last executing test programs: 7.242331603s ago: executing program 4 (id=9489): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0xf6}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x2000000000003, r0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x5d35, 0x4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x100000, 0x40, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="09000000060000000800000008"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r1) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x404c041) socket$kcm(0x10, 0x100000000002, 0x4) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_clone(0x402200, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$sock(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="7a6eca88ca428c8d4f36c8b8fc2047659bdcb41a9ebe5ac0bed120663c7a3c234c937452515eae867806e58adcd922e70fa89f0e436a", 0x36}], 0x1}, 0xc804) recvmsg$unix(0xffffffffffffffff, 0x0, 0x10020) r3 = openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x181) write$cgroup_type(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000140)={0x0, 0x32, &(0x7f0000000000)=[{&(0x7f0000000040)='r', 0x200420}], 0x1}, 0x40000) sendmsg$kcm(r6, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x22048005) bpf$MAP_CREATE(0x0, 0x0, 0x0) 6.242217755s ago: executing program 4 (id=9499): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$kcm(0x25, 0x1, 0x0) recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40010040) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x14}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2c}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000000)='Gb', 0x5dc}], 0x1}, 0x480c0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000280)=@o_path={&(0x7f00000000c0)='./file0\x00', r1, 0x4000, r4}, 0x18) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x1, 0xfffffffc, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_devices(r2, &(0x7f0000000740)=ANY=[@ANYBLOB="1e0308004d8c71ef288563"], 0xffdd) 5.277461875s ago: executing program 1 (id=9504): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x80, 0x0) close(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x200800, 0x0) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) perf_event_open(0x0, 0xffffffffffffffff, 0x100000000, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x410300, 0x0) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$kcm(0xa, 0x6, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) recvmsg$kcm(r4, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x43) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb25026a747e0114370595e4bb0b0489b1dc73", 0x2e}], 0x1}, 0x20048020) 5.250231236s ago: executing program 1 (id=9511): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02002d000b02d25a806f8c2d94f90324fc602f1a0b000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fefdffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000000404000001000000b70500002a0000006a0a00fe00000000850000000b000000b70000005920000095000000000000006c8457920ba0fad478e86823cc07b88f5d76781dcb7729f41726a067818b990b13bfdd5db1b7ef826f015cd03018d546fa9b6827767c171a4f0720596bb3b4d821d976f5843061cc2e3afbae82d7932d4f91f718f0e56315040148e11bac31821236192321fa3b3042"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000021dd4000000000003b810000850000006d000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x2}, 0x0, 0x0, 0xfffffffd, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20008884) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) (async) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x1a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x450, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x4, @perf_config_ext, 0x0, 0x8, 0x2, 0x5, 0x0, 0x7fff, 0x9, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, 0x0, &(0x7f0000000080)='syzkaller\x00'}, 0x94) (async) recvmsg$unix(0xffffffffffffffff, 0x0, 0x100) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(r4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x460, 0x9, 0x0, 0xa, 0xe4, 0xffff0000, 0xffff, 0x0, 0x102ff, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r4, 0x8923, &(0x7f0000002280)={'syzkaller0\x00', @random="2d311e000008"}) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89a0, &(0x7f00000000c0)='%d\xf1\xfa\xbc$j\xfef;q1\x95\xf4\xe4\x13\x95k#Jz.F\xce\xfb\x9c\x19\xf3v\x88\x91\xbct\xb0\x1bLq\x15\x00\xad\t\x13\xf5U\x02\xc9d6q\xc3\xa5\xcf\x01t\r%\xad-\x13\xb0 U\xaaC\xc388\x13\xc6H\x0f \x03\x9e\xa98\xa1\xc3\xe9\x06C\xd4\xb5\x18}4\xa9yA8\x1fQ\xdfN\x8e\xd7m\xee\xb8N\x98\xef\xff\xddR\xec~c\xcb\x93\x84\x7f\\x6\xedZ\x82\xa0\x1by\x17\x1a\xc8\x98\x99\x0f') (async) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a000000000000730110f4ffffffff9400000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xfffffffc}, 0x10}, 0x94) 5.014259923s ago: executing program 3 (id=9513): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x0) r2 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r2, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0xfffd, @remote}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000700)="fbd2b9ed29d8974a6ce75f08916a", 0xfe48}, {&(0x7f00000007c0)="d25bf710e1be938583f8fd9d41e17de159c996072e04e91d87cc599f2c175f6b5862de3d18e2401af6e90065d3eadf", 0x2f}], 0x2, 0x0, 0x0, 0x14000000}, 0x2000000000000000) 4.779119671s ago: executing program 3 (id=9515): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$kcm(0x10, 0x3, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01abfaf19bda1f7baee443001800f2b37cef6c883bbb17a99be50000000000000000000010010000020000000000"], &(0x7f0000000140)=""/237, 0x1a, 0xed, 0x1}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r3, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/20, @ANYRES32=r3, @ANYRESDEC=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x17, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) r5 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0xd, r5, 0x0) r7 = socket$kcm(0x2a, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r7, 0x891b, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000050000000300000000000010080000000300000000000011030000000000000000000000010000040400ecb4f50ed002e2a8d6a3f65103000000000000"], 0x0, 0x51}, 0x28) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40042409, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000a00000000000000000000000000000000b7f7295f2fa42ccd4b5c2cfcc07531d5cd61f465398eb94290bc70742d93357eb80ac8399a4318ba167e32cbf7de1f91e69cf6befb8508b3030000000000000070fac320e9d92e3f754901fc1485b19b5b59da554ed3b5d8a281", @ANYRES32=0x0, @ANYRES16=r1, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x4, 0xd, &(0x7f0000000700)=ANY=[@ANYRES64=r8, @ANYBLOB="0000000000000000b7080000000000007b8a10ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0xd1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b9040a00000000fe0500002015000600142603600e1209000a00000000000001060000b94dcf5c0468c1d67f6f94007134cfeee0800089e408e8d8ef52b40800de00e06bbace8017cbec4c2ee5a7cef4090000001fb79164075ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5035ccb29e00360db70100000040fad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a83954b43370e9701008400002d3bc75dc0bb9dd33e438c", 0xd8}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x26}, 0x28) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a0010000000028000031294", 0x2e}], 0x1}, 0x0) 4.704898053s ago: executing program 2 (id=9516): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffffe8, 0x0, 0xffffffffffffffff, 0x5a}, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x108282, 0xac5d, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f086dd", 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x48) 4.510437409s ago: executing program 0 (id=9517): r0 = socket$kcm(0x2b, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.kill\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2d0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x10c002, 0xac5d, 0x10000200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10}, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x19, 0x4, 0x4, 0x7ff, 0x0, 0xffffffffffffffff, 0x7f}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000004340)={0x6, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000540)={r3, 0x8, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff27, 0x0, 0x0}, 0x19) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r3, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x10047, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0xfffffffffffffde9, &(0x7f0000000400), &(0x7f0000000240), 0x8, 0xa3, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) setsockopt$sock_attach_bpf(r0, 0x6, 0x12, &(0x7f0000000200)=r1, 0x4) 4.451063071s ago: executing program 2 (id=9518): r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) r4 = socket$kcm(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) sendmsg$kcm(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000140)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a00100000000580607ee622", 0x2e}], 0x1}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00'}, 0x90) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r6 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0xa, 0x0, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000001240)}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r5, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x5}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24}, 0x94) r8 = socket$kcm(0x2, 0x2, 0x73) recvmsg$kcm(r8, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40002040) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="c554ab0000000004"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0xb, '\x00', r7}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a00)={0x1, 0x58, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$inet(r1, &(0x7f0000000ac0)={&(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10, &(0x7f00000008c0)=[{0x0}, {&(0x7f00000000c0)}, {&(0x7f0000000200)="b9d74e80efa2f775033819a5defb65a7e44ee2b508dd60aeef40a1fdc3ed67bf42d725349bc85f1adf0c6625c40b07067239537458d7e58d1b502f35e62262cbef18dcdd01db992454d1c3300ddb85619912500f2945728682dc2e34580a6f15f67c487c434fc40656b99c3b1892bf1745b107299565c277b3300f2a359628ca05388d08399a82ce0d8dc532d7e7c5eb5723cb1830355fc682972e658a850af4f32413916187b8bbc4baacb93db1fafc99d6f4634888ef27f893868813566c325c5e061416be2080db8e598824961e23081978ab19566ed9e0985539fd32394a5418cc9d93", 0xe5}, {&(0x7f0000000300)="6fa6e3440b55e4c0a86f9c544a5ec8b87ae401272f6b7e212a1eac1ec64db67d6f8b62fc6bbd006bbcf1f10eb2710bb629132a0611d88d2081d50a288093b7c348882c8878871c0eb9ddd4adbbc75b1e903fe5473faf581e0d424df29828d783a1197ac04e004d10f371a8d0d5036f53256e8ccce7ff02bb2e941e6f72fa4ca13ed0d6e810ed3d20ea6971beaf200503e5922e72", 0x94}, {&(0x7f00000003c0)="ce9489efee5d01d089366efbc456861b9b8abb8f70703356e119bdbb4edc89", 0x1f}, {&(0x7f0000000540)="9fcc2514e1c48d57d296a5d642e8716ba5968f503ae8c193684a8d70a0f27984f79f8797f369063f00d3606903b300e76a6a531c933a5ba5f7dd7106a39e9431e09f52fdcb1cda4104cbdb7ccc12bea5785b9e5c9ab73fd939e11ff8", 0x5c}, {&(0x7f0000000600)="13", 0x1}, {&(0x7f00000006c0)="06e741f29873cc79738b3f146ac74ca6e709104a274cd2a93be2dfce9ad577ad80f80f9d0c860f3ae4104cb8f37df8b19208e8fd48c6428febd965a4e2e6b8510ab46699914c0957abb2dceec82961eafb3108aef56a8668476a8606efb04657deedb321d9de14403f7a2fa3621f2fb8372b8b2035ec5a6a1d374f2b08f792cdb8387572a4ed9f6248e96b2ab558cc8ef6b7fcf9d0885d919e716f6a556087c005e2b80abc2515557cfa86f21ed1f3532b7880b9b3ac3387a60eab8ac3413283912a65ebe204956b0876f738d3131d9153e8a85dfc60e535387eec47ed7aab3ab845bc6391bf", 0xe6}, {&(0x7f00000007c0)="92ac3ebf14a41214889cc60e9e5c2f37d368f319b97156f84b8b07c0cbd863473f61156cd16145a3f7d94fa5097e82a387b5462543556d28bc1339cabb0496f1c40e684722f186665dccbd59d4e12dca24f694f7a2d616bed456db96719dc630045326f3e234c8447c5c376e94bc5c7d193fa8d6c82c1c1990507720efb727a617406f16ddee6642475e72d1f9e41826d2a9a2950d3efe4cc11b7a7e37bce3a08c3313818f132d5874c8e6e2d744807b06a4ba063ebaea469584220db24cebe9710815409848f82baa78485af60ed6e9e5441363bfc36dd723180850a616", 0xde}], 0x9, &(0x7f0000000a40)=[@ip_ttl={{0x14}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @private=0xa010100, @remote}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @local, @multicast1}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8000}}], 0x70}, 0x14) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x3}}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}}, &(0x7f0000000140)=""/237, 0x5a, 0xed, 0x1}, 0x20) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0xa, &(0x7f0000000080)=[{&(0x7f00000000c0)="6000000011007f059e", 0xc}, {&(0x7f0000000200)="78cabf2dfb73fc020700000000000602258f2e440ab8f9e6aaeb1ae2f6e8bcb5ee52dc06249798093c5102a1bca0b646a7ce904f6e6b788b3219c233e60ddc36024a99a63e72572c9f9b06f96137c8af12b66cb08fc63b", 0x57}], 0x2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x10, 0x64}, [@ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa1}], {0x95, 0x0, 0xb}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x141, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 1.658996288s ago: executing program 4 (id=9519): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810) recvmsg(r0, &(0x7f0000004300)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x61, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x7400}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000580)=ANY=[], 0xfe33) 1.616836959s ago: executing program 2 (id=9520): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="d8000000180081054e81f782db4cb904021d0800ff207c05e8fe55a10a0015000200142603600e12080005007f370401a8001600200006000500027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r1) r2 = socket$kcm(0x2, 0x200000000000006, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r1, 0x58, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x74, 0x74, 0x8, [@func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0x0, 0x1}, {0x8, 0x4}, {0x1, 0x2}, {0x5, 0x2}, {0x2, 0x5}, {0x4, 0x1}]}, @func={0x6, 0x0, 0x0, 0xc, 0x5}, @type_tag={0x5, 0x0, 0x0, 0x12, 0x1}, @int={0x5, 0x0, 0x0, 0x1, 0x0, 0x14, 0x0, 0x23}, @int={0x0, 0x0, 0x0, 0x1, 0x0, 0x14, 0x0, 0x4, 0x1}]}, {0x0, [0x71, 0x0, 0x0, 0x0, 0x30, 0x61]}}, &(0x7f0000000780)=""/244, 0x94, 0xf4, 0x0, 0x0, 0x10000, @value=r1}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c00)={r1, 0xe0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000009c0)=[0x0, 0x0], 0x0, 0xd2, &(0x7f0000000a00)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000a40), &(0x7f0000000a80), 0x8, 0x7e, 0x8, 0x8, &(0x7f0000000ac0)}}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0a000000560000004200000002"], 0x50) r7 = openat$cgroup(r1, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r7, &(0x7f0000000140)='memory.stat\x00', 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000280), 0xffff, r6}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0xb, 0xe, &(0x7f00000001c0)=@raw=[@alu={0x4, 0x1, 0x0, 0x8, 0x2, 0xfffffffffffffff8, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}], 0x0, 0x4, 0xd8, &(0x7f0000000500)=""/216, 0x41100, 0x14, '\x00', r3, @fallback=0x19, r4, 0x8, &(0x7f00000008c0)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000900)={0x2, 0x2, 0x3, 0x100}, 0x10, r5, r2, 0x0, &(0x7f0000000c40)=[r6, r1, r1], 0x0, 0x10, 0xf}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@ifindex=r8, 0x13, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1000000004006a7d79d4bde10c6e000004000000020000000000000023b331030000000000000011540e620e10bb7e9345ee2f96e6bf1981f6256b0e4b90cfc89945ea94710358f56121513ea1a32216a0ebb31b9a35fc1a564de84f4b9117b36a9724b683c2de9ff07752d87a610151a288a3", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=r8, @ANYRES32, @ANYBLOB='\x00'/25], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ec0)={0x11, 0x13, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x36eb7b60, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @exit, @btf_id={0x18, 0x8, 0x3, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000d40)='syzkaller\x00', 0x5, 0x5, &(0x7f0000000d80)=""/5, 0x41000, 0x20, '\x00', r8, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000dc0)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000e00)={0x8001, 0x9, 0xffff8000, 0x1000}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000e40)=[r1], &(0x7f0000000e80), 0x10, 0x8}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={0x1, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$inet(r0, &(0x7f0000000540)={&(0x7f0000000000)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, &(0x7f00000002c0)=[{&(0x7f00000000c0)="d876c214a53bce798406a9e127d05c85ec8d6bc37b92a133416ed5e008082b0b921e2a5faeb6f1d4e652146d1c9f3d5481a1e77bdd50ce29a0482628d665ed8ffcc76abe78823b6e298504052f5427b10ae5b0f73527fb24", 0x58}, {&(0x7f0000000200)="32acef8b09e3dcf0314269bbc7a1425f5cd8cafce5df6b6a24a8cacdb9a1849b1f89d61d305873955545adebbbe5cbabe04a8c62a417acbbeb4241384c18c23f40788414c5b9ff174b4e03fcfc4feaee1e5e42f9bff15208a37e3868af72c722e7fca1ba3fdb6493b22960043d70547340f155047035f72bbe51b800036b9e628a6dc22d664857b4d998c43dee00b28fe6e8d8343436276539814f9a222df4f7454de0a69b841fd4a38e9c9a41df5cfad3b5d1c2d0", 0xb5}], 0x2, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @empty, @multicast1}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xc}}], 0x58}, 0x800) 1.610262739s ago: executing program 3 (id=9521): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x80, 0x0) close(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x200800, 0x0) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) perf_event_open(0x0, 0xffffffffffffffff, 0x100000000, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x410300, 0x0) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad94ed406f21caf5adcf920569c00cc1199684fa75814709fea019af247c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c7160ec83070000020000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78ac02ca3cdf6a662db1c9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392955f4f979ea13201bafedcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd89346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca2533659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12282ce24463aaf28345bd168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f09000000000000004fc4bda3453602004535a976eacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a191852c9ae031db044b2353199546609f9f69a6cfefdf879d447df53f3b9b70d10355b00300000000000000553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f58fab987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45b418a18217747ae442e31560e5b741445ea2a1acee2a81425ff000000d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51423b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f88735fce5115dc83ed73d8ee4a91322608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf5000000000000fa08ad0631c4b839688b22c4da2a6bc4cf45854d221a2d5f96bc64647f15daa2ba79cd0f4254ed55217912ef84bd2927df82fc061aef2920c49b2a90886da75561173fa186cb7ee86dd4285c4721eb428c953296bb2f5d825da54dbef07c1b349b4901e093d13e6b9a0000009b5b22e887bc061d40bcaf0aa18623fd9b7179ccc692ba74b531b65c4decf9d080a8ac7e82d4cde1267aa64b2a94fd87a009e6742c2ddc3a9d7eccbb1831b1fa218277c2814a91cab7cb59c697166d6f1bb1a360470000000000000000000000000000000000000000000000000000f9f9b4ce7e871f507084c8c88e0652decbe579b03ed84ea94597dd1059620a050f69ea03b99b4e19d35f4a3b54e96ae2172effecec80f6baa4bf69a6ebf5392882df78b0983e662dc0cb64b77f3f006b6b25443197ae93f0be6de5a703d003f00720943c0e4b33af00000000000000000021a688b2d7007fcc4b59f719afb0b3b7e0aee306ca70fe42bf4984a68f40e1fc043a03a17e4744359b87dc27c82d51cbeb64e52a28daeb6a78d6fe06181ecc840000"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$kcm(0xa, 0x6, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) recvmsg$kcm(r4, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x43) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb25026a747e0114370595e4bb0b0489b1dc73", 0x2e}], 0x1}, 0x20048020) 1.547171101s ago: executing program 0 (id=9522): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x0, 0x61, 0x10, 0x9c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) r1 = socket$kcm(0x29, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000f40)={0x0, 0xffffffffffffffff, 0x0, 0x32, &(0x7f0000000000)='/proc/sys\x00\x00\x00\x00\x00\x00(O\x00\x00\x10\x04\xba?BVEm\xe39\xf7\xe3\x9es\xa8\xab%nN\xd4\xa2=\x11\xc8\xdd\x15\xcc\x00\x00\x00\x00'}, 0x30) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180), 0x10) sendmsg(r1, &(0x7f0000000e80)={&(0x7f0000000c40)=@llc={0x1a, 0x100, 0xff, 0x81, 0x9, 0xf, @random="fe3b05fc8a2c"}, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000cc0)="2b0197389fffdadb45ff6bcf140fc6d2680a3d0a8117694eae1142f507e97ef270f158203450e879b323370264a8018dadcb0fb0d773e51950577dfb23ea6b2507144718c7b48d3463", 0x49}, {&(0x7f0000000d40)="0ac3c85524d87f37bd24b7e78b2cbcf9b7f4145856b8631c8283bca3f6754e559bc2c66ec42bccec", 0x28}], 0x2, &(0x7f0000000dc0)=[{0x18, 0x113, 0xb, "400f"}, {0xa8, 0x111, 0x6, "dde3d6f7b6d67840b110d14c39eeed748749bd9ee984d14c7ff63f87be04544ea7b9ef1c45af80ea3b91245a5b3c72c1743073b49a04595fb5d52eb46e3b52e06b921cef0352a49cfe0c3b8bc240e30c814eff30f66ba247f3e3edb809c2863c580b6794b8eaad7764a4e642dcca1d58dffa27d24ee3b47c39d43ed820458f3e2cbe433c0e45ef6a4f2f152ddbb3bfa85df088e980"}], 0xc0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x47}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)=r0}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000f40)={r2, 0x58, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000f80)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000fc0)={0x1b, 0x0, 0x0, 0x7, 0x0, r2, 0xff800000, '\x00', r3, r4, 0x2, 0x5, 0x4}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r0, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000280), &(0x7f00000002c0)=[0x0], 0x0, 0xe3, &(0x7f00000003c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0xea, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@bloom_filter={0x1e, 0x9, 0x9, 0x2, 0x80, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x1, 0x9}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000c00)={&(0x7f0000000900)="67e16a89f50d56ea1f7b", &(0x7f0000000940)=""/174, &(0x7f0000000a00)="738040ef02addde55e59e35d98b1104978f6548061306dc2338cad40e68df3cf468177ff5c8679383671ac017ce4123cc02bf60ab518d7445fd7676f60323e3b057c225eb6985739483683bf8162a9befcb152538e6b8cbc7129dd0747e068dbcb4a62e5aadf9349be285ec9dac1cc3d9055741ee0232739ac599e45e9bd266abde79987ce3d10886fbd7cd25b82482b605896c85951dfee07d66f969c93ac6b0f85525ecd07f77ae984b603b49decb8ad3c9ba4462adb44e2c90035238e51a3011e8dfceccc5159882b65ef308ff544f7068cbf6960c845839a3b1f4e5a72a9819ddcd91e9ad2b5f5d92015959d63150cab1c2663", &(0x7f0000000b00)="0b9a4d7f630f105edb01b3f0559d7bb3a58a352e983da608dc69ad2f4834895580d190a2fb279b8eaaabcaf88166ded8e7038788dd17c6477f9b2a81f1d98dfbedb11a01490448f6095c23420193dba7d10476f1f352a447749e31b63675cab0e06abd73c835bfc6cf36865abefac52a47d472c9c494d6010cbc4770fc161e2a16c4f2e0198f2bcfd2f4a8e5e52d7c254269413d31c73a9339edb308138eedb576b6530ecd7f64e48a8f488c2a190717d408896bd012222a246313be553a1224212d64c5f2c7c4f9329a0ff91d76d4919d4c3a9d35d1b4d9", 0x3, r2, 0x4}, 0x38) r7 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x1}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb9d001800"], 0x0, 0x42}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001040)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x4, '\x00', r3, r4, 0x4, 0x3, 0x2}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x4, &(0x7f0000000140)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}], &(0x7f0000000180)='GPL\x00', 0x6, 0x48, &(0x7f00000001c0)=""/72, 0x41000, 0xb, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000640)={0x5, 0x9, 0xfff, 0x7fff}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000780)=[r6, r9], &(0x7f00000007c0)=[{0x1, 0x3, 0x7, 0x6}, {0x4, 0x5, 0x1, 0x8}, {0x5, 0x3, 0x3, 0xc}, {0x0, 0x4, 0x8}, {0x5, 0x4, 0x7, 0x9}, {0x0, 0x2, 0x3, 0x5}, {0x1, 0x3, 0xf, 0x9}, {0x3, 0x5, 0x6, 0x1}], 0x10, 0x10001}, 0x94) 1.546691821s ago: executing program 1 (id=9523): r0 = socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000b80)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|C\b\x00\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdd\x85\xaac{\x8c\x8ffp`-\xcd\xf6jh\xbf\x9c\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\x8b\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca^\xf9\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x96\x86\xdb\xa9\xd3\x01\xb2\xc7\xf8G\x069\x90,\xda\xf6\xc5\xcd\xec\xa3B\xc3\"4\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\x7f\xec\xb2\xc5E\x00\xdd\xf2e\xa8\xf1<\xb2\xc82\xbf=o\x00`\xc1A\'\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x92\xbb\xe3Y\x97\xc2') bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/20], 0x48) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d37, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x87, 0x100000001}, 0x113041, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000800)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x6}, 0xffffffffffffffff, 0x0, r3, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$kcm(0xa, 0x2, 0x3a) recvmsg(r4, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x40000100) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const]}}, &(0x7f0000000580)=""/211, 0x26, 0xd3, 0x1}, 0x28) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8916, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000001000)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed@n\x00\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xf3\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x9c\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff, 0xffffffffffffffff}) close(r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x880, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000100)=[{0x1d, 0x0, 0x3}, {0x34, 0x0, 0x0, 0xffffffff}, {}, {}, {0x6}]}) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000040)=""/9) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000008c0)=r5, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000021000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 1.291389669s ago: executing program 0 (id=9526): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0xa0281, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 1.254574351s ago: executing program 3 (id=9527): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffed968ef4}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b68"], 0xfdef) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000900000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0xa, &(0x7f0000000180), 0x4) recvmsg$unix(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40021103) r5 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x4e22, 0x4, @dev, 0xfffffffc}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x2004fc10) close(r5) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000c40)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000640)}], 0x1}, 0x3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x4}, 0x18) 1.149142854s ago: executing program 4 (id=9528): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r0 = getpid() perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0xc2ba, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000004}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xf, 0x3, 0x2) close(r1) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000000f0000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000be000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000200000000000000000000049a28a29f287d425d30000000030000000000000006040000fc0000000000", @ANYRES64=r1], 0xffffffffffffffff, 0x3e, 0x0, 0x2}, 0x28) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081084e81f782db44b904021d080006067c09e8fe55a10a0015400800142603600e120800160000001001a8001600a400014003", 0x39}], 0x1, 0x0, 0x0, 0x6000}, 0x0) r2 = socket$kcm(0x2b, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000007001000040200002500000001000000", @ANYRES32, @ANYBLOB='\x00\x00@\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000b5ffffff000000000f5c8922933599a1880e42d5b6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@typedef={0x7}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x2d}, 0x12) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r5, 0x20, &(0x7f00000002c0)}, 0x10) close(r3) socketpair(0x1, 0x1, 0x0, &(0x7f0000000300)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0xf6}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') sendmsg$inet(r2, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x2f8}, 0x20000081) sendmsg(0xffffffffffffffff, 0x0, 0x20000044) setsockopt$sock_attach_bpf(r2, 0x6, 0x19, &(0x7f0000000200)=r2, 0x21) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={&(0x7f0000000380)="2aadd1435bb99b680c72a2269c3d2d4ce42037b364728fbf24f2034ba58992cfd6be9355320fa50efc0ed204e02df0860ed83c4ebeb5e37add474817f2ff4102c3151296f50baf9c9b55cb63c3dc967168ff7c3653c3fc22bad19ffe1304711d82fc428b8d62d84f6cbc2ac713da79fd1932037216487e3e2314ec5fc729fbafe083af4098efe4bd8d410f12d355d20e35582ec19236445d706dc0d99f81076a82a268c46bf3bc3321684cd27b50db5daa047b1162cd3fcf102d5c061611f234d0ce18df3eadd7ce43ce58023f5873e31427b522b13bf5f0d1d19b0a31219ca78d2077429ce4bb47", 0xffffffffffffffff, 0x0, 0x0, 0x8}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000001a80)={0x0, 0x0, 0x0, &(0x7f0000001940)="a158ede4", 0x5, 0xffffffffffffffff, 0x4}, 0x38) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe551a250015000600149b0000001208000313eba96240a8002b", 0x33}], 0x1}, 0x4180) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0xfe33) 1.028461808s ago: executing program 1 (id=9529): r0 = perf_event_open$cgroup(&(0x7f00000006c0)={0x3, 0x80, 0x6, 0x6, 0x2, 0x8, 0x0, 0x9, 0x800, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x4, @perf_bp={0x0, 0x8}, 0x2, 0xfffffffffffff3ed, 0x200, 0x4, 0xfffffffffffffffe, 0x7, 0x81, 0x0, 0x7, 0x0, 0x9}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x3}, 0xc088, 0xac5d, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x84010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, @perf_config_ext={0xffff, 0x80}, 0x100c, 0x7, 0x1, 0x9, 0xfff, 0x7, 0x2}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000001d71187a000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000080)=r3, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0x9d, 0x0, &(0x7f0000000680)="7993ff011900000000a63b00008f20e94d079f199b8a1fb521f3756a955ecdf157902f64d1c3c941187f21467c767be90f8829742af2bc17d5721b550573478b6b8282040c5a3747186fdbb5cd07a005be37af4306c2444dad7bc6bee8ca671654ba67b740554a723ad450d2fe05e561efd5b5fd646a06d273ca188f346864bb2a4ba3f2ea1dfb3a21122eae0d8b60fad85a08720d94453f17dff13d4b", 0x0, 0x400, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) 1.026769018s ago: executing program 0 (id=9539): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0xc2ba, 0x2, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x29, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000700)='z', 0x1}], 0x1}, 0x40011) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x8, 0x1189d4c6500500a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x28, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001400)) perf_event_open(&(0x7f0000004100)={0x5, 0x80, 0x2, 0x3, 0x87, 0x0, 0x0, 0x1, 0x100, 0x5, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8001, 0x2, @perf_config_ext={0xffff8880b8727a20, 0x1}, 0x11018, 0xfffffffffffffffc, 0x6, 0x5, 0x0, 0x3, 0xc, 0x0, 0x80000000, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$kcm(0x2, 0x3, 0x106) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x43cd, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x2}, 0x8000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4861, 0x0, 0x546}, 0x0, 0x8, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r5, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="8000230d1100"}) sendmsg(r2, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000002d80)="0f", 0x1}, {0x0, 0x2}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x4d}, {0x0}], 0x9}, 0x0) 733.732667ms ago: executing program 2 (id=9530): r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) r4 = socket$kcm(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) sendmsg$kcm(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000140)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a00100000000580607ee622", 0x2e}], 0x1}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00'}, 0x90) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r6 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0xa, 0x0, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000001240)}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r5, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x5}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24}, 0x94) r8 = socket$kcm(0x2, 0x2, 0x73) recvmsg$kcm(r8, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40002040) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="c554ab0000000004"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0xb, '\x00', r7}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a00)={0x1, 0x58, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$inet(r1, &(0x7f0000000ac0)={&(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10, &(0x7f00000008c0)=[{0x0}, {&(0x7f00000000c0)}, {&(0x7f0000000200)="b9d74e80efa2f775033819a5defb65a7e44ee2b508dd60aeef40a1fdc3ed67bf42d725349bc85f1adf0c6625c40b07067239537458d7e58d1b502f35e62262cbef18dcdd01db992454d1c3300ddb85619912500f2945728682dc2e34580a6f15f67c487c434fc40656b99c3b1892bf1745b107299565c277b3300f2a359628ca05388d08399a82ce0d8dc532d7e7c5eb5723cb1830355fc682972e658a850af4f32413916187b8bbc4baacb93db1fafc99d6f4634888ef27f893868813566c325c5e061416be2080db8e598824961e23081978ab19566ed9e0985539fd32394a5418cc9d93", 0xe5}, {&(0x7f0000000300)="6fa6e3440b55e4c0a86f9c544a5ec8b87ae401272f6b7e212a1eac1ec64db67d6f8b62fc6bbd006bbcf1f10eb2710bb629132a0611d88d2081d50a288093b7c348882c8878871c0eb9ddd4adbbc75b1e903fe5473faf581e0d424df29828d783a1197ac04e004d10f371a8d0d5036f53256e8ccce7ff02bb2e941e6f72fa4ca13ed0d6e810ed3d20ea6971beaf200503e5922e72", 0x94}, {&(0x7f00000003c0)="ce9489efee5d01d089366efbc456861b9b8abb8f70703356e119bdbb4edc89", 0x1f}, {&(0x7f0000000540)="9fcc2514e1c48d57d296a5d642e8716ba5968f503ae8c193684a8d70a0f27984f79f8797f369063f00d3606903b300e76a6a531c933a5ba5f7dd7106a39e9431e09f52fdcb1cda4104cbdb7ccc12bea5785b9e5c9ab73fd939e11ff8", 0x5c}, {&(0x7f0000000600)="13", 0x1}, {&(0x7f00000006c0)="06e741f29873cc79738b3f146ac74ca6e709104a274cd2a93be2dfce9ad577ad80f80f9d0c860f3ae4104cb8f37df8b19208e8fd48c6428febd965a4e2e6b8510ab46699914c0957abb2dceec82961eafb3108aef56a8668476a8606efb04657deedb321d9de14403f7a2fa3621f2fb8372b8b2035ec5a6a1d374f2b08f792cdb8387572a4ed9f6248e96b2ab558cc8ef6b7fcf9d0885d919e716f6a556087c005e2b80abc2515557cfa86f21ed1f3532b7880b9b3ac3387a60eab8ac3413283912a65ebe204956b0876f738d3131d9153e8a85dfc60e535387eec47ed7aab3ab845bc6391bf", 0xe6}, {&(0x7f00000007c0)="92ac3ebf14a41214889cc60e9e5c2f37d368f319b97156f84b8b07c0cbd863473f61156cd16145a3f7d94fa5097e82a387b5462543556d28bc1339cabb0496f1c40e684722f186665dccbd59d4e12dca24f694f7a2d616bed456db96719dc630045326f3e234c8447c5c376e94bc5c7d193fa8d6c82c1c1990507720efb727a617406f16ddee6642475e72d1f9e41826d2a9a2950d3efe4cc11b7a7e37bce3a08c3313818f132d5874c8e6e2d744807b06a4ba063ebaea469584220db24cebe9710815409848f82baa78485af60ed6e9e5441363bfc36dd723180850a616", 0xde}], 0x9, &(0x7f0000000a40)=[@ip_ttl={{0x14}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @private=0xa010100, @remote}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @local, @multicast1}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8000}}], 0x70}, 0x14) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x3}}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}}, &(0x7f0000000140)=""/237, 0x5a, 0xed, 0x1}, 0x20) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0xa, &(0x7f0000000080)=[{&(0x7f00000000c0)="6000000011007f059e", 0xc}, {&(0x7f0000000200)="78cabf2dfb73fc020700000000000602258f2e440ab8f9e6aaeb1ae2f6e8bcb5ee52dc06249798093c5102a1bca0b646a7ce904f6e6b788b3219c233e60ddc36024a99a63e72572c9f9b06f96137c8af12b66cb08fc63b", 0x57}], 0x2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x10, 0x64}, [@ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa1}], {0x95, 0x0, 0xb}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x141, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 719.047907ms ago: executing program 3 (id=9531): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014751c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a0c93d47018c12e7ba8188a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab188dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b4896c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e547f7ad33850d9feccd0111a2e3700845dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005202000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a12489c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af14915f29b719f54926fc32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86ae826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa520000afe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da357f9e93ce055019c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c672b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981fd9086e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2826b47ad8ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b478abc5b196dd5308cb20c4e2a0bd702651bb39f10523102dcd8ece692159028f314e0d6bfa400475c6699fdc40efe0948e3cef7419a7f113134e5ee20fd87c4521ccfbd32d6f147f743d30866bdd86ca8bf0c7bcc475f4ed53517aaa51f1c151d859a7f0b53abd332c84bdad313e82ac3777a6f7f649ff8a25f6dfe09cb29213896b49a825257bf143e9fa3bbd47009e66fe5705b3ef2b40a182e408c680727d64e00e1ce508f8fd64ac6c84ccc28fc333067de63b9bb5daaa12ce60ee3779ded79651be69d2a413cd948a873dd7ad7017b150828cf100d3df8537f22aff58343c9ee966fceb594bbe10b911427f76a25a219be2f85287b7f83d323a30991067ad1369792166062085ff20c5fb9f6e4f78dd09c7d2d6ca3c8a5d0d26ccbe576f44a1bc94194817"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0xffffffffffffff16, 0x0}, 0x44080) sendmsg(0xffffffffffffffff, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003140)}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x820}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000600)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb170e7603acf9e433c2903bb6773f4b0130668a1e5b5e08d21d0b69c28ca3455aed65855c86f3d1e5789d26375a0d85eaf5e92e19c9affcf76e7a94e76556d2b104ebf645747fadc91460f4b3c94e1a89b51be4a6aa4c65285f988329a8163b69c51b801500a5bacd0463976e2960e2679ef2feee5e6ce6bb7", 0x97}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e086dd200000006006000aac14140ce0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4000}, 0x48) 393.128317ms ago: executing program 4 (id=9532): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$kcm(0x10, 0x3, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01abfaf19bda1f7baee443001800f2b37cef6c883bbb17a99be50000000000000000000010010000020000000000"], &(0x7f0000000140)=""/237, 0x1a, 0xed, 0x1}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r3, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/20, @ANYRES32=r3, @ANYRESDEC=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x17, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) r5 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0xd, r5, 0x0) r7 = socket$kcm(0x2a, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r7, 0x891b, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000050000000300000000000010080000000300000000000011030000000000000000000000010000040400ecb4f50ed002e2a8d6a3f65103000000000000"], 0x0, 0x51}, 0x28) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40042409, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000a00000000000000000000000000000000b7f7295f2fa42ccd4b5c2cfcc07531d5cd61f465398eb94290bc70742d93357eb80ac8399a4318ba167e32cbf7de1f91e69cf6befb8508b3030000000000000070fac320e9d92e3f754901fc1485b19b5b59da554ed3b5d8a281", @ANYRES32=0x0, @ANYRES16=r1, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x4, 0xd, &(0x7f0000000700)=ANY=[@ANYRES64=r8, @ANYBLOB="0000000000000000b7080000000000007b8a10ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0xd1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b9040a00000000fe0500002015000600142603600e1209000a00000000000001060000b94dcf5c0468c1d67f6f94007134cfeee0800089e408e8d8ef52b40800de00e06bbace8017cbec4c2ee5a7cef4090000001fb79164075ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5035ccb29e00360db70100000040fad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a83954b43370e9701008400002d3bc75dc0bb9dd33e438c", 0xd8}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x26}, 0x28) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a0010000000028000031294", 0x2e}], 0x1}, 0x0) 390.627757ms ago: executing program 3 (id=9543): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r0, 0x702, 0xe80, 0x0, &(0x7f0000000540)="e460334470b8d480eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x100010, 0x0, 0x8, 0x0, 0x4000002, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000100)="5c00000010006b906fdfe1ef704ad931c605876c1d0000007ea60864160af3650400120038002e000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f4d4938037e786a6d0bdd7fc", 0x51}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100", @ANYRES32, @ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) 307.20692ms ago: executing program 0 (id=9533): socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x19, 0xf, &(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYBLOB="0000000000000000b70200001400001e219999dcade5b2c9f000b7030000008900000000000031"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffffa4}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce2200"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) (async) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x1, 0x0, &(0x7f0000000040)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xf}, 0x10c002, 0xac5d, 0x2, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xf}, 0x10c002, 0xac5d, 0x2, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a000000000000", @ANYRES32=0x0, @ANYBLOB='\x00!\x00'/12, @ANYRES32=0x0], 0x48) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a000000000000", @ANYRES32=0x0, @ANYBLOB='\x00!\x00'/12, @ANYRES32=0x0], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xe, 0x81}, 0x100c, 0x7, 0xffff, 0x7, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000"], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000"], 0x48) 292.5252ms ago: executing program 1 (id=9534): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810) recvmsg(r0, &(0x7f0000004300)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x61, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x7400}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000580)=ANY=[], 0xfe33) 264.997482ms ago: executing program 2 (id=9535): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="d8000000180081054e81f782db4cb904021d0800ff207c05e8fe55a10a0015000200142603600e12080005007f370401a8001600200006000500027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r1) r2 = socket$kcm(0x2, 0x200000000000006, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r1, 0x58, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@func_proto={0x0, 0x7, 0x0, 0xd, 0x0, [{0x10, 0x1}, {0x0, 0x1}, {0x8, 0x4}, {0x1, 0x2}, {0x5, 0x2}, {0x2, 0x5}, {0x4, 0x1}]}, @func={0x6, 0x0, 0x0, 0xc, 0x5}, @type_tag={0x5, 0x0, 0x0, 0x12, 0x1}, @int={0x5, 0x0, 0x0, 0x1, 0x0, 0x14, 0x0, 0x23}, @int={0x0, 0x0, 0x0, 0x1, 0x0, 0x14, 0x0, 0x4, 0x1}]}}, &(0x7f0000000780)=""/244, 0x96, 0xf4, 0x0, 0x0, 0x10000, @value=r1}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c00)={r1, 0xe0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000009c0)=[0x0, 0x0], 0x0, 0xd2, &(0x7f0000000a00)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000a40), &(0x7f0000000a80), 0x8, 0x7e, 0x8, 0x8, &(0x7f0000000ac0)}}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0a000000560000004200000002"], 0x50) r7 = openat$cgroup(r1, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r7, &(0x7f0000000140)='memory.stat\x00', 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000280), 0xffff, r6}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0xb, 0xe, &(0x7f00000001c0)=@raw=[@alu={0x4, 0x1, 0x0, 0x8, 0x2, 0xfffffffffffffff8, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}], 0x0, 0x4, 0xd8, &(0x7f0000000500)=""/216, 0x41100, 0x14, '\x00', r3, @fallback=0x19, r4, 0x8, &(0x7f00000008c0)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000900)={0x2, 0x2, 0x3, 0x100}, 0x10, r5, r2, 0x0, &(0x7f0000000c40)=[r6, r1, r1], 0x0, 0x10, 0xf}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@ifindex=r8, 0x13, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1000000004006a7d79d4bde10c6e000004000000020000000000000023b331030000000000000011540e620e10bb7e9345ee2f96e6bf1981f6256b0e4b90cfc89945ea94710358f56121513ea1a32216a0ebb31b9a35fc1a564de84f4b9117b36a9724b683c2de9ff07752d87a610151a288a3", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=r8, @ANYRES32, @ANYBLOB='\x00'/25], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ec0)={0x11, 0x13, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x36eb7b60, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @exit, @btf_id={0x18, 0x8, 0x3, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000d40)='syzkaller\x00', 0x5, 0x5, &(0x7f0000000d80)=""/5, 0x41000, 0x20, '\x00', r8, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000dc0)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000e00)={0x8001, 0x9, 0xffff8000, 0x1000}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000e40)=[r1], &(0x7f0000000e80), 0x10, 0x8}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={0x1, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$inet(r0, &(0x7f0000000540)={&(0x7f0000000000)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, &(0x7f00000002c0)=[{&(0x7f00000000c0)="d876c214a53bce798406a9e127d05c85ec8d6bc37b92a133416ed5e008082b0b921e2a5faeb6f1d4e652146d1c9f3d5481a1e77bdd50ce29a0482628d665ed8ffcc76abe78823b6e298504052f5427b10ae5b0f73527fb24", 0x58}, {&(0x7f0000000200)="32acef8b09e3dcf0314269bbc7a1425f5cd8cafce5df6b6a24a8cacdb9a1849b1f89d61d305873955545adebbbe5cbabe04a8c62a417acbbeb4241384c18c23f40788414c5b9ff174b4e03fcfc4feaee1e5e42f9bff15208a37e3868af72c722e7fca1ba3fdb6493b22960043d70547340f155047035f72bbe51b800036b9e628a6dc22d664857b4d998c43dee00b28fe6e8d8343436276539814f9a222df4f7454de0a69b841fd4a38e9c9a41df5cfad3b5d1c2d0", 0xb5}], 0x2, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @empty, @multicast1}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xc}}], 0x58}, 0x800) 118.969236ms ago: executing program 1 (id=9536): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000180)="00f2565242fb0963a3bdb03926a27d5d41342721e5cc2217a94bc2e8cf268491c726a01bf8c7dd8c497f3719cd94476298db64295efbdd8312822de64afa9819bbd39994ed114495702063744c021703ca1fbba350ef7190b6cfeac6933f1a8d018238a96fae9b373313ded01d19b65c775c210139fa30d0af91e757198aa095bda404605f24ce13cfc4fa5643ccb023ef29332fb47eba34e9792f61daef501f8eb64978b9d334f0a81e8694691e8be9555bb0cf1aab3a8f5614aba23b4527dc89684b4ea0b69c592f129ac4ff20b7a474baa0bd46ae8ba7f6edf3e5f5b1f2b8ad4ccf", 0x0}, 0x48) (async) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f93924fc60040011000a7403004800000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 0s ago: executing program 0 (id=9537): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x80, 0x0) close(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x200800, 0x0) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) perf_event_open(0x0, 0xffffffffffffffff, 0x100000000, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x410300, 0x0) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$kcm(0xa, 0x6, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) recvmsg$kcm(r4, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x43) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb25026a747e0114370595e4bb0b0489b1dc73", 0x2e}], 0x1}, 0x20048020) kernel console output (not intermixed with test programs): JECTION: forcing a failure. [ 1525.626354][T30978] name failslab, interval 1, probability 0, space 0, times 0 [ 1525.639145][T30978] CPU: 1 PID: 30978 Comm: syz.3.8585 Not tainted syzkaller #0 [ 1525.646636][T30978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1525.656728][T30978] Call Trace: [ 1525.660047][T30978] [ 1525.663008][T30978] dump_stack_lvl+0x188/0x24e [ 1525.667732][T30978] ? show_regs_print_info+0x12/0x12 [ 1525.672968][T30978] ? load_image+0x400/0x400 [ 1525.677530][T30978] should_fail_ex+0x399/0x4d0 [ 1525.682334][T30978] should_failslab+0x5/0x20 [ 1525.686956][T30978] slab_pre_alloc_hook+0x59/0x310 [ 1525.691997][T30978] ? ida_alloc_range+0x5e1/0x860 [ 1525.697033][T30978] __kmem_cache_alloc_node+0x4f/0x260 [ 1525.702412][T30978] ? ida_alloc_range+0x5e1/0x860 [ 1525.707357][T30978] kmalloc_trace+0x26/0xe0 [ 1525.711907][T30978] ida_alloc_range+0x5e1/0x860 [ 1525.716690][T30978] ? __xdp_reg_mem_model+0x1f8/0x5c0 [ 1525.721989][T30978] ? idr_replace+0x1a0/0x1a0 [ 1525.726686][T30978] __xdp_reg_mem_model+0x214/0x5c0 [ 1525.731817][T30978] ? kvmalloc_node+0x6c/0x180 [ 1525.736535][T30978] ? xdp_reg_mem_model+0x30/0x30 [ 1525.741593][T30978] xdp_reg_mem_model+0x1e/0x30 [ 1525.746398][T30978] bpf_test_run_xdp_live+0x299/0x1a90 [ 1525.751787][T30978] ? 0xffffffffa0004440 [ 1525.755963][T30978] ? text_poke_copy+0x79/0x90 [ 1525.760688][T30978] ? 0xffffffffa0004440 [ 1525.764844][T30978] ? bpf_dispatcher_change_prog+0xcbb/0xf10 [ 1525.770753][T30978] ? 0xffffffffa0004440 [ 1525.774911][T30978] ? xdp_convert_md_to_buff+0x330/0x330 [ 1525.780494][T30978] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 1525.786754][T30978] ? bpf_test_init+0x119/0x140 [ 1525.791523][T30978] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1525.796994][T30978] bpf_prog_test_run_xdp+0x736/0xf10 [ 1525.802524][T30978] ? dev_put+0x80/0x80 [ 1525.806627][T30978] ? dev_put+0x80/0x80 [ 1525.810710][T30978] bpf_prog_test_run+0x31e/0x390 [ 1525.815661][T30978] __sys_bpf+0x62b/0x780 [ 1525.819917][T30978] ? bpf_link_show_fdinfo+0x380/0x380 [ 1525.825313][T30978] ? lock_chain_count+0x20/0x20 [ 1525.830206][T30978] __x64_sys_bpf+0x78/0x90 [ 1525.834648][T30978] do_syscall_64+0x4c/0xa0 [ 1525.839072][T30978] ? clear_bhb_loop+0x60/0xb0 [ 1525.843753][T30978] ? clear_bhb_loop+0x60/0xb0 [ 1525.848440][T30978] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1525.854343][T30978] RIP: 0033:0x7f156c59ce59 [ 1525.858768][T30978] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1525.878380][T30978] RSP: 002b:00007f156d4b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1525.886803][T30978] RAX: ffffffffffffffda RBX: 00007f156c815fa0 RCX: 00007f156c59ce59 [ 1525.894783][T30978] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 1525.902757][T30978] RBP: 00007f156d4b7090 R08: 0000000000000000 R09: 0000000000000000 [ 1525.910745][T30978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1525.918719][T30978] R13: 00007f156c816038 R14: 00007f156c815fa0 R15: 00007ffd6182b588 [ 1525.926803][T30978] [ 1526.327128][T30989] netlink: 'syz.3.8588': attribute type 2 has an invalid length. [ 1526.354288][T30989] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8588'. [ 1526.604528][T30997] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.8591'. [ 1526.668212][T30997] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 1527.140617][T31013] netlink: 'syz.1.8593': attribute type 3 has an invalid length. [ 1527.195020][T31013] netlink: 'syz.1.8593': attribute type 1 has an invalid length. [ 1527.226787][T31013] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.8593'. [ 1527.927610][T31032] netlink: 14 bytes leftover after parsing attributes in process `syz.0.8603'. [ 1528.212700][T31040] FAULT_INJECTION: forcing a failure. [ 1528.212700][T31040] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1528.255772][T31040] CPU: 0 PID: 31040 Comm: syz.2.8607 Not tainted syzkaller #0 [ 1528.263931][T31040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1528.274029][T31040] Call Trace: [ 1528.277369][T31040] [ 1528.280335][T31040] dump_stack_lvl+0x188/0x24e [ 1528.285068][T31040] ? show_regs_print_info+0x12/0x12 [ 1528.290318][T31040] ? load_image+0x400/0x400 [ 1528.294898][T31040] ? __might_fault+0xa6/0x120 [ 1528.299629][T31040] should_fail_ex+0x399/0x4d0 [ 1528.304361][T31040] copyin+0x1b/0x120 [ 1528.308297][T31040] _copy_from_iter+0x447/0x1130 [ 1528.313214][T31040] ? copyout_mc+0x110/0x110 [ 1528.317757][T31040] ? __virt_addr_valid+0x188/0x540 [ 1528.323005][T31040] ? __virt_addr_valid+0x188/0x540 [ 1528.328165][T31040] ? __virt_addr_valid+0x465/0x540 [ 1528.333326][T31040] ? __check_object_size+0x500/0xa40 [ 1528.338662][T31040] netlink_sendmsg+0x755/0xbd0 [ 1528.343564][T31040] ? netlink_getsockopt+0x550/0x550 [ 1528.348816][T31040] ? aa_sock_msg_perm+0x94/0x150 [ 1528.353934][T31040] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1528.359267][T31040] ? security_socket_sendmsg+0x7c/0xa0 [ 1528.364763][T31040] ? netlink_getsockopt+0x550/0x550 [ 1528.370011][T31040] ____sys_sendmsg+0x5be/0x970 [ 1528.375427][T31040] ? __sys_sendmsg_sock+0x30/0x30 [ 1528.380474][T31040] ? __import_iovec+0x315/0x500 [ 1528.385368][T31040] ? import_iovec+0x6f/0xa0 [ 1528.389904][T31040] ___sys_sendmsg+0x2a2/0x360 [ 1528.394636][T31040] ? __sys_sendmsg+0x290/0x290 [ 1528.399536][T31040] __se_sys_sendmsg+0x1bb/0x2a0 [ 1528.404454][T31040] ? __x64_sys_sendmsg+0x80/0x80 [ 1528.409450][T31040] ? lockdep_hardirqs_on+0x94/0x140 [ 1528.414682][T31040] do_syscall_64+0x4c/0xa0 [ 1528.419125][T31040] ? clear_bhb_loop+0x60/0xb0 [ 1528.423844][T31040] ? clear_bhb_loop+0x60/0xb0 [ 1528.428565][T31040] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1528.434493][T31040] RIP: 0033:0x7f8b9519ce59 [ 1528.438935][T31040] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1528.458577][T31040] RSP: 002b:00007f8b95fd6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1528.467033][T31040] RAX: ffffffffffffffda RBX: 00007f8b95415fa0 RCX: 00007f8b9519ce59 [ 1528.475098][T31040] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000006 [ 1528.483100][T31040] RBP: 00007f8b95fd6090 R08: 0000000000000000 R09: 0000000000000000 [ 1528.491093][T31040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1528.499095][T31040] R13: 00007f8b95416038 R14: 00007f8b95415fa0 R15: 00007ffe7038c618 [ 1528.507152][T31040] [ 1529.259862][T31071] netlink: 14 bytes leftover after parsing attributes in process `syz.0.8616'. [ 1529.951836][T31096] netlink: 'syz.0.8622': attribute type 2 has an invalid length. [ 1530.472856][T31111] ref_ctr_offset mismatch. inode: 0x229 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 1530.501726][T31109] netlink: 14 bytes leftover after parsing attributes in process `syz.3.8631'. [ 1530.744946][T31110] netlink: 'syz.2.8632': attribute type 46 has an invalid length. [ 1530.752948][T31110] netlink: 55 bytes leftover after parsing attributes in process `syz.2.8632'. [ 1531.113601][T31114] device syzkaller0 entered promiscuous mode [ 1531.450102][T31137] netlink: 'syz.4.8640': attribute type 3 has an invalid length. [ 1531.461920][T31137] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.8640'. [ 1537.996459][T31193] netlink: 'syz.4.8658': attribute type 3 has an invalid length. [ 1538.026067][T31193] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.8658'. [ 1539.183368][T31206] netlink: 'syz.2.8663': attribute type 10 has an invalid length. [ 1539.233498][T31206] netlink: 55 bytes leftover after parsing attributes in process `syz.2.8663'. [ 1539.279164][T31206] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 1539.827178][T31206] batman_adv: batadv0: Removing interface: veth1_vlan [ 1539.848364][T31209] netlink: 'syz.3.8657': attribute type 10 has an invalid length. [ 1539.859358][T31209] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8657'. [ 1539.876526][T31209] device ipvlan1 entered promiscuous mode [ 1539.919776][T31209] bridge0: port 3(ipvlan1) entered blocking state [ 1539.929431][T31209] bridge0: port 3(ipvlan1) entered disabled state [ 1539.980585][T31209] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1543.558914][T31254] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8678'. [ 1543.590911][T31261] netlink: 'syz.1.8679': attribute type 2 has an invalid length. [ 1543.632312][T31267] netlink: 'syz.3.8682': attribute type 9 has an invalid length. [ 1543.870564][T31272] bridge0: port 3(dummy0) entered disabled state [ 1543.932303][T31272] bridge0: port 2(bridge_slave_1) entered disabled state [ 1543.983432][T31272] device bridge_slave_0 left promiscuous mode [ 1544.010422][T31272] bridge0: port 1(bridge_slave_0) entered disabled state [ 1544.099617][T31284] netlink: 'syz.3.8688': attribute type 1 has an invalid length. [ 1544.120917][T31284] netlink: 'syz.3.8688': attribute type 3 has an invalid length. [ 1544.129120][T31284] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8688'. [ 1544.510927][T31286] device syzkaller0 entered promiscuous mode [ 1546.006410][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.012802][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1548.079612][T31308] netlink: 'syz.0.8696': attribute type 9 has an invalid length. [ 1548.224249][T31338] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.8703'. [ 1548.287925][ T48] Bluetooth: hci5: unexpected subevent 0x04 length: 150 > 11 [ 1548.391459][T31348] netlink: 'syz.1.8706': attribute type 10 has an invalid length. [ 1548.416679][T31350] netlink: 'syz.2.8709': attribute type 21 has an invalid length. [ 1551.735516][T31382] netlink: 56 bytes leftover after parsing attributes in process `syz.2.8718'. [ 1551.993627][T31399] netlink: 128 bytes leftover after parsing attributes in process `syz.0.8723'. [ 1552.064551][T31399] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1552.202806][T31407] netlink: 14 bytes leftover after parsing attributes in process `syz.4.8725'. [ 1552.304214][T31411] netlink: 'syz.2.8726': attribute type 10 has an invalid length. [ 1552.453991][T31420] netlink: 'syz.0.8728': attribute type 3 has an invalid length. [ 1552.463566][T31420] netlink: 'syz.0.8728': attribute type 8 has an invalid length. [ 1552.476485][T31420] netlink: 197344 bytes leftover after parsing attributes in process `syz.0.8728'. [ 1552.493085][T31411] bridge0: port 2(bridge_slave_1) entered disabled state [ 1552.502203][T31411] bridge0: port 1(bridge_slave_0) entered disabled state [ 1552.531162][T31411] bridge0: port 2(bridge_slave_1) entered blocking state [ 1552.538797][T31411] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1552.548679][T31411] bridge0: port 1(bridge_slave_0) entered blocking state [ 1552.555973][T31411] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1552.620358][T31411] team0: Port device bridge0 added [ 1552.647542][T31414] netlink: 64 bytes leftover after parsing attributes in process `syz.2.8726'. [ 1552.963606][T31428] netlink: 'syz.1.8729': attribute type 10 has an invalid length. [ 1553.038601][T31428] netlink: 64 bytes leftover after parsing attributes in process `syz.1.8729'. [ 1553.309534][T31442] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.8736'. [ 1553.397210][T31444] FAULT_INJECTION: forcing a failure. [ 1553.397210][T31444] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1553.410935][T31444] CPU: 1 PID: 31444 Comm: syz.0.8737 Not tainted syzkaller #0 [ 1553.418441][T31444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1553.428534][T31444] Call Trace: [ 1553.431843][T31444] [ 1553.434789][T31444] dump_stack_lvl+0x188/0x24e [ 1553.439496][T31444] ? show_regs_print_info+0x12/0x12 [ 1553.444729][T31444] ? load_image+0x400/0x400 [ 1553.449360][T31444] ? folio_mark_accessed+0x3ac/0x1460 [ 1553.454766][T31444] ? folio_activate_fn+0x2000/0x2000 [ 1553.460103][T31444] should_fail_ex+0x399/0x4d0 [ 1553.464815][T31444] copy_page_from_iter_atomic+0x21e/0x1280 [ 1553.470671][T31444] ? pipe_zero+0x140/0x140 [ 1553.475135][T31444] ? PageHeadHuge+0x8f/0x1c0 [ 1553.479784][T31444] ? shmem_write_begin+0x1b4/0x3f0 [ 1553.484940][T31444] generic_perform_write+0x34f/0x5c0 [ 1553.490280][T31444] ? generic_file_direct_write+0x330/0x330 [ 1553.496137][T31444] ? __file_remove_privs+0x5f0/0x5f0 [ 1553.501469][T31444] ? rwsem_write_trylock+0x135/0x1c0 [ 1553.506796][T31444] ? clear_nonspinnable+0x60/0x60 [ 1553.511857][T31444] ? generic_write_checks_count+0x3d9/0x4c0 [ 1553.517796][T31444] __generic_file_write_iter+0x148/0x2a0 [ 1553.523479][T31444] generic_file_write_iter+0xab/0x2e0 [ 1553.528903][T31444] vfs_write+0x4b1/0xa30 [ 1553.533190][T31444] ? file_end_write+0x250/0x250 [ 1553.538097][T31444] ? __fget_files+0x43d/0x4b0 [ 1553.542830][T31444] ? __fdget_pos+0x2ae/0x360 [ 1553.547459][T31444] ? ksys_write+0x71/0x250 [ 1553.551922][T31444] ksys_write+0x14c/0x250 [ 1553.556299][T31444] ? __ia32_sys_read+0x80/0x80 [ 1553.561116][T31444] ? lockdep_hardirqs_on+0x94/0x140 [ 1553.566361][T31444] do_syscall_64+0x4c/0xa0 [ 1553.570855][T31444] ? clear_bhb_loop+0x60/0xb0 [ 1553.575849][T31444] ? clear_bhb_loop+0x60/0xb0 [ 1553.580575][T31444] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1553.586544][T31444] RIP: 0033:0x7fae6059ce59 [ 1553.590989][T31444] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1553.610640][T31444] RSP: 002b:00007fae614b2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1553.619091][T31444] RAX: ffffffffffffffda RBX: 00007fae60815fa0 RCX: 00007fae6059ce59 [ 1553.627099][T31444] RDX: 0000000000040010 RSI: 0000200000000180 RDI: 0000000000000008 [ 1553.635099][T31444] RBP: 00007fae614b2090 R08: 0000000000000000 R09: 0000000000000000 [ 1553.643099][T31444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1553.651098][T31444] R13: 00007fae60816038 R14: 00007fae60815fa0 R15: 00007fffbcceed58 [ 1553.659117][T31444] [ 1553.778183][T31455] netlink: 14 bytes leftover after parsing attributes in process `syz.3.8740'. [ 1554.425360][T31477] netlink: 'syz.3.8747': attribute type 10 has an invalid length. [ 1554.585467][T31477] bridge0: port 2(bridge_slave_1) entered disabled state [ 1554.594516][T31477] bridge0: port 1(bridge_slave_0) entered disabled state [ 1554.659571][T31477] bridge0: port 2(bridge_slave_1) entered blocking state [ 1554.667636][T31477] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1554.677991][T31477] bridge0: port 1(bridge_slave_0) entered blocking state [ 1554.685982][T31477] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1554.759926][T31477] team0: Port device bridge0 added [ 1554.779290][T31484] netlink: 64 bytes leftover after parsing attributes in process `syz.3.8747'. [ 1554.926343][T31497] netlink: 14 bytes leftover after parsing attributes in process `syz.0.8753'. [ 1554.954921][T31498] netlink: 'syz.1.8752': attribute type 2 has an invalid length. [ 1555.050528][T31502] netlink: 'syz.3.8755': attribute type 11 has an invalid length. [ 1555.109376][T31502] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1555.560511][T31511] device syzkaller0 entered promiscuous mode [ 1558.751631][T31535] netlink: 'syz.2.8768': attribute type 10 has an invalid length. [ 1558.761521][T31535] bridge0: port 2(bridge_slave_1) entered disabled state [ 1558.768750][T31535] bridge0: port 1(bridge_slave_0) entered disabled state [ 1558.786385][T31533] __nla_validate_parse: 2 callbacks suppressed [ 1558.786404][T31533] netlink: 14 bytes leftover after parsing attributes in process `syz.3.8769'. [ 1558.815955][T31538] netlink: 64 bytes leftover after parsing attributes in process `syz.2.8768'. [ 1559.078450][T31551] netlink: 'syz.2.8775': attribute type 2 has an invalid length. [ 1559.154460][T31551] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8775'. [ 1560.102563][T31567] netlink: 'syz.3.8779': attribute type 28 has an invalid length. [ 1560.184402][T31567] netlink: 2 bytes leftover after parsing attributes in process `syz.3.8779'. [ 1560.258722][T31570] netlink: 14 bytes leftover after parsing attributes in process `syz.1.8781'. [ 1561.209848][T31596] netlink: 'syz.3.8788': attribute type 2 has an invalid length. [ 1561.234368][T31596] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8788'. [ 1561.574678][T31612] netlink: 14 bytes leftover after parsing attributes in process `syz.4.8794'. [ 1562.517902][T31630] netlink: 'syz.2.8802': attribute type 21 has an invalid length. [ 1562.544587][T31630] IPv6: NLM_F_CREATE should be specified when creating new route [ 1563.334626][T31643] netlink: 14 bytes leftover after parsing attributes in process `syz.4.8806'. [ 1563.444469][T20043] Bluetooth: hci0: command 0x0406 tx timeout [ 1563.814874][T31660] netlink: 'syz.1.8810': attribute type 2 has an invalid length. [ 1563.835283][T31660] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8810'. [ 1564.792215][T31675] netlink: 'syz.2.8816': attribute type 11 has an invalid length. [ 1564.824465][T31675] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.8816'. [ 1564.866651][T31673] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1564.984034][T31682] netlink: 'syz.0.8820': attribute type 21 has an invalid length. [ 1565.005812][T31682] netlink: 'syz.0.8820': attribute type 6 has an invalid length. [ 1565.024931][T31682] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8820'. [ 1565.125048][T31687] netlink: 14 bytes leftover after parsing attributes in process `syz.2.8822'. [ 1565.578375][T31699] netlink: 'syz.3.8825': attribute type 2 has an invalid length. [ 1565.627462][T31699] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8825'. [ 1565.964353][T31691] device syzkaller0 entered promiscuous mode [ 1570.395908][ T48] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1570.412701][ T4287] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1570.430456][ T4287] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1570.452336][ T4287] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1570.462319][ T4287] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1570.471694][ T4287] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1572.572196][T20043] Bluetooth: hci1: command 0x0409 tx timeout [ 1573.066489][T31712] netlink: 'syz.3.8828': attribute type 10 has an invalid length. [ 1573.075189][T31712] bridge0: port 2(bridge_slave_1) entered disabled state [ 1573.082431][T31712] bridge0: port 1(bridge_slave_0) entered disabled state [ 1573.104093][T31714] netlink: 64 bytes leftover after parsing attributes in process `syz.3.8828'. [ 1573.117690][T31725] netlink: 'syz.2.8833': attribute type 21 has an invalid length. [ 1573.126869][T31725] netlink: 'syz.2.8833': attribute type 6 has an invalid length. [ 1573.135251][T31725] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8833'. [ 1573.209253][T31737] netlink: 14 bytes leftover after parsing attributes in process `syz.4.8836'. [ 1573.309893][T31742] netlink: 'syz.2.8837': attribute type 2 has an invalid length. [ 1573.325914][T31742] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8837'. [ 1573.458000][T31732] chnl_net:caif_netlink_parms(): no params data found [ 1573.468839][T31754] netlink: 'syz.3.8838': attribute type 2 has an invalid length. [ 1573.479755][T31754] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8838'. [ 1573.642363][T31732] bridge0: port 1(bridge_slave_0) entered blocking state [ 1573.662030][T31732] bridge0: port 1(bridge_slave_0) entered disabled state [ 1573.688185][T31732] device bridge_slave_0 entered promiscuous mode [ 1573.719398][T31732] bridge0: port 2(bridge_slave_1) entered blocking state [ 1573.750275][T31732] bridge0: port 2(bridge_slave_1) entered disabled state [ 1573.786720][T31732] device bridge_slave_1 entered promiscuous mode [ 1573.913542][T31732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1573.983798][T31732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1574.142688][T31732] team0: Port device team_slave_0 added [ 1574.687850][T20043] Bluetooth: hci1: command 0x041b tx timeout [ 1575.370087][T31732] team0: Port device team_slave_1 added [ 1575.393469][T31766] netlink: 'syz.3.8842': attribute type 21 has an invalid length. [ 1575.411986][T31766] IPv6: NLM_F_CREATE should be specified when creating new route [ 1575.442682][T31732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1575.479535][T31732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1575.523087][T31732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1575.550292][T31732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1575.560661][T31732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1575.591776][T31732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1575.645344][T31732] device hsr_slave_0 entered promiscuous mode [ 1575.652361][T31732] device hsr_slave_1 entered promiscuous mode [ 1575.659730][T31732] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1575.667671][T31732] Cannot create hsr debugfs directory [ 1575.870980][T31780] netlink: 'syz.4.8845': attribute type 21 has an invalid length. [ 1575.882927][T31780] netlink: 'syz.4.8845': attribute type 3 has an invalid length. [ 1575.891162][T31780] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.8845'. [ 1575.991961][T31732] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1576.163300][T31732] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1576.180198][T31786] netlink: 'syz.4.8846': attribute type 21 has an invalid length. [ 1576.199880][T31786] netlink: 'syz.4.8846': attribute type 6 has an invalid length. [ 1576.208184][T31786] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8846'. [ 1576.325650][T31732] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1576.368626][T31788] netlink: 64 bytes leftover after parsing attributes in process `syz.3.8847'. [ 1576.402534][T31791] netlink: 14 bytes leftover after parsing attributes in process `syz.2.8848'. [ 1576.497893][T31732] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1576.600341][T31796] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8850'. [ 1576.730376][T20043] Bluetooth: hci1: command 0x040f tx timeout [ 1576.796451][T31732] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1576.868799][T31732] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1576.927562][T31732] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1576.938110][T31732] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1576.996360][T31732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1577.011582][T29181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1577.041337][T29181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1577.071328][T31732] 8021q: adding VLAN 0 to HW filter on device team0 [ 1577.109722][T26907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1577.128601][T26907] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1577.151103][T26907] bridge0: port 1(bridge_slave_0) entered blocking state [ 1577.158338][T26907] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1577.205726][T26907] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1577.233296][T31817] IPv6: NLM_F_CREATE should be specified when creating new route [ 1577.549706][T26907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1577.571290][T26907] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1577.593134][T26907] bridge0: port 2(bridge_slave_1) entered blocking state [ 1577.600489][T26907] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1577.779599][T26907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1577.890550][T26949] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1577.911958][T26949] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1577.926229][T26949] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1577.964004][T26949] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1577.997078][T29181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1578.025954][T29181] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1578.073388][T31732] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1578.117639][T31732] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1578.150112][T29181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1578.185310][T29181] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1578.196591][T29181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1578.208549][T29181] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1578.227631][T29181] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1578.355991][T31851] validate_nla: 8 callbacks suppressed [ 1578.356008][T31851] netlink: 'syz.1.8871': attribute type 21 has an invalid length. [ 1578.395913][T31851] netlink: 'syz.1.8871': attribute type 6 has an invalid length. [ 1578.403705][T31851] __nla_validate_parse: 5 callbacks suppressed [ 1578.403719][T31851] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8871'. [ 1578.461146][T31853] netlink: 97108 bytes leftover after parsing attributes in process `syz.3.8872'. [ 1578.629236][T31859] netlink: 'syz.1.8873': attribute type 10 has an invalid length. [ 1578.739496][T31861] netlink: 'syz.4.8874': attribute type 10 has an invalid length. [ 1578.804760][T20043] Bluetooth: hci1: command 0x0419 tx timeout [ 1578.941359][T31861] netlink: 64 bytes leftover after parsing attributes in process `syz.4.8874'. [ 1578.985687][T31866] netlink: 2 bytes leftover after parsing attributes in process `syz.1.8875'. [ 1579.033318][T31732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1579.065229][T29181] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1579.079766][T29181] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1579.170701][T26949] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1579.188831][T26949] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1579.225155][T31878] netlink: 'syz.2.8878': attribute type 10 has an invalid length. [ 1579.309305][T31878] team0: Device wg1 is of different type [ 1579.346748][T26954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1579.358032][T26954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1579.370550][T31732] device veth0_vlan entered promiscuous mode [ 1579.385132][T26954] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1579.394431][T26954] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1579.405907][T31732] device veth1_vlan entered promiscuous mode [ 1579.438498][T31732] device veth0_macvtap entered promiscuous mode [ 1579.466087][T26954] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1579.481631][T26954] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1579.503530][T26954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1579.513278][T26954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1579.522621][T26954] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1579.544910][T31732] device veth1_macvtap entered promiscuous mode [ 1579.566113][T31886] netlink: 'syz.4.8881': attribute type 21 has an invalid length. [ 1579.579841][T31886] IPv6: NLM_F_CREATE should be specified when creating new route [ 1579.712617][T26949] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1579.739513][T31732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1579.762664][T31732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1579.793391][T31732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1579.822462][T31732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1579.840602][T31732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1579.851606][T31732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1579.870631][T31732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1579.879267][T29182] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1579.898314][T29182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1579.912740][T31894] netlink: 'syz.1.8882': attribute type 21 has an invalid length. [ 1579.923743][T31894] netlink: 'syz.1.8882': attribute type 6 has an invalid length. [ 1579.936737][T31894] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8882'. [ 1580.022081][T31732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1580.032956][T31732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1580.043202][T31732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1580.053934][T31732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1580.063846][T31732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1580.076574][T31732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1580.090479][T31732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1580.123229][T29182] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1580.140169][T29182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1580.165062][T31732] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1580.179677][T31732] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1580.197824][T31732] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1580.208009][T31732] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1580.248575][T31900] netlink: 'syz.2.8884': attribute type 10 has an invalid length. [ 1580.320667][T31900] team0: Device vxcan1 is of different type [ 1580.447013][T31907] netlink: 'syz.3.8885': attribute type 21 has an invalid length. [ 1580.673908][T29182] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1580.692545][T29182] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1580.724711][T26949] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1580.772151][T31918] netlink: 97108 bytes leftover after parsing attributes in process `syz.2.8886'. [ 1580.835750][T31916] netlink: 64 bytes leftover after parsing attributes in process `syz.3.8888'. [ 1580.853001][T29181] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1580.898696][T29181] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1580.909060][T31924] netlink: 2 bytes leftover after parsing attributes in process `syz.4.8889'. [ 1580.943695][T31924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1580.968823][T31924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1580.994453][T31924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1581.018278][T31924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1581.046287][T31924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1581.061000][T31924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1581.072782][T31924] device batadv_slave_1 entered promiscuous mode [ 1581.094633][T29181] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1581.410070][T31932] netlink: 116376 bytes leftover after parsing attributes in process `syz.0.8831'. [ 1581.610437][T31934] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8892'. [ 1582.107818][T31945] team0: Device vxcan1 is of different type [ 1583.008658][ T4287] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1583.026874][ T48] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1583.037360][ T48] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1583.051518][ T48] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1583.061730][ T48] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1583.069474][ T48] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1583.339835][T26902] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1583.420531][T31969] device syzkaller0 entered promiscuous mode [ 1583.431096][T31982] FAULT_INJECTION: forcing a failure. [ 1583.431096][T31982] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1583.543328][T31982] CPU: 0 PID: 31982 Comm: syz.0.8909 Not tainted syzkaller #0 [ 1583.550904][T31982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1583.561013][T31982] Call Trace: [ 1583.564331][T31982] [ 1583.567308][T31982] dump_stack_lvl+0x188/0x24e [ 1583.572062][T31982] ? show_regs_print_info+0x12/0x12 [ 1583.577325][T31982] ? load_image+0x400/0x400 [ 1583.581907][T31982] ? __lock_acquire+0x7d10/0x7d10 [ 1583.587025][T31982] should_fail_ex+0x399/0x4d0 [ 1583.591781][T31982] _copy_from_user+0x2c/0x170 [ 1583.596521][T31982] __sys_bpf+0x2ea/0x780 [ 1583.600837][T31982] ? bpf_link_show_fdinfo+0x380/0x380 [ 1583.606311][T31982] ? lock_chain_count+0x20/0x20 [ 1583.611285][T31982] __x64_sys_bpf+0x78/0x90 [ 1583.615772][T31982] do_syscall_64+0x4c/0xa0 [ 1583.620232][T31982] ? clear_bhb_loop+0x60/0xb0 [ 1583.624959][T31982] ? clear_bhb_loop+0x60/0xb0 [ 1583.629700][T31982] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1583.635655][T31982] RIP: 0033:0x7f0c3659ce59 [ 1583.640122][T31982] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1583.659776][T31982] RSP: 002b:00007f0c37467028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1583.668248][T31982] RAX: ffffffffffffffda RBX: 00007f0c36815fa0 RCX: 00007f0c3659ce59 [ 1583.676270][T31982] RDX: 000000000000000c RSI: 0000200000000440 RDI: 000000000000000a [ 1583.684288][T31982] RBP: 00007f0c37467090 R08: 0000000000000000 R09: 0000000000000000 [ 1583.692308][T31982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1583.700325][T31982] R13: 00007f0c36816038 R14: 00007f0c36815fa0 R15: 00007fffa91a6928 [ 1583.708401][T31982] [ 1584.204612][T26902] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1584.469821][T26902] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1584.524800][T31970] chnl_net:caif_netlink_parms(): no params data found [ 1584.577274][T26902] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1584.879056][T31970] bridge0: port 1(bridge_slave_0) entered blocking state [ 1584.914704][T31970] bridge0: port 1(bridge_slave_0) entered disabled state [ 1584.931448][T31970] device bridge_slave_0 entered promiscuous mode [ 1584.952544][T32008] validate_nla: 6 callbacks suppressed [ 1584.952564][T32008] netlink: 'syz.3.8917': attribute type 21 has an invalid length. [ 1584.992435][T32008] netlink: 'syz.3.8917': attribute type 6 has an invalid length. [ 1585.000800][T32008] __nla_validate_parse: 1 callbacks suppressed [ 1585.000815][T32008] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8917'. [ 1585.056635][T31970] bridge0: port 2(bridge_slave_1) entered blocking state [ 1585.068970][T31970] bridge0: port 2(bridge_slave_1) entered disabled state [ 1585.091369][T31970] device bridge_slave_1 entered promiscuous mode [ 1585.124415][T20043] Bluetooth: hci3: command 0x0409 tx timeout [ 1585.228461][T31970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1585.258227][T32011] netlink: 14 bytes leftover after parsing attributes in process `syz.0.8918'. [ 1585.973339][T31970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1586.000041][T32014] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8920'. [ 1586.141604][T31970] team0: Port device team_slave_0 added [ 1586.188854][T31970] team0: Port device team_slave_1 added [ 1586.215260][T26902] device 0 left promiscuous mode [ 1586.294828][T31970] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1586.301830][T31970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1586.469680][T31970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1586.657923][T31970] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1586.670883][T32037] netlink: 97108 bytes leftover after parsing attributes in process `syz.2.8925'. [ 1586.697585][T31970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1586.791988][T31970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1587.204375][T20043] Bluetooth: hci3: command 0x041b tx timeout [ 1587.248561][T31970] device hsr_slave_0 entered promiscuous mode [ 1587.266562][T31970] device hsr_slave_1 entered promiscuous mode [ 1587.273851][T31970] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1587.294218][T31970] Cannot create hsr debugfs directory [ 1587.579784][T32052] netlink: 'syz.0.8928': attribute type 21 has an invalid length. [ 1587.630850][T32052] netlink: 'syz.0.8928': attribute type 6 has an invalid length. [ 1587.678480][T32052] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8928'. [ 1588.702224][T32072] netlink: 'syz.2.8931': attribute type 10 has an invalid length. [ 1588.893704][T32072] bridge0: port 2(bridge_slave_1) entered disabled state [ 1589.063052][T32072] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1589.216118][T32075] netlink: 14 bytes leftover after parsing attributes in process `syz.0.8933'. [ 1589.307437][T20043] Bluetooth: hci3: command 0x040f tx timeout [ 1590.443342][T32104] netlink: 97108 bytes leftover after parsing attributes in process `syz.4.8940'. [ 1591.192661][T32096] device lo entered promiscuous mode [ 1591.226688][T32116] netlink: 'syz.3.8941': attribute type 21 has an invalid length. [ 1591.244239][T32116] netlink: 'syz.3.8941': attribute type 6 has an invalid length. [ 1591.261783][T32116] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8941'. [ 1591.364500][T20043] Bluetooth: hci3: command 0x0419 tx timeout [ 1591.578300][T32132] netlink: 14 bytes leftover after parsing attributes in process `syz.3.8944'. [ 1591.878556][T32138] netlink: 'syz.0.8947': attribute type 10 has an invalid length. [ 1591.966709][T32144] netlink: 'syz.3.8948': attribute type 28 has an invalid length. [ 1591.978925][T32138] bridge0: port 2(bridge_slave_1) entered disabled state [ 1591.989045][T32138] bridge0: port 1(bridge_slave_0) entered disabled state [ 1592.022972][T32144] netlink: 'syz.3.8948': attribute type 29 has an invalid length. [ 1592.047899][T32144] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8948'. [ 1592.187528][T32138] bridge0: port 2(bridge_slave_1) entered blocking state [ 1592.195617][T32138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1592.205943][T32138] bridge0: port 1(bridge_slave_0) entered blocking state [ 1592.213890][T32138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1592.320257][T32138] team0: Port device bridge0 added [ 1592.392996][T32141] netlink: 64 bytes leftover after parsing attributes in process `syz.0.8947'. [ 1592.418971][T31970] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1592.457472][T31970] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1592.476734][T31970] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1592.508126][T31970] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1592.550781][T26902] device hsr_slave_0 left promiscuous mode [ 1592.571435][T26902] device hsr_slave_1 left promiscuous mode [ 1592.671516][T26902] device veth1_macvtap left promiscuous mode [ 1592.691764][T26902] device veth1_vlan left promiscuous mode [ 1592.922350][T32162] netlink: 97108 bytes leftover after parsing attributes in process `syz.0.8954'. [ 1594.175875][T32157] netlink: 'syz.2.8953': attribute type 21 has an invalid length. [ 1594.184048][T32157] netlink: 'syz.2.8953': attribute type 6 has an invalid length. [ 1594.192290][T32157] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8953'. [ 1594.244294][ T48] Bluetooth: hci2: command 0x0406 tx timeout [ 1594.333337][T31970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1594.352424][T26917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1594.362486][T26917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1594.375204][T31970] 8021q: adding VLAN 0 to HW filter on device team0 [ 1594.415819][T26917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1594.476366][T26917] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1594.492111][T26917] bridge0: port 1(bridge_slave_0) entered blocking state [ 1594.499330][T26917] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1594.532475][T26917] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1594.548789][T26917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1594.578332][T26917] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1594.605625][T26917] bridge0: port 2(bridge_slave_1) entered blocking state [ 1594.612915][T26917] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1594.651746][T26917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1594.719520][T32172] netlink: 14 bytes leftover after parsing attributes in process `syz.2.8957'. [ 1594.779290][T32176] netlink: 'syz.0.8960': attribute type 10 has an invalid length. [ 1594.798396][T32176] bridge0: port 2(bridge_slave_1) entered disabled state [ 1594.806699][T32176] bridge0: port 1(bridge_slave_0) entered disabled state [ 1594.884522][T26917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1594.924598][T29181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1594.942498][T29181] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1594.956309][T29181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1594.967653][T29181] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1594.977378][T32178] netlink: 64 bytes leftover after parsing attributes in process `syz.0.8960'. [ 1595.011180][T29181] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1595.060611][T29181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1595.088908][T29181] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1595.107318][T29181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1595.126640][T29181] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1595.155937][T31970] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1595.193877][T32191] netlink: 'syz.3.8963': attribute type 10 has an invalid length. [ 1595.214662][T32191] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8963'. [ 1595.243449][T32191] batman_adv: batadv0: Adding interface: veth1_vlan [ 1595.260648][T32191] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1595.313097][T32191] batman_adv: batadv0: Interface activated: veth1_vlan [ 1595.665211][T32207] netlink: 'syz.3.8966': attribute type 10 has an invalid length. [ 1595.707051][T32207] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8966'. [ 1595.780163][T32207] device dummy0 entered promiscuous mode [ 1595.802819][T32207] bridge0: port 3(dummy0) entered blocking state [ 1595.834973][T32207] bridge0: port 3(dummy0) entered disabled state [ 1595.927653][T32217] netlink: 64 bytes leftover after parsing attributes in process `syz.2.8969'. [ 1595.988654][T26949] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1596.014893][T26949] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1596.050864][T31970] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1596.111512][T32222] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8970'. [ 1596.132101][T26954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1596.185998][T26954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1596.238043][T32224] netlink: 14 bytes leftover after parsing attributes in process `syz.4.8971'. [ 1596.260886][T26949] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1596.295117][T26949] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1596.318616][T26949] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1596.343810][T26949] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1596.437242][T31970] device veth0_vlan entered promiscuous mode [ 1596.455900][T32230] validate_nla: 3 callbacks suppressed [ 1596.455940][T32230] netlink: 'syz.3.8974': attribute type 10 has an invalid length. [ 1596.523914][T31970] device veth1_vlan entered promiscuous mode [ 1596.548283][T32234] netlink: 64 bytes leftover after parsing attributes in process `syz.3.8974'. [ 1596.661936][T26902] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1596.686737][T26902] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1596.736393][T31970] device veth0_macvtap entered promiscuous mode [ 1596.827059][T32244] mac80211_hwsim hwsim80 ªªªªªª: renamed from wlan0 [ 1596.872776][T31970] device veth1_macvtap entered promiscuous mode [ 1596.985922][T31970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1597.039074][T31970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1597.074263][T31970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1597.104278][T31970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1597.124180][T31970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1597.144158][T31970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1597.154032][T31970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1597.179306][T31970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1597.193102][T31970] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1597.212213][T32254] netlink: 'syz.0.8980': attribute type 10 has an invalid length. [ 1597.260782][T32254] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8980'. [ 1597.305824][T32254] device dummy0 entered promiscuous mode [ 1597.335485][T32254] bridge0: port 3(dummy0) entered blocking state [ 1597.352387][T32254] bridge0: port 3(dummy0) entered disabled state [ 1597.372571][T26954] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1597.391263][T26954] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1597.422214][T26954] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1597.442245][T26954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1597.480555][T31970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1597.496481][T31970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1597.509860][T31970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1597.520900][T31970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1597.543356][T31970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1597.566262][T31970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1597.594161][T31970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1597.614153][T31970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1597.632729][T31970] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1597.666635][T32262] netlink: 'syz.3.8982': attribute type 10 has an invalid length. [ 1597.679986][T32263] netlink: 64 bytes leftover after parsing attributes in process `syz.3.8982'. [ 1597.690954][T26949] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1597.711103][T26949] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1597.720428][T32268] netlink: 'syz.0.8983': attribute type 21 has an invalid length. [ 1597.760341][T32268] netlink: 'syz.0.8983': attribute type 6 has an invalid length. [ 1597.785705][T32268] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8983'. [ 1597.817910][T31970] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1597.855536][T31970] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1597.894634][T31970] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1597.923896][T31970] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1597.965840][T32273] netlink: 14 bytes leftover after parsing attributes in process `syz.4.8984'. [ 1598.154776][T32278] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.8986'. [ 1598.235962][T26949] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1598.270293][T26949] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1598.299176][T29181] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1598.339957][T26954] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1598.358803][T26954] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1598.393386][T29181] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1598.413236][T32288] netlink: 'syz.4.8988': attribute type 10 has an invalid length. [ 1598.520560][T32291] delete_channel: no stack [ 1599.053295][T32312] netlink: 'syz.4.8996': attribute type 21 has an invalid length. [ 1599.119614][T32312] netlink: 'syz.4.8996': attribute type 6 has an invalid length. [ 1599.238568][T32313] mac80211_hwsim hwsim96 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1599.910879][T32335] netlink: 'syz.3.9002': attribute type 10 has an invalid length. [ 1600.371345][T32354] netlink: 'syz.3.9009': attribute type 21 has an invalid length. [ 1600.502307][T32356] device dummy0 entered promiscuous mode [ 1600.542258][T32356] bridge0: port 3(dummy0) entered blocking state [ 1600.594390][T32356] bridge0: port 3(dummy0) entered disabled state [ 1600.603284][T32356] bridge0: port 3(dummy0) entered blocking state [ 1600.609878][T32356] bridge0: port 3(dummy0) entered forwarding state [ 1601.479600][T32381] validate_nla: 2 callbacks suppressed [ 1601.479634][T32381] netlink: 'syz.0.9019': attribute type 10 has an invalid length. [ 1601.523546][T32381] __nla_validate_parse: 8 callbacks suppressed [ 1601.523591][T32381] netlink: 64 bytes leftover after parsing attributes in process `syz.0.9019'. [ 1601.703558][T32387] netlink: 'syz.0.9023': attribute type 21 has an invalid length. [ 1601.725558][T32387] netlink: 'syz.0.9023': attribute type 6 has an invalid length. [ 1601.746856][T32387] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9023'. [ 1602.435253][T32400] netlink: 14 bytes leftover after parsing attributes in process `syz.3.9026'. [ 1603.081145][T32413] delete_channel: no stack [ 1603.136786][T32418] netlink: 'syz.2.9033': attribute type 10 has an invalid length. [ 1603.240480][T32418] netlink: 64 bytes leftover after parsing attributes in process `syz.2.9033'. [ 1603.423638][T32422] netlink: 'syz.1.9035': attribute type 21 has an invalid length. [ 1603.505322][T32422] netlink: 'syz.1.9035': attribute type 6 has an invalid length. [ 1603.513120][T32422] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9035'. [ 1603.925813][T32436] FAULT_INJECTION: forcing a failure. [ 1603.925813][T32436] name failslab, interval 1, probability 0, space 0, times 0 [ 1603.980647][T32436] CPU: 1 PID: 32436 Comm: syz.2.9039 Not tainted syzkaller #0 [ 1603.988187][T32436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1603.998268][T32436] Call Trace: [ 1604.001562][T32436] [ 1604.004510][T32436] dump_stack_lvl+0x188/0x24e [ 1604.009214][T32436] ? sctp_sendmsg+0x165d/0x2a40 [ 1604.014089][T32436] ? ___sys_sendmsg+0x2a2/0x360 [ 1604.018961][T32436] ? show_regs_print_info+0x12/0x12 [ 1604.024184][T32436] ? load_image+0x400/0x400 [ 1604.028738][T32436] should_fail_ex+0x399/0x4d0 [ 1604.033440][T32436] should_failslab+0x5/0x20 [ 1604.037960][T32436] slab_pre_alloc_hook+0x59/0x310 [ 1604.043103][T32436] ? sctp_add_bind_addr+0x89/0x350 [ 1604.048240][T32436] __kmem_cache_alloc_node+0x4f/0x260 [ 1604.053644][T32436] ? sctp_add_bind_addr+0x89/0x350 [ 1604.058778][T32436] kmalloc_trace+0x26/0xe0 [ 1604.063236][T32436] sctp_add_bind_addr+0x89/0x350 [ 1604.068208][T32436] sctp_copy_local_addr_list+0x311/0x4e0 [ 1604.073878][T32436] ? sctp_copy_local_addr_list+0xa1/0x4e0 [ 1604.079633][T32436] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 1604.085732][T32436] ? sctp_v6_is_any+0x60/0x70 [ 1604.090440][T32436] ? sctp_copy_one_addr+0x93/0x660 [ 1604.095575][T32436] sctp_bind_addr_copy+0xaf/0x3c0 [ 1604.100624][T32436] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 1604.106986][T32436] sctp_connect_new_asoc+0x2f5/0x6a0 [ 1604.112310][T32436] ? __sctp_connect+0xd80/0xd80 [ 1604.117197][T32436] ? __local_bh_enable_ip+0x136/0x1c0 [ 1604.122607][T32436] ? _local_bh_enable+0xa0/0xa0 [ 1604.127504][T32436] ? sctp_endpoint_lookup_assoc+0x77/0x260 [ 1604.133349][T32436] ? sctp_endpoint_lookup_assoc+0x77/0x260 [ 1604.139204][T32436] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 1604.144787][T32436] ? security_sctp_bind_connect+0x85/0xb0 [ 1604.150549][T32436] sctp_sendmsg+0x165d/0x2a40 [ 1604.155277][T32436] ? sctp_getsockopt+0x8a0/0x8a0 [ 1604.160244][T32436] ? __lock_acquire+0x7d10/0x7d10 [ 1604.165301][T32436] ? aa_af_perm+0x340/0x340 [ 1604.169835][T32436] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 1604.176304][T32436] ? inet_sendmsg+0x78/0x2f0 [ 1604.180934][T32436] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1604.186255][T32436] ? security_socket_sendmsg+0x7c/0xa0 [ 1604.191839][T32436] ? inet_send_prepare+0x260/0x260 [ 1604.196977][T32436] ____sys_sendmsg+0x5be/0x970 [ 1604.201792][T32436] ? __sys_sendmsg_sock+0x30/0x30 [ 1604.206846][T32436] ? __import_iovec+0x315/0x500 [ 1604.211738][T32436] ? import_iovec+0x6f/0xa0 [ 1604.216284][T32436] ___sys_sendmsg+0x2a2/0x360 [ 1604.221000][T32436] ? __sys_sendmsg+0x290/0x290 [ 1604.225841][T32436] ? __lock_acquire+0x7d10/0x7d10 [ 1604.230927][T32436] __se_sys_sendmsg+0x1bb/0x2a0 [ 1604.235816][T32436] ? __x64_sys_sendmsg+0x80/0x80 [ 1604.240891][T32436] ? lockdep_hardirqs_on+0x94/0x140 [ 1604.246122][T32436] do_syscall_64+0x4c/0xa0 [ 1604.250575][T32436] ? clear_bhb_loop+0x60/0xb0 [ 1604.255280][T32436] ? clear_bhb_loop+0x60/0xb0 [ 1604.259985][T32436] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1604.265913][T32436] RIP: 0033:0x7f8b9519ce59 [ 1604.270362][T32436] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1604.290087][T32436] RSP: 002b:00007f8b95fb5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1604.298539][T32436] RAX: ffffffffffffffda RBX: 00007f8b95416090 RCX: 00007f8b9519ce59 [ 1604.306548][T32436] RDX: 0000000000000000 RSI: 0000200000000f00 RDI: 0000000000000004 [ 1604.314555][T32436] RBP: 00007f8b95fb5090 R08: 0000000000000000 R09: 0000000000000000 [ 1604.322569][T32436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1604.330568][T32436] R13: 00007f8b95416128 R14: 00007f8b95416090 R15: 00007ffe7038c618 [ 1604.338590][T32436] [ 1604.795382][T32447] netlink: 'syz.1.9042': attribute type 10 has an invalid length. [ 1604.834841][T32447] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9042'. [ 1604.976806][T32453] netlink: 'syz.0.9046': attribute type 10 has an invalid length. [ 1605.084403][T32453] netlink: 64 bytes leftover after parsing attributes in process `syz.0.9046'. [ 1605.350996][T32460] netlink: 'syz.0.9050': attribute type 21 has an invalid length. [ 1605.397530][T32460] netlink: 'syz.0.9050': attribute type 6 has an invalid length. [ 1605.428266][T32460] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9050'. [ 1607.456315][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.462693][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.873497][T32488] netlink: 'syz.0.9057': attribute type 11 has an invalid length. [ 1607.886109][T32488] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.9057'. [ 1608.007552][T32493] validate_nla: 1 callbacks suppressed [ 1608.007589][T32493] netlink: 'syz.2.9060': attribute type 10 has an invalid length. [ 1608.700030][T32487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1608.723827][T32493] netlink: 64 bytes leftover after parsing attributes in process `syz.2.9060'. [ 1608.779700][T32502] netlink: 'syz.3.9063': attribute type 21 has an invalid length. [ 1608.788901][T32502] netlink: 'syz.3.9063': attribute type 6 has an invalid length. [ 1608.798360][T32502] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9063'. [ 1608.899983][T32506] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.9064'. [ 1608.937184][T32506] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 1609.527006][T20043] Bluetooth: hci5: command 0x0406 tx timeout [ 1610.331085][T32535] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9075'. [ 1610.610960][T32541] netlink: 'syz.1.9077': attribute type 10 has an invalid length. [ 1610.663039][T32541] bridge0: port 3(dummy0) entered disabled state [ 1610.670054][T32541] bridge0: port 2(bridge_slave_1) entered disabled state [ 1610.678983][T32541] bridge0: port 1(bridge_slave_0) entered disabled state [ 1610.807248][T32541] bridge0: port 3(dummy0) entered blocking state [ 1610.814532][T32541] bridge0: port 3(dummy0) entered forwarding state [ 1610.824743][T32541] bridge0: port 2(bridge_slave_1) entered blocking state [ 1610.832421][T32541] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1610.840815][T32541] bridge0: port 1(bridge_slave_0) entered blocking state [ 1610.848640][T32541] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1610.979833][T32555] netlink: 97108 bytes leftover after parsing attributes in process `syz.0.9082'. [ 1610.996420][T32541] team0: Port device bridge0 added [ 1611.018190][T32545] netlink: 'syz.2.9078': attribute type 21 has an invalid length. [ 1611.027121][T32545] netlink: 'syz.2.9078': attribute type 6 has an invalid length. [ 1611.035308][T32545] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9078'. [ 1611.045796][T32548] netlink: 64 bytes leftover after parsing attributes in process `syz.1.9077'. [ 1611.680801][T32578] netlink: 14 bytes leftover after parsing attributes in process `syz.1.9091'. [ 1611.812386][T32586] FAULT_INJECTION: forcing a failure. [ 1611.812386][T32586] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1611.852643][T32586] CPU: 0 PID: 32586 Comm: syz.2.9092 Not tainted syzkaller #0 [ 1611.860180][T32586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1611.870270][T32586] Call Trace: [ 1611.873578][T32586] [ 1611.876571][T32586] dump_stack_lvl+0x188/0x24e [ 1611.881464][T32586] ? show_regs_print_info+0x12/0x12 [ 1611.886947][T32586] ? load_image+0x400/0x400 [ 1611.891706][T32586] ? __lock_acquire+0x7d10/0x7d10 [ 1611.898184][T32586] ? perf_trace_lock_acquire+0x100/0x3e0 [ 1611.903878][T32586] should_fail_ex+0x399/0x4d0 [ 1611.908616][T32586] _copy_from_user+0x2c/0x170 [ 1611.913362][T32586] ___sys_sendmsg+0x1c3/0x360 [ 1611.918064][T32586] ? __sys_sendmsg+0x290/0x290 [ 1611.922851][T32586] ? __lock_acquire+0x7d10/0x7d10 [ 1611.927916][T32586] __se_sys_sendmsg+0x1bb/0x2a0 [ 1611.933918][T32586] ? __x64_sys_sendmsg+0x80/0x80 [ 1611.939165][T32586] ? lockdep_hardirqs_on+0x94/0x140 [ 1611.944564][T32586] do_syscall_64+0x4c/0xa0 [ 1611.949316][T32586] ? clear_bhb_loop+0x60/0xb0 [ 1611.954032][T32586] ? clear_bhb_loop+0x60/0xb0 [ 1611.958733][T32586] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1611.964643][T32586] RIP: 0033:0x7f8b9519ce59 [ 1611.969066][T32586] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1611.988721][T32586] RSP: 002b:00007f8b95f94028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1611.997156][T32586] RAX: ffffffffffffffda RBX: 00007f8b95416180 RCX: 00007f8b9519ce59 [ 1612.005410][T32586] RDX: 0000000000000014 RSI: 0000200000000000 RDI: 0000000000000005 [ 1612.013422][T32586] RBP: 00007f8b95f94090 R08: 0000000000000000 R09: 0000000000000000 [ 1612.021423][T32586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1612.029406][T32586] R13: 00007f8b95416218 R14: 00007f8b95416180 R15: 00007ffe7038c618 [ 1612.037401][T32586] [ 1612.062864][T32578] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1612.123836][T32578] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1612.153748][T32578] bond0 (unregistering): Released all slaves [ 1612.274362][T32588] netlink: 'syz.0.9093': attribute type 21 has an invalid length. [ 1612.282285][T32588] netlink: 'syz.0.9093': attribute type 6 has an invalid length. [ 1612.297890][T32588] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9093'. [ 1612.501752][T32595] netlink: 'syz.3.9094': attribute type 10 has an invalid length. [ 1612.681189][T32597] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1612.708857][T32597] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1612.751111][T32597] bond0 (unregistering): Released all slaves [ 1613.689596][T32623] tipc: Started in network mode [ 1613.697206][T32623] tipc: Node identity 9215a268, cluster identity 4711 [ 1613.714466][T32623] tipc: Node number set to 2450891368 [ 1614.068996][T32622] FAULT_INJECTION: forcing a failure. [ 1614.068996][T32622] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1614.108135][T32622] CPU: 1 PID: 32622 Comm: syz.0.9104 Not tainted syzkaller #0 [ 1614.115758][T32622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1614.125929][T32622] Call Trace: [ 1614.129311][T32622] [ 1614.132345][T32622] dump_stack_lvl+0x188/0x24e [ 1614.137070][T32622] ? show_regs_print_info+0x12/0x12 [ 1614.142551][T32622] ? load_image+0x400/0x400 [ 1614.147089][T32622] ? __lock_acquire+0x7d10/0x7d10 [ 1614.152355][T32622] should_fail_ex+0x399/0x4d0 [ 1614.157156][T32622] _copy_to_user+0x2c/0x130 [ 1614.161705][T32622] bpf_test_finish+0x198/0x600 [ 1614.166694][T32622] ? convert_skb_to___skb+0x420/0x420 [ 1614.172109][T32622] ? bpf_test_init+0x119/0x140 [ 1614.176923][T32622] bpf_prog_test_run_xdp+0x80a/0xf10 [ 1614.182246][T32622] ? dev_put+0x80/0x80 [ 1614.186524][T32622] ? dev_put+0x80/0x80 [ 1614.190792][T32622] bpf_prog_test_run+0x31e/0x390 [ 1614.195756][T32622] __sys_bpf+0x62b/0x780 [ 1614.200023][T32622] ? bpf_link_show_fdinfo+0x380/0x380 [ 1614.205715][T32622] ? lock_chain_count+0x20/0x20 [ 1614.210956][T32622] __x64_sys_bpf+0x78/0x90 [ 1614.215419][T32622] do_syscall_64+0x4c/0xa0 [ 1614.219841][T32622] ? clear_bhb_loop+0x60/0xb0 [ 1614.224546][T32622] ? clear_bhb_loop+0x60/0xb0 [ 1614.232419][T32622] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1614.238428][T32622] RIP: 0033:0x7f0c3659ce59 [ 1614.242862][T32622] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1614.263764][T32622] RSP: 002b:00007f0c37467028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1614.272414][T32622] RAX: ffffffffffffffda RBX: 00007f0c36815fa0 RCX: 00007f0c3659ce59 [ 1614.280574][T32622] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 1614.288746][T32622] RBP: 00007f0c37467090 R08: 0000000000000000 R09: 0000000000000000 [ 1614.297095][T32622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1614.305336][T32622] R13: 00007f0c36816038 R14: 00007f0c36815fa0 R15: 00007fffa91a6928 [ 1614.313529][T32622] [ 1614.560061][T32633] netlink: 'syz.0.9107': attribute type 21 has an invalid length. [ 1614.582154][T32633] netlink: 'syz.0.9107': attribute type 6 has an invalid length. [ 1614.639079][T32633] __nla_validate_parse: 3 callbacks suppressed [ 1614.639098][T32633] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9107'. [ 1617.766127][T32659] netlink: 'syz.1.9113': attribute type 10 has an invalid length. [ 1617.801597][T32659] bridge0: port 3(dummy0) entered disabled state [ 1617.808950][T32659] bridge0: port 2(bridge_slave_1) entered disabled state [ 1617.816947][T32659] bridge0: port 1(bridge_slave_0) entered disabled state [ 1618.000712][T32662] netlink: 'syz.4.9115': attribute type 21 has an invalid length. [ 1618.013726][T32662] netlink: 'syz.4.9115': attribute type 6 has an invalid length. [ 1618.024415][T32662] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9115'. [ 1618.042897][T32665] netlink: 64 bytes leftover after parsing attributes in process `syz.1.9113'. [ 1618.312835][T32677] netlink: 97108 bytes leftover after parsing attributes in process `syz.1.9120'. [ 1618.394470][T32678] netlink: 'syz.3.9121': attribute type 21 has an invalid length. [ 1618.429509][T32678] netlink: 'syz.3.9121': attribute type 6 has an invalid length. [ 1618.477832][T32678] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9121'. [ 1619.327515][T32698] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.9126'. [ 1619.423988][T32698] netlink: zone id is out of range [ 1619.437477][T32698] netlink: zone id is out of range [ 1619.482404][T32698] netlink: zone id is out of range [ 1619.541553][T32698] netlink: zone id is out of range [ 1619.564474][T32698] netlink: zone id is out of range [ 1619.580154][T32698] netlink: zone id is out of range [ 1619.618637][T32698] netlink: zone id is out of range [ 1619.638642][T32698] netlink: zone id is out of range [ 1619.652882][T32698] netlink: zone id is out of range [ 1619.671589][T32707] netlink: 'syz.0.9131': attribute type 21 has an invalid length. [ 1619.690689][T32698] netlink: zone id is out of range [ 1619.698834][T32707] netlink: 'syz.0.9131': attribute type 6 has an invalid length. [ 1619.732578][T32707] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9131'. [ 1619.767736][T32705] netlink: 'syz.4.9130': attribute type 10 has an invalid length. [ 1619.801791][T32708] netlink: 64 bytes leftover after parsing attributes in process `syz.4.9130'. [ 1620.042778][T32713] FAULT_INJECTION: forcing a failure. [ 1620.042778][T32713] name failslab, interval 1, probability 0, space 0, times 0 [ 1620.082301][T32713] CPU: 0 PID: 32713 Comm: syz.3.9133 Not tainted syzkaller #0 [ 1620.089847][T32713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1620.099946][T32713] Call Trace: [ 1620.103351][T32713] [ 1620.106320][T32713] dump_stack_lvl+0x188/0x24e [ 1620.111146][T32713] ? show_regs_print_info+0x12/0x12 [ 1620.116397][T32713] ? load_image+0x400/0x400 [ 1620.121049][T32713] ? verify_lock_unused+0x140/0x140 [ 1620.126307][T32713] ? perf_trace_lock+0x301/0x390 [ 1620.131302][T32713] should_fail_ex+0x399/0x4d0 [ 1620.136040][T32713] should_failslab+0x5/0x20 [ 1620.140577][T32713] slab_pre_alloc_hook+0x59/0x310 [ 1620.145669][T32713] kmem_cache_alloc+0x56/0x2f0 [ 1620.150482][T32713] ? skb_clone+0x1e7/0x370 [ 1620.154978][T32713] skb_clone+0x1e7/0x370 [ 1620.159267][T32713] __netlink_deliver_tap+0x3ed/0x800 [ 1620.164625][T32713] ? netlink_deliver_tap+0x2e/0x1b0 [ 1620.169882][T32713] netlink_deliver_tap+0x19c/0x1b0 [ 1620.175149][T32713] netlink_unicast+0x728/0x8d0 [ 1620.180062][T32713] netlink_sendmsg+0x8ad/0xbd0 [ 1620.185107][T32713] ? netlink_getsockopt+0x550/0x550 [ 1620.190459][T32713] ? aa_sock_msg_perm+0x94/0x150 [ 1620.195456][T32713] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1620.200775][T32713] ? security_socket_sendmsg+0x7c/0xa0 [ 1620.206277][T32713] ? netlink_getsockopt+0x550/0x550 [ 1620.211535][T32713] ____sys_sendmsg+0x5be/0x970 [ 1620.216368][T32713] ? __sys_sendmsg_sock+0x30/0x30 [ 1620.221527][T32713] ? __import_iovec+0x315/0x500 [ 1620.226447][T32713] ? import_iovec+0x6f/0xa0 [ 1620.231024][T32713] ___sys_sendmsg+0x2a2/0x360 [ 1620.235764][T32713] ? __sys_sendmsg+0x290/0x290 [ 1620.240608][T32713] ? __lock_acquire+0x7d10/0x7d10 [ 1620.245728][T32713] __se_sys_sendmsg+0x1bb/0x2a0 [ 1620.250634][T32713] ? __x64_sys_sendmsg+0x80/0x80 [ 1620.255665][T32713] ? lockdep_hardirqs_on+0x94/0x140 [ 1620.260915][T32713] do_syscall_64+0x4c/0xa0 [ 1620.265369][T32713] ? clear_bhb_loop+0x60/0xb0 [ 1620.270098][T32713] ? clear_bhb_loop+0x60/0xb0 [ 1620.274835][T32713] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1620.280770][T32713] RIP: 0033:0x7f156c59ce59 [ 1620.285316][T32713] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1620.304967][T32713] RSP: 002b:00007f156d4b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1620.313441][T32713] RAX: ffffffffffffffda RBX: 00007f156c815fa0 RCX: 00007f156c59ce59 [ 1620.321468][T32713] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000006 [ 1620.329657][T32713] RBP: 00007f156d4b7090 R08: 0000000000000000 R09: 0000000000000000 [ 1620.337675][T32713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1620.345694][T32713] R13: 00007f156c816038 R14: 00007f156c815fa0 R15: 00007ffd6182b588 [ 1620.353744][T32713] [ 1620.412773][T26954] device wlan1 left promiscuous mode [ 1620.427780][T26954] team0: Port device wlan1 removed [ 1620.450734][T32715] netlink: 'syz.0.9134': attribute type 21 has an invalid length. [ 1620.459156][T32715] netlink: 'syz.0.9134': attribute type 6 has an invalid length. [ 1620.469141][T32715] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9134'. [ 1620.484517][T32713] netlink: 2 bytes leftover after parsing attributes in process `syz.3.9133'. [ 1620.506249][T32713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1620.528235][T32713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1620.554615][T32713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1620.567856][T32727] netlink: 97108 bytes leftover after parsing attributes in process `syz.1.9137'. [ 1620.578094][T32713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1620.592681][T32713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1620.612109][T32713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1620.622756][T32713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1620.634748][T32713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1620.645951][T32713] device batadv_slave_1 entered promiscuous mode [ 1620.652803][T32723] netlink: 'syz.2.9132': attribute type 2 has an invalid length. [ 1620.960219][T26954] device veth1_macvtap left promiscuous mode [ 1621.054715][T26954] device veth1_vlan left promiscuous mode [ 1621.093963][T26954] device veth0_vlan left promiscuous mode [ 1621.142089][T32744] netlink: 'syz.1.9144': attribute type 29 has an invalid length. [ 1621.912009][T26954] device team_slave_1 left promiscuous mode [ 1621.918913][T26954] team0 (unregistering): Port device team_slave_1 removed [ 1621.973734][T26954] device team_slave_0 left promiscuous mode [ 1621.980897][T26954] team0 (unregistering): Port device team_slave_0 removed [ 1622.446101][T32746] netlink: 'syz.4.9142': attribute type 2 has an invalid length. [ 1622.453925][T32746] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9142'. [ 1622.474221][T32744] netlink: 'syz.1.9144': attribute type 29 has an invalid length. [ 1622.482384][T32750] netlink: 164 bytes leftover after parsing attributes in process `syz.1.9144'. [ 1622.504976][T32752] netlink: 'syz.0.9145': attribute type 10 has an invalid length. [ 1622.528142][T32753] netlink: 64 bytes leftover after parsing attributes in process `syz.0.9145'. [ 1622.751485][T32759] can: request_module (can-proto-0) failed. [ 1622.777104][T32761] can: request_module (can-proto-0) failed. [ 1622.783367][ T301] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9149'. [ 1623.814728][ T317] netlink: 97108 bytes leftover after parsing attributes in process `syz.4.9154'. [ 1624.772853][ T335] validate_nla: 3 callbacks suppressed [ 1624.772872][ T335] netlink: 'syz.4.9162': attribute type 21 has an invalid length. [ 1624.802902][ T335] netlink: 'syz.4.9162': attribute type 6 has an invalid length. [ 1624.818589][ T335] __nla_validate_parse: 2 callbacks suppressed [ 1624.818607][ T335] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9162'. [ 1624.858878][ T331] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.9161'. [ 1624.885721][ T334] netlink: 'syz.2.9160': attribute type 10 has an invalid length. [ 1624.937321][ T334] netlink: 64 bytes leftover after parsing attributes in process `syz.2.9160'. [ 1625.149373][ T345] FAULT_INJECTION: forcing a failure. [ 1625.149373][ T345] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1625.234055][ T345] CPU: 1 PID: 345 Comm: syz.4.9164 Not tainted syzkaller #0 [ 1625.241419][ T345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1625.251591][ T345] Call Trace: [ 1625.254892][ T345] [ 1625.257841][ T345] dump_stack_lvl+0x188/0x24e [ 1625.262566][ T345] ? show_regs_print_info+0x12/0x12 [ 1625.267798][ T345] ? load_image+0x400/0x400 [ 1625.272333][ T345] ? __lock_acquire+0x7d10/0x7d10 [ 1625.277415][ T345] should_fail_ex+0x399/0x4d0 [ 1625.282124][ T345] _copy_from_user+0x2c/0x170 [ 1625.286927][ T345] ___sys_sendmsg+0x1c3/0x360 [ 1625.291643][ T345] ? __sys_sendmsg+0x290/0x290 [ 1625.296467][ T345] ? __lock_acquire+0x7d10/0x7d10 [ 1625.301556][ T345] __se_sys_sendmsg+0x1bb/0x2a0 [ 1625.306444][ T345] ? __x64_sys_sendmsg+0x80/0x80 [ 1625.311454][ T345] ? lockdep_hardirqs_on+0x94/0x140 [ 1625.316704][ T345] do_syscall_64+0x4c/0xa0 [ 1625.321166][ T345] ? clear_bhb_loop+0x60/0xb0 [ 1625.325878][ T345] ? clear_bhb_loop+0x60/0xb0 [ 1625.330596][ T345] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1625.336551][ T345] RIP: 0033:0x7f7d4a99ce59 [ 1625.340996][ T345] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1625.360895][ T345] RSP: 002b:00007f7d4b821028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1625.369342][ T345] RAX: ffffffffffffffda RBX: 00007f7d4ac15fa0 RCX: 00007f7d4a99ce59 [ 1625.377344][ T345] RDX: 0000000022044880 RSI: 00002000000004c0 RDI: 0000000000000005 [ 1625.385346][ T345] RBP: 00007f7d4b821090 R08: 0000000000000000 R09: 0000000000000000 [ 1625.393432][ T345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1625.401425][ T345] R13: 00007f7d4ac16038 R14: 00007f7d4ac15fa0 R15: 00007fffc8914ff8 [ 1625.409438][ T345] [ 1625.909760][ T352] device lo entered promiscuous mode [ 1626.023593][ T364] netlink: 97108 bytes leftover after parsing attributes in process `syz.1.9170'. [ 1626.127598][ T372] netlink: 'syz.2.9169': attribute type 2 has an invalid length. [ 1626.144465][ T372] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9169'. [ 1626.159910][ T368] netlink: 14 bytes leftover after parsing attributes in process `syz.3.9171'. [ 1626.263345][ T368] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1626.319082][ T368] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1626.359985][ T368] bond0 (unregistering): Released all slaves [ 1626.522004][ T380] netlink: 'syz.4.9174': attribute type 21 has an invalid length. [ 1626.534625][ T380] netlink: 'syz.4.9174': attribute type 6 has an invalid length. [ 1626.574289][ T380] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9174'. [ 1626.889187][ T395] netlink: 'syz.1.9179': attribute type 7 has an invalid length. [ 1627.089806][ T400] netlink: 'syz.2.9182': attribute type 21 has an invalid length. [ 1627.167837][ T411] FAULT_INJECTION: forcing a failure. [ 1627.167837][ T411] name failslab, interval 1, probability 0, space 0, times 0 [ 1627.316808][ T411] CPU: 1 PID: 411 Comm: syz.4.9185 Not tainted syzkaller #0 [ 1627.324190][ T411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1627.334268][ T411] Call Trace: [ 1627.337555][ T411] [ 1627.340516][ T411] dump_stack_lvl+0x188/0x24e [ 1627.345218][ T411] ? sctp_sendmsg+0x165d/0x2a40 [ 1627.350081][ T411] ? ___sys_sendmsg+0x2a2/0x360 [ 1627.354947][ T411] ? show_regs_print_info+0x12/0x12 [ 1627.360150][ T411] ? load_image+0x400/0x400 [ 1627.364697][ T411] should_fail_ex+0x399/0x4d0 [ 1627.369390][ T411] should_failslab+0x5/0x20 [ 1627.373901][ T411] slab_pre_alloc_hook+0x59/0x310 [ 1627.378942][ T411] ? sctp_add_bind_addr+0x89/0x350 [ 1627.384067][ T411] __kmem_cache_alloc_node+0x4f/0x260 [ 1627.389458][ T411] ? sctp_add_bind_addr+0x89/0x350 [ 1627.394579][ T411] kmalloc_trace+0x26/0xe0 [ 1627.399037][ T411] sctp_add_bind_addr+0x89/0x350 [ 1627.404012][ T411] sctp_copy_local_addr_list+0x311/0x4e0 [ 1627.409696][ T411] ? sctp_copy_local_addr_list+0xa1/0x4e0 [ 1627.415431][ T411] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 1627.421507][ T411] ? sctp_v6_is_any+0x60/0x70 [ 1627.426203][ T411] ? sctp_copy_one_addr+0x93/0x660 [ 1627.431326][ T411] sctp_bind_addr_copy+0xaf/0x3c0 [ 1627.436365][ T411] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 1627.442714][ T411] sctp_connect_new_asoc+0x2f5/0x6a0 [ 1627.448015][ T411] ? __sctp_connect+0xd80/0xd80 [ 1627.452877][ T411] ? __local_bh_enable_ip+0x136/0x1c0 [ 1627.458264][ T411] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 1627.463822][ T411] ? security_sctp_bind_connect+0x85/0xb0 [ 1627.469556][ T411] sctp_sendmsg+0x165d/0x2a40 [ 1627.474269][ T411] ? sctp_getsockopt+0x8a0/0x8a0 [ 1627.479216][ T411] ? __might_fault+0xa6/0x120 [ 1627.483908][ T411] ? aa_af_perm+0x340/0x340 [ 1627.488421][ T411] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 1627.494869][ T411] ? inet_sendmsg+0xe5/0x2f0 [ 1627.499472][ T411] ? inet_send_prepare+0x260/0x260 [ 1627.504589][ T411] ____sys_sendmsg+0x5be/0x970 [ 1627.509378][ T411] ? __sys_sendmsg_sock+0x30/0x30 [ 1627.514409][ T411] ? __import_iovec+0x315/0x500 [ 1627.519287][ T411] ? import_iovec+0x6f/0xa0 [ 1627.523813][ T411] ___sys_sendmsg+0x2a2/0x360 [ 1627.528699][ T411] ? __sys_sendmsg+0x290/0x290 [ 1627.533564][ T411] ? __lock_acquire+0x7d10/0x7d10 [ 1627.538687][ T411] __se_sys_sendmsg+0x1bb/0x2a0 [ 1627.543558][ T411] ? __x64_sys_sendmsg+0x80/0x80 [ 1627.548581][ T411] ? lockdep_hardirqs_on+0x94/0x140 [ 1627.553816][ T411] do_syscall_64+0x4c/0xa0 [ 1627.558266][ T411] ? clear_bhb_loop+0x60/0xb0 [ 1627.562973][ T411] ? clear_bhb_loop+0x60/0xb0 [ 1627.567693][ T411] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1627.573627][ T411] RIP: 0033:0x7f7d4a99ce59 [ 1627.578063][ T411] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1627.597790][ T411] RSP: 002b:00007f7d4b821028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1627.606327][ T411] RAX: ffffffffffffffda RBX: 00007f7d4ac15fa0 RCX: 00007f7d4a99ce59 [ 1627.614337][ T411] RDX: 0000000000000041 RSI: 0000200000002dc0 RDI: 0000000000000004 [ 1627.622347][ T411] RBP: 00007f7d4b821090 R08: 0000000000000000 R09: 0000000000000000 [ 1627.630357][ T411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1627.638452][ T411] R13: 00007f7d4ac16038 R14: 00007f7d4ac15fa0 R15: 00007fffc8914ff8 [ 1627.646480][ T411] [ 1627.751164][ T414] netlink: 97108 bytes leftover after parsing attributes in process `syz.0.9186'. [ 1628.561698][ T430] FAULT_INJECTION: forcing a failure. [ 1628.561698][ T430] name failslab, interval 1, probability 0, space 0, times 0 [ 1628.611751][ T430] CPU: 1 PID: 430 Comm: syz.0.9191 Not tainted syzkaller #0 [ 1628.619113][ T430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1628.629380][ T430] Call Trace: [ 1628.632689][ T430] [ 1628.635651][ T430] dump_stack_lvl+0x188/0x24e [ 1628.640371][ T430] ? show_regs_print_info+0x12/0x12 [ 1628.645609][ T430] ? load_image+0x400/0x400 [ 1628.650153][ T430] ? __might_sleep+0xd0/0xd0 [ 1628.654776][ T430] ? __lock_acquire+0x7d10/0x7d10 [ 1628.659850][ T430] should_fail_ex+0x399/0x4d0 [ 1628.664568][ T430] should_failslab+0x5/0x20 [ 1628.669100][ T430] slab_pre_alloc_hook+0x59/0x310 [ 1628.674158][ T430] kmem_cache_alloc_node+0x5a/0x320 [ 1628.679401][ T430] ? __alloc_skb+0xfc/0x7e0 [ 1628.683950][ T430] __alloc_skb+0xfc/0x7e0 [ 1628.688314][ T430] ? netlink_autobind+0xda/0x300 [ 1628.693302][ T430] netlink_sendmsg+0x654/0xbd0 [ 1628.698109][ T430] ? netlink_getsockopt+0x550/0x550 [ 1628.703343][ T430] ? aa_sock_msg_perm+0x94/0x150 [ 1628.708319][ T430] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1628.713634][ T430] ? security_socket_sendmsg+0x7c/0xa0 [ 1628.719382][ T430] ? netlink_getsockopt+0x550/0x550 [ 1628.724591][ T430] ____sys_sendmsg+0x5be/0x970 [ 1628.729367][ T430] ? __sys_sendmsg_sock+0x30/0x30 [ 1628.734395][ T430] ? __import_iovec+0x315/0x500 [ 1628.739267][ T430] ? import_iovec+0x6f/0xa0 [ 1628.743801][ T430] ___sys_sendmsg+0x2a2/0x360 [ 1628.748502][ T430] ? __sys_sendmsg+0x290/0x290 [ 1628.753283][ T430] ? __lock_acquire+0x7d10/0x7d10 [ 1628.758331][ T430] __se_sys_sendmsg+0x1bb/0x2a0 [ 1628.763191][ T430] ? __x64_sys_sendmsg+0x80/0x80 [ 1628.768139][ T430] ? lockdep_hardirqs_on+0x94/0x140 [ 1628.773347][ T430] do_syscall_64+0x4c/0xa0 [ 1628.777763][ T430] ? clear_bhb_loop+0x60/0xb0 [ 1628.782461][ T430] ? clear_bhb_loop+0x60/0xb0 [ 1628.787148][ T430] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1628.793052][ T430] RIP: 0033:0x7f0c3659ce59 [ 1628.797469][ T430] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1628.817088][ T430] RSP: 002b:00007f0c37467028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1628.825513][ T430] RAX: ffffffffffffffda RBX: 00007f0c36815fa0 RCX: 00007f0c3659ce59 [ 1628.833493][ T430] RDX: 000000000004a046 RSI: 0000200000000040 RDI: 0000000000000003 [ 1628.841470][ T430] RBP: 00007f0c37467090 R08: 0000000000000000 R09: 0000000000000000 [ 1628.849446][ T430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1628.857418][ T430] R13: 00007f0c36816038 R14: 00007f0c36815fa0 R15: 00007fffa91a6928 [ 1628.865403][ T430] [ 1628.912115][ T434] netlink: 'syz.4.9192': attribute type 2 has an invalid length. [ 1628.959875][ T434] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9192'. [ 1629.246107][ T444] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.9195'. [ 1629.382999][ T451] netlink: 'syz.0.9198': attribute type 21 has an invalid length. [ 1630.157734][ T471] __nla_validate_parse: 3 callbacks suppressed [ 1630.157854][ T471] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.9208'. [ 1630.403469][ T484] validate_nla: 2 callbacks suppressed [ 1630.403491][ T484] netlink: 'syz.1.9211': attribute type 2 has an invalid length. [ 1630.474532][ T484] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9211'. [ 1630.555514][ T488] netlink: 'syz.4.9212': attribute type 21 has an invalid length. [ 1630.608320][ T488] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.9212'. [ 1630.815900][ T495] netlink: 'syz.4.9214': attribute type 21 has an invalid length. [ 1630.854456][ T495] netlink: 'syz.4.9214': attribute type 6 has an invalid length. [ 1630.862281][ T495] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9214'. [ 1631.204711][ T503] tipc: Started in network mode [ 1631.209653][ T503] tipc: Node identity 9215a268, cluster identity 4711 [ 1631.311728][ T503] tipc: Node number set to 2450891368 [ 1631.351667][ T512] netlink: 35840 bytes leftover after parsing attributes in process `syz.0.9218'. [ 1631.466339][ T509] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.9219'. [ 1631.588802][ T516] netlink: 'syz.1.9221': attribute type 9 has an invalid length. [ 1631.731982][ T518] netlink: 'syz.3.9223': attribute type 2 has an invalid length. [ 1631.850476][ T526] netlink: 'syz.2.9225': attribute type 21 has an invalid length. [ 1631.880459][ T526] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.9225'. [ 1632.087589][ T528] netlink: 'syz.1.9227': attribute type 21 has an invalid length. [ 1632.126373][ T528] netlink: 'syz.1.9227': attribute type 6 has an invalid length. [ 1632.142081][ T528] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9227'. [ 1632.251307][ T537] netlink: 'syz.3.9231': attribute type 2 has an invalid length. [ 1632.288173][ T537] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9231'. [ 1633.365270][ T568] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9244'. [ 1633.774507][T20043] Bluetooth: hci2: unexpected subevent 0x04 length: 150 > 11 [ 1634.209535][ T596] FAULT_INJECTION: forcing a failure. [ 1634.209535][ T596] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1634.258884][ T596] CPU: 1 PID: 596 Comm: syz.4.9254 Not tainted syzkaller #0 [ 1634.266236][ T596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1634.276314][ T596] Call Trace: [ 1634.279622][ T596] [ 1634.282581][ T596] dump_stack_lvl+0x188/0x24e [ 1634.287296][ T596] ? show_regs_print_info+0x12/0x12 [ 1634.292542][ T596] ? load_image+0x400/0x400 [ 1634.297089][ T596] ? __lock_acquire+0x7d10/0x7d10 [ 1634.302257][ T596] should_fail_ex+0x399/0x4d0 [ 1634.306978][ T596] _copy_from_user+0x2c/0x170 [ 1634.311686][ T596] ___sys_recvmsg+0x172/0x590 [ 1634.316400][ T596] ? __sys_recvmsg+0x290/0x290 [ 1634.321208][ T596] ? common_file_perm+0x171/0x1c0 [ 1634.326284][ T596] ? __fget_files+0x43d/0x4b0 [ 1634.331020][ T596] __x64_sys_recvmsg+0x205/0x2e0 [ 1634.335996][ T596] ? ___sys_recvmsg+0x590/0x590 [ 1634.340902][ T596] ? lockdep_hardirqs_on+0x94/0x140 [ 1634.346181][ T596] do_syscall_64+0x4c/0xa0 [ 1634.350629][ T596] ? clear_bhb_loop+0x60/0xb0 [ 1634.355346][ T596] ? clear_bhb_loop+0x60/0xb0 [ 1634.360060][ T596] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1634.366101][ T596] RIP: 0033:0x7f7d4a99ce59 [ 1634.370555][ T596] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1634.390371][ T596] RSP: 002b:00007f7d4b821028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1634.398830][ T596] RAX: ffffffffffffffda RBX: 00007f7d4ac15fa0 RCX: 00007f7d4a99ce59 [ 1634.406833][ T596] RDX: 0000000040010031 RSI: 0000200000000d00 RDI: 0000000000000003 [ 1634.414854][ T596] RBP: 00007f7d4b821090 R08: 0000000000000000 R09: 0000000000000000 [ 1634.423007][ T596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1634.430981][ T596] R13: 00007f7d4ac16038 R14: 00007f7d4ac15fa0 R15: 00007fffc8914ff8 [ 1634.438967][ T596] [ 1635.653385][ T612] validate_nla: 5 callbacks suppressed [ 1635.653403][ T612] netlink: 'syz.2.9259': attribute type 2 has an invalid length. [ 1635.695435][ T612] __nla_validate_parse: 2 callbacks suppressed [ 1635.695463][ T612] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9259'. [ 1635.732668][ T614] netlink: 'syz.0.9258': attribute type 21 has an invalid length. [ 1635.770796][ T614] netlink: 'syz.0.9258': attribute type 6 has an invalid length. [ 1635.801307][ T614] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9258'. [ 1635.843258][ T618] netlink: 'syz.1.9260': attribute type 14 has an invalid length. [ 1635.864380][ T617] netlink: 164 bytes leftover after parsing attributes in process `syz.1.9260'. [ 1636.545195][ T634] FAULT_INJECTION: forcing a failure. [ 1636.545195][ T634] name failslab, interval 1, probability 0, space 0, times 0 [ 1636.622737][ T634] CPU: 0 PID: 634 Comm: syz.3.9266 Not tainted syzkaller #0 [ 1636.629413][ T640] netlink: 'syz.1.9269': attribute type 29 has an invalid length. [ 1636.630065][ T634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1636.630079][ T634] Call Trace: [ 1636.630086][ T634] [ 1636.630094][ T634] dump_stack_lvl+0x188/0x24e [ 1636.630122][ T634] ? show_regs_print_info+0x12/0x12 [ 1636.664135][ T634] ? load_image+0x400/0x400 [ 1636.668664][ T634] ? __might_sleep+0xd0/0xd0 [ 1636.673264][ T634] ? __lock_acquire+0x7d10/0x7d10 [ 1636.678301][ T634] should_fail_ex+0x399/0x4d0 [ 1636.682988][ T634] should_failslab+0x5/0x20 [ 1636.687493][ T634] slab_pre_alloc_hook+0x59/0x310 [ 1636.692528][ T634] kmem_cache_alloc_lru+0x49/0x2e0 [ 1636.697646][ T634] ? new_inode_pseudo+0x7e/0x1c0 [ 1636.702593][ T634] new_inode_pseudo+0x7e/0x1c0 [ 1636.707539][ T634] ? __ns_get_path+0x2c/0x650 [ 1636.712241][ T634] __ns_get_path+0x251/0x650 [ 1636.716839][ T634] ? bpf_prog_offload_info_fill+0x4f0/0x4f0 [ 1636.722740][ T634] ns_get_path_cb+0x29/0x50 [ 1636.727251][ T634] bpf_prog_offload_info_fill+0xe8/0x4f0 [ 1636.732889][ T634] ? bpf_prog_warn_on_exec+0x20/0x20 [ 1636.738189][ T634] ? security_capable+0x85/0xb0 [ 1636.743160][ T634] bpf_obj_get_info_by_fd+0x140c/0x2f50 [ 1636.748815][ T634] ? __lock_acquire+0x7d10/0x7d10 [ 1636.753855][ T634] ? verify_lock_unused+0x140/0x140 [ 1636.759066][ T634] ? bpf_map_get_fd_by_id+0x310/0x310 [ 1636.764491][ T634] ? get_pid_task+0x1c/0x1e0 [ 1636.769365][ T634] ? __might_fault+0xa6/0x120 [ 1636.774051][ T634] ? __might_fault+0xc2/0x120 [ 1636.778727][ T634] ? __might_fault+0xa6/0x120 [ 1636.783438][ T634] ? bpf_lsm_bpf+0x5/0x10 [ 1636.787774][ T634] ? security_bpf+0x7a/0xa0 [ 1636.792286][ T634] __sys_bpf+0x505/0x780 [ 1636.796542][ T634] ? bpf_link_show_fdinfo+0x380/0x380 [ 1636.801931][ T634] ? lock_chain_count+0x20/0x20 [ 1636.806797][ T634] __x64_sys_bpf+0x78/0x90 [ 1636.811225][ T634] do_syscall_64+0x4c/0xa0 [ 1636.815643][ T634] ? clear_bhb_loop+0x60/0xb0 [ 1636.820414][ T634] ? clear_bhb_loop+0x60/0xb0 [ 1636.825101][ T634] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1636.831015][ T634] RIP: 0033:0x7f156c59ce59 [ 1636.835433][ T634] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1636.855047][ T634] RSP: 002b:00007f156d4b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1636.863554][ T634] RAX: ffffffffffffffda RBX: 00007f156c815fa0 RCX: 00007f156c59ce59 [ 1636.871533][ T634] RDX: 0000000000000010 RSI: 0000200000000340 RDI: 000000000000000f [ 1636.879552][ T634] RBP: 00007f156d4b7090 R08: 0000000000000000 R09: 0000000000000000 [ 1636.887522][ T634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1636.895581][ T634] R13: 00007f156c816038 R14: 00007f156c815fa0 R15: 00007ffd6182b588 [ 1636.903577][ T634] [ 1636.917855][ T640] netlink: 'syz.1.9269': attribute type 29 has an invalid length. [ 1636.927230][ T641] netlink: 'syz.1.9269': attribute type 29 has an invalid length. [ 1637.198168][ T649] netlink: 'syz.1.9274': attribute type 21 has an invalid length. [ 1637.230790][ T649] netlink: 'syz.1.9274': attribute type 6 has an invalid length. [ 1637.261984][ T649] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9274'. [ 1637.288948][ T653] netlink: 'syz.4.9275': attribute type 2 has an invalid length. [ 1637.324400][ T653] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9275'. [ 1637.539154][ T661] netlink: 64 bytes leftover after parsing attributes in process `syz.1.9277'. [ 1637.884746][ T670] netlink: 64 bytes leftover after parsing attributes in process `syz.1.9279'. [ 1638.675877][ T674] netlink: 64 bytes leftover after parsing attributes in process `syz.2.9282'. [ 1639.509240][ T697] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9287'. [ 1639.671087][ T699] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9288'. [ 1641.341253][ T733] validate_nla: 10 callbacks suppressed [ 1641.341292][ T733] netlink: 'syz.0.9299': attribute type 2 has an invalid length. [ 1641.403559][ T735] netlink: 'syz.1.9300': attribute type 21 has an invalid length. [ 1641.425618][ T735] netlink: 'syz.1.9300': attribute type 6 has an invalid length. [ 1641.433411][ T735] __nla_validate_parse: 4 callbacks suppressed [ 1641.433426][ T735] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9300'. [ 1641.487327][ T733] netlink: 196452 bytes leftover after parsing attributes in process `syz.0.9299'. [ 1641.663212][ T733] device syzkaller0 entered promiscuous mode [ 1641.687647][ T741] netlink: 'syz.2.9303': attribute type 2 has an invalid length. [ 1641.704544][ T741] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9303'. [ 1641.714457][ T744] netlink: 'syz.3.9304': attribute type 10 has an invalid length. [ 1641.756992][ T748] netlink: 64 bytes leftover after parsing attributes in process `syz.3.9304'. [ 1645.281699][ T755] netlink: 'syz.3.9307': attribute type 10 has an invalid length. [ 1645.289954][ T753] netlink: 'syz.1.9317': attribute type 10 has an invalid length. [ 1645.298810][ T757] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.9308'. [ 1645.308678][ T758] netlink: 64 bytes leftover after parsing attributes in process `syz.3.9307'. [ 1645.320159][ T759] netlink: 64 bytes leftover after parsing attributes in process `syz.1.9317'. [ 1645.332583][ T768] netlink: 'syz.2.9308': attribute type 21 has an invalid length. [ 1645.419456][ T778] netlink: 'syz.3.9310': attribute type 19 has an invalid length. [ 1645.454319][ T778] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9310'. [ 1645.946029][ T795] netlink: 'syz.1.9315': attribute type 21 has an invalid length. [ 1645.953969][ T795] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9315'. [ 1645.979537][ T797] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9316'. [ 1646.447341][ T807] IPv6: Can't replace route, no match found [ 1646.587342][ T812] validate_nla: 2 callbacks suppressed [ 1646.587377][ T812] netlink: 'syz.2.9323': attribute type 10 has an invalid length. [ 1646.670686][ T812] __nla_validate_parse: 3 callbacks suppressed [ 1646.670722][ T812] netlink: 64 bytes leftover after parsing attributes in process `syz.2.9323'. [ 1646.764087][ T816] device wlan1 entered promiscuous mode [ 1646.819730][ T821] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.9325'. [ 1647.239724][ T821] netlink: 'syz.1.9325': attribute type 21 has an invalid length. [ 1647.429938][T26907] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1648.111649][ T830] device wlan1 left promiscuous mode [ 1648.186761][ T834] netlink: 'syz.1.9329': attribute type 2 has an invalid length. [ 1648.219637][ T834] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9329'. [ 1648.252716][ T838] netlink: 'syz.2.9331': attribute type 21 has an invalid length. [ 1648.268950][ T838] netlink: 'syz.2.9331': attribute type 6 has an invalid length. [ 1648.279622][ T838] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9331'. [ 1648.462918][ T843] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9334'. [ 1648.670533][ T849] IPv6: Can't replace route, no match found [ 1648.852427][ T850] can: request_module (can-proto-0) failed. [ 1648.961367][ T857] netlink: 'syz.4.9337': attribute type 10 has an invalid length. [ 1649.032743][ T857] netlink: 64 bytes leftover after parsing attributes in process `syz.4.9337'. [ 1649.693432][ T873] netlink: 'syz.1.9343': attribute type 2 has an invalid length. [ 1649.701452][ T873] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9343'. [ 1649.803959][ T875] netlink: 'syz.1.9344': attribute type 21 has an invalid length. [ 1649.812156][ T875] netlink: 'syz.1.9344': attribute type 6 has an invalid length. [ 1649.820148][ T875] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9344'. [ 1650.216825][ T887] netlink: 'syz.2.9346': attribute type 19 has an invalid length. [ 1650.225125][ T887] netlink: 14552 bytes leftover after parsing attributes in process `syz.2.9346'. [ 1650.361417][ T894] netlink: 64 bytes leftover after parsing attributes in process `syz.3.9349'. [ 1650.637687][ T912] FAULT_INJECTION: forcing a failure. [ 1650.637687][ T912] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1650.684254][ T912] CPU: 0 PID: 912 Comm: syz.3.9353 Not tainted syzkaller #0 [ 1650.691634][ T912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1650.701714][ T912] Call Trace: [ 1650.705011][ T912] [ 1650.707964][ T912] dump_stack_lvl+0x188/0x24e [ 1650.712669][ T912] ? show_regs_print_info+0x12/0x12 [ 1650.717891][ T912] ? load_image+0x400/0x400 [ 1650.722423][ T912] ? __lock_acquire+0x7d10/0x7d10 [ 1650.727482][ T912] ? __fget_files+0x28/0x4b0 [ 1650.732115][ T912] should_fail_ex+0x399/0x4d0 [ 1650.736823][ T912] _copy_from_user+0x2c/0x170 [ 1650.741528][ T912] generic_map_update_batch+0x4a1/0x810 [ 1650.747115][ T912] ? rcu_read_unlock+0xa0/0xa0 [ 1650.752258][ T912] ? __fdget+0x17c/0x200 [ 1650.756529][ T912] ? rcu_read_unlock+0xa0/0xa0 [ 1650.761313][ T912] bpf_map_do_batch+0x466/0x600 [ 1650.766203][ T912] __sys_bpf+0x6f7/0x780 [ 1650.770472][ T912] ? bpf_link_show_fdinfo+0x380/0x380 [ 1650.775883][ T912] ? lock_chain_count+0x20/0x20 [ 1650.780760][ T912] __x64_sys_bpf+0x78/0x90 [ 1650.785184][ T912] do_syscall_64+0x4c/0xa0 [ 1650.789601][ T912] ? clear_bhb_loop+0x60/0xb0 [ 1650.794283][ T912] ? clear_bhb_loop+0x60/0xb0 [ 1650.798969][ T912] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1650.804873][ T912] RIP: 0033:0x7f156c59ce59 [ 1650.809298][ T912] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1650.828914][ T912] RSP: 002b:00007f156d4b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1650.837340][ T912] RAX: ffffffffffffffda RBX: 00007f156c815fa0 RCX: 00007f156c59ce59 [ 1650.845313][ T912] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 1650.853293][ T912] RBP: 00007f156d4b7090 R08: 0000000000000000 R09: 0000000000000000 [ 1650.861269][ T912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1650.869247][ T912] R13: 00007f156c816038 R14: 00007f156c815fa0 R15: 00007ffd6182b588 [ 1650.877236][ T912] [ 1651.852090][ T941] validate_nla: 8 callbacks suppressed [ 1651.852129][ T941] netlink: 'syz.1.9363': attribute type 10 has an invalid length. [ 1651.946953][ T943] __nla_validate_parse: 2 callbacks suppressed [ 1651.946985][ T943] netlink: 64 bytes leftover after parsing attributes in process `syz.1.9363'. [ 1651.977235][ T945] netlink: 'syz.3.9365': attribute type 2 has an invalid length. [ 1651.992493][ T945] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9365'. [ 1652.179106][ T950] netlink: 'syz.0.9367': attribute type 21 has an invalid length. [ 1652.199359][ T950] netlink: 'syz.0.9367': attribute type 6 has an invalid length. [ 1652.212384][ T950] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9367'. [ 1653.439570][ T976] netlink: 'syz.2.9376': attribute type 2 has an invalid length. [ 1653.449233][ T976] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9376'. [ 1653.483872][ T977] IPv6: Can't replace route, no match found [ 1653.790333][ T989] netlink: 'syz.3.9379': attribute type 10 has an invalid length. [ 1653.850069][ T989] netlink: 64 bytes leftover after parsing attributes in process `syz.3.9379'. [ 1653.940292][ T995] netlink: 13183 bytes leftover after parsing attributes in process `syz.1.9380'. [ 1654.294467][ T1006] netlink: 'syz.4.9382': attribute type 21 has an invalid length. [ 1654.345697][ T1006] netlink: 'syz.4.9382': attribute type 6 has an invalid length. [ 1654.389572][ T1006] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9382'. [ 1654.788647][ T1015] netlink: 128 bytes leftover after parsing attributes in process `syz.4.9386'. [ 1654.828637][ T1015] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1654.856515][ T1015] net_ratelimit: 11 callbacks suppressed [ 1654.856533][ T1015] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1654.982836][ T1023] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.9387'. [ 1655.019747][ T1026] netlink: 'syz.0.9388': attribute type 10 has an invalid length. [ 1655.063223][ T1026] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9388'. [ 1655.104833][ T1023] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1655.159503][ T1023] CPU: 1 PID: 1023 Comm: syz.4.9387 Not tainted syzkaller #0 [ 1655.166973][ T1023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1655.177210][ T1023] Call Trace: [ 1655.180532][ T1023] [ 1655.183510][ T1023] dump_stack_lvl+0x188/0x24e [ 1655.188247][ T1023] ? show_regs_print_info+0x12/0x12 [ 1655.193503][ T1023] ? load_image+0x400/0x400 [ 1655.198625][ T1023] sysfs_warn_dup+0x8a/0xa0 [ 1655.203743][ T1023] sysfs_do_create_link_sd+0xc0/0x110 [ 1655.209278][ T1023] device_add+0x7f6/0x1000 [ 1655.213776][ T1023] wiphy_register+0x1d9f/0x2ac0 [ 1655.218754][ T1023] ? cfg80211_event_work+0x40/0x40 [ 1655.223916][ T1023] ? minstrel_ht_alloc+0x894/0xa20 [ 1655.229369][ T1023] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1655.235781][ T1023] ieee80211_register_hw+0x2d00/0x39f0 [ 1655.241331][ T1023] ? ieee80211_register_hw+0xec1/0x39f0 [ 1655.246924][ T1023] ? ieee80211_register_hw+0xec1/0x39f0 [ 1655.252707][ T1023] ? ieee80211_tasklet_handler+0x20/0x20 [ 1655.258422][ T1023] ? memset+0x1e/0x40 [ 1655.262452][ T1023] ? __hrtimer_init+0x186/0x270 [ 1655.267365][ T1023] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1655.273232][ T1023] hwsim_new_radio_nl+0xafa/0xce0 [ 1655.278437][ T1023] genl_family_rcv_msg_doit+0x22a/0x330 [ 1655.284047][ T1023] ? end_current_label_crit_section+0x170/0x170 [ 1655.290455][ T1023] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1655.296507][ T1023] ? bpf_lsm_capable+0x5/0x10 [ 1655.301328][ T1023] ? security_capable+0x85/0xb0 [ 1655.306272][ T1023] genl_rcv_msg+0x604/0x790 [ 1655.310868][ T1023] ? genl_bind+0x360/0x360 [ 1655.315330][ T1023] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 1655.321850][ T1023] netlink_rcv_skb+0x1fb/0x450 [ 1655.326666][ T1023] ? genl_bind+0x360/0x360 [ 1655.331139][ T1023] ? netlink_ack+0x1170/0x1170 [ 1655.335993][ T1023] ? down_read+0x1a8/0x2d0 [ 1655.340475][ T1023] genl_rcv+0x24/0x40 [ 1655.344499][ T1023] netlink_unicast+0x74d/0x8d0 [ 1655.349347][ T1023] netlink_sendmsg+0x8ad/0xbd0 [ 1655.354181][ T1023] ? netlink_getsockopt+0x550/0x550 [ 1655.359449][ T1023] ? aa_sock_msg_perm+0x94/0x150 [ 1655.364444][ T1023] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1655.369800][ T1023] ? security_socket_sendmsg+0x7c/0xa0 [ 1655.375320][ T1023] ? netlink_getsockopt+0x550/0x550 [ 1655.380564][ T1023] ____sys_sendmsg+0x5be/0x970 [ 1655.385404][ T1023] ? __sys_sendmsg_sock+0x30/0x30 [ 1655.390471][ T1023] ? __import_iovec+0x315/0x500 [ 1655.395405][ T1023] ? import_iovec+0x6f/0xa0 [ 1655.400061][ T1023] ___sys_sendmsg+0x2a2/0x360 [ 1655.404796][ T1023] ? try_to_wake_up+0x67c/0x1080 [ 1655.409815][ T1023] ? __sys_sendmsg+0x290/0x290 [ 1655.414787][ T1023] __se_sys_sendmsg+0x1bb/0x2a0 [ 1655.419691][ T1023] ? __x64_sys_sendmsg+0x80/0x80 [ 1655.424729][ T1023] ? lockdep_hardirqs_on+0x94/0x140 [ 1655.430010][ T1023] do_syscall_64+0x4c/0xa0 [ 1655.434461][ T1023] ? clear_bhb_loop+0x60/0xb0 [ 1655.439181][ T1023] ? clear_bhb_loop+0x60/0xb0 [ 1655.443995][ T1023] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1655.449938][ T1023] RIP: 0033:0x7f7d4a99ce59 [ 1655.454393][ T1023] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1655.474044][ T1023] RSP: 002b:00007f7d4b821028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1655.482498][ T1023] RAX: ffffffffffffffda RBX: 00007f7d4ac15fa0 RCX: 00007f7d4a99ce59 [ 1655.490508][ T1023] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1655.498518][ T1023] RBP: 00007f7d4aa32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1655.506612][ T1023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1655.514874][ T1023] R13: 00007f7d4ac16038 R14: 00007f7d4ac15fa0 R15: 00007fffc8914ff8 [ 1655.522940][ T1023] [ 1655.812059][ T1030] netlink: 'syz.3.9389': attribute type 2 has an invalid length. [ 1657.003867][ T1060] validate_nla: 3 callbacks suppressed [ 1657.003886][ T1060] netlink: 'syz.4.9400': attribute type 4 has an invalid length. [ 1657.026581][ T1060] netlink: 'syz.4.9400': attribute type 8 has an invalid length. [ 1657.047980][ T1060] __nla_validate_parse: 3 callbacks suppressed [ 1657.048026][ T1060] netlink: 193092 bytes leftover after parsing attributes in process `syz.4.9400'. [ 1657.272347][ T1065] FAULT_INJECTION: forcing a failure. [ 1657.272347][ T1065] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1657.316598][ T1065] CPU: 0 PID: 1065 Comm: syz.1.9402 Not tainted syzkaller #0 [ 1657.322331][ T1067] netlink: 'syz.0.9404': attribute type 2 has an invalid length. [ 1657.324030][ T1065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1657.341211][ T1067] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9404'. [ 1657.341913][ T1065] Call Trace: [ 1657.341925][ T1065] [ 1657.352182][ T1069] netlink: 'syz.4.9405': attribute type 10 has an invalid length. [ 1657.354354][ T1065] dump_stack_lvl+0x188/0x24e [ 1657.354393][ T1065] ? show_regs_print_info+0x12/0x12 [ 1657.354413][ T1065] ? load_image+0x400/0x400 [ 1657.354445][ T1065] ? __lock_acquire+0x7d10/0x7d10 [ 1657.354487][ T1065] should_fail_ex+0x399/0x4d0 [ 1657.354522][ T1065] _copy_from_user+0x2c/0x170 [ 1657.354553][ T1065] __sys_bpf+0x2ea/0x780 [ 1657.354587][ T1065] ? bpf_link_show_fdinfo+0x380/0x380 [ 1657.354642][ T1065] ? lock_chain_count+0x20/0x20 [ 1657.354689][ T1065] __x64_sys_bpf+0x78/0x90 [ 1657.386262][ T1069] netlink: 64 bytes leftover after parsing attributes in process `syz.4.9405'. [ 1657.389755][ T1065] do_syscall_64+0x4c/0xa0 [ 1657.389789][ T1065] ? clear_bhb_loop+0x60/0xb0 [ 1657.389815][ T1065] ? clear_bhb_loop+0x60/0xb0 [ 1657.389840][ T1065] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1657.389868][ T1065] RIP: 0033:0x7f214959ce59 [ 1657.389890][ T1065] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1657.389907][ T1065] RSP: 002b:00007f214a472028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1657.389930][ T1065] RAX: ffffffffffffffda RBX: 00007f2149815fa0 RCX: 00007f214959ce59 [ 1657.389947][ T1065] RDX: 0000000000000010 RSI: 0000200000000180 RDI: 000000000000000f [ 1657.389961][ T1065] RBP: 00007f214a472090 R08: 0000000000000000 R09: 0000000000000000 [ 1657.389974][ T1065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1657.389987][ T1065] R13: 00007f2149816038 R14: 00007f2149815fa0 R15: 00007fff164e3138 [ 1657.390035][ T1065] [ 1657.581859][ T1073] netlink: 'syz.3.9403': attribute type 29 has an invalid length. [ 1657.611997][ T1073] netlink: 'syz.3.9403': attribute type 29 has an invalid length. [ 1657.623961][ T1071] netlink: 'syz.3.9403': attribute type 29 has an invalid length. [ 1657.633182][ T1071] netlink: 'syz.3.9403': attribute type 29 has an invalid length. [ 1657.682666][ T1077] netlink: 'syz.1.9407': attribute type 1 has an invalid length. [ 1657.744695][ T1077] netlink: 'syz.1.9407': attribute type 4 has an invalid length. [ 1657.752489][ T1077] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.9407'. [ 1658.042150][ T1083] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9408'. [ 1658.771181][ T1085] netlink: 152 bytes leftover after parsing attributes in process `syz.2.9410'. [ 1658.785188][ T1088] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9411'. [ 1658.969852][ T1100] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9416'. [ 1659.291085][ T1110] netlink: 64 bytes leftover after parsing attributes in process `syz.4.9420'. [ 1659.557315][ T1116] netlink: 160 bytes leftover after parsing attributes in process `syz.4.9422'. [ 1662.973056][ T1153] validate_nla: 14 callbacks suppressed [ 1662.973074][ T1153] netlink: 'syz.0.9435': attribute type 21 has an invalid length. [ 1662.999739][ T1153] netlink: 'syz.0.9435': attribute type 6 has an invalid length. [ 1663.016117][ T1153] __nla_validate_parse: 4 callbacks suppressed [ 1663.016137][ T1153] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9435'. [ 1663.296906][ T1168] netlink: 'syz.3.9442': attribute type 10 has an invalid length. [ 1663.436564][ T1168] team0: Device wg1 is of different type [ 1663.944993][ T1184] netlink: 'syz.3.9447': attribute type 21 has an invalid length. [ 1663.953331][ T1184] netlink: 156 bytes leftover after parsing attributes in process `syz.3.9447'. [ 1664.152211][ T1191] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.9449'. [ 1664.228511][ T1191] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1664.243795][ T1191] CPU: 0 PID: 1191 Comm: syz.3.9449 Not tainted syzkaller #0 [ 1664.251246][ T1191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1664.261377][ T1191] Call Trace: [ 1664.264695][ T1191] [ 1664.267661][ T1191] dump_stack_lvl+0x188/0x24e [ 1664.272395][ T1191] ? show_regs_print_info+0x12/0x12 [ 1664.277650][ T1191] ? load_image+0x400/0x400 [ 1664.282207][ T1191] sysfs_warn_dup+0x8a/0xa0 [ 1664.286879][ T1191] sysfs_do_create_link_sd+0xc0/0x110 [ 1664.292304][ T1191] device_add+0x7f6/0x1000 [ 1664.296775][ T1191] wiphy_register+0x1d9f/0x2ac0 [ 1664.301690][ T1191] ? cfg80211_event_work+0x40/0x40 [ 1664.306843][ T1191] ? minstrel_ht_alloc+0x894/0xa20 [ 1664.312004][ T1191] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1664.318116][ T1191] ieee80211_register_hw+0x2d00/0x39f0 [ 1664.323705][ T1191] ? ieee80211_register_hw+0xec1/0x39f0 [ 1664.329287][ T1191] ? ieee80211_register_hw+0xec1/0x39f0 [ 1664.334862][ T1191] ? ieee80211_tasklet_handler+0x20/0x20 [ 1664.340512][ T1191] ? memset+0x1e/0x40 [ 1664.344494][ T1191] ? __hrtimer_init+0x186/0x270 [ 1664.349357][ T1191] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1664.355138][ T1191] hwsim_new_radio_nl+0xafa/0xce0 [ 1664.360206][ T1191] genl_family_rcv_msg_doit+0x22a/0x330 [ 1664.365765][ T1191] ? end_current_label_crit_section+0x170/0x170 [ 1664.372016][ T1191] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1664.377924][ T1191] ? bpf_lsm_capable+0x5/0x10 [ 1664.382611][ T1191] ? security_capable+0x85/0xb0 [ 1664.387477][ T1191] genl_rcv_msg+0x604/0x790 [ 1664.392000][ T1191] ? genl_bind+0x360/0x360 [ 1664.396423][ T1191] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 1664.402779][ T1191] netlink_rcv_skb+0x1fb/0x450 [ 1664.407551][ T1191] ? genl_bind+0x360/0x360 [ 1664.412176][ T1191] ? netlink_ack+0x1170/0x1170 [ 1664.416971][ T1191] ? down_read+0x1a8/0x2d0 [ 1664.421441][ T1191] genl_rcv+0x24/0x40 [ 1664.425429][ T1191] netlink_unicast+0x74d/0x8d0 [ 1664.430291][ T1191] netlink_sendmsg+0x8ad/0xbd0 [ 1664.435068][ T1191] ? netlink_getsockopt+0x550/0x550 [ 1664.440279][ T1191] ? aa_sock_msg_perm+0x94/0x150 [ 1664.445224][ T1191] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1664.450512][ T1191] ? security_socket_sendmsg+0x7c/0xa0 [ 1664.455979][ T1191] ? netlink_getsockopt+0x550/0x550 [ 1664.461189][ T1191] ____sys_sendmsg+0x5be/0x970 [ 1664.465969][ T1191] ? __sys_sendmsg_sock+0x30/0x30 [ 1664.471032][ T1191] ? __import_iovec+0x315/0x500 [ 1664.475923][ T1191] ? import_iovec+0x6f/0xa0 [ 1664.480467][ T1191] ___sys_sendmsg+0x2a2/0x360 [ 1664.485240][ T1191] ? try_to_wake_up+0x6ae/0x1080 [ 1664.490192][ T1191] ? __sys_sendmsg+0x290/0x290 [ 1664.495009][ T1191] __se_sys_sendmsg+0x1bb/0x2a0 [ 1664.499880][ T1191] ? __x64_sys_sendmsg+0x80/0x80 [ 1664.504840][ T1191] ? lockdep_hardirqs_on+0x94/0x140 [ 1664.510052][ T1191] do_syscall_64+0x4c/0xa0 [ 1664.514597][ T1191] ? clear_bhb_loop+0x60/0xb0 [ 1664.519379][ T1191] ? clear_bhb_loop+0x60/0xb0 [ 1664.524064][ T1191] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1664.529978][ T1191] RIP: 0033:0x7f156c59ce59 [ 1664.534402][ T1191] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1664.554019][ T1191] RSP: 002b:00007f156d4b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1664.562443][ T1191] RAX: ffffffffffffffda RBX: 00007f156c815fa0 RCX: 00007f156c59ce59 [ 1664.570422][ T1191] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1664.578401][ T1191] RBP: 00007f156c632d6f R08: 0000000000000000 R09: 0000000000000000 [ 1664.586373][ T1191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1664.594352][ T1191] R13: 00007f156c816038 R14: 00007f156c815fa0 R15: 00007ffd6182b588 [ 1664.602386][ T1191] [ 1667.431918][ T1201] netlink: 'syz.1.9451': attribute type 21 has an invalid length. [ 1667.441723][ T1201] netlink: 'syz.1.9451': attribute type 6 has an invalid length. [ 1667.449648][ T1201] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9451'. [ 1667.584498][ T1205] netlink: 'syz.1.9454': attribute type 11 has an invalid length. [ 1668.011451][ T1220] netlink: 2 bytes leftover after parsing attributes in process `syz.0.9458'. [ 1668.041991][ T1220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1668.055327][ T1220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1668.065494][ T1220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1668.076164][ T1220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1668.086152][ T1220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1668.103785][ T1220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1668.121606][ T1220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1668.138558][ T1220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1668.150880][ T1220] device batadv_slave_1 entered promiscuous mode [ 1668.189464][ T1222] netlink: 14 bytes leftover after parsing attributes in process `syz.2.9459'. [ 1668.652353][ T1235] netlink: 'syz.2.9464': attribute type 21 has an invalid length. [ 1668.660720][ T1235] netlink: 'syz.2.9464': attribute type 6 has an invalid length. [ 1668.677885][ T1235] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9464'. [ 1668.895370][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.901748][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.056482][ T1247] FAULT_INJECTION: forcing a failure. [ 1669.056482][ T1247] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1669.071364][ T1247] CPU: 1 PID: 1247 Comm: syz.3.9468 Not tainted syzkaller #0 [ 1669.078803][ T1247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1669.088896][ T1247] Call Trace: [ 1669.092212][ T1247] [ 1669.095159][ T1247] dump_stack_lvl+0x188/0x24e [ 1669.099871][ T1247] ? show_regs_print_info+0x12/0x12 [ 1669.105084][ T1247] ? load_image+0x400/0x400 [ 1669.109609][ T1247] ? __lock_acquire+0x7d10/0x7d10 [ 1669.114652][ T1247] ? __bpf_prog_test_run_raw_tp+0x2a6/0x430 [ 1669.120577][ T1247] should_fail_ex+0x399/0x4d0 [ 1669.125280][ T1247] _copy_to_user+0x2c/0x130 [ 1669.129859][ T1247] bpf_prog_test_run_raw_tp+0x4c6/0x660 [ 1669.135459][ T1247] ? trace_bpf_test_finish+0x220/0x220 [ 1669.140961][ T1247] ? trace_bpf_test_finish+0x220/0x220 [ 1669.146438][ T1247] bpf_prog_test_run+0x31e/0x390 [ 1669.151398][ T1247] __sys_bpf+0x62b/0x780 [ 1669.155667][ T1247] ? bpf_link_show_fdinfo+0x380/0x380 [ 1669.161083][ T1247] ? lock_chain_count+0x20/0x20 [ 1669.165972][ T1247] __x64_sys_bpf+0x78/0x90 [ 1669.170423][ T1247] do_syscall_64+0x4c/0xa0 [ 1669.174855][ T1247] ? clear_bhb_loop+0x60/0xb0 [ 1669.179548][ T1247] ? clear_bhb_loop+0x60/0xb0 [ 1669.184245][ T1247] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1669.190159][ T1247] RIP: 0033:0x7f156c59ce59 [ 1669.194587][ T1247] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1669.214207][ T1247] RSP: 002b:00007f156d4b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1669.222639][ T1247] RAX: ffffffffffffffda RBX: 00007f156c815fa0 RCX: 00007f156c59ce59 [ 1669.230635][ T1247] RDX: 000000000000000c RSI: 0000200000000440 RDI: 000000000000000a [ 1669.238793][ T1247] RBP: 00007f156d4b7090 R08: 0000000000000000 R09: 0000000000000000 [ 1669.246791][ T1247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1669.254860][ T1247] R13: 00007f156c816038 R14: 00007f156c815fa0 R15: 00007ffd6182b588 [ 1669.263057][ T1247] [ 1669.411253][ T1249] netlink: 'syz.1.9469': attribute type 10 has an invalid length. [ 1669.785986][ T1249] netlink: 64 bytes leftover after parsing attributes in process `syz.1.9469'. [ 1669.823049][ T1265] netlink: 14 bytes leftover after parsing attributes in process `syz.0.9473'. [ 1669.913914][ T1274] netlink: 'syz.3.9476': attribute type 21 has an invalid length. [ 1669.933963][ T1274] netlink: 'syz.3.9476': attribute type 6 has an invalid length. [ 1669.954451][ T1274] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9476'. [ 1670.603658][ T1303] FAULT_INJECTION: forcing a failure. [ 1670.603658][ T1303] name failslab, interval 1, probability 0, space 0, times 0 [ 1670.622112][ T1303] CPU: 1 PID: 1303 Comm: syz.0.9483 Not tainted syzkaller #0 [ 1670.629566][ T1303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1670.639806][ T1303] Call Trace: [ 1670.643113][ T1303] [ 1670.646144][ T1303] dump_stack_lvl+0x188/0x24e [ 1670.650853][ T1303] ? show_regs_print_info+0x12/0x12 [ 1670.656057][ T1303] ? load_image+0x400/0x400 [ 1670.660573][ T1303] ? __might_sleep+0xd0/0xd0 [ 1670.665168][ T1303] ? __lock_acquire+0x7d10/0x7d10 [ 1670.670205][ T1303] should_fail_ex+0x399/0x4d0 [ 1670.674890][ T1303] should_failslab+0x5/0x20 [ 1670.679395][ T1303] slab_pre_alloc_hook+0x59/0x310 [ 1670.684423][ T1303] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 1670.690241][ T1303] __kmem_cache_alloc_node+0x4f/0x260 [ 1670.695634][ T1303] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 1670.701375][ T1303] __kmalloc+0xa0/0x240 [ 1670.705545][ T1303] tomoyo_realpath_from_path+0xdf/0x5d0 [ 1670.711116][ T1303] ? tomoyo_path_number_perm+0x205/0x650 [ 1670.717114][ T1303] tomoyo_path_number_perm+0x22f/0x650 [ 1670.722592][ T1303] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1670.728065][ T1303] ? ksys_write+0x1c0/0x250 [ 1670.732579][ T1303] ? common_file_perm+0x171/0x1c0 [ 1670.737630][ T1303] ? __fget_files+0x28/0x4b0 [ 1670.742262][ T1303] ? __fget_files+0x28/0x4b0 [ 1670.746868][ T1303] security_file_ioctl+0x6c/0xa0 [ 1670.751830][ T1303] __se_sys_ioctl+0x48/0x170 [ 1670.756432][ T1303] do_syscall_64+0x4c/0xa0 [ 1670.760851][ T1303] ? clear_bhb_loop+0x60/0xb0 [ 1670.765543][ T1303] ? clear_bhb_loop+0x60/0xb0 [ 1670.770237][ T1303] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1670.776154][ T1303] RIP: 0033:0x7f0c3659ce59 [ 1670.780570][ T1303] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1670.800446][ T1303] RSP: 002b:00007f0c37446028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1670.808955][ T1303] RAX: ffffffffffffffda RBX: 00007f0c36816090 RCX: 00007f0c3659ce59 [ 1670.816950][ T1303] RDX: 0000200000000080 RSI: 00000000000089fa RDI: 0000000000000005 [ 1670.824929][ T1303] RBP: 00007f0c37446090 R08: 0000000000000000 R09: 0000000000000000 [ 1670.832991][ T1303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1670.840963][ T1303] R13: 00007f0c36816128 R14: 00007f0c36816090 R15: 00007fffa91a6928 [ 1670.849046][ T1303] [ 1670.854509][ T1303] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1670.929517][ T1307] bridge0: port 3(dummy0) entered disabled state [ 1670.945882][ T1307] device bridge_slave_1 left promiscuous mode [ 1670.953618][ T1307] bridge0: port 2(bridge_slave_1) entered disabled state [ 1670.988850][ T1307] device bridge_slave_0 left promiscuous mode [ 1671.001306][ T1307] bridge0: port 1(bridge_slave_0) entered disabled state [ 1671.179339][ T1307] team0: Port device bridge0 removed [ 1671.410907][ T1310] netlink: 'syz.3.9487': attribute type 10 has an invalid length. [ 1671.451817][ T1312] netlink: 64 bytes leftover after parsing attributes in process `syz.3.9487'. [ 1671.465244][ T1315] netlink: 14 bytes leftover after parsing attributes in process `syz.2.9488'. [ 1671.524050][ T1318] netlink: 'syz.0.9490': attribute type 20 has an invalid length. [ 1671.792674][ T1330] netlink: 'syz.1.9491': attribute type 21 has an invalid length. [ 1671.824386][ T1330] netlink: 'syz.1.9491': attribute type 6 has an invalid length. [ 1671.864277][ T1330] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9491'. [ 1671.996977][ T1338] netlink: 'syz.2.9496': attribute type 10 has an invalid length. [ 1672.008454][ T1338] netlink: 168 bytes leftover after parsing attributes in process `syz.2.9496'. [ 1672.124372][ T1338] team0: Device wlan1 is of different type [ 1672.658070][ T1360] netlink: 64 bytes leftover after parsing attributes in process `syz.2.9503'. [ 1672.861941][ T1348] device syzkaller0 entered promiscuous mode [ 1676.519213][ T1391] validate_nla: 5 callbacks suppressed [ 1676.519229][ T1391] netlink: 'syz.3.9515': attribute type 10 has an invalid length. [ 1676.544291][ T1391] __nla_validate_parse: 3 callbacks suppressed [ 1676.544310][ T1391] netlink: 168 bytes leftover after parsing attributes in process `syz.3.9515'. [ 1676.560542][ T1392] netlink: 'syz.3.9515': attribute type 10 has an invalid length. [ 1676.590748][ T1392] team0: Port device wlan1 added [ 1676.600475][ T1396] netlink: 'syz.2.9518': attribute type 10 has an invalid length. [ 1676.614879][ T1400] netlink: 64 bytes leftover after parsing attributes in process `syz.2.9518'. [ 1676.700892][ T1403] netlink: 'syz.2.9520': attribute type 21 has an invalid length. [ 1676.746181][ T1403] netlink: 'syz.2.9520': attribute type 6 has an invalid length. [ 1676.775301][ T1403] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9520'. [ 1676.837064][ T1412] netlink: 14 bytes leftover after parsing attributes in process `syz.3.9521'. [ 1676.987697][ T1419] device pim6reg1 entered promiscuous mode [ 1677.065403][ T1416] device lo entered promiscuous mode [ 1677.774427][ T1429] netlink: 'syz.4.9528': attribute type 1 has an invalid length. [ 1677.812783][ T1436] netlink: 'syz.2.9530': attribute type 10 has an invalid length. [ 1677.853323][ T1439] netlink: 64 bytes leftover after parsing attributes in process `syz.2.9530'. [ 1678.031964][ T1444] netlink: 'syz.4.9532': attribute type 10 has an invalid length. [ 1678.043062][ T1444] netlink: 168 bytes leftover after parsing attributes in process `syz.4.9532'. [ 1678.080721][ T1444] netlink: 'syz.4.9532': attribute type 10 has an invalid length. [ 1678.113528][ T1444] team0: Device wlan1 is of different type [ 1678.290143][ T1444] ------------[ cut here ]------------ [ 1678.295991][ T1444] WARNING: CPU: 0 PID: 1444 at kernel/kcov.c:869 kcov_remote_start+0x54d/0x7e0 [ 1678.304997][ T1444] Modules linked in: [ 1678.308933][ T1444] CPU: 0 PID: 1444 Comm: syz.4.9532 Not tainted syzkaller #0 [ 1678.316356][ T1444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1678.326447][ T1444] RIP: 0010:kcov_remote_start+0x54d/0x7e0 [ 1678.332216][ T1444] Code: ff ff 4c 89 ff be 03 00 00 00 e8 9e df 8e 02 e9 f0 fa ff ff e8 24 ce ac 08 f7 c3 00 02 00 00 0f 84 df fa ff ff e9 5a fc ff ff <0f> 0b e8 ac e2 ac 08 89 c0 48 c7 c7 78 b1 02 00 48 03 3c c5 80 89 [ 1678.352495][ T1444] RSP: 0018:ffffc90004796270 EFLAGS: 00010002 [ 1678.358610][ T1444] RAX: 0000000080000200 RBX: 0000000000000246 RCX: 0000000000000002 [ 1678.366620][ T1444] RDX: dffffc0000000000 RSI: ffffffff8a8c2c20 RDI: ffffffff8adf2060 [ 1678.374719][ T1444] RBP: ffffc900047964d0 R08: dffffc0000000000 R09: 1ffffffff215fe54 [ 1678.382841][ T1444] R10: dffffc0000000000 R11: fffffbfff215fe55 R12: ffff8880b8e2b178 [ 1678.390885][ T1444] R13: ffffffff8182838b R14: ffff88802716da00 R15: 0000000000000000 [ 1678.398899][ T1444] FS: 00007f7d4b8216c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1678.407957][ T1444] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1678.414673][ T1444] CR2: 00007f0c3652c080 CR3: 000000003a0cf000 CR4: 00000000003506f0 [ 1678.422685][ T1444] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1678.430695][ T1444] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1678.438707][ T1444] Call Trace: [ 1678.442017][ T1444] [ 1678.444984][ T1444] ieee80211_rx_list+0x504/0x2e60 [ 1678.450145][ T1444] ? mark_lock+0x94/0x320 [ 1678.454525][ T1444] ? ieee80211_check_fast_rx_iface+0x210/0x210 [ 1678.460730][ T1444] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1678.466915][ T1444] ? read_lock_is_recursive+0x10/0x10 [ 1678.472373][ T1444] ? ieee80211_rx_napi+0xd0/0x3d0 [ 1678.477431][ T1444] ieee80211_rx_napi+0x1ae/0x3d0 [ 1678.482389][ T1444] ? ieee80211_rx_list+0x2e60/0x2e60 [ 1678.487692][ T1444] ? skb_dequeue+0x120/0x150 [ 1678.492296][ T1444] ieee80211_handle_queued_frames+0x105/0x1b0 [ 1678.498379][ T1444] ? ieee80211_stop_device+0x12/0xa0 [ 1678.503930][ T1444] ieee80211_stop_device+0x27/0xa0 [ 1678.509150][ T1444] ieee80211_do_stop+0x1724/0x1e20 [ 1678.514296][ T1444] ? __mutex_lock+0x1ab/0xaf0 [ 1678.519197][ T1444] ? ieee80211_sdata_stop+0x80/0x80 [ 1678.524418][ T1444] ? mutex_lock_nested+0x10/0x10 [ 1678.529379][ T1444] ? __local_bh_enable_ip+0x136/0x1c0 [ 1678.534856][ T1444] ? do_raw_spin_unlock+0x11d/0x230 [ 1678.540091][ T1444] ieee80211_stop+0x432/0x4a0 [ 1678.544874][ T1444] ? dev_deactivate_many+0x244/0xcb0 [ 1678.550185][ T1444] ? ieee80211_open+0x200/0x200 [ 1678.555068][ T1444] __dev_close_many+0x1d1/0x2b0 [ 1678.560036][ T1444] ? dev_close_many+0x410/0x410 [ 1678.564895][ T1444] ? call_rcu+0x6a8/0x990 [ 1678.569238][ T1444] ? lockdep_hardirqs_on+0x94/0x140 [ 1678.574446][ T1444] dev_close_many+0x21f/0x410 [ 1678.579224][ T1444] ? __dev_open+0x430/0x430 [ 1678.583820][ T1444] ? rcu_force_quiescent_state+0x230/0x230 [ 1678.589739][ T1444] dev_close+0x154/0x210 [ 1678.593989][ T1444] ? __dev_close_many+0x2b0/0x2b0 [ 1678.599063][ T1444] ? vlan_vids_del_by_dev+0x29e/0x2f0 [ 1678.604556][ T1444] team_add_slave+0x181b/0x2870 [ 1678.609522][ T1444] ? team_netpoll_cleanup+0xf0/0xf0 [ 1678.614781][ T1444] ? dev_get_flags+0x1c0/0x1c0 [ 1678.619595][ T1444] ? trace_call_bpf+0xbf/0x6b0 [ 1678.624619][ T1444] ? mutex_is_locked+0xe/0x40 [ 1678.629315][ T1444] do_setlink+0xd3a/0x3e60 [ 1678.633743][ T1444] ? trace_call_bpf+0x5d6/0x6b0 [ 1678.638627][ T1444] ? trace_call_bpf+0xbf/0x6b0 [ 1678.643419][ T1444] ? nlmsg_parse_deprecated_strict+0x110/0x110 [ 1678.649691][ T1444] ? __bpf_trace_bpf_trace_printk+0x20/0x20 [ 1678.655811][ T1444] ? perf_trace_run_bpf_submit+0x124/0x1c0 [ 1678.661641][ T1444] ? perf_trace_preemptirq_template+0x268/0x320 [ 1678.668019][ T1444] ? mark_lock+0x94/0x320 [ 1678.672361][ T1444] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1678.678355][ T1444] ? lock_chain_count+0x20/0x20 [ 1678.683224][ T1444] ? rcu_is_watching+0x11/0xa0 [ 1678.688037][ T1444] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1678.694209][ T1444] ? lockdep_hardirqs_on+0x94/0x140 [ 1678.699420][ T1444] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1678.705645][ T1444] ? rtnl_newlink+0x17ab/0x20a0 [ 1678.710550][ T1444] rtnl_newlink+0x17d9/0x20a0 [ 1678.715251][ T1444] ? rtnl_newlink+0x5d1/0x20a0 [ 1678.720119][ T1444] ? rtnl_setlink+0x510/0x510 [ 1678.724886][ T1444] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1678.731081][ T1444] ? rcu_is_watching+0x11/0xa0 [ 1678.735888][ T1444] ? trace_contention_end+0x5f/0x170 [ 1678.741283][ T1444] ? __mutex_lock+0x1ab/0xaf0 [ 1678.746070][ T1444] ? rcu_read_unlock+0x8c/0xa0 [ 1678.750858][ T1444] ? rtnetlink_rcv_msg+0x226/0xfc0 [ 1678.756064][ T1444] ? rtnetlink_rcv_msg+0x226/0xfc0 [ 1678.761180][ T1444] ? rtnl_setlink+0x510/0x510 [ 1678.765864][ T1444] rtnetlink_rcv_msg+0x87c/0xfc0 [ 1678.770824][ T1444] ? rtnetlink_bind+0x80/0x80 [ 1678.775510][ T1444] ? __local_bh_enable_ip+0x136/0x1c0 [ 1678.780984][ T1444] ? lockdep_hardirqs_on+0x94/0x140 [ 1678.786196][ T1444] ? __local_bh_enable_ip+0x136/0x1c0 [ 1678.791592][ T1444] ? _local_bh_enable+0xa0/0xa0 [ 1678.796454][ T1444] ? __dev_queue_xmit+0x26b/0x37c0 [ 1678.801666][ T1444] ? __dev_queue_xmit+0x26b/0x37c0 [ 1678.806784][ T1444] ? __dev_queue_xmit+0x1cd2/0x37c0 [ 1678.812113][ T1444] ? __dev_queue_xmit+0x26b/0x37c0 [ 1678.817329][ T1444] ? ref_tracker_free+0x68c/0x840 [ 1678.822490][ T1444] ? __copy_skb_header+0x3ba/0x4f0 [ 1678.827613][ T1444] ? refcount_inc+0x70/0x70 [ 1678.832174][ T1444] ? memcpy+0x3c/0x60 [ 1678.836167][ T1444] ? __copy_skb_header+0x3ba/0x4f0 [ 1678.841287][ T1444] ? __skb_clone+0x480/0x790 [ 1678.846062][ T1444] netlink_rcv_skb+0x1fb/0x450 [ 1678.850843][ T1444] ? rtnetlink_bind+0x80/0x80 [ 1678.855539][ T1444] ? netlink_ack+0x1170/0x1170 [ 1678.860316][ T1444] ? netlink_deliver_tap+0x2e/0x1b0 [ 1678.865537][ T1444] netlink_unicast+0x74d/0x8d0 [ 1678.870321][ T1444] netlink_sendmsg+0x8ad/0xbd0 [ 1678.875097][ T1444] ? netlink_getsockopt+0x550/0x550 [ 1678.880306][ T1444] ? aa_sock_msg_perm+0x94/0x150 [ 1678.885262][ T1444] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1678.890553][ T1444] ? security_socket_sendmsg+0x7c/0xa0 [ 1678.896023][ T1444] ? netlink_getsockopt+0x550/0x550 [ 1678.901238][ T1444] ____sys_sendmsg+0x5be/0x970 [ 1678.906021][ T1444] ? __sys_sendmsg_sock+0x30/0x30 [ 1678.911094][ T1444] ? __import_iovec+0x315/0x500 [ 1678.915985][ T1444] ? import_iovec+0x6f/0xa0 [ 1678.920526][ T1444] ___sys_sendmsg+0x2a2/0x360 [ 1678.925211][ T1444] ? migrate_enable+0x148/0x220 [ 1678.930078][ T1444] ? __sys_sendmsg+0x290/0x290 [ 1678.934891][ T1444] __se_sys_sendmsg+0x1bb/0x2a0 [ 1678.939763][ T1444] ? __x64_sys_sendmsg+0x80/0x80 [ 1678.944722][ T1444] ? syscall_enter_from_user_mode+0x2a/0x80 [ 1678.950665][ T1444] do_syscall_64+0x4c/0xa0 [ 1678.955088][ T1444] ? clear_bhb_loop+0x60/0xb0 [ 1678.959775][ T1444] ? clear_bhb_loop+0x60/0xb0 [ 1678.964462][ T1444] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1678.970372][ T1444] RIP: 0033:0x7f7d4a99ce59 [ 1678.974793][ T1444] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1678.994412][ T1444] RSP: 002b:00007f7d4b821028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1679.002836][ T1444] RAX: ffffffffffffffda RBX: 00007f7d4ac15fa0 RCX: 00007f7d4a99ce59 [ 1679.010835][ T1444] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 000000000000000d [ 1679.018836][ T1444] RBP: 00007f7d4aa32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1679.026812][ T1444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1679.034786][ T1444] R13: 00007f7d4ac16038 R14: 00007f7d4ac15fa0 R15: 00007fffc8914ff8 [ 1679.042813][ T1444] [ 1679.045836][ T1444] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1679.053113][ T1444] CPU: 0 PID: 1444 Comm: syz.4.9532 Not tainted syzkaller #0 [ 1679.060485][ T1444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1679.070546][ T1444] Call Trace: [ 1679.074012][ T1444] [ 1679.076950][ T1444] dump_stack_lvl+0x188/0x24e [ 1679.081635][ T1444] ? memcpy+0x3c/0x60 [ 1679.085628][ T1444] ? show_regs_print_info+0x12/0x12 [ 1679.090826][ T1444] ? load_image+0x400/0x400 [ 1679.095349][ T1444] panic+0x2e5/0x730 [ 1679.099284][ T1444] ? bpf_jit_dump+0xd0/0xd0 [ 1679.103805][ T1444] __warn+0x2f8/0x4f0 [ 1679.107811][ T1444] ? kcov_remote_start+0x54d/0x7e0 [ 1679.112953][ T1444] ? kcov_remote_start+0x54d/0x7e0 [ 1679.118066][ T1444] report_bug+0x2ba/0x4f0 [ 1679.122405][ T1444] ? kcov_remote_start+0x54d/0x7e0 [ 1679.127529][ T1444] handle_bug+0x3a/0x70 [ 1679.131706][ T1444] exc_invalid_op+0x16/0x40 [ 1679.136208][ T1444] asm_exc_invalid_op+0x16/0x20 [ 1679.141063][ T1444] RIP: 0010:kcov_remote_start+0x54d/0x7e0 [ 1679.146785][ T1444] Code: ff ff 4c 89 ff be 03 00 00 00 e8 9e df 8e 02 e9 f0 fa ff ff e8 24 ce ac 08 f7 c3 00 02 00 00 0f 84 df fa ff ff e9 5a fc ff ff <0f> 0b e8 ac e2 ac 08 89 c0 48 c7 c7 78 b1 02 00 48 03 3c c5 80 89 [ 1679.166576][ T1444] RSP: 0018:ffffc90004796270 EFLAGS: 00010002 [ 1679.172737][ T1444] RAX: 0000000080000200 RBX: 0000000000000246 RCX: 0000000000000002 [ 1679.180733][ T1444] RDX: dffffc0000000000 RSI: ffffffff8a8c2c20 RDI: ffffffff8adf2060 [ 1679.188714][ T1444] RBP: ffffc900047964d0 R08: dffffc0000000000 R09: 1ffffffff215fe54 [ 1679.196690][ T1444] R10: dffffc0000000000 R11: fffffbfff215fe55 R12: ffff8880b8e2b178 [ 1679.204665][ T1444] R13: ffffffff8182838b R14: ffff88802716da00 R15: 0000000000000000 [ 1679.212646][ T1444] ? kcov_remote_start+0x8b/0x7e0 [ 1679.217706][ T1444] ieee80211_rx_list+0x504/0x2e60 [ 1679.222752][ T1444] ? mark_lock+0x94/0x320 [ 1679.227106][ T1444] ? ieee80211_check_fast_rx_iface+0x210/0x210 [ 1679.233274][ T1444] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1679.239446][ T1444] ? read_lock_is_recursive+0x10/0x10 [ 1679.244840][ T1444] ? ieee80211_rx_napi+0xd0/0x3d0 [ 1679.249866][ T1444] ieee80211_rx_napi+0x1ae/0x3d0 [ 1679.254810][ T1444] ? ieee80211_rx_list+0x2e60/0x2e60 [ 1679.260107][ T1444] ? skb_dequeue+0x120/0x150 [ 1679.264704][ T1444] ieee80211_handle_queued_frames+0x105/0x1b0 [ 1679.270779][ T1444] ? ieee80211_stop_device+0x12/0xa0 [ 1679.276083][ T1444] ieee80211_stop_device+0x27/0xa0 [ 1679.281286][ T1444] ieee80211_do_stop+0x1724/0x1e20 [ 1679.286451][ T1444] ? __mutex_lock+0x1ab/0xaf0 [ 1679.291132][ T1444] ? ieee80211_sdata_stop+0x80/0x80 [ 1679.296342][ T1444] ? mutex_lock_nested+0x10/0x10 [ 1679.301285][ T1444] ? __local_bh_enable_ip+0x136/0x1c0 [ 1679.306668][ T1444] ? do_raw_spin_unlock+0x11d/0x230 [ 1679.311960][ T1444] ieee80211_stop+0x432/0x4a0 [ 1679.316662][ T1444] ? dev_deactivate_many+0x244/0xcb0 [ 1679.321967][ T1444] ? ieee80211_open+0x200/0x200 [ 1679.326831][ T1444] __dev_close_many+0x1d1/0x2b0 [ 1679.331687][ T1444] ? dev_close_many+0x410/0x410 [ 1679.336552][ T1444] ? call_rcu+0x6a8/0x990 [ 1679.340892][ T1444] ? lockdep_hardirqs_on+0x94/0x140 [ 1679.346106][ T1444] dev_close_many+0x21f/0x410 [ 1679.350882][ T1444] ? __dev_open+0x430/0x430 [ 1679.355391][ T1444] ? rcu_force_quiescent_state+0x230/0x230 [ 1679.361212][ T1444] dev_close+0x154/0x210 [ 1679.365463][ T1444] ? __dev_close_many+0x2b0/0x2b0 [ 1679.370504][ T1444] ? vlan_vids_del_by_dev+0x29e/0x2f0 [ 1679.375885][ T1444] team_add_slave+0x181b/0x2870 [ 1679.380809][ T1444] ? team_netpoll_cleanup+0xf0/0xf0 [ 1679.386047][ T1444] ? dev_get_flags+0x1c0/0x1c0 [ 1679.390826][ T1444] ? trace_call_bpf+0xbf/0x6b0 [ 1679.395611][ T1444] ? mutex_is_locked+0xe/0x40 [ 1679.400311][ T1444] do_setlink+0xd3a/0x3e60 [ 1679.404737][ T1444] ? trace_call_bpf+0x5d6/0x6b0 [ 1679.409615][ T1444] ? trace_call_bpf+0xbf/0x6b0 [ 1679.414385][ T1444] ? nlmsg_parse_deprecated_strict+0x110/0x110 [ 1679.420547][ T1444] ? __bpf_trace_bpf_trace_printk+0x20/0x20 [ 1679.426457][ T1444] ? perf_trace_run_bpf_submit+0x124/0x1c0 [ 1679.432281][ T1444] ? perf_trace_preemptirq_template+0x268/0x320 [ 1679.438535][ T1444] ? mark_lock+0x94/0x320 [ 1679.442910][ T1444] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1679.448913][ T1444] ? lock_chain_count+0x20/0x20 [ 1679.453778][ T1444] ? rcu_is_watching+0x11/0xa0 [ 1679.458554][ T1444] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1679.464719][ T1444] ? lockdep_hardirqs_on+0x94/0x140 [ 1679.469922][ T1444] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1679.476183][ T1444] ? rtnl_newlink+0x17ab/0x20a0 [ 1679.481216][ T1444] rtnl_newlink+0x17d9/0x20a0 [ 1679.485906][ T1444] ? rtnl_newlink+0x5d1/0x20a0 [ 1679.490690][ T1444] ? rtnl_setlink+0x510/0x510 [ 1679.495375][ T1444] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1679.501541][ T1444] ? rcu_is_watching+0x11/0xa0 [ 1679.506313][ T1444] ? trace_contention_end+0x5f/0x170 [ 1679.511608][ T1444] ? __mutex_lock+0x1ab/0xaf0 [ 1679.516292][ T1444] ? rcu_read_unlock+0x8c/0xa0 [ 1679.521070][ T1444] ? rtnetlink_rcv_msg+0x226/0xfc0 [ 1679.526183][ T1444] ? rtnetlink_rcv_msg+0x226/0xfc0 [ 1679.531293][ T1444] ? rtnl_setlink+0x510/0x510 [ 1679.535978][ T1444] rtnetlink_rcv_msg+0x87c/0xfc0 [ 1679.540926][ T1444] ? rtnetlink_bind+0x80/0x80 [ 1679.545609][ T1444] ? __local_bh_enable_ip+0x136/0x1c0 [ 1679.550987][ T1444] ? lockdep_hardirqs_on+0x94/0x140 [ 1679.556195][ T1444] ? __local_bh_enable_ip+0x136/0x1c0 [ 1679.561661][ T1444] ? _local_bh_enable+0xa0/0xa0 [ 1679.566519][ T1444] ? __dev_queue_xmit+0x26b/0x37c0 [ 1679.571635][ T1444] ? __dev_queue_xmit+0x26b/0x37c0 [ 1679.576756][ T1444] ? __dev_queue_xmit+0x1cd2/0x37c0 [ 1679.581971][ T1444] ? __dev_queue_xmit+0x26b/0x37c0 [ 1679.587183][ T1444] ? ref_tracker_free+0x68c/0x840 [ 1679.592251][ T1444] ? __copy_skb_header+0x3ba/0x4f0 [ 1679.597375][ T1444] ? refcount_inc+0x70/0x70 [ 1679.601981][ T1444] ? memcpy+0x3c/0x60 [ 1679.605975][ T1444] ? __copy_skb_header+0x3ba/0x4f0 [ 1679.611089][ T1444] ? __skb_clone+0x480/0x790 [ 1679.615693][ T1444] netlink_rcv_skb+0x1fb/0x450 [ 1679.620560][ T1444] ? rtnetlink_bind+0x80/0x80 [ 1679.625275][ T1444] ? netlink_ack+0x1170/0x1170 [ 1679.630050][ T1444] ? netlink_deliver_tap+0x2e/0x1b0 [ 1679.635258][ T1444] netlink_unicast+0x74d/0x8d0 [ 1679.640034][ T1444] netlink_sendmsg+0x8ad/0xbd0 [ 1679.644805][ T1444] ? netlink_getsockopt+0x550/0x550 [ 1679.650007][ T1444] ? aa_sock_msg_perm+0x94/0x150 [ 1679.654953][ T1444] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1679.660266][ T1444] ? security_socket_sendmsg+0x7c/0xa0 [ 1679.665727][ T1444] ? netlink_getsockopt+0x550/0x550 [ 1679.670931][ T1444] ____sys_sendmsg+0x5be/0x970 [ 1679.675712][ T1444] ? __sys_sendmsg_sock+0x30/0x30 [ 1679.681172][ T1444] ? __import_iovec+0x315/0x500 [ 1679.686032][ T1444] ? import_iovec+0x6f/0xa0 [ 1679.690563][ T1444] ___sys_sendmsg+0x2a2/0x360 [ 1679.695244][ T1444] ? migrate_enable+0x148/0x220 [ 1679.700107][ T1444] ? __sys_sendmsg+0x290/0x290 [ 1679.704916][ T1444] __se_sys_sendmsg+0x1bb/0x2a0 [ 1679.709777][ T1444] ? __x64_sys_sendmsg+0x80/0x80 [ 1679.714736][ T1444] ? syscall_enter_from_user_mode+0x2a/0x80 [ 1679.720647][ T1444] do_syscall_64+0x4c/0xa0 [ 1679.725064][ T1444] ? clear_bhb_loop+0x60/0xb0 [ 1679.729751][ T1444] ? clear_bhb_loop+0x60/0xb0 [ 1679.734434][ T1444] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1679.740337][ T1444] RIP: 0033:0x7f7d4a99ce59 [ 1679.744839][ T1444] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1679.764449][ T1444] RSP: 002b:00007f7d4b821028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1679.772884][ T1444] RAX: ffffffffffffffda RBX: 00007f7d4ac15fa0 RCX: 00007f7d4a99ce59 [ 1679.780892][ T1444] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 000000000000000d [ 1679.788883][ T1444] RBP: 00007f7d4aa32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1679.796854][ T1444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1679.804824][ T1444] R13: 00007f7d4ac16038 R14: 00007f7d4ac15fa0 R15: 00007fffc8914ff8 [ 1679.812811][ T1444] [ 1679.816101][ T1444] Kernel Offset: disabled [ 1679.820468][ T1444] Rebooting in 86400 seconds..