'. [ 356.755474][ T9922] netlink: 'syz.2.1369': attribute type 10 has an invalid length. [ 358.922633][ T9918] net_ratelimit: 7310 callbacks suppressed [ 358.922672][ T9918] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 358.943381][ T9918] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 358.960696][ T9918] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 358.970941][ T9918] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 358.983718][ T9918] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 358.996251][ T9918] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 359.006914][ T9918] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 359.017638][ T9918] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 359.028073][ T9918] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 359.038499][ T9918] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 359.587260][ T9922] bond0: (slave bond_slave_0): Releasing backup interface [ 359.624297][ T9927] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.1371'. [ 359.768103][ T9932] sit0: left promiscuous mode [ 359.996030][ T9937] sit0: entered promiscuous mode [ 360.267748][ T9946] netlink: 'syz.1.1377': attribute type 28 has an invalid length. [ 360.301584][ T9946] netlink: 'syz.1.1377': attribute type 29 has an invalid length. [ 360.320472][ T9946] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1377'. [ 360.434959][ T9957] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.1381'. [ 360.684974][ T9959] netlink: 'syz.3.1382': attribute type 10 has an invalid length. [ 360.710093][ T9962] sit0: left promiscuous mode [ 361.229856][ T9967] netlink: 'syz.0.1384': attribute type 12 has an invalid length. [ 361.247236][ T9967] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1384'. [ 361.312449][ T9973] sit0: entered promiscuous mode [ 362.285610][ T9994] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.1393'. [ 362.927313][T10006] FAULT_INJECTION: forcing a failure. [ 362.927313][T10006] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 362.952742][T10006] CPU: 0 PID: 10006 Comm: syz.2.1399 Not tainted syzkaller #0 [ 362.960287][T10006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 362.970569][T10006] Call Trace: [ 362.973934][T10006] [ 362.976905][T10006] dump_stack_lvl+0x18c/0x250 [ 362.981653][T10006] ? show_regs_print_info+0x20/0x20 [ 362.986910][T10006] ? load_image+0x400/0x400 [ 362.991469][T10006] ? __might_fault+0xaa/0x120 [ 362.996671][T10006] ? __lock_acquire+0x7d40/0x7d40 [ 363.001767][T10006] should_fail_ex+0x39d/0x4d0 [ 363.006500][T10006] _copy_from_user+0x2f/0xe0 [ 363.011138][T10006] generic_map_update_batch+0x59a/0x810 [ 363.016745][T10006] ? rcu_read_unlock+0xa0/0xa0 [ 363.021568][T10006] ? __fdget+0x180/0x210 [ 363.025882][T10006] ? rcu_read_unlock+0xa0/0xa0 [ 363.030696][T10006] bpf_map_do_batch+0x3d7/0x610 [ 363.035613][T10006] __sys_bpf+0x381/0x890 [ 363.039913][T10006] ? bpf_link_show_fdinfo+0x390/0x390 [ 363.045340][T10006] ? lock_chain_count+0x20/0x20 [ 363.050246][T10006] __x64_sys_bpf+0x7c/0x90 [ 363.054710][T10006] do_syscall_64+0x55/0xa0 [ 363.059264][T10006] ? clear_bhb_loop+0x40/0x90 [ 363.063989][T10006] ? clear_bhb_loop+0x40/0x90 [ 363.068733][T10006] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 363.074684][T10006] RIP: 0033:0x7ff8f819aeb9 [ 363.079135][T10006] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 363.098839][T10006] RSP: 002b:00007ff8f63f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 363.107398][T10006] RAX: ffffffffffffffda RBX: 00007ff8f8415fa0 RCX: 00007ff8f819aeb9 [ 363.115447][T10006] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 363.123452][T10006] RBP: 00007ff8f63f6090 R08: 0000000000000000 R09: 0000000000000000 [ 363.131464][T10006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 363.139470][T10006] R13: 00007ff8f8416038 R14: 00007ff8f8415fa0 R15: 00007fffe2410ca8 [ 363.147492][T10006] [ 363.356685][T10014] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1402'. [ 363.424230][T10014] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1402'. [ 363.483828][T10011] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1402'. [ 363.536045][T10017] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1402'. [ 363.690183][T10022] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.1405'. [ 363.804112][T10026] sit0: left promiscuous mode [ 364.059026][T10029] sit0: entered promiscuous mode [ 364.460625][T10039] net_ratelimit: 2150 callbacks suppressed [ 364.460660][T10039] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 364.492317][T10039] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 364.526718][T10039] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 364.572274][T10039] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 364.628707][T10039] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 364.689490][T10048] netlink: 'syz.1.1415': attribute type 1 has an invalid length. [ 364.696084][T10039] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 364.697728][T10048] netlink: 15487 bytes leftover after parsing attributes in process `syz.1.1415'. [ 364.745575][T10048] netlink: 'syz.1.1415': attribute type 10 has an invalid length. [ 364.758953][T10039] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 364.775175][T10048] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1415'. [ 364.797392][T10039] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 364.832912][T10039] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 364.851367][T10039] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 367.661489][T10052] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.1416'. [ 367.831332][T10061] FAULT_INJECTION: forcing a failure. [ 367.831332][T10061] name failslab, interval 1, probability 0, space 0, times 0 [ 367.848647][T10061] CPU: 0 PID: 10061 Comm: syz.3.1420 Not tainted syzkaller #0 [ 367.856166][T10061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 367.866270][T10061] Call Trace: [ 367.869580][T10061] [ 367.872544][T10061] dump_stack_lvl+0x18c/0x250 [ 367.877278][T10061] ? show_regs_print_info+0x20/0x20 [ 367.882524][T10061] ? load_image+0x400/0x400 [ 367.887060][T10061] ? __might_sleep+0xe0/0xe0 [ 367.891683][T10061] ? __lock_acquire+0x7d40/0x7d40 [ 367.896744][T10061] should_fail_ex+0x39d/0x4d0 [ 367.901494][T10061] should_failslab+0x9/0x20 [ 367.906030][T10061] slab_pre_alloc_hook+0x59/0x310 [ 367.911087][T10061] ? sk_prot_alloc+0xe7/0x210 [ 367.915794][T10061] ? sk_prot_alloc+0xe7/0x210 [ 367.920514][T10061] __kmem_cache_alloc_node+0x53/0x250 [ 367.925945][T10061] ? sk_prot_alloc+0xe7/0x210 [ 367.930650][T10061] __kmalloc+0xa4/0x230 [ 367.934859][T10061] sk_prot_alloc+0xe7/0x210 [ 367.939404][T10061] ? sk_alloc+0x24/0x360 [ 367.943730][T10061] sk_alloc+0x3a/0x360 [ 367.947847][T10061] ? bpf_ctx_init+0x163/0x1a0 [ 367.952564][T10061] ? bpf_prog_test_run_skb+0x273/0x12b0 [ 367.958148][T10061] bpf_prog_test_run_skb+0x3a5/0x12b0 [ 367.963557][T10061] ? __fget_files+0x28/0x4b0 [ 367.968194][T10061] ? __fget_files+0x28/0x4b0 [ 367.972822][T10061] ? __fget_files+0x43d/0x4b0 [ 367.977554][T10061] ? cpu_online+0x60/0x60 [ 367.981939][T10061] bpf_prog_test_run+0x321/0x390 [ 367.986929][T10061] __sys_bpf+0x49d/0x890 [ 367.991262][T10061] ? bpf_link_show_fdinfo+0x390/0x390 [ 367.996688][T10061] ? lock_chain_count+0x20/0x20 [ 368.001586][T10061] __x64_sys_bpf+0x7c/0x90 [ 368.006034][T10061] do_syscall_64+0x55/0xa0 [ 368.010495][T10061] ? clear_bhb_loop+0x40/0x90 [ 368.015211][T10061] ? clear_bhb_loop+0x40/0x90 [ 368.019930][T10061] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 368.025864][T10061] RIP: 0033:0x7f704659aeb9 [ 368.030326][T10061] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 368.049972][T10061] RSP: 002b:00007f70473ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 368.058436][T10061] RAX: ffffffffffffffda RBX: 00007f7046815fa0 RCX: 00007f704659aeb9 [ 368.066446][T10061] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 368.074448][T10061] RBP: 00007f70473ee090 R08: 0000000000000000 R09: 0000000000000000 [ 368.082456][T10061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 368.090455][T10061] R13: 00007f7046816038 R14: 00007f7046815fa0 R15: 00007ffcbb5511e8 [ 368.098479][T10061] [ 369.462669][T10078] net_ratelimit: 11506 callbacks suppressed [ 369.462705][T10078] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 369.479504][T10078] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 369.489780][T10078] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 369.500394][T10078] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 369.510871][T10078] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 369.521221][T10078] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 369.531601][T10078] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 369.544734][T10078] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 369.558445][T10078] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 369.569518][T10078] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 372.028406][T10091] FAULT_INJECTION: forcing a failure. [ 372.028406][T10091] name failslab, interval 1, probability 0, space 0, times 0 [ 372.053776][T10091] CPU: 1 PID: 10091 Comm: syz.0.1430 Not tainted syzkaller #0 [ 372.061331][T10091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 372.071452][T10091] Call Trace: [ 372.074776][T10091] [ 372.077743][T10091] dump_stack_lvl+0x18c/0x250 [ 372.082477][T10091] ? sctp_sendmsg+0x1575/0x28c0 [ 372.087367][T10091] ? ___sys_sendmsg+0x2a6/0x360 [ 372.092266][T10091] ? show_regs_print_info+0x20/0x20 [ 372.097522][T10091] ? load_image+0x400/0x400 [ 372.102093][T10091] should_fail_ex+0x39d/0x4d0 [ 372.106832][T10091] should_failslab+0x9/0x20 [ 372.111396][T10091] slab_pre_alloc_hook+0x59/0x310 [ 372.116483][T10091] ? sctp_add_bind_addr+0x8c/0x360 [ 372.121661][T10091] __kmem_cache_alloc_node+0x53/0x250 [ 372.127093][T10091] ? sctp_add_bind_addr+0x8c/0x360 [ 372.132259][T10091] kmalloc_trace+0x2a/0xe0 [ 372.136733][T10091] sctp_add_bind_addr+0x8c/0x360 [ 372.141727][T10091] sctp_copy_local_addr_list+0x315/0x4f0 [ 372.147419][T10091] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 372.153196][T10091] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 372.159317][T10091] ? sctp_v4_is_any+0x35/0x60 [ 372.164015][T10091] ? sctp_copy_one_addr+0x8c/0x350 [ 372.169166][T10091] sctp_bind_addr_copy+0xb3/0x3c0 [ 372.174233][T10091] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 372.180587][T10091] sctp_connect_new_asoc+0x2f9/0x6a0 [ 372.185897][T10091] ? __sctp_connect+0xd80/0xd80 [ 372.190766][T10091] ? __local_bh_enable_ip+0x13a/0x1c0 [ 372.196158][T10091] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 372.201732][T10091] ? security_sctp_bind_connect+0x89/0xb0 [ 372.207480][T10091] sctp_sendmsg+0x1575/0x28c0 [ 372.212188][T10091] ? sctp_getsockopt+0xb60/0xb60 [ 372.217147][T10091] ? aa_sk_perm+0x83c/0x970 [ 372.221695][T10091] ? aa_af_perm+0x330/0x330 [ 372.226259][T10091] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 372.232710][T10091] ? sock_rps_record_flow+0x19/0x3f0 [ 372.238024][T10091] ? inet_sendmsg+0xe9/0x2f0 [ 372.242636][T10091] ? inet_send_prepare+0x260/0x260 [ 372.247784][T10091] ____sys_sendmsg+0x5ba/0x960 [ 372.252579][T10091] ? __lock_acquire+0x7d40/0x7d40 [ 372.257644][T10091] ? __asan_memset+0x22/0x40 [ 372.262262][T10091] ? __sys_sendmsg_sock+0x30/0x30 [ 372.267318][T10091] ? __import_iovec+0x5f2/0x850 [ 372.272208][T10091] ? import_iovec+0x73/0xa0 [ 372.276752][T10091] ___sys_sendmsg+0x2a6/0x360 [ 372.281461][T10091] ? get_pid_task+0x20/0x1e0 [ 372.286091][T10091] ? __sys_sendmsg+0x2a0/0x2a0 [ 372.290894][T10091] ? __lock_acquire+0x7d40/0x7d40 [ 372.295971][T10091] __se_sys_sendmsg+0x1c2/0x2b0 [ 372.300847][T10091] ? __x64_sys_sendmsg+0x80/0x80 [ 372.305827][T10091] ? lockdep_hardirqs_on+0x98/0x150 [ 372.311051][T10091] do_syscall_64+0x55/0xa0 [ 372.315500][T10091] ? clear_bhb_loop+0x40/0x90 [ 372.320203][T10091] ? clear_bhb_loop+0x40/0x90 [ 372.324911][T10091] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 372.330831][T10091] RIP: 0033:0x7f66fd19aeb9 [ 372.335269][T10091] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 372.354984][T10091] RSP: 002b:00007f66fdf82028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 372.363419][T10091] RAX: ffffffffffffffda RBX: 00007f66fd415fa0 RCX: 00007f66fd19aeb9 [ 372.371404][T10091] RDX: 00000000000003e8 RSI: 00002000000004c0 RDI: 000000000000000f [ 372.379399][T10091] RBP: 00007f66fdf82090 R08: 0000000000000000 R09: 0000000000000000 [ 372.387392][T10091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 372.395389][T10091] R13: 00007f66fd416038 R14: 00007f66fd415fa0 R15: 00007fff36c86098 [ 372.403399][T10091] [ 372.481528][T10092] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.1429'. [ 372.940642][T10100] team0: Port device team_slave_0 removed [ 374.472911][T10116] net_ratelimit: 31220 callbacks suppressed [ 374.472946][T10116] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 374.494472][T10116] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 374.505114][T10116] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 374.521461][T10116] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 374.532316][T10116] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 374.542374][T10116] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 374.552919][T10116] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 374.563878][T10116] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 374.575846][T10116] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 374.586096][T10116] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 376.467913][T10125] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.1441'. [ 376.729897][T10137] netlink: 'syz.3.1443': attribute type 4 has an invalid length. [ 378.767621][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.778292][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.482794][T10148] net_ratelimit: 27231 callbacks suppressed [ 379.482811][T10148] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 379.498801][T10148] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 379.508732][T10148] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 379.518791][T10148] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 379.528699][T10148] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 379.538639][T10148] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 379.562709][T10148] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 379.572663][T10148] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 379.584249][T10148] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 379.594381][T10148] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 380.385821][T10160] netlink: 'syz.0.1454': attribute type 21 has an invalid length. [ 380.429903][T10160] netlink: 'syz.0.1454': attribute type 6 has an invalid length. [ 380.471537][T10160] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1454'. [ 382.032240][T10185] netlink: 'syz.3.1463': attribute type 39 has an invalid length. [ 384.493077][T10181] net_ratelimit: 17441 callbacks suppressed [ 384.493117][T10181] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 384.510720][T10181] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 384.522203][T10181] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 384.533179][T10181] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 384.543939][T10181] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 384.558181][T10181] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 384.568580][T10181] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 384.583894][T10181] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 384.597576][T10181] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 384.609301][T10181] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 385.322920][T10207] netlink: 'syz.1.1470': attribute type 8 has an invalid length. [ 385.331579][T10207] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.1470'. [ 389.172615][T10249] netlink: 'syz.3.1485': attribute type 12 has an invalid length. [ 389.180585][T10249] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1485'. [ 389.251286][T10248] netlink: 'syz.2.1484': attribute type 10 has an invalid length. [ 390.269516][T10268] net_ratelimit: 11302 callbacks suppressed [ 390.269545][T10268] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 390.306915][T10268] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 390.332935][T10268] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 390.367582][T10268] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 390.418365][T10268] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 390.463393][T10268] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 390.507710][T10268] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 390.529291][T10268] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 390.553278][T10268] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 390.583090][T10268] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 393.616073][T10281] netlink: 'syz.3.1497': attribute type 12 has an invalid length. [ 393.625803][T10281] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1497'. [ 397.876043][T10347] sit0: left promiscuous mode [ 397.917214][T10354] sit0: entered promiscuous mode [ 397.989659][T10357] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.1528'. [ 398.014025][T10363] netlink: 'syz.3.1530': attribute type 1 has an invalid length. [ 398.042108][T10363] netlink: 'syz.3.1530': attribute type 4 has an invalid length. [ 398.060400][T10363] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1530'. [ 398.729866][T10384] net_ratelimit: 13178 callbacks suppressed [ 398.729899][T10384] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 398.749742][T10384] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 398.761376][T10384] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 398.771777][T10384] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 398.782537][T10384] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 398.794027][T10384] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 398.805498][T10384] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 398.816843][T10384] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 398.827177][T10384] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 398.838818][T10384] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 399.567254][T10386] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.1539'. [ 400.101802][T10405] netlink: 'syz.2.1547': attribute type 2 has an invalid length. [ 400.109777][T10405] netlink: 'syz.2.1547': attribute type 8 has an invalid length. [ 400.132716][T10405] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1547'. [ 400.202499][T10405] netlink: 'syz.2.1547': attribute type 4 has an invalid length. [ 400.243460][T10405] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1547'. [ 403.736178][T10427] net_ratelimit: 1871 callbacks suppressed [ 403.736214][T10427] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 403.759129][T10427] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 403.770074][T10427] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 403.787410][T10427] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 403.800668][T10427] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 403.819044][T10427] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 403.839544][T10427] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 403.850303][T10427] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 403.865815][T10427] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 403.878883][T10427] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 406.107552][T10432] sit0: left promiscuous mode [ 406.337582][T10435] sit0: entered promiscuous mode [ 406.668510][T10442] netlink: 'syz.2.1555': attribute type 12 has an invalid length. [ 406.676822][T10442] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1555'. [ 434.557498][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 434.567378][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 434.575872][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 434.585083][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 434.613031][ T51] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 434.626645][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 434.947344][ T5780] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 434.957514][ T5780] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 434.970571][ T5780] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 434.979098][ T5780] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 434.988496][ T5780] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 434.996320][ T5780] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 435.200367][ T5780] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 435.211604][ T5780] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 435.219838][ T5780] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 435.228479][ T5782] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 435.236635][ T5782] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 435.244359][ T5782] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 435.894974][T10451] chnl_net:caif_netlink_parms(): no params data found [ 436.100735][T10457] chnl_net:caif_netlink_parms(): no params data found [ 436.380913][T10459] chnl_net:caif_netlink_parms(): no params data found [ 436.425406][T10451] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.443735][T10451] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.451069][T10451] bridge_slave_0: entered allmulticast mode [ 436.474320][T10451] bridge_slave_0: entered promiscuous mode [ 436.546522][T10451] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.562732][T10451] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.569961][T10451] bridge_slave_1: entered allmulticast mode [ 436.604396][T10451] bridge_slave_1: entered promiscuous mode [ 436.669846][ T51] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 436.677804][ T5780] Bluetooth: hci4: command tx timeout [ 436.692785][ T5780] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 436.700696][ T5780] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 436.709049][ T5780] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 436.716878][ T5780] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 436.724689][ T5780] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 436.840441][T10451] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 436.947020][T10451] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 436.983267][T10457] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.990424][T10457] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.006783][T10457] bridge_slave_0: entered allmulticast mode [ 437.019514][T10457] bridge_slave_0: entered promiscuous mode [ 437.072826][ T5780] Bluetooth: hci5: command tx timeout [ 437.085269][T10457] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.092509][T10457] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.107641][T10457] bridge_slave_1: entered allmulticast mode [ 437.115620][T10457] bridge_slave_1: entered promiscuous mode [ 437.165402][T10451] team0: Port device team_slave_0 added [ 437.219716][T10451] team0: Port device team_slave_1 added [ 437.252488][T10459] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.260183][T10459] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.280045][T10459] bridge_slave_0: entered allmulticast mode [ 437.289327][T10459] bridge_slave_0: entered promiscuous mode [ 437.306319][T10459] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.319617][ T5780] Bluetooth: hci6: command tx timeout [ 437.327442][T10459] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.341616][T10459] bridge_slave_1: entered allmulticast mode [ 437.350825][T10459] bridge_slave_1: entered promiscuous mode [ 437.449560][T10457] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 437.471038][T10451] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 437.487410][T10451] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 437.524175][T10451] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 437.567381][T10451] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 437.589938][T10451] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 437.622591][T10451] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 437.647850][T10457] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 437.668791][T10459] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 437.754795][T10459] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 437.801196][T10457] team0: Port device team_slave_0 added [ 438.763213][ T5780] Bluetooth: hci7: command tx timeout [ 438.769123][ T5780] Bluetooth: hci4: command tx timeout [ 439.153006][ T5780] Bluetooth: hci5: command tx timeout [ 439.402966][ T5780] Bluetooth: hci6: command tx timeout [ 440.833267][ T5782] Bluetooth: hci7: command tx timeout [ 440.839784][ T5780] Bluetooth: hci4: command tx timeout [ 441.242953][ T5780] Bluetooth: hci5: command tx timeout [ 441.482959][ T5780] Bluetooth: hci6: command tx timeout [ 442.923005][ T5782] Bluetooth: hci7: command tx timeout [ 442.929524][ T5780] Bluetooth: hci4: command tx timeout [ 443.313253][ T5780] Bluetooth: hci5: command tx timeout [ 443.562936][ T5780] Bluetooth: hci6: command tx timeout [ 444.992927][ T5780] Bluetooth: hci7: command tx timeout [ 448.346548][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 448.362612][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 482.012462][ T5782] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 482.021208][ T5782] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 482.029441][ T5782] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 482.037824][ T5782] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 482.046525][ T5782] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 482.054093][ T5782] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 484.113046][ T5780] Bluetooth: hci8: command tx timeout [ 486.204782][ T5780] Bluetooth: hci8: command tx timeout [ 488.273004][ T5780] Bluetooth: hci8: command tx timeout [ 490.352871][ T5780] Bluetooth: hci8: command tx timeout [ 494.483539][ T5782] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 494.492936][ T5782] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 494.501118][ T5782] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 494.509550][ T5782] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 494.517825][ T5782] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 494.525310][ T5782] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 494.624477][ T5782] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 494.642757][ T5782] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 494.651248][ T5782] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 494.660509][ T5782] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 494.668398][ T5782] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 494.679925][ T5782] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 496.215936][ T5782] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 496.233353][ T5782] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 496.241273][ T5782] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 496.251047][ T5782] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 496.259005][ T5782] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 496.267290][ T5782] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 496.593144][ T5782] Bluetooth: hci9: command tx timeout [ 496.752749][ T5782] Bluetooth: hci10: command tx timeout [ 498.353199][ T5782] Bluetooth: hci11: command tx timeout [ 498.672826][ T5782] Bluetooth: hci9: command tx timeout [ 498.843010][ T5782] Bluetooth: hci10: command tx timeout [ 500.442581][ T5782] Bluetooth: hci11: command tx timeout [ 500.762953][ T5782] Bluetooth: hci9: command tx timeout [ 500.912996][ T5782] Bluetooth: hci10: command tx timeout [ 502.516838][ T5782] Bluetooth: hci11: command tx timeout [ 502.843162][ T5782] Bluetooth: hci9: command tx timeout [ 503.002948][ T5782] Bluetooth: hci10: command tx timeout [ 504.612721][ T5782] Bluetooth: hci11: command tx timeout [ 511.252571][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 511.259314][ C1] rcu: 1-....: (7928 ticks this GP) idle=f9ac/1/0x4000000000000000 softirq=37312/37313 fqs=3408 [ 511.271059][ C1] rcu: hardirqs softirqs csw/system [ 511.277543][ C1] rcu: number: 1254078 0 0 [ 511.284021][ C1] rcu: cputime: 15061 37427 70 ==> 52490(ms) [ 511.291861][ C1] rcu: (t=10500 jiffies g=46605 q=2581 ncpus=2) [ 511.298217][ C1] CPU: 1 PID: 10410 Comm: syz.1.1548 Not tainted syzkaller #0 [ 511.305705][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 511.315784][ C1] RIP: 0010:rcu_read_unlock_special+0x83/0x470 [ 511.321975][ C1] Code: eb 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 2b 42 c7 44 2b 08 f8 f3 f3 f3 65 44 8b 35 0e 0c 92 7e 41 f7 c6 00 00 f0 00 74 40 <48> c7 44 24 20 0e 36 e0 45 4a c7 04 2b 00 00 00 00 42 c7 44 2b 08 [ 511.341613][ C1] RSP: 0018:ffffc900001f0200 EFLAGS: 00000206 [ 511.347700][ C1] RAX: 1660613f8f883200 RBX: 1ffff9200003e044 RCX: 1660613f8f883200 [ 511.355683][ C1] RDX: dffffc0000000000 RSI: ffffffff8acac900 RDI: ffffffff8b1c81e0 [ 511.363693][ C1] RBP: ffffc900001f02c8 R08: ffffffff911bf5a7 R09: 1ffffffff2237eb4 [ 511.371691][ C1] R10: dffffc0000000000 R11: fffffbfff2237eb5 R12: ffffffff8d137200 [ 511.379679][ C1] R13: dffffc0000000000 R14: 0000000000000246 R15: 0000000000000002 [ 511.387671][ C1] FS: 00007f991846c6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 511.396622][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 511.403224][ C1] CR2: 00007fc31d410f77 CR3: 000000002e305000 CR4: 00000000003506e0 [ 511.411213][ C1] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 511.419208][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 511.427194][ C1] Call Trace: [ 511.430491][ C1] [ 511.433365][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 511.439379][ C1] ? __rcu_read_unlock+0xd0/0xd0 [ 511.444358][ C1] ? read_lock_is_recursive+0x20/0x20 [ 511.449779][ C1] ? deref_stack_reg+0x1bd/0x240 [ 511.454754][ C1] __rcu_read_unlock+0x7c/0xd0 [ 511.459561][ C1] is_bpf_text_address+0x27e/0x2a0 [ 511.464695][ C1] ? is_bpf_text_address+0x26/0x2a0 [ 511.469921][ C1] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 511.476010][ C1] kernel_text_address+0xa0/0xd0 [ 511.481012][ C1] __kernel_text_address+0xd/0x30 [ 511.486074][ C1] unwind_get_return_address+0x5d/0xc0 [ 511.491560][ C1] ? stack_trace_save+0x100/0x100 [ 511.496614][ C1] arch_stack_walk+0x11d/0x190 [ 511.501410][ C1] stack_trace_save+0xaa/0x100 [ 511.506202][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 511.511345][ C1] kasan_set_track+0x4e/0x70 [ 511.516002][ C1] ? kasan_set_track+0x4e/0x70 [ 511.520789][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 511.525847][ C1] ? slab_post_alloc_hook+0x6e/0x4b0 [ 511.531160][ C1] ? kmem_cache_alloc_bulk+0x452/0x5a0 [ 511.536645][ C1] ? napi_skb_cache_get+0x11c/0x1e0 [ 511.541871][ C1] ? __napi_alloc_skb+0x230/0x560 [ 511.546923][ C1] ? page_to_skb+0x2be/0x890 [ 511.551532][ C1] ? receive_buf+0x2fe/0x3820 [ 511.556224][ C1] ? virtnet_poll+0x5dd/0x1280 [ 511.561018][ C1] ? __napi_poll+0xc0/0x460 [ 511.565542][ C1] ? net_rx_action+0x616/0xc50 [ 511.570323][ C1] ? handle_softirqs+0x280/0x820 [ 511.575277][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 511.580055][ C1] ? irq_exit_rcu+0x9/0x20 [ 511.584512][ C1] ? sysvec_apic_timer_interrupt+0xa4/0xc0 [ 511.590348][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 511.596524][ C1] ? finish_task_switch+0x26a/0x8f0 [ 511.601742][ C1] ? __schedule+0x155b/0x45a0 [ 511.606442][ C1] ? preempt_schedule_common+0x82/0xc0 [ 511.611919][ C1] ? preempt_schedule+0xc0/0xd0 [ 511.616789][ C1] ? preempt_schedule_thunk+0x1a/0x30 [ 511.622182][ C1] ? try_to_wake_up+0x781/0x1190 [ 511.627138][ C1] ? wake_up_q+0xb6/0x100 [ 511.631519][ C1] ? __mutex_unlock_slowpath+0x65c/0x6c0 [ 511.637181][ C1] ? __se_sys_perf_event_open+0x1848/0x1c50 [ 511.643093][ C1] ? do_syscall_64+0x55/0xa0 [ 511.647728][ C1] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 511.653842][ C1] __kasan_slab_alloc+0x6c/0x80 [ 511.658728][ C1] slab_post_alloc_hook+0x6e/0x4b0 [ 511.663879][ C1] kmem_cache_alloc_bulk+0x452/0x5a0 [ 511.669199][ C1] ? skb_splice_from_iter+0xc10/0xc10 [ 511.674606][ C1] ? kmem_cache_alloc_bulk+0xda/0x5a0 [ 511.680022][ C1] napi_skb_cache_get+0x11c/0x1e0 [ 511.685086][ C1] __napi_alloc_skb+0x230/0x560 [ 511.689977][ C1] page_to_skb+0x2be/0x890 [ 511.694428][ C1] receive_buf+0x2fe/0x3820 [ 511.698955][ C1] ? detach_buf_split+0x91a/0xb80 [ 511.704037][ C1] ? virtnet_poll_tx+0x530/0x530 [ 511.708996][ C1] ? detach_buf_split+0x1/0xb80 [ 511.713875][ C1] ? virtqueue_get_buf_ctx+0x697/0xd10 [ 511.719364][ C1] virtnet_poll+0x5dd/0x1280 [ 511.723984][ C1] ? refill_work+0x220/0x220 [ 511.728604][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 511.734779][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 511.740026][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 511.746229][ C1] __napi_poll+0xc0/0x460 [ 511.750607][ C1] net_rx_action+0x616/0xc50 [ 511.755262][ C1] ? net_tx_action+0x980/0x980 [ 511.760044][ C1] ? detach_timer+0x2b0/0x2b0 [ 511.764765][ C1] handle_softirqs+0x280/0x820 [ 511.769603][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 511.774420][ C1] ? do_softirq+0x1a0/0x1a0 [ 511.778963][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 511.784200][ C1] __irq_exit_rcu+0xd3/0x190 [ 511.788830][ C1] ? irq_exit_rcu+0x20/0x20 [ 511.793362][ C1] irq_exit_rcu+0x9/0x20 [ 511.797627][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 511.803300][ C1] [ 511.806263][ C1] [ 511.809217][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 511.815327][ C1] RIP: 0010:finish_task_switch+0x26a/0x8f0 [ 511.821178][ C1] Code: 0f 84 33 01 00 00 48 85 db 0f 85 52 01 00 00 0f 1f 44 00 00 4c 8b 75 d0 4c 89 e7 e8 40 83 30 09 e8 7b 23 30 00 fb 4c 8b 65 c0 <49> 8d bc 24 f8 15 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 [ 511.841050][ C1] RSP: 0018:ffffc90003b977f8 EFLAGS: 00000282 [ 511.847160][ C1] RAX: 1660613f8f883200 RBX: 0000000000000000 RCX: 1660613f8f883200 [ 511.856304][ C1] RDX: dffffc0000000000 RSI: ffffffff8acac900 RDI: ffffffff8b1c81e0 [ 511.864315][ C1] RBP: ffffc90003b97850 R08: ffffffff911bf5a7 R09: 1ffffffff2237eb4 [ 511.872329][ C1] R10: dffffc0000000000 R11: fffffbfff2237eb5 R12: ffff88802b17da00 [ 511.880335][ C1] R13: dffffc0000000000 R14: ffff88807bcdbc00 R15: ffff8880b8f3cac8 [ 511.888348][ C1] ? finish_task_switch+0x265/0x8f0 [ 511.893585][ C1] __schedule+0x155b/0x45a0 [ 511.898175][ C1] ? mark_lock+0x94/0x320 [ 511.902543][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 511.908561][ C1] ? asan.module_dtor+0x20/0x20 [ 511.913472][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 511.918699][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 511.924885][ C1] ? preempt_schedule+0xc0/0xd0 [ 511.929757][ C1] preempt_schedule_common+0x82/0xc0 [ 511.935064][ C1] preempt_schedule+0xc0/0xd0 [ 511.939794][ C1] ? schedule_preempt_disabled+0x20/0x20 [ 511.945473][ C1] ? _raw_spin_unlock_irqrestore+0xc0/0x120 [ 511.951401][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 511.957328][ C1] ? _raw_spin_unlock+0x40/0x40 [ 511.962223][ C1] preempt_schedule_thunk+0x1a/0x30 [ 511.967466][ C1] try_to_wake_up+0x781/0x1190 [ 511.972266][ C1] wake_up_q+0xb6/0x100 [ 511.976458][ C1] __mutex_unlock_slowpath+0x65c/0x6c0 [ 511.981953][ C1] ? mutex_unlock+0x10/0x10 [ 511.986513][ C1] ? _raw_spin_unlock_irqrestore+0xc0/0x120 [ 511.992449][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 511.998361][ C1] ? _raw_spin_unlock+0x40/0x40 [ 512.003267][ C1] __se_sys_perf_event_open+0x1848/0x1c50 [ 512.009551][ C1] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 512.015218][ C1] ? lock_chain_count+0x20/0x20 [ 512.020107][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 512.025327][ C1] ? __x64_sys_perf_event_open+0x20/0xc0 [ 512.030977][ C1] do_syscall_64+0x55/0xa0 [ 512.035434][ C1] ? clear_bhb_loop+0x40/0x90 [ 512.040150][ C1] ? clear_bhb_loop+0x40/0x90 [ 512.044867][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 512.050777][ C1] RIP: 0033:0x7f991759aeb9 [ 512.055213][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 512.074923][ C1] RSP: 002b:00007f991846c028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 512.083365][ C1] RAX: ffffffffffffffda RBX: 00007f9917816180 RCX: 00007f991759aeb9 [ 512.091356][ C1] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000480 [ 512.099347][ C1] RBP: 00007f9917608c1f R08: 0000000000000008 R09: 0000000000000000 [ 512.107334][ C1] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 512.115317][ C1] R13: 00007f9917816218 R14: 00007f9917816180 R15: 00007ffc84ccb398 [ 512.123321][ C1] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 512.307287][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 512.313725][ T1289] ieee802154 phy1 wpan1: encryption failed: -22