last executing test programs: 5.255765166s ago: executing program 0 (id=6911): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) write$cgroup_devices(r0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0309004d8871ef2885634a8270e7112b00000000210000000000000000ac141401827511d5b4d3a9f536f45ae68ab6086c21"], 0xee8a) 5.012615841s ago: executing program 1 (id=6916): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) r1 = perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0xfe, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xbdf55c5ca5705acd}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) write$cgroup_int(r2, &(0x7f00000008c0), 0x12) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x7f, 0x1c, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@ifindex, 0x1e, 0x0, 0xfffffffb, &(0x7f0000000140)=[0x0], 0x1, 0x0, &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0], &(0x7f0000000300)=[0x0], 0x0}, 0x40) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000400)={0x0, r1, 0x0, 0x25, &(0x7f00000003c0)='blkio.throttle.io_serviced_recursive\x00', 0x0}, 0x30) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)={@map=r0, r0, 0x7, 0x38, 0x0, @void, @void, @void, @value=r4, r3}, 0x20) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x2, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xbdf55c5ca5705acd}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x948b, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x0, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6}, 0x94) r5 = socket$kcm(0xa, 0x3, 0x87) sendmsg$kcm(r5, &(0x7f0000000580)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f00000004c0), 0x3e}, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r7 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000180)=ANY=[@ANYBLOB="043900002000ef"], 0x33fe0) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r6, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 4.783510737s ago: executing program 2 (id=6919): socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x1f4e, @ipv4={'\x00', '\xff\xff', @loopback}, 0xff}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00', 0x2}], 0x1, 0x0, 0x0, 0x900}, 0x4000830) bpf$OBJ_GET_MAP(0x7, &(0x7f0000001bc0)=@generic={0x0, 0x2000000, 0x18}, 0x18) r1 = socket$kcm(0x21, 0x2, 0x2) r2 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x108282, 0xac5d, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000001200)={0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5371, 0x0, 0xc6, 0x0, 0x0, 0x0, 0x3}, 0x50) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x86bf2056334f3ae7, 0x80000001}, 0x0, 0x5, 0xffffffffffffffff, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc020660b, 0x0) ioctl$TUNSETLINK(r3, 0x400454cd, 0x336) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local}) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x4b}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) r7 = socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$inet(r7, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) close(r6) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000011c0)=@o_path={&(0x7f0000001140)='./file0\x00', 0xffffffffffffffff, 0x4000, r0}, 0xfffffffffffffee9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$kcm(r1, &(0x7f0000004c40)={&(0x7f00000003c0)=@isdn={0x22, 0xd, 0x5, 0xb, 0x4}, 0x80, &(0x7f0000003a00)=[{&(0x7f0000002a00)="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", 0x1000}], 0x1, &(0x7f0000004c80)=ANY=[@ANYBLOB="4000000000000000110100000500000000dded992b39b7ca1dc93207452fa6d3c97552e1ef11e838a17142dd358c9ef75bfe6eb28125862002b300000000000018000000000000003a000000ffffffff1467bdc852e900006800000000000000180100000000001cfc8894bf694ab4819cd2c47d77a9afbe06bee7100d3387d2189460029e260c0cec0ca99701233bcf84cddd71fd6fc84e957ebd24b9e5721d5e77888b383183fbb452626395cc01fb1926e70ade6faa2a0d1e41a914d1770070000000000000008400000007000000800431d84dc4049a1b9a309eb9ca04874c991a70e4c2846cb621a775da0ffb09792296cc0749bd5deaf45b85b1fb4eda41c1e43b3bfe5d89c19ad3aec8df71d4d37840df42d5e97a1ee3ef90b61d19966900c9abdeccb4ad97140b0000000000101000000000000016010000080000002cb8bae33f7e4aeff180e57316dab5abc57bb8eceee9dfac348f413f514d414e15b0ebd542dc7aea0602f72c8321f1d4d4edeb217f37b2e20c9581b98bf35f74e08d3be0d9b1b7251c5d27f34deda61dce5e03cff79ba73e4da5dba9a61d2d8c1b943dc132cca51e92dd46b4864bbeaf5f03861fe05cfb0d120102c939846a5d806b53d945b406f194184317ad11e5dacc835ebca41bdd1a8478b1ccada2aa1e6e6b96b3cfee66cfe88bd5fc14587e26b0e306e0ec17ce2c44f9da9abb8dc46b875b41ba393869962faf4aff8a80cc46ef638e70185f8bff65d8440a15b824cf665c4a3d9fd14fe75563269e7df6af441d282ac6c969ec22ea44db801e74175ec20e1ee1576771aedcf8e497240c6bbfbb434d7d4100993b72df8da26eef60aae066c8034a07c1c46c27553936adb749cf82224d40c6a3ef8e6902e57466dafd0f51e0589b8b1925975f8f92953010b69fe06a287a05eb6eef39265afb921c4cf097d456b0e7ad9077ee161e86dbaacb847693ac74b3f12b3f9490223e910427795a1ac919a9620f74d0c954b2b69c00b329e23ef62bee594991a1d8d6165b995b695522391bc48dd98b3798ddbbd631f08600f6b56e1573dbd5987e93157cb9f534b1e451e986977ada7798bf74723789e6d2c9467169ed92e301ad621f4cce420989757bf6cf362a73f685b42a8a9b9f91755862b8360c4bb0e42bd056447448b744c5f66823b7267291749b8f59dae22fc44089cc4180a9e671062df013b47c182e41d9c6b2948a4c214f87a92b5f08692863d6f9d0a03640fbce7915f08d334aa1053dd17cc10924d302ae1f44a6b1bde8f464c711f296885a67d585243d6e5ac4aaa7c4f5dceed5ad3d34b03ee2c7a983c23f8f93e120b82d686cc82abf7c704cd688ef9df82e36c013443066d915657c9900cc8b6ea4f6895548122b7c8dee0abbf0ad500ab67085efc57c3429f85f384dbee1591232b434ddb60a48f1c52d4832c35b8ca75021891fca52c4dbbd7b5491404cf699987da3b01c29d2f3a2ddc0177e4c63fd06d5faafbe48f91951a0c62d90591153afdb3fa4285e49f80735444447c9881e9821acf8834e7cf5584f9730ddc59467b0010d4c025ffbe03524e9fd78f363712ff4e5fb87fa3703180a8946a164c6186dce573708ac7992bb53a6c73425e025045cdf79c5285a0db65e116a6f2af36605e4a4f177c57e07b5d09f405cd675edeb7b1f7e744044df80bcd705ab400067bc7c771b2d955b1f4990acceca0154000975f163152312fa419ebd8c9c2cdf2c62301c35791e2d752af5be18241af123ce34881e8558c9ca5cf81784c1db1c4044ddca8082e2c825c1ccb6e9356c72d00049d2bbb960d6cc6859dabde6b587cb3ce144c8b0cf793d36d7456e3aa25c6b6962d25667b92a861d851bb6436ca6ac8fa8aed0c619e15582a7c3ff4955e6eadee6741d5ffe8f397e082cfab35c3d64f3309f400dff08722a0934e919645c0e412899ccc1759684c707ee306fe2e0f55431a1481bd4c87a0da280043d709bf18c64530c629247182331ab09806b322cd6e987afcf099da3c4fa2307d292e11ad997594081d09f60367910280c9e561fd45c824c6f88f5c1f7affeb0cc5ed58ab4ddcbffc559f4649971f482c79ba28a4005436a7905b14545e2a4fb5e18ede8503532ca55bec5df3313ea22df350d88ab289c5ea4a995382421a3be49b6b70b15f11bff31c1c490ce448ff679c94e92892eb13f83e41f533cb42f62ac84adb502fcf488f816a88fa2b370463ac6110161f2b71a699235b87427410c6494775d1d1497744dfa43dab5bbf582844bcd8ec97f3c9b98f619c06e267fd2e1a367189e12c42b28a7f05567c73bef553f048e867d4f6a92d2dbc5ed7e9a743610fdf58ce5d9b6f694683962871f6c7cd2dfe7cb4fe05f9015ed1a1ad3d0115d4ec44acdcb087c6aab8a4f4e6876f3d30989ca4d83e10bfe4bfff5f35c2a01cd66fa921be6e35ba07cb0d5852077891b700f8613ba580947a68c0ecb81f5a015937742580b15d3ab3eecb0b72f3929a8a8c1a7e71f7e0993d41267a4564d1426527ff3cdf527a990d3c67aafd25347f85523f803caa7109fe88816f4fb264eff4a1d73888d0d49948de00d217a125af7cdc957077a92c76396de61f1fa41cb8e8cb00fe51e326ea7268cd38460cb95602ce9df35ea113d73335d92b08cac02e781d4bb3ae8941956152004a76ba52aee5374686171cd7d8bfe7459ae418421a5dc0b406fca4500390b0f129c33ecd517927b66585e3c406f201a85be7d3d62d9237f6f8f7920a679726a70c1ded319674439a33042e9687bfae409577b622950116d7dfbecc3ef0a06bd29fe274544652a753cbab4b2a5d0370177dc7450e66bfc6564b7b50273dd0f2099b04c863310b08503a6ac187765f3570fe16339ba94dad498906fcf4e123077d761c75e1fa6086c588a2635a8793034fdf4c0fb60e54f75f8558517179895a980c5f2abf3add4d4d151548cd2a289f1697f15fddaf59a580a5d4be50ccd14dc234496f6a0e47b75004418e8872d6c05c0e76f83abcb6db49508d148b5e7096b81b3544bf5b89f8deaad56e7c6da1ba6ef4936611ef33ce5fd9712b15161ab51b10ddea431a552910d3d64533d17e29bb2c50d79279b2893dd591079a6d3a4d88fadff89a2f650809c8326ed6da1bd4c202bb660b4bcce5cd8b5f46d11106b504cd0926bb768549ff3fb4b5756c1e6ccaba7999b7b54631f0122946aa839397063fffce0cdb84be431b398159288ca2a3b6c805ee382d5fa52cfaf298222f042a67857560cc31ea4211b717acd9a11266a338cc92b86a19a873f6e82d6242a05ba1d6b4917d1f4d589b2ad8f5ebe25a37501bb92c18624172ddd672837118e39a899b83fa682b6414029dc5478e0e07b807991aa1cf2646e43f66cc2785af3e6b5923bb67c00ef66b860b0e2e89d6f1f5f7dd9a24b40d5131577ba9f7c53bb28c7695c9059ecbd94ed7829da14e8400c43ac4faa33bd5661772b6fd2fa63a4b51f1390a2d9538507c9c86a4decd93036891b59027124cb0cba8417404483c2c2f38cd1e14e083137bd4a8372f91084c4fe8d54b4109473950fbe404b9062d1f869de946eb20ed0ca78605fd4d9c853bf2fe03d5fbaf037ba73aad33f8e04f33beb1a409ac527bb782b95b817a47d07f99a21db80a71e309ca00ddf6185d4583b259179d02e55fbde553bf113530d25a2e22e6e51b41336598d3eb4216c6edfbe54c288eea3710b27bedaf5de8d2a689e1b0cd372d380564ed1aff92a67a957b7dd48d7b051245ebdf9692c153ca88ff0da758d9b9bcb76e7bb3e77c77b7d47f0e55229cd4f1f14a76469048c41054425a8dd673686f345c7f1395d35a728c46351daa2ef8eaf3357a69014f6ff6669649c8f963b6e47081b109a111f34f544b2e9dd674fba10b1b5b9116cdd1b5f29b10b2aedefd58bee2eced0fbd5d4a46236d2dd32855a622681d274117e6372fd83be7658bb0adba1ad2388d906a87da0e36c2f6adf560b71d43d9a9841e14c511466a27af4579484932e2003ca2710cd53c92d8c93e9fbbd2497eb6535226ba003e3be2df5249275fd01e9a5994d8c7e88a1de0f3c0afff8670c265347aa37981a2bd5206b71796c5ef66d0378017e6d0e177263e036f225776a432ac7c479d0c2eb69110236f3bfe5fc67ec023a67ae490e46bfa46c90a1ff9969cdd686a021bcf2a0e5ea5374374285cc913b9dd03eedbf601d0db93c3485f1cd8ed61687a444dde284bee2f31e764d13528d51f34d1ef7d746123c5dadc07bc07cf9bda414a430c380b28f9024c62d74b0e830d788f11b68bb47dc921fdba7f8aa0fbe14b1a6e222876543b0c39ead41470be208281c974e19310f8fe36a758dd6c5dfd9b32afec531db0322172c5854dbdcc4a30e45a03884c9fd88cb41ddb292fcdaacd5cce11ee19c275c90cde2d837f597f36409e2772de003f45ced5e60be7f61a14bad69de3ec92d42b96c12e065e24b9d7284346b6fe5932cf1484baf85a8f508770730f2f30afe678ec58549a4af9b1db4f653643a405832d11521ed7a3f0f600990777d9773b8a3e92e3e4e8a3a45655e767e7a8f895c5f9bf51d7baa1f66066f59f992d3f18e0f8b0635eaf8f5806d3f818db593d6e340b017e079288e36e1e328948573e2deb34469fff388f7770495faf75990d0d2a43889303100f2ed75fc30cf829f413a21591115052e5237827803808412161477076a2ec13847724b6dc5ac2e8a877917aaf30586ad0bbb248c9d076614ececb5d7d13dc4a3dc15844618ae2c275955ebb79a12d88867a13de2a8a913a33bfe4ede6241f4569a68947722803a3337bba5a27f76376667fc0284b8ddd3be94d49e16f606ab21472e9db2d927af60c77a18c020b7f67aacb8c35c4134bc85dc05bb8b26b0ea7fc71b3c2197b5815a5ed2cd2fd2ffc786c8cc8de9ab6e86b9a273b00bf65591953471dd80894c9ee60002c8be926221f3ac9dd41586cc5c7209e3b387f5495fb1bd6f51302aeb9eb8c9c9a326ad7ecc7c63f6e42af26e542ae0727fb2ded2ccc90e9899c0879adc44e44409e7bd55c26d9ec22c62bb91ec90587e6fa74adfa3dc44d9dbc755e50543f40933ed557d814f8a3abf6a649cf241c7e427d826b482806ab0d0c9bc608818a47c107b0545edac63cdc4e06f822bd504eb74c75f92bde7467b53e3c4ca3179e7ebc2ec8ba4880038a390b10f719a6c43c79e10180d4dfd4640b02d837d0fafc2b6ecca6e4be187e6ea3ce25211ab785d5045599ed24af354598d8f3e5f1659ac3996896efee7e016bb8046030fe2615e532eba8e33bd46e869183b528aad4fe7e42c1c1ed6ba74e1d2e462b4f5bc847a2df460b242e7c9e9b415dc4578bf66707072780c3fee0f4dda2447848f25df10fb9bb9479af90b8bc3ff74a26f06c8e2845caef12c5c060f74f60f3f022a66a044e0fe0438ffe1d3a531865b4e65dd1e680a75dd35d7995cb2185d540b78db2735ba4acdcfa610856b1ee7ffe910d41f7a2990d7193d7af86f45cac016f158ea48b599ac3646df9ad8caf4aff2226d10264586dc64c00f1fc8f4566349dc478e5ef32d1a4dddd0728410555e3dfb21e65a7192169fba58b96acc4e35e992fb9c778ebd07337ed8c4d43f5752e13905cd4807df6c775bb194913b353952035158fb17f9cb62558248ab33a2c63e431a1d03f5ae30c59a2443ebedd0192649412486fa2323c9f701a27e84be89645583fe92ee1517a9bc9482ad11571102fe9c6c2cfc9829f7bfb62a89fbbcfc05e984b1dd2b6eb80f21c2d819acabe32829a83b9390530383c19178ecf4805bdee82b6969027261252cab7fa8bbb752b8c06fc1d1ef00bf3de69509ade24348f3c342a5ca5b67c99a4b09066a9610565314f1479f2d0763a3e34b12912fcd659d5ad69df42f72ee6ea3e5a1c63b86869c827aec7fcd9065804004e8fb904a3b688cd150c14c48aa9b9c680a32ee74f2507ec2060d329746981f2509893489afbd023678adf39303f5e0e1a688b4aed97db63df142106672295fa12de77500006acbeb3d1ae7a39d53628d25d95d421461ab86e1bb140ebb7ec3e065f318704d28d60bf81051696f0551ddecdf60d7cf35ddb2d344ec8ce8629c11ed103c4fb6275babd602b56a9710d7d671abcfffcbde6747d7e098baa276550a2bf055ff369078108c68b0ae29bef7a2635c4fa975186262585dc9b5b549ef166095840130121e31e0334afc40ae4c336f2df466d26e18000000000000000600000067000000df387f5c1bf7000080000000000000003a000000ffffffffcf8f03fbd34d97d4eb7aa1e3f6f5abc53d1a9db70158e455b444b3060a0c191750ab22d3291aed5e03259e3c309d09b1831317944e54f49fa016ec7e2e469fca49d47bba707d64a1fbebc66336c9edcb32387e69213dd849ddb15a49314701f07b24d512352e0032414d5ae024738287cd599dedde15b2"], 0x11d8}, 0x40000) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000340)={0x3, 0x80, 0x7, 0x81, 0x0, 0x7f, 0x0, 0xad36, 0x8000, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_bp={&(0x7f00000002c0), 0x2}, 0x1000, 0xfffffffffffffffd, 0x5, 0x7, 0x1, 0x8, 0x1, 0x0, 0x7, 0x0, 0xd4ae}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000200)={'wlan1\x00'}) socket$kcm(0x10, 0x2, 0x0) 4.098923594s ago: executing program 4 (id=6926): socket$kcm(0x10, 0x400000002, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x9}, 0x50) socket$kcm(0xa, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x81000600, 0xe80, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}, 0x50) 1.819333447s ago: executing program 1 (id=6927): socket$kcm(0xa, 0x3, 0x73) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r1, 0x702, 0x3c, 0x0, &(0x7f0000000580)="e460334470d8d400eb00c15286dd4b3547f2cbfad47001bd34d04351caf1f9a07be047c25d7670ea4a41b8a6800c0de87b6f8e6a725643f7b3ab5026", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x2b, 0x1, 0x0) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xa) 1.797873437s ago: executing program 4 (id=6928): perf_event_open(&(0x7f0000000900)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2420, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001900)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcc9cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b2cdf41dc10d1e8bf076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e4d5b318e2ec0e0700897a74a0091ff110026e6d2ef831ab7ea0c34f17e3ad6ef3bb622003b538dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe0002476619f28d99cd0aa7b73340cc2160a1fe3c184b751c51160fbce841f8a97be6148ba532e6ea097a75dfebd31a08b32808b80200000000009dd27080e71113610e10d859e8327ef03fb6c86adac12233f9a1fb9c2aec61ce63a3462fd50117b89a9ab759b4eeb8cb000067d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0180aabc18cae2ed4b4390af9a9ceafd07ed0030000002cab154ad029a119ca3c972780870014605c83d7d11c3c975d5aec84222fff0d7216fdb0d3a0ec4bfae563112f4b391aafe2348754000000000000007642d3e5a815212f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc5a788bee1b47683db01a46939868d75211bbae0e7313bff5d4c391ddece00fc772dd6b4d4d0a917b239fe12280fc92c88c5b8dcdcc22ee1747790a8992533ac2a9f5a699593f084419cae0b4183fb01c73f99857399537f5dc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffff7f23877a6b24db0e067345560942fa629fbef2461c96a08707671215c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e42e50adab988dd8e12baf5cc9398c88607a08009c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859adfe38f01001bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bc0004c3addb08141bdee5d27874b2f663ddeef0005b3d96c7aae73835d5a3cda9e90d76c1993e0799d4894ee7f8249dc1e3428d2129369ee1b85afa1a5be5f6eb2eea0d0df414b315f65112412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b4150900000000000000f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355a500587b603306a5af8d867d80a07f10d82eafb03062e95196d5e3ff010000000000000be959096ea948cfa8e7194123e918914a71ad5a8521fb9553bc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c63ebb4380b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989177a30280bc586e79a5dd8076c248e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fc03000000000000001547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5c759c3e5468f5874c24411d415b6b085fb73a2c7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aac029d15af607ad83532ff181c985f54b39370c06e63055b4d6a36fa98a44e379d28307c9912fb097601f3f88a2ca6fd1f9320cfe7fc8e9f7f15f02e177ce23f43a154b42e26f037e8a013709003f509e6e540c9ba9c2a589ac5d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000070000000000000000000000005333c6199c12dcd926891927a7267c47cf897853d160100b39b613faefe16bed1fc105dddd77ab929b837d54aa17eb9fbdc2bdc0e98ae2c3f23a6131e2879f04ff01000030b92dd493be66c2242f8184733b80ba28e8ffffff7f00000000bb2f89049c5f6d63d56995747639964217aacfe548bc869098aa0500e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99040b5d91398e17df85c25ccae973eecc7d18716975c9cd848d566cc17587641ed01889c927da38d83314480b15e23138c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5a45706bda78ab60200000000000000000000000000000000000000706f78f0a2ea9667fb5b951808545a46830970c2dfae01adbda7d29bf1f7abdaf52e0de6f9d7150808ed086642e64ebf98762b34338b80e41b704c3eefaf0bb5f7d895de17a10b0a0ea15ccc0d7a830b6eb33b6b61675511d693ef5e3c44bbf71cabc5175d879e7499f8baae2a1a09cf38da73297764fbc0e723e1cc3abb12e3076982ed32c94a2ce3e6f37c47e983da4ca5c96187db5a2a2e1742bc93a65d7187126126b3a80f17dd2f7dbbe82d104ede9ba6925afc2ee6cb94f56f1363cad635abf8f9836faa292c49c0ebf5005154c7b58a3a2a2e5a00d2f953a86d2fd92b8661264f781e3fb02d05a28f3f17b64d0258853d45cb5ebde10cd3d82eeed2f1ed925b7cf400304932c5ed0a362b235ce37e1f17700f7d1fecf8be8a2c5d25a9c60657560d05441387ff158a018d19a286c56d0886eb59d509ee63ba54e4153c132d0366a9660000000000000009c1aaec93ec0f925921fb2e9eb202a29bef28224dbabe723de5c584bc398a8792e493048c87f60a51a391e95921218149403558fd13c649f90b0911d57eeb298b590581eba1ce383b539ab80fd15445987b1bb4eb512545e1ab65fef310e10b1ee362b51c72f82edf2f502ddf52567775e34a56d1be892f1e62b08950d517fa6fb1b0ef2edf1b67f8644786116b037d4a36fdd30b000063e58c856ec44cbbc2d370553f832af9480215e09aaa3843fe360b1c293a14627f2cfbe278f31d0abc0f5aaa10926dbbfe8a4b131c13a73d4e6d065c2c0fed3ab8442520ce0e0ad7d2d177377ab197ace3ef8b1c24ceb0bdee84bd6e6317633938dd19dc42de7f8f860eca6d9c11465fcd3497526df4c13e3ba5f0d75365a4542ae9440d2fede416d618cdaaf7e038879c5d177b3876fda4121e15a00adb976064a93e8d000000000000903350932d3eef7fdada20c19807066e2c72d0d816eb9fa50be213bf6bbb7ccb9f2e8a153e6ced68f192ebed6e86af0f2cec7335fa8039fd6eb025440bc2a34d071f0a0e6774308a2c5986aa9200a1306ffa5a71ca69e89a6980612b35fc858f37c2c398515a910a35e22ab0573c10b85df4c2972a2fb8b9c080fbb41a753791df727fdeadc5cf218a6eda31312256191c620cce34d1e3bf40a4a207ab1575b399eb8155781bfc7cb5920b49c039935a888d77041814f60fbbcafa487ee96b368e8769da90b44190e569fe8b1d155d0765baaca5c5548b5a78bb43e5d9e47a1d5809bb178184b5672d08e29aecf1f572ac1e6cab7e820751e95999b7532603494d37a2bff300"/2742], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0xa, 0x3, 0x87) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x11, 0x200000000000002, 0x300) r0 = getpid() syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/time_for_children\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x86dd, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 1.727416759s ago: executing program 0 (id=6929): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0500000000f01f00810000007f00000001"], 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5865}, 0x0) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f00000006c0)={r0, 0x0, 0x0}, 0x20) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x0, &(0x7f0000000400)="259a71a76d0910054c6588a888a2", 0x0, 0x0, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r2 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x6, &(0x7f0000000040), 0x4) setsockopt$sock_attach_bpf(r2, 0x29, 0x6, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1e000000783c000002000000dc08000004000400", @ANYRES32=r0, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0585273e76da5b7f45695400000003ffffe2050000000f00"/38], 0x50) r3 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x1a, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x3, 0x80, 0x0, 0x0, 0x0, 0xf, 0x0, 0x5d21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x8005}, 0xb041, 0x0, 0x4b9e, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r3, 0x0) r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x21, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x9, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, r3, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8970, &(0x7f0000000980)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf\xc8>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000002100000000000000080000b7080000000000007b8af8ff00000000b708000035f500007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1803000000"], 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x10, 0x1, &(0x7f00000006c0)="051cf3b75a97acbf", &(0x7f0000000700)=""/8, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x1b) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r2, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6, &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc4, &(0x7f0000000100)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000800), &(0x7f0000000200), 0x8, 0x56, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000000c0)=@bpf_lsm={0xb, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a01000000000061119e0000000000850000001a00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xe70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="1400000034000b47564cb6281406000007000000", 0x14}], 0x1}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_ext={0x1c, 0x6, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, [@jmp={0x5, 0x1, 0xb, 0x2, 0xa, 0x4, 0x10}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x4}]}, &(0x7f0000000440)='GPL\x00', 0x2, 0x2d, &(0x7f0000000480)=""/45, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x0, 0x2, 0x7fffffff, 0x401}, 0x10, 0xff9d, 0xffffffffffffffff, 0x1, &(0x7f0000000540)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000580)=[{0x3, 0x2, 0x1}], 0x10, 0xfffffffc}, 0x94) 1.291700089s ago: executing program 0 (id=6934): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="120000000a000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000580)=0x2, &(0x7f00000000c0)}, 0x20) 1.291437489s ago: executing program 4 (id=6935): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x200000c4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'wg0\x00', 0x1000}) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x5, &(0x7f0000000780)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x9, 0x4, 0x8, 0xf, 0x0, 0x1, 0xb69}, 0x50) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000840)="3c00000033000b12d25a80648c2594f90124fc60100c034004a6ffffff2000119215a2281cf6b809f2db60490d20a735b16b6a4479b406db26a57b35", 0x3c}], 0x1}, 0x0) 1.28938452s ago: executing program 3 (id=6944): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xb, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) 1.28312587s ago: executing program 2 (id=6936): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0xfffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000200)="d80000001d0081044e81f782db4400000000000002000000000000a1180015000600142603600e1208000f0000000401a80016002000014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3", 0x82}], 0x1}, 0x0) r1 = gettid() perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffffc}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xffffffff}, 0x10}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f93d24fc60", 0x14}], 0x1}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="110000000400000004000000"], 0x48) socket$kcm(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r4}, &(0x7f0000000080), &(0x7f00000001c0)=r2}, 0x32) close(0x4) recvmsg(r3, &(0x7f0000002440)={0x0, 0x0, 0x0}, 0x0) r5 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="934300005a"], 0xfe33) bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETLINK(r6, 0x400454cd, 0x336) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) close(r6) sendmsg$sock(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000340)="b4e9b8d87eae68359b50a366677f89eba8ee090ec8b476cf99acf1138a050c559bb2ad84cc3dfa3d90073bf8aade91706ecd975c5f5ca3e3fa262e865fb071ff940fc5218cbd874eb2a2", 0x4a}, {&(0x7f00000003c0)="f3010d8eefb3caad4f63f50f9133e26b71167a12e9b4470fea00891771ad88b10a909010bd10ced45de0b56d65bf480d20c189bc1bd36df3e47314d721a9331abdf6906bed14044c2686ade3bb3d871fd3bb171fba92c03e5f9573af8b8fd85c27b3d5735db95d9964dbaad778c23ab41646900cf0b37b06d2d23dc33fa39a36f7c25e", 0x83}, {&(0x7f0000000540)="21eedab9dfda95db7230a0b6e1f7f0c76f1f6c60faad98bf533dc46d3d93195d7a02980c27e0089930e438d560436a7b7f767717bf3efa25c197cf4c0d0e9ad1ca96564d2da68e739f8dc892d56108678e982e64777a2f4e5c898b2949f2f7e847f560921d8ec458aaeeda0db27b84ec00c833392f", 0x75}, {&(0x7f00000005c0)="baaf1fbec29ead361eb6ed65e028c86240aa19ad1550cbd51156c647ad734f9a3380c02bb41d4b2cff66bd2325007a63f75a09a1f17178368f10d3d4e836d2b47f45839b957f9783eba54bb9bf818c7ebf94d308b341ba7f24d2ab7f921149cf7f89351532d043a952d33f4a919450166e0f485a42b373c9e6dc185dfe83449647f5a2790ffc424d3712dfa2caa4b1a1402faa78d794343231876d0e5fdfc9f8456aba924fb32f", 0xa7}], 0x4}, 0x0) 1.25761979s ago: executing program 1 (id=6937): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2d1}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x19, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="18020000020000000000000001000000850000005300000095"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="1400000037000b0fd25a806c8c6f94f907000000", 0x14}], 0x1, 0x0, 0x0, 0x20000000}, 0x408e0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYRESDEC=r2], 0x9) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) syz_clone(0x2802000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.113914074s ago: executing program 4 (id=6938): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x210ac1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000000)={'veth1_virt_wifi\x00'}) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5931, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20010007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r2, 0x0, 0x0, 0x1800}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xa1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.113301074s ago: executing program 0 (id=6939): bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000001c40)=""/245}, 0x20) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)=@generic={&(0x7f0000000040)='./file0\x00'}, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00', 0x10}) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000014ff5)='GPL\x00', 0x2, 0x103a, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2a3}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0x66, 0x0, &(0x7f0000000800)="e460cdfbef2408002900119386dd6a00000000072fea3014cd3ec8a755c1e1b80081ffad000400e8d50001000102000bb500000500242c9089061f6f893e6566f5e275dcf194134282099a73e82163efdeead4dc6f7ed6628171ef3c36b87511f7e8c69308e5", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a000000080000000200000f78ffffc90e000000000000000300000007000000030000ca75ffffff00000000000000002e"], 0x0, 0x46}, 0x20) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000003540)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000014006b04c84e21020af32c6e0a0675f800250002500100000017d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e7861400bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f2, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079104800000000007c000000000000009500050000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x23) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000001c40)=""/245}, 0x20) (async) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)=@generic={&(0x7f0000000040)='./file0\x00'}, 0x18) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00', 0x10}) (async) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) (async) close(r0) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) (async) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000014ff5)='GPL\x00', 0x2, 0x103a, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2a3}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0x66, 0x0, &(0x7f0000000800)="e460cdfbef2408002900119386dd6a00000000072fea3014cd3ec8a755c1e1b80081ffad000400e8d50001000102000bb500000500242c9089061f6f893e6566f5e275dcf194134282099a73e82163efdeead4dc6f7ed6628171ef3c36b87511f7e8c69308e5", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a000000080000000200000f78ffffc90e000000000000000300000007000000030000ca75ffffff00000000000000002e"], 0x0, 0x46}, 0x20) (async) socket$kcm(0x10, 0x2, 0x4) (async) sendmsg$inet(r4, &(0x7f0000003540)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000014006b04c84e21020af32c6e0a0675f800250002500100000017d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e7861400bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f2, &(0x7f0000000080)) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079104800000000007c000000000000009500050000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x23) (async) 1.113159594s ago: executing program 3 (id=6940): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000d"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000000800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ec0}, 0x0) 909.820179ms ago: executing program 4 (id=6941): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0xe, 0x40, 0x40, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140), &(0x7f00000002c0), 0x1003, r0}, 0x38) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r1, &(0x7f0000000240)='cgroup.threads\x00', 0x2, 0x0) socket$kcm(0xa, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x189703, 0x0) ioctl$TUNSETIFF(r2, 0x5452, &(0x7f0000000180)={'syzkaller0\x00'}) close(r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7fff, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r7, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r8 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r8, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r9 = getpid() perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x0, 0x3cc, 0x3, 0x2007, 0x0, 0x8000000, 0x0, 0x7}, r9, 0x0, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x4) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) 909.456559ms ago: executing program 3 (id=6942): socketpair(0x1, 0x2, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) socket$kcm(0x2, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x101, 0x830d}, 0x30, 0x2, 0x8, 0x4, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000000)={r1}) r2 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x6, 0x16, &(0x7f0000000200), 0x4) (async) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x6, &(0x7f0000000100)=[{&(0x7f0000000380)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af36504001a0038001d00e517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb000011d600a0680d4bbd6df1db6f1078bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000440)={0x3}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[@ANYBLOB='+cqu '], 0x5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x9, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) write$cgroup_subtree(r4, &(0x7f00000000c0)=ANY=[@ANYRES16=r0], 0x5) (async) close(r6) (async) r7 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r7, 0x29, 0x1b, &(0x7f0000000100), 0x120) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfd}, 0x50) 760.051413ms ago: executing program 0 (id=6943): socket$kcm(0xa, 0x3, 0x73) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r1, 0x702, 0x3c, 0x0, &(0x7f0000000580)="e460334470d8d400eb00c15286dd4b3547f2cbfad47001bd34d04351caf1f9a07be047c25d7670ea4a41b8a6800c0de87b6f8e6a725643f7b3ab5026", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x2b, 0x1, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xa) 682.933915ms ago: executing program 2 (id=6945): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x5, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030040000b05d25a806c8c6394f90324fc60100002000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x12, 0xe, &(0x7f00000029c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x94) ioctl$SIOCSIFHWADDR(r2, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)='%pS \x00'}, 0x20) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x4}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000052000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5}, 0x50) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x10, &(0x7f00000003c0)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000480)=@generic={&(0x7f0000000440)='./file0\x00', 0x0, 0x10}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b80)={r3, 0xe0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000840)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x7, &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x78, &(0x7f0000000940)=[{}], 0x8, 0x10, &(0x7f0000000980), &(0x7f0000000a00), 0x8, 0x3d, 0x8, 0x8, &(0x7f0000000a40)}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000f00)={r2, 0xe0, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000c40)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, &(0x7f0000000c80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000cc0)=[0x0, 0x0], 0x0, 0x51, &(0x7f0000000d00)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000d40), &(0x7f0000000d80), 0x8, 0x68, 0x8, 0x8, &(0x7f0000000dc0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x12, 0x10, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x401}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}]}, &(0x7f0000000700)='syzkaller\x00', 0xe, 0xee, &(0x7f0000000740)=""/238, 0x40f00, 0x3a, '\x00', r10, @cgroup_sock_addr=0x31, r2, 0x8, &(0x7f0000000bc0)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000c00)={0x5, 0x7, 0x7, 0x9}, 0x10, r11, r0, 0x2, &(0x7f0000000f40)=[r2, r5, r5, r5, r4], &(0x7f0000000f80)=[{0x2, 0x1, 0x9, 0x4}, {0x2, 0x4, 0x8, 0x3}], 0x10, 0xa}, 0x94) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x5, 0x7fff, 0x10001, 0x2000, 0xffffffffffffffff, 0x400, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x3, 0xd}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_tracing={0x1a, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xbdd, 0x0, 0x0, 0x0, 0x8}, [@exit]}, &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x1a, r2, 0x8, &(0x7f0000000140)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x5, 0xc, 0x81, 0x1}, 0x10, 0x1d89d, r0, 0x2, &(0x7f0000000540)=[r4, r5, r6, r7, r8, r9, r12], &(0x7f0000000580)=[{0x4, 0x2, 0x9}, {0x0, 0x5, 0x5}], 0x10, 0x2}, 0x94) 619.680176ms ago: executing program 3 (id=6946): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x2010, 0x20000003, 0xc2ba, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f0000000700)={&(0x7f0000000280)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="280000600000000000000000070000000717a87f000001ac141400e0000001ac1e0001ac1414bb011c000000000000000000000008000000", @ANYRES64=r0], 0x48}, 0x0) 524.969938ms ago: executing program 1 (id=6947): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x11c412, 0x1, 0x0, 0x5, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0xff) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xe, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x56d}, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @generic={0x66}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, @exit, @alu={0x7, 0x0, 0x9, 0x3, 0x0, 0x0, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0xa000000, 0x0, 0x0, 0x41000}, 0x94) 474.135989ms ago: executing program 3 (id=6948): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000002100000000000000080000b7080000000000007b8af8ff00000000b708000035f500007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1803000000"], 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x10, 0x1, &(0x7f00000006c0)="051cf3b75a97acbf", &(0x7f0000000700)=""/8, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x1b) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r2, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6, &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc4, &(0x7f0000000100)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000800), &(0x7f0000000200), 0x8, 0x56, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000000c0)=@bpf_lsm={0xb, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a01000000000061119e0000000000850000001a00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xe70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="1400000034000b47564cb6281406000007000000", 0x14}], 0x1}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_ext={0x1c, 0x6, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, [@jmp={0x5, 0x1, 0xb, 0x2, 0xa, 0x4, 0x10}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x4}]}, &(0x7f0000000440)='GPL\x00', 0x2, 0x2d, &(0x7f0000000480)=""/45, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x0, 0x2, 0x7fffffff, 0x401}, 0x10, 0xff9d, 0xffffffffffffffff, 0x1, &(0x7f0000000540)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000580)=[{0x3, 0x2, 0x1}], 0x10, 0xfffffffc}, 0x94) 437.69593ms ago: executing program 0 (id=6949): socket$kcm(0x21, 0x2, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000012000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x3, @perf_bp={&(0x7f0000000300), 0xc}, 0x4044, 0x0, 0x0, 0x2, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') socket$kcm(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x8, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b702000004000000bfa30000000000000703000000fe"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x75, '\x00', 0x0, @fallback=0x20}, 0x94) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r3, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) recvmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/198, 0xc6}, {&(0x7f0000000680)=""/121, 0x79}], 0x3}, 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000002c0)=r6, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcc9cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b2cdf41dc10d1e8bf076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e4d5b318e2ec0e0700897a74a0091ff110026e6d2ef831ab7ea0c34f17e3ad6ef3bb622003b538dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe7bc0476619f28d99cd0aa7b73340cc2160a1fe3c184b751c51160fbce841f8a97be6148ba532e6ea09c346dfebd31a08b32808b80200000000009dd27080e71113610e10d859e8327ef03fb6c86adac12233f9a1fb9c2aec61ce63a3462fd50117b89a9ab759b4eeb8cb000067d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0180aabc18cae2ed4b4390af9a9ceafd07ed0030000002cab154ad029a119ca3c972780870014605c83d7d11c3c975d5aec84222fff0d7216fdb0d3a0ec4bfae563112f4b391aafe234870072858dc06e7c337642d3e5a815212f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a46939868d75211bbae0e7313bff5d4c391ddece00fc772dd6b4d4d0a917b239fe12280fc92c88c5b8dcdcc22ee1747790a8992533ac2a9f5a699593f084419cae0b4183fb01c73f99857399537f5dc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffff7f23877a6b24db0e067345560942fa629fbef2461c96a08707671215c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e42e50adab988dd8e12baf5c768a40538be5f76e9c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859adfe38f77b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aae73835d5a3cda9e90d76c1993e0799d4894ee7f8249dc1e3428d2129369ee1b85afa1a5be5f6eb2eea0d0df414b315f65112412392191fa83ee830548ef8e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355a500587b603306a5af8d867d80a07f10d82eafb030621204d3ded6f260af62d91faae95196d5e3ff010000000000000be959096ea948cfa8e7194123e918914a71ad5a8521fb9553bc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c63ebb4380b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989177a30280bc586e79a5dd8076c248e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fc03000000000000001547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5ffff000000000000c24411d415b6b085fb73a2c7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aac029d15af607ad83532ff181c985f54b39370c06e63055b4d6a36fa98a44e379d28307c9912fb097601f3f88a2ca6fd1f9320cfe7fc8e9f7f15f02e177ce23f43a154b42e26f037e8a01377cbd3f509e6e540c9ba9c2a589ac5d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000070000000000000000000000005333c6199c12dcd926891927a7267c47cf897853d160100b39b613faefe16bed1fc105dddd77ab929b837d54aa17eb9fbdc2bdc0e98ae2c3f23a6131e2879f04ff01000030b92dd493be66c2242f8184733b80ba28e8ffffff7f00000000bb2f89049c5f6d63d56995747639964217aacfe548bc869098aa8e07e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99040b5d91398e17df85c25ccae973eecc7d187168d5c9cd848d566cc17587641ed01889c927da38d83314480b15e23138c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5a45706bda78ab60200000000000000000000000000000000000000706f78f0a2ea9667fb5b951808545a46830970c2dfae01adbda7d29bf1f7abdaf52e0de6f9d7150808ed086642e64ebf98762b34338b80e41b704c3eefaf0bb5f7d895de17a10b0a0ea15ccc0d7a830b6eb33b6b21675511d693ef5e3c44bbf71cabc5175d879e7499f8baae2a1a09cf38da73297764fbc0e723e1cc3abb12e3076982ed32c94a2ce3e6f37c47e983da4ca5c96187db5a2a2e1742bc93a65d7187126126b3a80f17dd2f7dbbe82d104ede9ba6925afc2ee6cb94f56f1363cad635abf8f983292c49c0ebf5005154c7b58a3a2a2e5a00d2f953a86d2fd92b8661264f781e3fb02d05a28f3f17b64d0258853d45cb5ebde10cd3d82eeed2f1ed925b7cf400304932c5ed0a362b235ce37e1f17700f7d1fecf8be8a2c5d25a9c60657560d05441387ff158a018d19a286c56d0886eb59d509ee89cc2df52881d005b2e5c27563ba54e4153c132d0366a9660000000000000009c1aaec93ec0f925921fb2e9eb202a29bef28224dbabe723de5c584bc398a8792e493048c87f60a51a391e959212181d4bf32ed89c96d421c8171698c49403558fd13c649f90b0911d57eeb298b590581eba1ce383b539ab80fd15445987b1bb4eb512545e1ab65fef310e10b1ee362b51c72f82edf2f502ddf52567775e34a56d1be892f1e62b08950d517fa6fb1b0ef2edf1b67f8644786116b037d4a36fdd30b000063e58c856ec44cbbc2d370553f832af9480215e09aaa3843fe360b1c293a14627f2cfbe278f31d0abc0f5aaa10926dbbfe8a4b131c13a73d4e6d065c2c0fed3ab8442520ce0e0ad7d2d177377ab197ace3ef8b1c24ceb0bdee84bd6e6317633938dd19dc42de7f8f860eca6d9c74525fcd3497526df4c13e3ba5f0d75365a4542ae9440d2fede416d618cdaaf7e038879c5d177b3876fda4121e15a00adb976064a93e8d000000000000903350932d3eef7fdada20c19807066e2c72d0d816eb9fa50be213bf6bbb7ccb9f2e8a153e6ced68f192ebed6e86af0f2cec7335fa8039fd6eb025440bc2a34d071f0a0e6774308a2c5986aa9200a1306ffa5a71ca69e89a6980612b35fc858f37c2c398515a910a35e22ab0573c10b85df4c2972a2fb8b9c080fbb41a753791df727fdeadc5cf218a6eda31312256191c620cce34d1e3bf40a4a207ab1575b399eb8155781bfc7cb5920b49c039935a888d77041814f60fbbcafa487ee96b368e8769da90b44190e569fe8b1d155d0765baaca5c5548b5a78bb43e5d9e47a1d5809bb178184b5672d08e29aecf1f572ac1e6cab7e820751beed5f79de29a67a579150bfb31232d296b9d2977ed027ca90af7088d6466f1501d96a32bfa3cf9ab0dcd626ac9341833e92685af6917ae05473ae4768341426e244159b3c3e002b6f8ee80cbe6e26c816ab92658d956d849cd3a21ebf4b143d338035cd91f087633aa668e0644b05dc5a7937cd5fb62bd08242a858aeeda8c0cbb4fc2478a8155b859e88493f322702277939832bd4a1d8109f98c5a187564c9eb80acc63ac57459593c81ce8998e38ea231b81ebaa6b242ebdf382d70232f1d8e516a8eaf39d09ea40198cf1b72eb5ce5327d3a3861470be47a9a9dbf569e6f6f474fd1448adfd70c4f4a4487edaf193a00a808389a110a4286905ba81309735f6ac5d2ba7ab2be01fa25c11dbb3170258e9d9fed944fd85c03336a49f7016517a1988bc84ee301e167d3cf88c46c4eba6e2bfd099acd2eec5c624679aa7ebab76061a9ca792bffe3d6df4dbe70b5cab6299a51e63826fd0bda4846d06e322ebd745e73da718ba0c93e7567df9ed7ea8d2fdbde44e65a4cd01748b"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0xff6c}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0x56, 0x0, &(0x7f0000000100)="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", 0x0, 0xfb, 0x60006000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000001c40)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30457a8ffb21aef4a95a155fab70a40b086056b0f63331a66b3457c", 0x2}, 0x2c) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000840)=ANY=[], 0xc94b) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) 334.799243ms ago: executing program 2 (id=6950): socketpair(0x1, 0x1, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="120000000a000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000580)=0x2, &(0x7f00000000c0)}, 0x20) 217.496306ms ago: executing program 3 (id=6951): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x4, 0xf250c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x131}, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x8) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e00000004000000040000000f"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2}, 0xc) socket$kcm(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, 0x0, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000021000b12d25a805bb98222f90824fc60", 0x14}], 0x1}, 0x0) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8916, &(0x7f0000000040)={'ip6_vti0\x00', @random="02000400"}) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r7 = syz_clone(0xb48e0000, &(0x7f00000000c0)="c7ee550521797e8849299230a78bc0bf79a6a3fd2e84ca73d25ac90dc38fdbb5a5594a76d9e1edc2f3a0172af7ecdac5c9478c44df479e970f33343042b38ef274ac93924fd16820a0cc32fe8b7f77c627d82209e04f64f03b69cca392c36db7fe1defc5398b91b28bd80a", 0x6b, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000500)="1d31531c1b1bea0ae0b37c595ad8e0ca70b76eab69343e34161f5463acc8fd63a3eca54f43c412290ffef426d7999d482cf8d7ef05b69a923de44140886e78488a925962f01e870cd44f60daedf87166d5afc67e8ebc18032b0106a54c873323e2fe974f151949e02cf75a5ef66a58eb8d4adf99d6f9d49bb98fe2fef91db3fa563664e3ddc2de45eb3f623c8917a3973a964c38e1eac9489adc599b32f652def0ca403feaee0fb71d227fd41ed45521f069aa111c878439f171cb6eb078ffcc11be81c64dd551d7aac7282444cb73f886444b84b20d2b08222f4e5355c5ef066321c2f3e723dcddf1288cc377333e9b5b991a88b65eac8c55a82c8226") syz_open_procfs$namespace(r7, &(0x7f0000000600)='ns/pid_for_children\x00') close(r6) socket$kcm(0x2, 0x200000000000006, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @multicast}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_config_ext={0x9, 0xb}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5931, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20010007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xa1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r9}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080006007c09e8fe55a10a0015800a00142603600e1208000f0000000406a80016c0080003400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) 131.461537ms ago: executing program 2 (id=6952): socket$kcm(0x2b, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000e00)={r0, 0x0, 0x80, 0x35, &(0x7f0000000b80)="f0faa75c15520326bcb9f14c325445e02b5116ad3796ad8926af5670d03072c2ba2c7e1476ea772c7dad9d489e067a1097544dae4b99d784de31edb67d3e5b3a658eedaf4985f153524c95ba40c6b0f02174d31957d00f658fc5de11b4056532d1d0a31b73e3832b315d728ca9583da8ec54fc473152c2aedb5450b20f6ed236", &(0x7f0000000c00)=""/53, 0xffffffff, 0x0, 0xda, 0x0, &(0x7f0000000c40)="b730e0efff41dbc6e4d1c0958c692738feb56a65cc1fa165310d98f8adc61ba96afdc6dec65b5f6a542f3bfed21ec1f97d58456caebb393500e01b0ace8809012f9d7005b210a11968eedd16842fb881650df9effcdd3583c68cef8660bb471285beb56244c99d26e6a395a5fb708d599a528fba3b7b1c832fb47f3e25196fc90d74c5f00e55fadc8908cb30492775bc30ee9637d34e15113b57e92a26d9692f3a698016aa21c65d174a552ca92f14b4c0842cf1c5a3e9bc3cfee2bf591428ab18c3d917ce40bb7d2c2c3971c0cc50d958287cae5e4fb09b29bf", 0x0, 0xcc9a3066a4ef2d58, 0x0, 0xb}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x108282, 0xac5d, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$kcm(0x2, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) write$cgroup_type(r4, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='memory.events\x00', 0x100002, 0x0) r5 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0x541b, 0x0) sendmsg$inet(r1, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{0x0, 0x4a}], 0x1, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev, @loopback}}}], 0x20}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000780)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af3653c000cc008001900030002000600090000800000005883c64d251e638294ff0051f60a84c9f4d4938037e70000000000ffa10000d1c566a000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x98010) 99.262838ms ago: executing program 4 (id=6953): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x1, 0x4004, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x5000, 0x80, 0x0, 0x0, 0x1000000000000000, 0xa}, 0xffffffffffffffff, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x23, &(0x7f0000000040), 0xcf) sendmsg$kcm(r0, &(0x7f0000001240)={&(0x7f0000000940)=@generic={0xa, "8ab77fa26849ff263ef30c98b353011a5990650042e2dacdc165ececece6be1862e2adacd2737d00ad6f9fa9f3d7145e15dd9fb1a7adc211220963ad5def53b911ba5b9da13641f982757012a7496de0b3a36f5849f260c603dbc317f54b901ee80ea6132ca6e88c776553e1833052ca376304313c5637786a36a4b83857"}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x60000000}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x44063400, 0x0, 0x3, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) 0s ago: executing program 1 (id=6954): r0 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x6, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @multicast1}}}], 0x20}, 0x8000) sendmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="d7eab112856b60b6a3e0e2dbde6c3d5e7680491920639d480b6b5b0e6328733b2a118af085970758b35b8eb69a86eb1e67bce340dd99e45bcdcadc74f805a09abbf42c5735c0c0bfeb02c6eba50461c506405541b1d81412f4d6e0409c8ed01a24a00c19c619b8189c043fcbfcf7e0dae6fa0409", 0x74}, {&(0x7f0000001b40)="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", 0x493}], 0x2}, 0x8000) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="c8fec1123a0b09cc7e0dc3f5a9429f67002f742e5bede8832b0b7f1f4eed5e3f01ceb7ace2806a3f4d63282bdb3fe486b407e80f9295666de3f31e9cecc5ee7cf654e0", 0x43}], 0x1}, 0x97) kernel console output (not intermixed with test programs): 869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 873.827579][T21869] R13: 00007f7d5c426038 R14: 00007f7d5c425fa0 R15: 00007ffd8dab2cd8 [ 873.835598][T21869] [ 873.874354][T21867] netlink: 'syz.3.5827': attribute type 10 has an invalid length. [ 873.949935][T21867] bridge0: port 4(team0) entered disabled state [ 874.118882][T21867] bridge0: port 4(team0) entered disabled state [ 874.178536][T21867] device team_slave_1 left promiscuous mode [ 874.319635][T21867] team0 (unregistering): Port device team_slave_1 removed [ 874.359941][T21867] device wlan1 left promiscuous mode [ 874.533317][T21867] team0 (unregistering): Port device wlan1 removed [ 874.859094][T21899] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5836'. [ 874.868751][T21899] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5836'. [ 874.909743][T21899] netlink: 33 bytes leftover after parsing attributes in process `syz.3.5836'. [ 874.946111][T21899] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5836'. [ 874.997218][T21899] netlink: 33 bytes leftover after parsing attributes in process `syz.3.5836'. [ 875.022322][T21899] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5836'. [ 875.071232][T21899] netlink: 33 bytes leftover after parsing attributes in process `syz.3.5836'. [ 875.355600][T21920] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5839'. [ 875.399575][T21920] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 875.421772][T21920] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 875.523138][T21928] netlink: 'syz.3.5843': attribute type 2 has an invalid length. [ 875.976396][T21939] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5849'. [ 876.191420][T21945] netlink: 'syz.3.5853': attribute type 10 has an invalid length. [ 876.219297][T21945] netlink: 2 bytes leftover after parsing attributes in process `syz.3.5853'. [ 877.150547][T21984] netlink: 'syz.3.5870': attribute type 10 has an invalid length. [ 877.549131][T22001] netlink: 'syz.0.5877': attribute type 2 has an invalid length. [ 878.470572][T22026] device syzkaller0 entered promiscuous mode [ 879.115077][T22046] netlink: 'syz.3.5894': attribute type 25 has an invalid length. [ 879.134709][T22046] netlink: 'syz.3.5894': attribute type 9 has an invalid length. [ 880.926754][T22104] FAULT_INJECTION: forcing a failure. [ 880.926754][T22104] name failslab, interval 1, probability 0, space 0, times 0 [ 880.939802][T22104] CPU: 0 PID: 22104 Comm: syz.2.5916 Not tainted syzkaller #0 [ 880.947363][T22104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 880.957427][T22104] Call Trace: [ 880.960711][T22104] [ 880.963652][T22104] dump_stack_lvl+0x188/0x24e [ 880.968358][T22104] ? show_regs_print_info+0x12/0x12 [ 880.973575][T22104] ? load_image+0x410/0x410 [ 880.978090][T22104] ? skb_network_protocol+0x525/0x790 [ 880.983547][T22104] should_fail_ex+0x390/0x4c0 [ 880.988263][T22104] should_failslab+0x5/0x20 [ 880.992785][T22104] slab_pre_alloc_hook+0x59/0x300 [ 880.997842][T22104] ? netif_skb_features+0xafa/0x1630 [ 881.003153][T22104] kmem_cache_alloc+0x56/0x2f0 [ 881.008018][T22104] ? skb_clone+0x1e7/0x370 [ 881.012452][T22104] skb_clone+0x1e7/0x370 [ 881.016695][T22104] ? dev_queue_xmit_nit+0x200/0xba0 [ 881.021891][T22104] dev_queue_xmit_nit+0x23b/0xba0 [ 881.026908][T22104] ? dev_queue_xmit_nit+0x29/0xba0 [ 881.032019][T22104] ? validate_xmit_skb+0x7ca/0xe80 [ 881.037123][T22104] dev_hard_start_xmit+0x158/0x8b0 [ 881.042230][T22104] ? validate_xmit_skb_list+0x120/0x120 [ 881.047776][T22104] __dev_queue_xmit+0x1b4b/0x3810 [ 881.052801][T22104] ? __dev_queue_xmit+0x281/0x3810 [ 881.057999][T22104] ? netdev_core_pick_tx+0x360/0x360 [ 881.063275][T22104] ? ref_tracker_alloc+0x333/0x490 [ 881.068379][T22104] ? __copy_skb_header+0x3ba/0x4f0 [ 881.073486][T22104] ? memcpy+0x3c/0x60 [ 881.077462][T22104] ? __copy_skb_header+0x3ba/0x4f0 [ 881.082575][T22104] ? __skb_clone+0x446/0x6c0 [ 881.087172][T22104] ? skb_clone+0x21b/0x370 [ 881.091592][T22104] __netlink_deliver_tap+0x55c/0x7e0 [ 881.096968][T22104] ? netlink_deliver_tap+0x2e/0x1b0 [ 881.102253][T22104] netlink_deliver_tap+0x19c/0x1b0 [ 881.107366][T22104] netlink_unicast+0x777/0x920 [ 881.112131][T22104] netlink_sendmsg+0x8ad/0xbd0 [ 881.116909][T22104] ? netlink_getsockopt+0x550/0x550 [ 881.122196][T22104] ? apparmor_socket_sendmsg+0x8a/0x330 [ 881.127829][T22104] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 881.133278][T22104] ? security_socket_sendmsg+0x7c/0xa0 [ 881.138729][T22104] ? netlink_getsockopt+0x550/0x550 [ 881.144013][T22104] ____sys_sendmsg+0x5ed/0x9a0 [ 881.148797][T22104] ? __sys_sendmsg_sock+0x30/0x30 [ 881.153916][T22104] ? __import_iovec+0x306/0x510 [ 881.158767][T22104] ? import_iovec+0x6f/0xa0 [ 881.163267][T22104] ___sys_sendmsg+0x2a2/0x360 [ 881.167947][T22104] ? __sys_sendmsg+0x2a0/0x2a0 [ 881.172731][T22104] ? __lock_acquire+0x7c40/0x7c40 [ 881.177780][T22104] __se_sys_sendmsg+0x1c3/0x2b0 [ 881.182629][T22104] ? ct_nmi_exit+0x145/0x1c0 [ 881.187211][T22104] ? __x64_sys_sendmsg+0x80/0x80 [ 881.192159][T22104] ? lockdep_hardirqs_on+0x94/0x140 [ 881.197357][T22104] do_syscall_64+0x4c/0xa0 [ 881.201863][T22104] ? clear_bhb_loop+0x60/0xb0 [ 881.206545][T22104] ? clear_bhb_loop+0x60/0xb0 [ 881.211221][T22104] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 881.217105][T22104] RIP: 0033:0x7fe5fbf9e019 [ 881.221602][T22104] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 881.241221][T22104] RSP: 002b:00007fe5fce6a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 881.249713][T22104] RAX: ffffffffffffffda RBX: 00007fe5fc225fa0 RCX: 00007fe5fbf9e019 [ 881.257681][T22104] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000008 [ 881.265644][T22104] RBP: 00007fe5fce6a090 R08: 0000000000000000 R09: 0000000000000000 [ 881.273692][T22104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 881.281664][T22104] R13: 00007fe5fc226038 R14: 00007fe5fc225fa0 R15: 00007ffc7b6b4408 [ 881.289637][T22104] [ 881.329518][T22104] netlink: 'syz.2.5916': attribute type 21 has an invalid length. [ 881.402260][T22104] netlink: 'syz.2.5916': attribute type 6 has an invalid length. [ 881.415996][T22104] __nla_validate_parse: 5 callbacks suppressed [ 881.416011][T22104] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5916'. [ 881.601883][T22121] netlink: 144 bytes leftover after parsing attributes in process `syz.0.5921'. [ 882.015210][T22134] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 882.043987][T22134] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 882.307131][ T4300] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 882.307748][T12748] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 883.338961][T22183] netlink: 'syz.0.5945': attribute type 10 has an invalid length. [ 883.363104][T22183] team0: Device vxcan1 is of different type [ 883.800355][T22204] netlink: 'syz.0.5949': attribute type 4 has an invalid length. [ 884.333672][T22224] netlink: 144 bytes leftover after parsing attributes in process `syz.3.5958'. [ 884.355589][T22224] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 884.743393][T22244] netlink: 'syz.3.5965': attribute type 10 has an invalid length. [ 884.932249][T22250] netlink: 'syz.2.5966': attribute type 10 has an invalid length. [ 884.972976][T22250] bridge0: port 3(team0) entered disabled state [ 884.979997][T22250] bridge0: port 2(bond0) entered disabled state [ 884.987009][T22250] bridge0: port 1(bridge_slave_0) entered disabled state [ 885.092662][T22250] team0: Device bridge0 is already an upper device of the team interface [ 885.125451][T22256] netlink: 144 bytes leftover after parsing attributes in process `syz.0.5971'. [ 885.224463][T22256] team0: Port device team_slave_0 removed [ 885.249801][T22256] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 885.313576][T22258] netlink: 148 bytes leftover after parsing attributes in process `syz.3.5972'. [ 885.338123][T22263] netlink: 'syz.3.5972': attribute type 21 has an invalid length. [ 885.385424][T22265] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5972'. [ 885.410070][T22265] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 885.431514][T22265] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 886.276679][T22296] netlink: 188 bytes leftover after parsing attributes in process `syz.4.5984'. [ 886.304061][T22292] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 886.315837][T22293] syzkaller1: tun_chr_ioctl cmd 2148553947 [ 886.717592][T22310] netlink: 144 bytes leftover after parsing attributes in process `syz.0.5990'. [ 886.739351][T22310] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 886.818199][T22312] netlink: 10 bytes leftover after parsing attributes in process `syz.1.5989'. [ 886.868229][ T4289] Bluetooth: hci0: ISO packet for unknown connection handle 2622 [ 887.366251][T22334] netlink: 'syz.0.5997': attribute type 4 has an invalid length. [ 887.391111][T22334] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.5997'. [ 887.643379][T22343] __sock_release: fasync list not empty! [ 887.720049][T22349] netlink: 'syz.3.6001': attribute type 33 has an invalid length. [ 887.772977][T22349] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6001'. [ 888.323183][T22365] netlink: 'syz.1.6008': attribute type 21 has an invalid length. [ 888.373619][T22365] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6008'. [ 888.420331][T22365] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 888.488963][T22365] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 888.684292][ T49] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 888.705047][ T49] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 888.722349][ T49] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 888.731943][ T49] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 888.742405][ T49] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 888.754823][ T49] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 888.883507][ T9528] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 889.042135][ T9528] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 889.158238][ T9528] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 889.189099][T22396] netlink: 'syz.0.6018': attribute type 10 has an invalid length. [ 889.209621][T22396] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6018'. [ 889.235835][T22396] bridge0: port 3(team0) entered blocking state [ 889.250182][T22396] bridge0: port 3(team0) entered disabled state [ 889.261514][T22396] device team0 entered promiscuous mode [ 889.289286][T22396] device team_slave_1 entered promiscuous mode [ 889.306024][T22396] bridge0: port 3(team0) entered blocking state [ 889.312436][T22396] bridge0: port 3(team0) entered forwarding state [ 889.508474][ T9528] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 889.648156][T22380] chnl_net:caif_netlink_parms(): no params data found [ 889.668045][T22405] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6021'. [ 889.695634][T22405] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6021'. [ 889.785709][T22411] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6021'. [ 889.848576][T22405] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6021'. [ 890.001132][T22422] netlink: zone id is out of range [ 890.006339][T22422] netlink: zone id is out of range [ 890.069770][T22422] netlink: zone id is out of range [ 890.085188][T22422] netlink: del zone limit has 4 unknown bytes [ 890.090614][T22380] bridge0: port 1(bridge_slave_0) entered blocking state [ 890.098841][T22380] bridge0: port 1(bridge_slave_0) entered disabled state [ 890.155694][T22380] device bridge_slave_0 entered promiscuous mode [ 890.168643][T22380] bridge0: port 2(bridge_slave_1) entered blocking state [ 890.187333][T22422] netlink: 'syz.0.6027': attribute type 27 has an invalid length. [ 890.201383][T22422] netlink: 'syz.0.6027': attribute type 3 has an invalid length. [ 890.212822][T22380] bridge0: port 2(bridge_slave_1) entered disabled state [ 890.245508][T22380] device bridge_slave_1 entered promiscuous mode [ 890.258265][T22431] IPv6: NLM_F_CREATE should be specified when creating new route [ 890.279856][T22431] IPv6: Can't replace route, no match found [ 890.312677][ T4289] Bluetooth: hci4: unexpected event 0x18 length: 15 < 23 [ 890.470215][T22380] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 890.518268][T22380] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 890.672391][T22380] team0: Port device team_slave_0 added [ 890.829607][ T4289] Bluetooth: hci1: command 0x0409 tx timeout [ 890.976786][T22380] team0: Port device team_slave_1 added [ 891.204220][T22380] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 891.244736][T22380] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 891.304532][T22478] FAULT_INJECTION: forcing a failure. [ 891.304532][T22478] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 891.329497][T22380] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 891.349313][T22478] CPU: 1 PID: 22478 Comm: syz.1.6043 Not tainted syzkaller #0 [ 891.356912][T22478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 891.366986][T22478] Call Trace: [ 891.370271][T22478] [ 891.373198][T22478] dump_stack_lvl+0x188/0x24e [ 891.377967][T22478] ? show_regs_print_info+0x12/0x12 [ 891.383178][T22478] ? load_image+0x410/0x410 [ 891.387675][T22478] ? __lock_acquire+0x7c40/0x7c40 [ 891.392698][T22478] should_fail_ex+0x390/0x4c0 [ 891.397377][T22478] _copy_from_user+0x2c/0x170 [ 891.402046][T22478] __sys_bpf+0x2ea/0x780 [ 891.406290][T22478] ? bpf_link_show_fdinfo+0x380/0x380 [ 891.411839][T22478] ? lock_chain_count+0x20/0x20 [ 891.416705][T22478] __x64_sys_bpf+0x78/0x90 [ 891.421140][T22478] do_syscall_64+0x4c/0xa0 [ 891.425666][T22478] ? clear_bhb_loop+0x60/0xb0 [ 891.430351][T22478] ? clear_bhb_loop+0x60/0xb0 [ 891.435032][T22478] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 891.440943][T22478] RIP: 0033:0x7f7d5c19e019 [ 891.445352][T22478] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 891.464955][T22478] RSP: 002b:00007f7d5d084028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 891.473362][T22478] RAX: ffffffffffffffda RBX: 00007f7d5c425fa0 RCX: 00007f7d5c19e019 [ 891.481333][T22478] RDX: 000000000000000c RSI: 00002000000007c0 RDI: 000000000000000a [ 891.489296][T22478] RBP: 00007f7d5d084090 R08: 0000000000000000 R09: 0000000000000000 [ 891.497259][T22478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 891.505220][T22478] R13: 00007f7d5c426038 R14: 00007f7d5c425fa0 R15: 00007ffd8dab2cd8 [ 891.513629][T22478] [ 891.626303][T22380] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 891.643826][T22380] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 891.757826][T22380] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 892.022025][T22380] device hsr_slave_0 entered promiscuous mode [ 892.034106][T22380] device hsr_slave_1 entered promiscuous mode [ 892.045124][T22380] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 892.056665][T22380] Cannot create hsr debugfs directory [ 892.161320][T22489] netlink: 'syz.3.6044': attribute type 1 has an invalid length. [ 892.228962][T22499] __nla_validate_parse: 2 callbacks suppressed [ 892.228979][T22499] netlink: 65023 bytes leftover after parsing attributes in process `syz.2.6050'. [ 892.229604][T22489] netlink: 'syz.3.6044': attribute type 1 has an invalid length. [ 892.269850][T22489] netlink: 116376 bytes leftover after parsing attributes in process `syz.3.6044'. [ 892.351315][T22481] device syzkaller0 entered promiscuous mode [ 892.909425][ T4289] Bluetooth: hci1: command 0x041b tx timeout [ 894.479585][T22553] netlink: 'syz.0.6062': attribute type 49 has an invalid length. [ 895.002900][ T4289] Bluetooth: hci1: command 0x040f tx timeout [ 896.293908][ T9528] team0: Port device wlan1 removed [ 896.353307][T22553] netlink: 'syz.0.6062': attribute type 49 has an invalid length. [ 896.814809][T22570] netlink: 188 bytes leftover after parsing attributes in process `syz.0.6067'. [ 897.003040][ T9528] device hsr_slave_0 left promiscuous mode [ 897.058409][ T9528] device hsr_slave_1 left promiscuous mode [ 897.085172][ T4289] Bluetooth: hci1: command 0x0419 tx timeout [ 897.227956][ T9528] device veth1_macvtap left promiscuous mode [ 897.252288][ T9528] device veth0_macvtap left promiscuous mode [ 897.272233][ T9528] device veth1_vlan left promiscuous mode [ 897.288403][ T9528] device veth0_vlan left promiscuous mode [ 898.134777][ T9528] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 898.515384][ T9528] team0 (unregistering): Port device team_slave_1 removed [ 898.586864][ T9528] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 898.625681][ T9528] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 898.635056][ T9528] device bond_slave_0 left promiscuous mode [ 898.866022][ T9528] bond0 (unregistering): Released all slaves [ 898.898759][T22578] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6069'. [ 898.918254][T22594] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6072'. [ 899.029961][T22594] device bridge_slave_0 left promiscuous mode [ 899.037129][T22594] bridge0: port 1(bridge_slave_0) entered disabled state [ 901.019734][T22613] netlink: 'syz.0.6076': attribute type 10 has an invalid length. [ 901.027608][T22613] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6076'. [ 901.079595][T22613] device dummy0 entered promiscuous mode [ 901.085850][T22613] bridge0: port 4(dummy0) entered blocking state [ 901.108736][T22613] bridge0: port 4(dummy0) entered disabled state [ 901.127036][T22613] bridge0: port 4(dummy0) entered blocking state [ 901.133553][T22613] bridge0: port 4(dummy0) entered forwarding state [ 901.161047][T22614] device syzkaller0 entered promiscuous mode [ 901.182088][T22624] netlink: 5714 bytes leftover after parsing attributes in process `syz.2.6078'. [ 901.340244][T22638] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.6080'. [ 901.573500][T22380] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 901.618668][T22380] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 901.758724][T22380] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 901.789378][T22650] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6083'. [ 901.865504][T22380] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 902.171107][T22380] 8021q: adding VLAN 0 to HW filter on device bond0 [ 902.292993][T12732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 902.340550][T12732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 902.361484][T22380] 8021q: adding VLAN 0 to HW filter on device team0 [ 902.413367][T12732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 902.435216][T12732] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 902.518386][T12732] bridge0: port 1(bridge_slave_0) entered blocking state [ 902.525673][T12732] bridge0: port 1(bridge_slave_0) entered forwarding state [ 902.559852][T12732] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 902.603908][T12759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 902.638987][T12759] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 902.680010][T12759] bridge0: port 2(bridge_slave_1) entered blocking state [ 902.687170][T12759] bridge0: port 2(bridge_slave_1) entered forwarding state [ 902.801975][T12732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 902.825331][T12732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 902.905161][T12732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 902.944010][T12732] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 902.996495][T12732] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 903.077056][T12732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 903.100867][T12732] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 903.139007][T12732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 903.187204][T12732] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 903.232629][T22380] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 903.273458][T22380] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 903.297368][T12732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 903.310730][T12732] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 903.336021][T22680] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.6091'. [ 903.346100][T22680] bridge_slave_1: default FDB implementation only supports local addresses [ 904.347670][T12734] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 904.359433][T12734] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 904.390911][T22720] netlink: 'syz.1.6100': attribute type 11 has an invalid length. [ 904.432538][T22380] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 904.451001][T22716] netlink: 'syz.1.6100': attribute type 11 has an invalid length. [ 905.419341][ T9528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 905.433262][ T9528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 905.467006][ T9528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 905.498343][ T9528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 905.515572][T22380] device veth0_vlan entered promiscuous mode [ 905.527723][ T9528] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 905.544015][ T9528] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 905.564384][T22380] device veth1_vlan entered promiscuous mode [ 905.602780][T12748] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 905.617753][T12748] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 905.626753][T12748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 905.645601][T12748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 905.658162][T22380] device veth0_macvtap entered promiscuous mode [ 905.683808][T22380] device veth1_macvtap entered promiscuous mode [ 905.714577][T22380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 905.725294][T22380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 905.749240][T22380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 905.769377][T22380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 905.786972][T22380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 905.809295][T22380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 905.823869][T22380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 905.836039][T22380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 905.869935][T22380] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 905.881991][T22380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 905.921762][T22380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 905.936890][T22380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 905.947784][T22380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 905.964513][T22380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 906.000036][T22380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 906.059642][T22380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 906.099362][T22380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 906.123846][T22380] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 906.131467][T12734] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 906.140879][T12734] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 906.149019][T12734] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 906.175549][T12734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 906.196790][T12734] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 906.212630][T12734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 906.227409][T22741] device bond_slave_1 entered promiscuous mode [ 906.228488][T22756] netlink: 'syz.3.6110': attribute type 2 has an invalid length. [ 906.248463][T22747] netlink: 'syz.2.6107': attribute type 21 has an invalid length. [ 906.265249][T22756] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.6110'. [ 906.275045][T22747] FAULT_INJECTION: forcing a failure. [ 906.275045][T22747] name failslab, interval 1, probability 0, space 0, times 0 [ 906.310955][T22747] CPU: 1 PID: 22747 Comm: syz.2.6107 Not tainted syzkaller #0 [ 906.318655][T22747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 906.328993][T22747] Call Trace: [ 906.332280][T22747] [ 906.335211][T22747] dump_stack_lvl+0x188/0x24e [ 906.339904][T22747] ? show_regs_print_info+0x12/0x12 [ 906.345158][T22747] ? load_image+0x410/0x410 [ 906.349680][T22747] ? __might_sleep+0xd0/0xd0 [ 906.354315][T22747] ? __lock_acquire+0x7c40/0x7c40 [ 906.359370][T22747] should_fail_ex+0x390/0x4c0 [ 906.364091][T22747] should_failslab+0x5/0x20 [ 906.368619][T22747] slab_pre_alloc_hook+0x59/0x300 [ 906.373670][T22747] ? fib_create_info+0xa78/0x2370 [ 906.378752][T22747] __kmem_cache_alloc_node+0x4f/0x270 [ 906.384140][T22747] ? fib_create_info+0xa78/0x2370 [ 906.389252][T22747] __kmalloc+0xa3/0x240 [ 906.393432][T22747] fib_create_info+0xa78/0x2370 [ 906.398306][T22747] fib_table_insert+0xc2/0x1af0 [ 906.403153][T22747] ? rtm_to_fib_config+0xfe5/0x1370 [ 906.408350][T22747] ? fib_new_table+0x106/0x2d0 [ 906.413119][T22747] inet_rtm_newroute+0x147/0x230 [ 906.418163][T22747] ? __mutex_lock+0x3ba/0xae0 [ 906.422863][T22747] ? rcu_read_unlock+0xa0/0xa0 [ 906.427641][T22747] ? rcu_read_unlock+0xa0/0xa0 [ 906.432529][T22747] rtnetlink_rcv_msg+0x863/0xfb0 [ 906.437592][T22747] ? rtnetlink_rcv_msg+0x220/0xfb0 [ 906.442704][T22747] ? rtnetlink_bind+0x80/0x80 [ 906.447492][T22747] ? __local_bh_enable_ip+0x136/0x1c0 [ 906.452944][T22747] ? lockdep_hardirqs_on+0x94/0x140 [ 906.458151][T22747] ? __local_bh_enable_ip+0x136/0x1c0 [ 906.463533][T22747] ? _local_bh_enable+0xa0/0xa0 [ 906.468455][T22747] ? __dev_queue_xmit+0x281/0x3810 [ 906.473560][T22747] ? __dev_queue_xmit+0x281/0x3810 [ 906.478669][T22747] ? __dev_queue_xmit+0x1d84/0x3810 [ 906.483972][T22747] ? __dev_queue_xmit+0x281/0x3810 [ 906.489090][T22747] ? ref_tracker_free+0x682/0x830 [ 906.494259][T22747] ? refcount_inc+0x70/0x70 [ 906.498757][T22747] ? memcpy+0x3c/0x60 [ 906.502749][T22747] ? __copy_skb_header+0x3ba/0x4f0 [ 906.507894][T22747] ? __skb_clone+0x446/0x6c0 [ 906.512593][T22747] netlink_rcv_skb+0x1ef/0x440 [ 906.517378][T22747] ? rtnetlink_bind+0x80/0x80 [ 906.522096][T22747] ? netlink_ack+0x1160/0x1160 [ 906.527086][T22747] ? netlink_deliver_tap+0x2e/0x1b0 [ 906.532412][T22747] netlink_unicast+0x7ad/0x920 [ 906.537178][T22747] netlink_sendmsg+0x8ad/0xbd0 [ 906.541954][T22747] ? netlink_getsockopt+0x550/0x550 [ 906.547173][T22747] ? apparmor_socket_sendmsg+0x8a/0x330 [ 906.552729][T22747] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 906.558004][T22747] ? security_socket_sendmsg+0x7c/0xa0 [ 906.563548][T22747] ? netlink_getsockopt+0x550/0x550 [ 906.568811][T22747] ____sys_sendmsg+0x5ed/0x9a0 [ 906.573629][T22747] ? __sys_sendmsg_sock+0x30/0x30 [ 906.578674][T22747] ? __import_iovec+0x306/0x510 [ 906.583546][T22747] ? import_iovec+0x6f/0xa0 [ 906.588063][T22747] ___sys_sendmsg+0x2a2/0x360 [ 906.592743][T22747] ? __sys_sendmsg+0x2a0/0x2a0 [ 906.597511][T22747] ? ktime_get+0x7b/0x270 [ 906.601927][T22747] __se_sys_sendmsg+0x1c3/0x2b0 [ 906.606893][T22747] ? ct_nmi_exit+0x145/0x1c0 [ 906.611503][T22747] ? __x64_sys_sendmsg+0x80/0x80 [ 906.616457][T22747] ? lockdep_hardirqs_on+0x94/0x140 [ 906.621744][T22747] do_syscall_64+0x4c/0xa0 [ 906.626174][T22747] ? clear_bhb_loop+0x60/0xb0 [ 906.630873][T22747] ? clear_bhb_loop+0x60/0xb0 [ 906.635565][T22747] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 906.641463][T22747] RIP: 0033:0x7fe5fbf9e019 [ 906.645911][T22747] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 906.665535][T22747] RSP: 002b:00007fe5fce6a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 906.674028][T22747] RAX: ffffffffffffffda RBX: 00007fe5fc225fa0 RCX: 00007fe5fbf9e019 [ 906.682018][T22747] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000008 [ 906.690191][T22747] RBP: 00007fe5fce6a090 R08: 0000000000000000 R09: 0000000000000000 [ 906.698201][T22747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 906.706279][T22747] R13: 00007fe5fc226038 R14: 00007fe5fc225fa0 R15: 00007ffc7b6b4408 [ 906.714470][T22747] [ 906.752386][T22380] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 906.763243][T22380] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 906.775247][T22380] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 906.790717][T22380] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 906.979625][T12734] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 907.005042][T12734] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 907.073002][T22773] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.6116'. [ 907.212743][T22779] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.6116'. [ 907.845018][T22766] mac80211_hwsim hwsim26 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 907.864861][T12734] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 907.902513][T22771] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6112'. [ 907.920787][T22777] netlink: 'syz.0.6116': attribute type 3 has an invalid length. [ 907.933478][T22777] netlink: 114680 bytes leftover after parsing attributes in process `syz.0.6116'. [ 907.980359][T12751] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 907.989533][T12751] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 907.998078][T12751] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 908.185073][T22788] netlink: 144 bytes leftover after parsing attributes in process `syz.4.6004'. [ 908.233785][T22788] team0: Port device team_slave_0 removed [ 908.245283][T22788] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 908.396515][T22803] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 908.403069][T22803] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 908.574639][T22811] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.6126'. [ 908.793173][T22813] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.6128'. [ 908.890679][T22813] netlink: 'syz.3.6128': attribute type 3 has an invalid length. [ 908.918106][T22813] netlink: 114680 bytes leftover after parsing attributes in process `syz.3.6128'. [ 908.998155][T22816] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.6128'. [ 910.559801][T22853] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 910.664283][T22849] netlink: 'syz.3.6141': attribute type 10 has an invalid length. [ 910.801108][T22857] netlink: 'syz.4.6143': attribute type 3 has an invalid length. [ 910.953052][T22861] bond0: (slave macvlan0): Error: Slave device does not support XDP [ 911.166827][T22859] bridge0: port 2(bond0) entered disabled state [ 911.202774][T22859] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 911.276773][T22859] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 911.364857][T22859] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 911.406169][T22859] bond0 (unregistering): Released all slaves [ 912.135593][T22904] delete_channel: no stack [ 912.466975][T22915] __nla_validate_parse: 8 callbacks suppressed [ 912.467014][T22915] netlink: 154020 bytes leftover after parsing attributes in process `syz.0.6163'. [ 912.516984][T22915] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 913.329027][T12742] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 913.339991][T12751] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 914.796309][T22903] netlink: 'syz.2.6160': attribute type 10 has an invalid length. [ 914.804511][T22907] netlink: 'syz.2.6160': attribute type 13 has an invalid length. [ 914.813046][T22907] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6160'. [ 914.825107][T22907] syz_tun: refused to change device tx_queue_len [ 914.832047][T22907] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 914.867998][T22921] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6166'. [ 915.036384][T22931] netlink: 'syz.1.6170': attribute type 10 has an invalid length. [ 915.108101][T22929] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6169'. [ 915.155700][T22929] netlink: 'syz.4.6169': attribute type 10 has an invalid length. [ 915.514976][T22929] team0 (unregistering): Port device team_slave_1 removed [ 915.603821][T22938] netlink: 'syz.4.6169': attribute type 25 has an invalid length. [ 915.655652][T22938] netlink: 'syz.4.6169': attribute type 25 has an invalid length. [ 915.684882][T22955] bond0: (slave macvlan0): Error: Slave device does not support XDP [ 915.712162][T22948] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6177'. [ 915.947588][T22948] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 915.999598][T22948] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 916.081036][T22948] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 916.127603][T22948] bond0 (unregistering): Released all slaves [ 916.179269][T22963] netlink: 'syz.2.6183': attribute type 10 has an invalid length. [ 916.200882][T22963] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6183'. [ 916.255075][T22963] device dummy0 entered promiscuous mode [ 916.266298][T22963] bridge0: port 1(dummy0) entered blocking state [ 916.290337][T22963] bridge0: port 1(dummy0) entered disabled state [ 916.305851][T22975] netlink: 'syz.0.6189': attribute type 10 has an invalid length. [ 916.331754][T22975] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6189'. [ 916.736161][T22995] IPv6: Can't replace route, no match found [ 916.935255][T23004] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 916.942221][T23004] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 917.242171][T23012] netlink: 14 bytes leftover after parsing attributes in process `syz.4.6205'. [ 917.437927][T23012] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 917.480855][T23012] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 917.518620][T23012] bond0 (unregistering): Released all slaves [ 917.923356][T23044] netlink: 'syz.1.6218': attribute type 21 has an invalid length. [ 917.949526][T23044] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6218'. [ 917.975239][T23048] FAULT_INJECTION: forcing a failure. [ 917.975239][T23048] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 918.038552][T23048] CPU: 1 PID: 23048 Comm: syz.2.6220 Not tainted syzkaller #0 [ 918.046064][T23048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 918.056134][T23048] Call Trace: [ 918.059427][T23048] [ 918.062457][T23048] dump_stack_lvl+0x188/0x24e [ 918.067166][T23048] ? show_regs_print_info+0x12/0x12 [ 918.072401][T23048] ? load_image+0x410/0x410 [ 918.076923][T23048] ? __lock_acquire+0x7c40/0x7c40 [ 918.082053][T23048] ? __bpf_prog_test_run_raw_tp+0x2a6/0x430 [ 918.087983][T23048] should_fail_ex+0x390/0x4c0 [ 918.092683][T23048] _copy_to_user+0x2c/0x130 [ 918.097201][T23048] bpf_prog_test_run_raw_tp+0x4de/0x680 [ 918.102773][T23048] ? trace_bpf_test_finish+0x220/0x220 [ 918.108262][T23048] ? trace_bpf_test_finish+0x220/0x220 [ 918.113769][T23048] bpf_prog_test_run+0x31c/0x390 [ 918.118778][T23048] __sys_bpf+0x62b/0x780 [ 918.123042][T23048] ? bpf_link_show_fdinfo+0x380/0x380 [ 918.128513][T23048] ? lock_chain_count+0x20/0x20 [ 918.133367][T23048] __x64_sys_bpf+0x78/0x90 [ 918.137784][T23048] do_syscall_64+0x4c/0xa0 [ 918.142224][T23048] ? clear_bhb_loop+0x60/0xb0 [ 918.146903][T23048] ? clear_bhb_loop+0x60/0xb0 [ 918.151590][T23048] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 918.157495][T23048] RIP: 0033:0x7fe5fbf9e019 [ 918.161918][T23048] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 918.181538][T23048] RSP: 002b:00007fe5fce6a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 918.190035][T23048] RAX: ffffffffffffffda RBX: 00007fe5fc225fa0 RCX: 00007fe5fbf9e019 [ 918.198010][T23048] RDX: 000000000000000c RSI: 00002000000007c0 RDI: 000000000000000a [ 918.205976][T23048] RBP: 00007fe5fce6a090 R08: 0000000000000000 R09: 0000000000000000 [ 918.213944][T23048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 918.221921][T23048] R13: 00007fe5fc226038 R14: 00007fe5fc225fa0 R15: 00007ffc7b6b4408 [ 918.229909][T23048] [ 918.815972][T23067] netlink: 'syz.0.6227': attribute type 21 has an invalid length. [ 918.851431][T23067] netlink: 'syz.0.6227': attribute type 6 has an invalid length. [ 918.887785][T23067] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6227'. [ 919.586769][T23102] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6239'. [ 919.683447][T23102] netlink: 'syz.0.6239': attribute type 10 has an invalid length. [ 919.797920][T23102] bridge0: port 3(team0) entered disabled state [ 919.878514][T23102] device team0 left promiscuous mode [ 919.899047][T23102] device team_slave_1 left promiscuous mode [ 919.908488][T23102] bridge0: port 3(team0) entered disabled state [ 920.070843][T23102] team0 (unregistering): Port device team_slave_1 removed [ 920.154223][T23109] netlink: 128 bytes leftover after parsing attributes in process `syz.4.6241'. [ 920.169909][T23109] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 920.187987][T23111] netlink: 'syz.0.6239': attribute type 25 has an invalid length. [ 920.201589][T23111] netlink: 'syz.0.6239': attribute type 25 has an invalid length. [ 920.543471][T23135] netlink: 'syz.0.6249': attribute type 10 has an invalid length. [ 920.569356][T23135] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6249'. [ 920.618059][T23135] batman_adv: batadv0: Adding interface: veth0_vlan [ 920.645270][T23135] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 920.710238][ T49] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 920.721182][ T49] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 920.729065][ T49] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 920.738974][ T49] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 920.746782][ T49] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 920.757376][T23135] batman_adv: batadv0: Interface activated: veth0_vlan [ 920.783964][ T49] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 921.197317][ T9528] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 921.360170][ T9528] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 921.704441][T23167] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6259'. [ 921.791150][ T9528] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 921.842913][T23167] netlink: 'syz.3.6259': attribute type 10 has an invalid length. [ 921.926587][T23169] netlink: 'syz.3.6259': attribute type 25 has an invalid length. [ 921.948029][T23169] netlink: 'syz.3.6259': attribute type 25 has an invalid length. [ 921.974990][ T9528] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 922.028922][T23141] chnl_net:caif_netlink_parms(): no params data found [ 922.404665][T23141] bridge0: port 1(bridge_slave_0) entered blocking state [ 922.424950][T23141] bridge0: port 1(bridge_slave_0) entered disabled state [ 922.450689][T23141] device bridge_slave_0 entered promiscuous mode [ 922.485987][T23141] bridge0: port 2(bridge_slave_1) entered blocking state [ 922.503681][T23141] bridge0: port 2(bridge_slave_1) entered disabled state [ 922.528298][T23141] device bridge_slave_1 entered promiscuous mode [ 922.571815][T23183] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6263'. [ 922.618180][T23191] netlink: 144 bytes leftover after parsing attributes in process `syz.0.6264'. [ 922.630342][T23191] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 922.831678][ T4289] Bluetooth: hci2: command 0x0409 tx timeout [ 923.397338][T23141] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 923.471194][T23141] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 923.517693][ T9528] tipc: Left network mode [ 923.578722][T23141] team0: Port device team_slave_0 added [ 923.612695][T23141] team0: Port device team_slave_1 added [ 923.629903][T23212] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6269'. [ 923.774302][T23212] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6269'. [ 923.787594][T23141] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 923.812265][T23141] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 923.844178][T23141] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 923.857015][T23141] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 923.864603][T23141] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 923.899419][T23141] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 923.960036][T23216] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6269'. [ 924.072004][T23141] device hsr_slave_0 entered promiscuous mode [ 924.083984][T23224] netlink: 188 bytes leftover after parsing attributes in process `syz.4.6273'. [ 924.097726][T23141] device hsr_slave_1 entered promiscuous mode [ 924.119916][T23141] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 924.137754][T23141] Cannot create hsr debugfs directory [ 924.809385][T23242] netlink: 'syz.1.6277': attribute type 19 has an invalid length. [ 924.840314][T23242] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6277'. [ 924.871910][T23248] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6279'. [ 924.909443][ T4289] Bluetooth: hci2: command 0x041b tx timeout [ 925.935534][T23286] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6292'. [ 925.964188][T23287] netlink: 'syz.4.6291': attribute type 19 has an invalid length. [ 925.978331][T23287] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6291'. [ 926.060529][ T9528] device hsr_slave_0 left promiscuous mode [ 926.082960][ T9528] device hsr_slave_1 left promiscuous mode [ 926.132669][ T9528] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 926.141075][ T9528] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 926.150607][ T9528] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 926.158383][ T9528] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 926.177483][ T9528] bridge0: port 1(dummy0) entered disabled state [ 926.188290][ T9528] device team0 left promiscuous mode [ 926.210724][ T9528] device team_slave_1 left promiscuous mode [ 926.223399][ T9528] device geneve1 left promiscuous mode [ 926.229737][ T9528] bridge0: port 3(team0) entered disabled state [ 926.289411][ T9528] device veth1_macvtap left promiscuous mode [ 926.295703][ T9528] device veth0_macvtap left promiscuous mode [ 926.302524][ T9528] device veth1_vlan left promiscuous mode [ 926.918477][T23315] netlink: 'syz.4.6302': attribute type 1 has an invalid length. [ 926.934613][T23315] netlink: 157116 bytes leftover after parsing attributes in process `syz.4.6302'. [ 926.999237][ T4289] Bluetooth: hci2: command 0x040f tx timeout [ 928.458311][ T9528] team0 (unregistering): Port device geneve1 removed [ 928.814397][ T9528] team0 (unregistering): Port device team_slave_1 removed [ 929.069603][ T4289] Bluetooth: hci2: command 0x0419 tx timeout [ 929.139041][T23295] netlink: 830 bytes leftover after parsing attributes in process `syz.1.6293'. [ 929.198331][T23303] netlink: 'syz.3.6295': attribute type 10 has an invalid length. [ 929.209408][T23303] netlink: 'syz.3.6295': attribute type 19 has an invalid length. [ 929.218666][T23303] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6295'. [ 929.229318][T23324] netlink: 'syz.4.6305': attribute type 19 has an invalid length. [ 929.237174][T23324] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6305'. [ 929.396762][T23141] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 929.436352][T23141] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 929.465741][T23141] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 929.480746][T23141] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 929.729720][T23141] 8021q: adding VLAN 0 to HW filter on device bond0 [ 929.790240][T12734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 929.809104][T12734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 929.832725][T23141] 8021q: adding VLAN 0 to HW filter on device team0 [ 929.862358][T12751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 929.877919][T12751] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 929.904293][T12751] bridge0: port 1(bridge_slave_0) entered blocking state [ 929.911500][T12751] bridge0: port 1(bridge_slave_0) entered forwarding state [ 929.948241][T12751] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 929.964542][T12751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 929.994454][T12751] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 930.024962][T12751] bridge0: port 2(bridge_slave_1) entered blocking state [ 930.032240][T12751] bridge0: port 2(bridge_slave_1) entered forwarding state [ 930.070726][T12751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 930.126834][T12751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 930.154663][T12751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 930.174195][T12751] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 930.208120][T12751] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 930.217484][T12751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 930.238836][T12751] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 930.248470][T12751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 930.264876][T12751] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 930.279027][T12751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 930.301170][T12751] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 930.325074][T23141] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 930.963205][T12751] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 930.985419][T12751] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 931.076838][T23141] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 931.112603][T23380] netlink: 'syz.0.6318': attribute type 19 has an invalid length. [ 931.125465][T23380] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6318'. [ 931.136973][T23373] netlink: 'syz.1.6317': attribute type 21 has an invalid length. [ 931.150421][T23373] netlink: 'syz.1.6317': attribute type 6 has an invalid length. [ 931.169561][T23373] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6317'. [ 931.198294][T23373] FAULT_INJECTION: forcing a failure. [ 931.198294][T23373] name failslab, interval 1, probability 0, space 0, times 0 [ 931.216384][T23373] CPU: 1 PID: 23373 Comm: syz.1.6317 Not tainted syzkaller #0 [ 931.223906][T23373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 931.233981][T23373] Call Trace: [ 931.237282][T23373] [ 931.240227][T23373] dump_stack_lvl+0x188/0x24e [ 931.244929][T23373] ? show_regs_print_info+0x12/0x12 [ 931.250718][T23373] ? load_image+0x410/0x410 [ 931.255269][T23373] should_fail_ex+0x390/0x4c0 [ 931.259976][T23373] should_failslab+0x5/0x20 [ 931.264491][T23373] slab_pre_alloc_hook+0x59/0x300 [ 931.269534][T23373] ? ip_tun_build_state+0x136/0x660 [ 931.274774][T23373] __kmem_cache_alloc_node+0x4f/0x270 [ 931.280245][T23373] ? ip_tun_build_state+0x136/0x660 [ 931.285455][T23373] __kmalloc+0xa3/0x240 [ 931.289620][T23373] ip_tun_build_state+0x136/0x660 [ 931.294662][T23373] ? iptunnel_pmtud_build_icmpv6+0x10b0/0x10b0 [ 931.300817][T23373] ? lwtunnel_build_state+0xde/0x4b0 [ 931.306188][T23373] lwtunnel_build_state+0x37a/0x4b0 [ 931.311419][T23373] ? lwtunnel_build_state+0xde/0x4b0 [ 931.316714][T23373] fib_nh_common_init+0x141/0x2c0 [ 931.321740][T23373] ? fib_dump_info+0x10b0/0x10b0 [ 931.326698][T23373] ? skb_gro_incr_csum_unnecessary+0x300/0x300 [ 931.333020][T23373] ? __kmem_cache_alloc_node+0x19d/0x270 [ 931.338672][T23373] fib_nh_init+0x9a/0x400 [ 931.343006][T23373] fib_create_info+0xf25/0x2370 [ 931.347867][T23373] fib_table_insert+0xc2/0x1af0 [ 931.353063][T23373] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 931.359219][T23373] ? lockdep_hardirqs_on+0x94/0x140 [ 931.364504][T23373] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 931.370748][T23373] inet_rtm_newroute+0x147/0x230 [ 931.375688][T23373] ? __mutex_lock+0x3ba/0xae0 [ 931.380449][T23373] ? rcu_read_unlock+0xa0/0xa0 [ 931.385316][T23373] ? rcu_read_unlock+0xa0/0xa0 [ 931.390087][T23373] rtnetlink_rcv_msg+0x863/0xfb0 [ 931.395194][T23373] ? rtnetlink_rcv_msg+0x220/0xfb0 [ 931.400305][T23373] ? rtnetlink_bind+0x80/0x80 [ 931.404976][T23373] ? __local_bh_enable_ip+0x136/0x1c0 [ 931.410356][T23373] ? lockdep_hardirqs_on+0x94/0x140 [ 931.415545][T23373] ? __local_bh_enable_ip+0x136/0x1c0 [ 931.420995][T23373] ? _local_bh_enable+0xa0/0xa0 [ 931.425840][T23373] ? __dev_queue_xmit+0x281/0x3810 [ 931.430982][T23373] ? __dev_queue_xmit+0x281/0x3810 [ 931.436116][T23373] ? __dev_queue_xmit+0x1d84/0x3810 [ 931.441319][T23373] ? __dev_queue_xmit+0x281/0x3810 [ 931.446433][T23373] ? ref_tracker_free+0x682/0x830 [ 931.451455][T23373] ? refcount_inc+0x70/0x70 [ 931.455953][T23373] ? memcpy+0x3c/0x60 [ 931.459925][T23373] ? __copy_skb_header+0x3ba/0x4f0 [ 931.465034][T23373] ? __skb_clone+0x446/0x6c0 [ 931.469621][T23373] netlink_rcv_skb+0x1ef/0x440 [ 931.474381][T23373] ? rtnetlink_bind+0x80/0x80 [ 931.479061][T23373] ? netlink_ack+0x1160/0x1160 [ 931.483828][T23373] ? netlink_deliver_tap+0x2e/0x1b0 [ 931.489028][T23373] netlink_unicast+0x7ad/0x920 [ 931.493882][T23373] netlink_sendmsg+0x8ad/0xbd0 [ 931.498647][T23373] ? netlink_getsockopt+0x550/0x550 [ 931.504022][T23373] ? apparmor_socket_sendmsg+0x8a/0x330 [ 931.509584][T23373] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 931.514944][T23373] ? security_socket_sendmsg+0x7c/0xa0 [ 931.520414][T23373] ? netlink_getsockopt+0x550/0x550 [ 931.525612][T23373] ____sys_sendmsg+0x5ed/0x9a0 [ 931.530379][T23373] ? __sys_sendmsg_sock+0x30/0x30 [ 931.535414][T23373] ? __import_iovec+0x306/0x510 [ 931.540263][T23373] ? import_iovec+0x6f/0xa0 [ 931.544760][T23373] ___sys_sendmsg+0x2a2/0x360 [ 931.549435][T23373] ? __sys_sendmsg+0x2a0/0x2a0 [ 931.554210][T23373] ? ktime_get+0x7b/0x270 [ 931.558547][T23373] __se_sys_sendmsg+0x1c3/0x2b0 [ 931.563566][T23373] ? ct_nmi_exit+0x145/0x1c0 [ 931.568169][T23373] ? __x64_sys_sendmsg+0x80/0x80 [ 931.573128][T23373] ? lockdep_hardirqs_on+0x94/0x140 [ 931.578351][T23373] do_syscall_64+0x4c/0xa0 [ 931.582771][T23373] ? clear_bhb_loop+0x60/0xb0 [ 931.587447][T23373] ? clear_bhb_loop+0x60/0xb0 [ 931.592127][T23373] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 931.598021][T23373] RIP: 0033:0x7f7d5c19e019 [ 931.602439][T23373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 931.622128][T23373] RSP: 002b:00007f7d5d084028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 931.631438][T23373] RAX: ffffffffffffffda RBX: 00007f7d5c425fa0 RCX: 00007f7d5c19e019 [ 931.639614][T23373] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000008 [ 931.647584][T23373] RBP: 00007f7d5d084090 R08: 0000000000000000 R09: 0000000000000000 [ 931.655555][T23373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 931.663517][T23373] R13: 00007f7d5c426038 R14: 00007f7d5c425fa0 R15: 00007ffd8dab2cd8 [ 931.671498][T23373] [ 931.792331][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.804734][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.884691][ T9528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 931.905329][ T9528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 931.956266][T23141] device veth0_vlan entered promiscuous mode [ 931.990586][T12751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 932.020289][T12751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 932.047405][T12751] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 932.060754][T12751] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 932.101353][T23141] device veth1_vlan entered promiscuous mode [ 932.182904][T23402] mac80211_hwsim hwsim31 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 932.245670][T12748] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 932.268623][T12748] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 932.287753][T12748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 932.306919][T12748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 932.346483][T23406] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6324'. [ 932.370962][T23141] device veth0_macvtap entered promiscuous mode [ 932.438526][T23141] device veth1_macvtap entered promiscuous mode [ 932.466053][T23413] netlink: 'syz.0.6327': attribute type 10 has an invalid length. [ 932.551487][T23141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 932.611271][T23141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 932.626596][T23141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 932.637825][T23141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 932.658380][T23141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 932.669665][T23141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 932.681020][T23141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 932.695014][T23141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 932.727566][T23141] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 932.793416][T23418] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.6328'. [ 932.848311][T23413] netlink: 'syz.0.6327': attribute type 21 has an invalid length. [ 932.876131][T23413] netlink: 'syz.0.6327': attribute type 6 has an invalid length. [ 932.886895][T23413] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6327'. [ 932.897709][ T9528] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 932.908948][ T9528] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 932.956109][ T9528] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 932.988747][ T9528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 933.036245][T23141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 933.063417][T23141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 933.099347][T23141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 933.129290][T23141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 933.172854][T23141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 933.201668][T23433] netlink: 'syz.1.6333': attribute type 46 has an invalid length. [ 933.217517][T23141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 933.236120][T23141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 933.269219][T23141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 933.290749][T23141] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 933.310417][T23433] netlink: 'syz.1.6333': attribute type 46 has an invalid length. [ 933.340465][T23141] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 933.363054][T23141] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 933.376779][T23141] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 933.398849][T23141] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 933.432701][T12748] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 933.441460][T23443] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 933.447522][T12748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 933.447872][T23443] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 933.621700][T12748] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 933.678988][T12748] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 933.741955][T12748] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 933.781276][T12734] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 933.817609][T12734] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 933.860262][T12734] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 933.952675][T23459] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 935.015280][T23491] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.6346'. [ 935.351962][T23504] netlink: 'syz.2.6351': attribute type 10 has an invalid length. [ 935.377918][T23501] netlink: 'syz.1.6350': attribute type 7 has an invalid length. [ 935.389720][T23504] team0: Device wlan1 is up. Set it down before adding it as a team port [ 935.419969][T23501] netlink: 'syz.1.6350': attribute type 7 has an invalid length. [ 935.427858][T23501] netlink: 198580 bytes leftover after parsing attributes in process `syz.1.6350'. [ 935.591868][T23510] netlink: 'syz.4.6353': attribute type 10 has an invalid length. [ 935.826090][T21542] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 935.836584][T21542] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 935.850059][T21542] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 935.864152][T21542] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 935.882950][T21542] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 935.891627][T21542] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 935.901655][T23522] netlink: 148 bytes leftover after parsing attributes in process `syz.4.6356'. [ 936.002450][T23520] netlink: 'syz.4.6356': attribute type 21 has an invalid length. [ 936.027601][T23525] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.6358'. [ 936.071037][T23522] netlink: 128 bytes leftover after parsing attributes in process `syz.4.6356'. [ 936.103206][T23522] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 936.113033][ T9528] wlan1: Trigger new scan to find an IBSS to join [ 936.118368][T23522] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 936.248804][T12748] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 936.361203][T12748] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 936.454608][T23525] netlink: 175800 bytes leftover after parsing attributes in process `syz.1.6358'. [ 936.479726][T23535] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 936.487411][T23535] IPv6: NLM_F_CREATE should be set when creating new route [ 936.495212][T23535] IPv6: NLM_F_CREATE should be set when creating new route [ 936.502773][T23535] IPv6: NLM_F_CREATE should be set when creating new route [ 936.510764][T23525] netlink: zone id is out of range [ 936.516253][T23525] netlink: zone id is out of range [ 936.547704][T23542] netlink: 188 bytes leftover after parsing attributes in process `syz.0.6364'. [ 936.558099][T23537] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6362'. [ 936.567716][T23525] netlink: zone id is out of range [ 936.619430][T23525] netlink: zone id is out of range [ 936.624765][T23525] netlink: zone id is out of range [ 936.641891][T12748] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 936.691814][T23525] netlink: zone id is out of range [ 936.713403][T23518] chnl_net:caif_netlink_parms(): no params data found [ 936.785945][T12748] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 936.812660][T23548] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6366'. [ 936.846386][T23547] delete_channel: no stack [ 937.058443][T23518] bridge0: port 1(bridge_slave_0) entered blocking state [ 937.079422][T23518] bridge0: port 1(bridge_slave_0) entered disabled state [ 937.088345][T23518] device bridge_slave_0 entered promiscuous mode [ 937.166139][T23518] bridge0: port 2(bridge_slave_1) entered blocking state [ 937.181861][T23518] bridge0: port 2(bridge_slave_1) entered disabled state [ 937.247277][T23518] device bridge_slave_1 entered promiscuous mode [ 937.968414][T21542] Bluetooth: hci3: command 0x0409 tx timeout [ 938.074091][T23578] validate_nla: 3 callbacks suppressed [ 938.074110][T23578] netlink: 'syz.2.6374': attribute type 3 has an invalid length. [ 938.430904][T23578] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.6374'. [ 938.518863][T23518] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 938.556940][T12748] tipc: Left network mode [ 938.781844][T23579] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 938.835070][T23579] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 938.873867][T23579] bond0 (unregistering): Released all slaves [ 939.569137][T23518] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 939.620006][T23586] netlink: 'syz.4.6377': attribute type 10 has an invalid length. [ 939.639611][T23586] bridge0: port 2(bridge_slave_1) entered disabled state [ 939.648397][T23586] bridge0: port 2(bridge_slave_1) entered disabled state [ 939.666379][T23596] netlink: 'syz.2.6379': attribute type 10 has an invalid length. [ 939.846864][T23518] team0: Port device team_slave_0 added [ 939.871439][T23518] team0: Port device team_slave_1 added [ 940.010973][T23606] netlink: 'syz.1.6383': attribute type 33 has an invalid length. [ 940.024711][T23606] __nla_validate_parse: 2 callbacks suppressed [ 940.024726][T23606] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6383'. [ 940.040850][ T4289] Bluetooth: hci3: command 0x041b tx timeout [ 940.110944][T23518] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 940.120857][T23518] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 940.147891][T23518] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 940.243901][T23518] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 940.251915][T23518] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 940.319413][T23518] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 940.336722][T23610] netlink: 'syz.0.6385': attribute type 5 has an invalid length. [ 940.591428][T23518] device hsr_slave_0 entered promiscuous mode [ 940.628172][T23518] device hsr_slave_1 entered promiscuous mode [ 940.657653][T23518] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 940.692300][T23518] Cannot create hsr debugfs directory [ 940.697905][T23631] netlink: 'syz.0.6390': attribute type 2 has an invalid length. [ 940.729607][T23631] netlink: 'syz.0.6390': attribute type 8 has an invalid length. [ 940.737406][T23631] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6390'. [ 941.149879][T12759] wlan1: Trigger new scan to find an IBSS to join [ 941.707438][T23676] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6405'. [ 941.815796][T23671] netlink: 'syz.1.6404': attribute type 10 has an invalid length. [ 941.854451][T23665] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6402'. [ 941.893749][T23675] netlink: 148 bytes leftover after parsing attributes in process `syz.0.6403'. [ 941.932871][T23676] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6405'. [ 941.971110][T23678] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6405'. [ 942.011755][T23670] netlink: 'syz.0.6403': attribute type 21 has an invalid length. [ 942.038513][T23677] netlink: 128 bytes leftover after parsing attributes in process `syz.0.6403'. [ 942.101481][T23677] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 942.108961][T12759] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 942.119434][ T4289] Bluetooth: hci3: command 0x040f tx timeout [ 942.162914][T23677] net_ratelimit: 200 callbacks suppressed [ 942.162932][T23677] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 942.387447][T23683] IPv6: NLM_F_CREATE should be specified when creating new route [ 942.427271][T23683] IPv6: Can't replace route, no match found [ 942.781867][T12748] device hsr_slave_0 left promiscuous mode [ 942.810180][T12748] device hsr_slave_1 left promiscuous mode [ 942.831926][T12748] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 942.841827][T12748] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 942.884645][T12748] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 942.918008][T12748] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 942.967724][T12748] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 942.986552][T12748] batman_adv: batadv0: Removing interface: veth0_vlan [ 943.010196][T12748] bridge0: port 3(bond0) entered disabled state [ 943.044378][T12748] bridge0: port 2(bridge_slave_1) entered disabled state [ 943.089480][T12748] device bridge_slave_0 left promiscuous mode [ 943.095757][T12748] bridge0: port 1(bridge_slave_0) entered disabled state [ 943.190834][T12748] device veth1_macvtap left promiscuous mode [ 943.198078][T12748] device veth0_macvtap left promiscuous mode [ 943.205516][T12748] device veth1_vlan left promiscuous mode [ 943.212132][T12748] device veth0_vlan left promiscuous mode [ 944.019716][T12748] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 944.190064][ T4289] Bluetooth: hci3: command 0x0419 tx timeout [ 944.624352][T12748] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 944.668702][T12748] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 944.677736][T12748] device bond_slave_0 left promiscuous mode [ 944.889058][T12748] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 944.897635][T12748] device dummy0 left promiscuous mode [ 944.920927][T12748] bond0 (unregistering): Released all slaves [ 945.022097][T23742] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6423'. [ 945.224040][T23518] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 945.242478][T23518] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 945.330332][T23518] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 945.358385][T23752] netlink: 'syz.4.6425': attribute type 10 has an invalid length. [ 945.373719][T23518] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 945.533286][T23762] FAULT_INJECTION: forcing a failure. [ 945.533286][T23762] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 945.574093][T23762] CPU: 0 PID: 23762 Comm: syz.2.6428 Not tainted syzkaller #0 [ 945.582656][T23762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 945.592739][T23762] Call Trace: [ 945.596045][T23762] [ 945.599341][T23762] dump_stack_lvl+0x188/0x24e [ 945.604222][T23762] ? show_regs_print_info+0x12/0x12 [ 945.609461][T23762] ? load_image+0x410/0x410 [ 945.613992][T23762] ? __lock_acquire+0x7c40/0x7c40 [ 945.619567][T23762] ? snprintf+0xe5/0x140 [ 945.623905][T23762] should_fail_ex+0x390/0x4c0 [ 945.628591][T23762] _copy_to_user+0x2c/0x130 [ 945.633094][T23762] simple_read_from_buffer+0xe3/0x150 [ 945.638638][T23762] proc_fail_nth_read+0x1a6/0x220 [ 945.643665][T23762] ? proc_fault_inject_write+0x310/0x310 [ 945.649304][T23762] ? fsnotify_perm+0x248/0x550 [ 945.654251][T23762] ? proc_fault_inject_write+0x310/0x310 [ 945.659978][T23762] vfs_read+0x2db/0x960 [ 945.664331][T23762] ? kernel_read+0x1e0/0x1e0 [ 945.668950][T23762] ? __fget_files+0x28/0x460 [ 945.673542][T23762] ? __fget_files+0x3fc/0x460 [ 945.678229][T23762] ? __fdget_pos+0x2ae/0x360 [ 945.682852][T23762] ? ksys_read+0x70/0x260 [ 945.687223][T23762] ksys_read+0x14d/0x260 [ 945.691469][T23762] ? vfs_write+0x9a0/0x9a0 [ 945.695892][T23762] ? lockdep_hardirqs_on+0x94/0x140 [ 945.701176][T23762] do_syscall_64+0x4c/0xa0 [ 945.705588][T23762] ? clear_bhb_loop+0x60/0xb0 [ 945.710283][T23762] ? clear_bhb_loop+0x60/0xb0 [ 945.714959][T23762] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 945.720848][T23762] RIP: 0033:0x7f6d9735e84e [ 945.725281][T23762] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 945.744979][T23762] RSP: 002b:00007f6d982defe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 945.753567][T23762] RAX: ffffffffffffffda RBX: 00007f6d982df6c0 RCX: 00007f6d9735e84e [ 945.761618][T23762] RDX: 000000000000000f RSI: 00007f6d982df0a0 RDI: 0000000000000005 [ 945.769607][T23762] RBP: 00007f6d982df090 R08: 0000000000000000 R09: 0000000000000000 [ 945.777574][T23762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 945.785801][T23762] R13: 00007f6d97626038 R14: 00007f6d97625fa0 R15: 00007ffd6a7e5fd8 [ 945.793874][T23762] [ 945.861306][T23518] 8021q: adding VLAN 0 to HW filter on device bond0 [ 945.920258][T12751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 945.928307][T12751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 945.951748][T23518] 8021q: adding VLAN 0 to HW filter on device team0 [ 945.982547][T12742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 946.039494][T12742] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 946.048125][T12742] bridge0: port 1(bridge_slave_0) entered blocking state [ 946.055294][T12742] bridge0: port 1(bridge_slave_0) entered forwarding state [ 946.093638][T12742] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 946.145266][T12742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 946.180736][T12742] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 946.200622][T12742] bridge0: port 2(bridge_slave_1) entered blocking state [ 946.207769][T12742] bridge0: port 2(bridge_slave_1) entered forwarding state [ 946.236050][T12742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 946.320383][T12742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 946.394475][T12742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 946.462168][T12742] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 946.495836][T12742] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 946.539488][T12734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 946.560873][T12734] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 946.597284][T23518] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 946.670730][T23518] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 946.706539][T12734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 946.724528][T12734] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 946.738799][T12734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 946.758060][T12734] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 946.787377][T12734] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 946.826458][T23801] netlink: 144 bytes leftover after parsing attributes in process `syz.0.6438'. [ 946.859380][T23801] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 947.385957][T23817] device syzkaller0 entered promiscuous mode [ 947.417369][T23822] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6441'. [ 947.453071][T23822] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 947.490637][T23822] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 947.875728][T23833] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.6445'. [ 950.409284][T12748] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 950.416842][T12748] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 950.440780][T23833] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 950.458633][T23833] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 950.461112][T23518] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 950.509424][T23833] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 950.563981][T12748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 950.590425][T12748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 950.630400][T23860] netlink: 'syz.2.6450': attribute type 10 has an invalid length. [ 950.652448][T23860] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 950.673155][T23860] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 950.712739][T23860] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 950.759868][T23860] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 950.803354][T23860] device geneve0 entered promiscuous mode [ 950.866510][T23871] netlink: 144 bytes leftover after parsing attributes in process `syz.1.6452'. [ 950.951465][T12751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 950.970367][T12751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 950.994995][T12751] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 951.022196][T12751] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 951.042775][T23518] device veth0_vlan entered promiscuous mode [ 951.099010][T23518] device veth1_vlan entered promiscuous mode [ 951.158589][T12759] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 951.211177][T12759] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 951.236191][T12759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 951.274537][T12759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 951.305527][T23518] device veth0_macvtap entered promiscuous mode [ 951.327943][T23518] device veth1_macvtap entered promiscuous mode [ 951.372198][T23518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 951.412416][T23518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 951.463146][T23518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 951.494583][T23518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 951.525174][T23518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 951.569557][T23518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 951.595113][T23518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 951.644531][T23518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 951.670703][T23518] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 951.685921][T23518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 951.707091][T23518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 951.735048][T23518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 951.746436][T23518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 951.767733][T23518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 951.779146][T23518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 951.795535][T23518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 951.813388][T23518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 951.831587][T23518] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 951.839388][T12748] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 951.847428][T12748] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 951.870386][T12748] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 951.890110][T12748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 951.906460][T12748] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 951.941089][T12748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 951.987762][T23911] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6463'. [ 952.058347][T23903] netlink: 'syz.4.6463': attribute type 12 has an invalid length. [ 952.090867][T23903] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6463'. [ 952.139114][T23518] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 952.148601][T23518] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 952.163618][T23518] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 952.189517][T23518] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 952.535011][T12742] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 952.550370][T12742] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 952.612510][T12742] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 952.648589][T12751] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 952.662112][T12751] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 952.681053][T12734] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 952.744597][T23930] netlink: 'syz.4.6472': attribute type 1 has an invalid length. [ 952.779428][T23930] netlink: 'syz.4.6472': attribute type 3 has an invalid length. [ 952.787976][T23930] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6472'. [ 953.185059][T23948] netlink: 'syz.0.6477': attribute type 29 has an invalid length. [ 953.207228][T23948] netlink: 'syz.0.6477': attribute type 29 has an invalid length. [ 953.267844][T23948] netlink: 'syz.0.6477': attribute type 29 has an invalid length. [ 953.278630][T23950] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.6478'. [ 953.361171][T23950] netlink: 'syz.2.6478': attribute type 3 has an invalid length. [ 953.377246][T23950] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.6478'. [ 953.469975][T12751] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 953.508295][ T4289] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 953.529475][ T49] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 953.538478][ T49] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 953.551309][ T49] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 953.577088][ T49] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 953.585353][ T49] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 953.723928][T12751] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 953.772054][T23963] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6482'. [ 953.837564][T12751] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 953.978164][T12751] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 954.053416][T23976] netlink: 'syz.3.6483': attribute type 10 has an invalid length. [ 954.076940][T23976] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6483'. [ 954.117286][T23976] bridge0: port 3(veth0_vlan) entered blocking state [ 954.125476][T23976] bridge0: port 3(veth0_vlan) entered disabled state [ 954.149445][T23976] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 954.268423][T23983] netlink: 'syz.2.6489': attribute type 29 has an invalid length. [ 954.380781][T23955] chnl_net:caif_netlink_parms(): no params data found [ 954.405695][T12751] device 0 left promiscuous mode [ 954.548827][T12751] device 0 left promiscuous mode [ 954.690550][T23955] bridge0: port 1(bridge_slave_0) entered blocking state [ 954.698710][T23955] bridge0: port 1(bridge_slave_0) entered disabled state [ 954.739722][T23955] device bridge_slave_0 entered promiscuous mode [ 954.883294][T23955] bridge0: port 2(bridge_slave_1) entered blocking state [ 954.904751][T23955] bridge0: port 2(bridge_slave_1) entered disabled state [ 954.939066][T23955] device bridge_slave_1 entered promiscuous mode [ 955.109443][T23955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 955.242979][T23955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 955.630447][T21542] Bluetooth: hci0: command 0x0409 tx timeout [ 957.082738][T24017] validate_nla: 2 callbacks suppressed [ 957.082752][T24017] netlink: 'syz.0.6498': attribute type 10 has an invalid length. [ 957.127274][T24017] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6498'. [ 957.154133][T24039] netlink: 'syz.3.6504': attribute type 10 has an invalid length. [ 957.227259][T24039] team0: Port device macvlan0 added [ 957.286324][T23955] team0: Port device team_slave_0 added [ 957.451962][T23955] team0: Port device team_slave_1 added [ 957.514848][T23955] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 957.529256][T23955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 957.628996][T23955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 957.708470][T23955] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 957.726234][ T49] Bluetooth: hci0: command 0x041b tx timeout [ 957.762863][T23955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 957.890771][T23955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 957.948486][T24072] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6515'. [ 957.982784][T24072] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6515'. [ 958.922674][T23955] device hsr_slave_0 entered promiscuous mode [ 958.982228][T23955] device hsr_slave_1 entered promiscuous mode [ 959.428524][T24115] netlink: 'syz.0.6527': attribute type 19 has an invalid length. [ 959.443954][T24115] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6527'. [ 959.585670][T24123] netlink: 'syz.4.6530': attribute type 15 has an invalid length. [ 959.619328][T24123] netlink: 'syz.4.6530': attribute type 16 has an invalid length. [ 959.627289][T24123] netlink: 'syz.4.6530': attribute type 20 has an invalid length. [ 959.690579][T24123] netlink: 'syz.4.6530': attribute type 21 has an invalid length. [ 959.744824][T24123] netlink: 'syz.4.6530': attribute type 23 has an invalid length. [ 959.796657][ T49] Bluetooth: hci0: command 0x040f tx timeout [ 959.887220][T24123] netlink: 'syz.4.6530': attribute type 25 has an invalid length. [ 959.938885][T24123] netlink: 15862 bytes leftover after parsing attributes in process `syz.4.6530'. [ 960.030669][T24134] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6533'. [ 960.418019][T24139] netlink: 'syz.0.6534': attribute type 10 has an invalid length. [ 960.437376][T24139] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6534'. [ 960.481130][T24139] batman_adv: batadv0: Adding interface: vlan1 [ 960.488273][T24139] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 960.529474][T24139] batman_adv: batadv0: Interface activated: vlan1 [ 960.686584][T24143] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6536'. [ 960.704817][T24143] FAULT_INJECTION: forcing a failure. [ 960.704817][T24143] name failslab, interval 1, probability 0, space 0, times 0 [ 960.722796][T24143] CPU: 1 PID: 24143 Comm: syz.4.6536 Not tainted syzkaller #0 [ 960.730313][T24143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 960.740397][T24143] Call Trace: [ 960.743720][T24143] [ 960.746643][T24143] dump_stack_lvl+0x188/0x24e [ 960.751411][T24143] ? show_regs_print_info+0x12/0x12 [ 960.756696][T24143] ? load_image+0x410/0x410 [ 960.761636][T24143] ? __might_sleep+0xd0/0xd0 [ 960.766219][T24143] ? __lock_acquire+0x7c40/0x7c40 [ 960.771271][T24143] should_fail_ex+0x390/0x4c0 [ 960.776076][T24143] should_failslab+0x5/0x20 [ 960.780679][T24143] slab_pre_alloc_hook+0x59/0x300 [ 960.785703][T24143] kmem_cache_alloc_node+0x5a/0x310 [ 960.790905][T24143] ? __alloc_skb+0xf9/0x7d0 [ 960.795407][T24143] __alloc_skb+0xf9/0x7d0 [ 960.799822][T24143] netlink_ack+0x373/0x1160 [ 960.804365][T24143] ? ref_tracker_free+0x682/0x830 [ 960.809385][T24143] ? refcount_inc+0x70/0x70 [ 960.813973][T24143] ? netlink_dump+0xcd0/0xcd0 [ 960.818644][T24143] ? __copy_skb_header+0x3ba/0x4f0 [ 960.823763][T24143] ? __skb_clone+0x446/0x6c0 [ 960.828353][T24143] netlink_rcv_skb+0x26d/0x440 [ 960.833118][T24143] ? rtnetlink_bind+0x80/0x80 [ 960.837793][T24143] ? netlink_ack+0x1160/0x1160 [ 960.842560][T24143] ? netlink_deliver_tap+0x2e/0x1b0 [ 960.847762][T24143] netlink_unicast+0x7ad/0x920 [ 960.852531][T24143] netlink_sendmsg+0x8ad/0xbd0 [ 960.857297][T24143] ? netlink_getsockopt+0x550/0x550 [ 960.862492][T24143] ? apparmor_socket_sendmsg+0x8a/0x330 [ 960.868032][T24143] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 960.873306][T24143] ? security_socket_sendmsg+0x7c/0xa0 [ 960.878762][T24143] ? netlink_getsockopt+0x550/0x550 [ 960.883954][T24143] ____sys_sendmsg+0x5ed/0x9a0 [ 960.888718][T24143] ? __sys_sendmsg_sock+0x30/0x30 [ 960.893760][T24143] ? __import_iovec+0x306/0x510 [ 960.898612][T24143] ? import_iovec+0x6f/0xa0 [ 960.903135][T24143] ___sys_sendmsg+0x2a2/0x360 [ 960.907829][T24143] ? __sys_sendmsg+0x2a0/0x2a0 [ 960.912608][T24143] ? __lock_acquire+0x7c40/0x7c40 [ 960.917756][T24143] __se_sys_sendmsg+0x1c3/0x2b0 [ 960.922648][T24143] ? ct_nmi_exit+0x145/0x1c0 [ 960.927252][T24143] ? __x64_sys_sendmsg+0x80/0x80 [ 960.932211][T24143] ? lockdep_hardirqs_on+0x94/0x140 [ 960.937434][T24143] do_syscall_64+0x4c/0xa0 [ 960.941861][T24143] ? clear_bhb_loop+0x60/0xb0 [ 960.946621][T24143] ? clear_bhb_loop+0x60/0xb0 [ 960.951302][T24143] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 960.957190][T24143] RIP: 0033:0x7fe1ed59e019 [ 960.961596][T24143] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 960.981281][T24143] RSP: 002b:00007fe1ee39b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 960.989777][T24143] RAX: ffffffffffffffda RBX: 00007fe1ed825fa0 RCX: 00007fe1ed59e019 [ 960.997744][T24143] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000008 [ 961.005715][T24143] RBP: 00007fe1ee39b090 R08: 0000000000000000 R09: 0000000000000000 [ 961.013676][T24143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 961.021643][T24143] R13: 00007fe1ed826038 R14: 00007fe1ed825fa0 R15: 00007ffd560cf738 [ 961.029625][T24143] [ 961.059765][T12751] device hsr_slave_0 left promiscuous mode [ 961.066924][T12751] device hsr_slave_1 left promiscuous mode [ 961.091818][T12751] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 961.099489][T12751] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 961.107537][T12751] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 961.116593][T12751] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 961.125993][T12751] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 961.133380][T12751] batman_adv: batadv0: Removing interface: veth0_vlan [ 961.142595][T12751] device team0 left promiscuous mode [ 961.148187][T12751] device team_slave_1 left promiscuous mode [ 961.156322][T12751] device dummy0 left promiscuous mode [ 961.162321][T12751] bridge0: port 3(team0) entered disabled state [ 961.171049][T12751] bridge0: port 2(bridge_slave_1) entered disabled state [ 961.200890][T12751] device bridge_slave_0 left promiscuous mode [ 961.207293][T12751] bridge0: port 1(bridge_slave_0) entered disabled state [ 961.262847][T12751] device veth1_macvtap left promiscuous mode [ 961.275856][T12751] device veth0_macvtap left promiscuous mode [ 961.286913][T12751] device veth1_vlan left promiscuous mode [ 961.296668][T12751] device veth0_vlan left promiscuous mode [ 961.873676][ T49] Bluetooth: hci0: command 0x0419 tx timeout [ 961.962955][T12751] team0 (unregistering): Port device team_slave_1 removed [ 962.326599][T12751] team0 (unregistering): Port device dummy0 removed [ 962.446755][T24164] validate_nla: 2 callbacks suppressed [ 962.446771][T24164] netlink: 'syz.2.6540': attribute type 19 has an invalid length. [ 962.460704][T24164] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6540'. [ 962.771105][T24179] mac80211_hwsim hwsim46 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 962.792427][T23955] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 962.825619][T24179] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6544'. [ 962.848500][T23955] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 963.511870][T23955] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 964.164552][T23955] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 964.430148][T23955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 964.488189][T12734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 964.545468][T12734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 964.558956][T23955] 8021q: adding VLAN 0 to HW filter on device team0 [ 964.569123][T24212] netlink: 'syz.3.6552': attribute type 19 has an invalid length. [ 964.589739][T24212] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6552'. [ 964.606039][T12748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 964.660142][T12748] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 964.684478][T24214] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 964.691289][T24214] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 964.698856][T12748] bridge0: port 1(bridge_slave_0) entered blocking state [ 964.706105][T12748] bridge0: port 1(bridge_slave_0) entered forwarding state [ 964.724623][T12748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 964.749898][T12748] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 964.810599][T12748] bridge0: port 2(bridge_slave_1) entered blocking state [ 964.817892][T12748] bridge0: port 2(bridge_slave_1) entered forwarding state [ 964.881945][T12748] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 964.917957][T12748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 964.957790][T12748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 965.013228][T12748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 965.062752][T12748] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 965.101455][T12748] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 965.149568][T12742] wlan1: Trigger new scan to find an IBSS to join [ 965.169064][T23955] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 965.244295][T23955] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 965.299945][T12748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 965.319925][T12748] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 965.366209][T12748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 965.376712][T12748] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 965.394724][T12748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 965.426934][T12748] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 965.504708][T24250] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.6563'. [ 965.756236][T12748] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 966.354523][T24267] netlink: 'syz.4.6565': attribute type 19 has an invalid length. [ 966.397932][T24267] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6565'. [ 966.649202][T12748] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 966.664837][T12748] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 966.678335][T23955] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 966.710689][T12748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 966.726313][T12748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 966.761060][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 966.780597][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 966.792623][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 966.811201][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 966.824218][T23955] device veth0_vlan entered promiscuous mode [ 966.847090][T23955] device veth1_vlan entered promiscuous mode [ 966.900147][T12759] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 966.909002][T12759] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 966.953063][T12759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 966.976483][T12759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 967.014301][T23955] device veth0_macvtap entered promiscuous mode [ 967.054764][T23955] device veth1_macvtap entered promiscuous mode [ 967.120954][T24282] netlink: 'syz.3.6566': attribute type 10 has an invalid length. [ 967.187859][T24282] team0: Device wlan1 is up. Set it down before adding it as a team port [ 967.232232][T23955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 967.251571][T23955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 967.277614][T23955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 967.333540][T23955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 967.358320][T23955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 967.371982][T23955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 967.390121][T23955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 967.395635][T21542] Bluetooth: hci3: ISO packet for unknown connection handle 34 [ 967.401242][T23955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 967.484797][T23955] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 967.523216][T23955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 967.534916][T23955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 967.589353][T23955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 967.601354][T23955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 967.611613][T23955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 967.628201][T23955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 967.638710][T23955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 967.654880][T23955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 967.685086][T23955] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 967.708085][T24293] netlink: 'syz.0.6570': attribute type 10 has an invalid length. [ 967.730872][T12759] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 967.747890][T12759] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 967.783573][T12759] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 967.817118][T12759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 967.827445][T12759] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 967.856369][T12759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 969.152307][ T9528] wlan1: Trigger new scan to find an IBSS to join [ 969.234734][T23955] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 969.259267][T23955] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 969.268025][T23955] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 969.309268][T23955] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 969.518694][T12742] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 969.578318][T12742] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 969.625841][T12759] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 969.661256][T24333] netlink: 'syz.0.6578': attribute type 19 has an invalid length. [ 969.687156][T24333] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6578'. [ 969.719622][T12748] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 969.742297][T12748] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 969.773080][T12748] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 970.135850][T12732] wlan1: Creating new IBSS network, BSSID 22:1c:8b:6e:f7:36 [ 970.290587][T24361] netlink: 188 bytes leftover after parsing attributes in process `syz.1.6475'. [ 973.171983][T24388] netlink: 'syz.1.6593': attribute type 19 has an invalid length. [ 973.180076][T24388] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6593'. [ 973.199861][T24398] netlink: 144 bytes leftover after parsing attributes in process `syz.3.6596'. [ 973.299814][T24398] team0: Port device team_slave_0 removed [ 973.306391][T24398] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 973.343967][T24401] netlink: 'syz.4.6597': attribute type 10 has an invalid length. [ 973.438453][T24422] netlink: 'syz.0.6600': attribute type 10 has an invalid length. [ 973.477314][T24422] device macvlan0 entered promiscuous mode [ 973.556138][T24423] netlink: 'syz.2.6601': attribute type 21 has an invalid length. [ 973.589407][T24423] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6601'. [ 973.627036][T24434] netlink: 148 bytes leftover after parsing attributes in process `syz.1.6604'. [ 973.703429][T24434] netlink: 'syz.1.6604': attribute type 21 has an invalid length. [ 973.749842][T24434] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6604'. [ 973.781741][T24434] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 973.811396][T24434] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 973.854390][T24440] IPv6: NLM_F_CREATE should be specified when creating new route [ 973.862912][T24440] IPv6: Can't replace route, no match found [ 973.885374][T24447] netlink: 'syz.3.6609': attribute type 19 has an invalid length. [ 973.919327][T24447] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6609'. [ 974.115321][T24453] netlink: 144 bytes leftover after parsing attributes in process `syz.0.6612'. [ 974.146973][T24453] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 974.580673][T24477] netlink: 'syz.1.6619': attribute type 21 has an invalid length. [ 974.856997][T24484] netlink: 'syz.4.6623': attribute type 19 has an invalid length. [ 974.872832][T24484] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6623'. [ 975.063091][T24491] netlink: 144 bytes leftover after parsing attributes in process `syz.4.6627'. [ 975.102198][T24491] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 975.293415][T24500] netlink: 'syz.1.6629': attribute type 21 has an invalid length. [ 975.315824][T24500] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6629'. [ 975.751546][T24518] netlink: 'syz.2.6634': attribute type 25 has an invalid length. [ 975.769505][T24518] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6634'. [ 975.919784][T24526] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6638'. [ 975.982327][T24528] netlink: 2 bytes leftover after parsing attributes in process `syz.0.6639'. [ 976.080606][T24528] device hsr0 entered promiscuous mode [ 976.115592][T24528] bridge0: port 3(hsr0) entered blocking state [ 976.148791][T24528] bridge0: port 3(hsr0) entered disabled state [ 976.210391][T24528] bridge0: port 3(hsr0) entered blocking state [ 976.216664][T24528] bridge0: port 3(hsr0) entered forwarding state [ 976.269812][T24536] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6641'. [ 976.299860][T24536] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 976.524062][T24543] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6645'. [ 976.536663][T24543] batman_adv: batadv0: Adding interface: veth0_vlan [ 976.554956][T24543] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 976.660758][T24543] batman_adv: batadv0: Interface activated: veth0_vlan [ 976.686811][T24542] netlink: 12002 bytes leftover after parsing attributes in process `syz.4.6644'. [ 976.893432][T24556] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6650'. [ 977.031841][T24561] device syzkaller0 entered promiscuous mode [ 979.830885][T24572] validate_nla: 6 callbacks suppressed [ 979.830901][T24572] netlink: 'syz.4.6654': attribute type 19 has an invalid length. [ 980.455707][T24629] netlink: 'syz.0.6677': attribute type 19 has an invalid length. [ 980.478358][T24629] __nla_validate_parse: 1 callbacks suppressed [ 980.478399][T24629] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6677'. [ 981.918547][T24641] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6682'. [ 982.330829][T24662] netlink: 'syz.0.6690': attribute type 19 has an invalid length. [ 982.339581][T24662] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6690'. [ 982.937895][T24699] netlink: 12002 bytes leftover after parsing attributes in process `syz.2.6702'. [ 983.234471][T24713] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6709'. [ 983.478675][T24721] netlink: 'syz.2.6713': attribute type 10 has an invalid length. [ 983.690470][T24721] team0: Device wg1 is of different type [ 983.826755][T24723] netlink: 'syz.3.6714': attribute type 25 has an invalid length. [ 983.835878][T24723] netlink: 'syz.3.6714': attribute type 9 has an invalid length. [ 983.847642][T24723] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6714'. [ 984.213936][T24743] netlink: 830 bytes leftover after parsing attributes in process `syz.4.6720'. [ 984.423979][T24747] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6721'. [ 985.050198][T24755] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.6723'. [ 985.080222][ T49] Bluetooth: hci4: command 0x0406 tx timeout [ 985.299670][T24761] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6724'. [ 985.895961][T24782] device bridge_slave_0 left promiscuous mode [ 985.913855][T24782] bridge0: port 1(bridge_slave_0) entered disabled state [ 986.163408][T24788] netlink: 144 bytes leftover after parsing attributes in process `syz.0.6735'. [ 986.179541][T24788] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 986.216727][T24795] netlink: 144 bytes leftover after parsing attributes in process `syz.2.6736'. [ 986.258020][T24795] team0: Port device team_slave_0 removed [ 986.268922][T24795] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 986.327411][T24794] netlink: 'syz.3.6737': attribute type 21 has an invalid length. [ 986.336543][T24794] netlink: 'syz.3.6737': attribute type 6 has an invalid length. [ 986.357092][T24794] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6737'. [ 986.368666][T24794] FAULT_INJECTION: forcing a failure. [ 986.368666][T24794] name failslab, interval 1, probability 0, space 0, times 0 [ 986.389504][T24794] CPU: 1 PID: 24794 Comm: syz.3.6737 Not tainted syzkaller #0 [ 986.397023][T24794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 986.407190][T24794] Call Trace: [ 986.410489][T24794] [ 986.413459][T24794] dump_stack_lvl+0x188/0x24e [ 986.418395][T24794] ? show_regs_print_info+0x12/0x12 [ 986.423629][T24794] ? load_image+0x410/0x410 [ 986.428136][T24794] ? __might_sleep+0xd0/0xd0 [ 986.432721][T24794] ? __lock_acquire+0x7c40/0x7c40 [ 986.437744][T24794] should_fail_ex+0x390/0x4c0 [ 986.442421][T24794] should_failslab+0x5/0x20 [ 986.447005][T24794] slab_pre_alloc_hook+0x59/0x300 [ 986.452034][T24794] kmem_cache_alloc+0x56/0x2f0 [ 986.456791][T24794] ? fib_table_insert+0x49b/0x1af0 [ 986.461907][T24794] fib_table_insert+0x49b/0x1af0 [ 986.466850][T24794] ? fib_new_table+0x106/0x2d0 [ 986.471610][T24794] inet_rtm_newroute+0x147/0x230 [ 986.476542][T24794] ? __mutex_lock+0x3ba/0xae0 [ 986.481228][T24794] ? rcu_read_unlock+0xa0/0xa0 [ 986.486083][T24794] ? rcu_read_unlock+0xa0/0xa0 [ 986.490840][T24794] rtnetlink_rcv_msg+0x863/0xfb0 [ 986.495783][T24794] ? rtnetlink_rcv_msg+0x220/0xfb0 [ 986.500892][T24794] ? rtnetlink_bind+0x80/0x80 [ 986.505931][T24794] ? rcu_preempt_deferred_qs_irqrestore+0x827/0xbd0 [ 986.512526][T24794] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 986.518349][T24794] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 986.524691][T24794] netlink_rcv_skb+0x1ef/0x440 [ 986.529451][T24794] ? rtnetlink_bind+0x80/0x80 [ 986.534218][T24794] ? netlink_ack+0x1160/0x1160 [ 986.538983][T24794] ? rtnetlink_rcv+0x9/0x20 [ 986.543568][T24794] ? rtnetlink_bind+0x80/0x80 [ 986.548244][T24794] netlink_unicast+0x7ad/0x920 [ 986.553012][T24794] netlink_sendmsg+0x8ad/0xbd0 [ 986.557778][T24794] ? netlink_getsockopt+0x550/0x550 [ 986.562971][T24794] ? apparmor_socket_sendmsg+0x8a/0x330 [ 986.568513][T24794] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 986.573792][T24794] ? security_socket_sendmsg+0x7c/0xa0 [ 986.579262][T24794] ? netlink_getsockopt+0x550/0x550 [ 986.584458][T24794] ____sys_sendmsg+0x5ed/0x9a0 [ 986.589225][T24794] ? __sys_sendmsg_sock+0x30/0x30 [ 986.594326][T24794] ? __import_iovec+0x306/0x510 [ 986.599272][T24794] ? import_iovec+0x6f/0xa0 [ 986.603778][T24794] ___sys_sendmsg+0x2a2/0x360 [ 986.608457][T24794] ? __sys_sendmsg+0x2a0/0x2a0 [ 986.613250][T24794] __se_sys_sendmsg+0x1c3/0x2b0 [ 986.618196][T24794] ? __x64_sys_sendmsg+0x80/0x80 [ 986.623157][T24794] do_syscall_64+0x4c/0xa0 [ 986.627751][T24794] ? clear_bhb_loop+0x60/0xb0 [ 986.632438][T24794] ? clear_bhb_loop+0x60/0xb0 [ 986.637126][T24794] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 986.643190][T24794] RIP: 0033:0x7f4a4b99e019 [ 986.647598][T24794] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 986.667288][T24794] RSP: 002b:00007f4a4c8bc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 986.676057][T24794] RAX: ffffffffffffffda RBX: 00007f4a4bc25fa0 RCX: 00007f4a4b99e019 [ 986.684133][T24794] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000008 [ 986.692095][T24794] RBP: 00007f4a4c8bc090 R08: 0000000000000000 R09: 0000000000000000 [ 986.700250][T24794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 986.708223][T24794] R13: 00007f4a4bc26038 R14: 00007f4a4bc25fa0 R15: 00007ffc60aa66d8 [ 986.716458][T24794] [ 986.788397][T24802] netlink: 'syz.0.6739': attribute type 10 has an invalid length. [ 987.178296][T24817] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.6744'. [ 987.319677][T24823] netlink: 'syz.3.6743': attribute type 21 has an invalid length. [ 987.341915][T24823] netlink: 128 bytes leftover after parsing attributes in process `syz.3.6743'. [ 987.366158][T24823] netlink: 'syz.3.6743': attribute type 4 has an invalid length. [ 987.388451][T24823] netlink: 'syz.3.6743': attribute type 5 has an invalid length. [ 987.417185][T24823] netlink: 3 bytes leftover after parsing attributes in process `syz.3.6743'. [ 987.434872][T24826] netlink: 'syz.3.6743': attribute type 2 has an invalid length. [ 987.445547][T24826] netlink: 'syz.3.6743': attribute type 1 has an invalid length. [ 987.458771][T24826] netlink: 170140 bytes leftover after parsing attributes in process `syz.3.6743'. [ 988.192256][T24835] netlink: 144 bytes leftover after parsing attributes in process `syz.3.6750'. [ 988.239394][T24835] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 988.468729][T24843] netlink: 'syz.2.6761': attribute type 21 has an invalid length. [ 988.479677][T24843] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6761'. [ 988.523819][T24845] netlink: 'syz.2.6761': attribute type 2 has an invalid length. [ 988.534642][T24843] netlink: 3 bytes leftover after parsing attributes in process `syz.2.6761'. [ 988.608561][T24846] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 989.365165][T24875] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 989.371714][T24875] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 989.393720][T24871] mac80211_hwsim hwsim46 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 989.917243][T24894] device bridge_slave_1 left promiscuous mode [ 989.943792][T24894] bridge0: port 2(bridge_slave_1) entered disabled state [ 990.703272][T24894] device bridge_slave_0 left promiscuous mode [ 990.709927][T24894] bridge0: port 1(bridge_slave_0) entered disabled state [ 991.386993][T24921] validate_nla: 43 callbacks suppressed [ 991.387092][T24921] netlink: 'syz.0.6780': attribute type 27 has an invalid length. [ 991.665580][T24931] netlink: 'syz.4.6783': attribute type 10 has an invalid length. [ 992.109526][ T4300] wlan1: Trigger new scan to find an IBSS to join [ 992.138826][T24947] __nla_validate_parse: 8 callbacks suppressed [ 992.138844][T24947] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6790'. [ 992.253939][T24944] delete_channel: no stack [ 992.522556][T24957] netlink: 'syz.1.6795': attribute type 10 has an invalid length. [ 992.945875][T24971] netlink: 'syz.3.6801': attribute type 10 has an invalid length. [ 993.234409][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.241434][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.419055][T24996] FAULT_INJECTION: forcing a failure. [ 993.419055][T24996] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 993.443999][T24996] CPU: 1 PID: 24996 Comm: syz.4.6813 Not tainted syzkaller #0 [ 993.451708][T24996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 993.461970][T24996] Call Trace: [ 993.465284][T24996] [ 993.468249][T24996] dump_stack_lvl+0x188/0x24e [ 993.473074][T24996] ? show_regs_print_info+0x12/0x12 [ 993.478313][T24996] ? load_image+0x410/0x410 [ 993.482894][T24996] ? __lock_acquire+0x7c40/0x7c40 [ 993.488163][T24996] should_fail_ex+0x390/0x4c0 [ 993.492898][T24996] _copy_from_user+0x2c/0x170 [ 993.497710][T24996] __sys_bpf+0x2ea/0x780 [ 993.502010][T24996] ? bpf_link_show_fdinfo+0x380/0x380 [ 993.507557][T24996] ? lock_chain_count+0x20/0x20 [ 993.512471][T24996] __x64_sys_bpf+0x78/0x90 [ 993.516934][T24996] do_syscall_64+0x4c/0xa0 [ 993.521396][T24996] ? clear_bhb_loop+0x60/0xb0 [ 993.526109][T24996] ? clear_bhb_loop+0x60/0xb0 [ 993.530832][T24996] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 993.536767][T24996] RIP: 0033:0x7fe1ed59e019 [ 993.541489][T24996] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 993.561137][T24996] RSP: 002b:00007fe1ee39b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 993.569675][T24996] RAX: ffffffffffffffda RBX: 00007fe1ed825fa0 RCX: 00007fe1ed59e019 [ 993.577793][T24996] RDX: 0000000000000090 RSI: 0000200000000880 RDI: 0000000000000005 [ 993.585901][T24996] RBP: 00007fe1ee39b090 R08: 0000000000000000 R09: 0000000000000000 [ 993.594039][T24996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 993.602047][T24996] R13: 00007fe1ed826038 R14: 00007fe1ed825fa0 R15: 00007ffd560cf738 [ 993.610099][T24996] [ 993.641264][T24999] netlink: 10 bytes leftover after parsing attributes in process `syz.1.6814'. [ 993.926526][T25018] netlink: 188 bytes leftover after parsing attributes in process `syz.4.6819'. [ 994.228013][T25026] netlink: 'syz.4.6823': attribute type 12 has an invalid length. [ 994.459533][T25040] netlink: 'syz.1.6829': attribute type 5 has an invalid length. [ 994.770779][T25051] device syzkaller0 entered promiscuous mode [ 995.048793][T25072] netlink: 'syz.1.6837': attribute type 3 has an invalid length. [ 995.069777][ T9528] wlan1: Trigger new scan to find an IBSS to join [ 995.083487][T25072] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6837'. [ 997.135982][T25061] netlink: 'syz.1.6837': attribute type 7 has an invalid length. [ 997.241427][T25094] netlink: 'syz.1.6846': attribute type 10 has an invalid length. [ 997.250435][T25094] device macvlan0 entered promiscuous mode [ 997.495401][T25107] IPv6: NLM_F_CREATE should be specified when creating new route [ 997.517685][T25107] IPv6: Can't replace route, no match found [ 998.020751][T25128] netlink: 'syz.1.6858': attribute type 2 has an invalid length. [ 998.028549][T25128] netlink: 'syz.1.6858': attribute type 8 has an invalid length. [ 998.084918][T25128] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6858'. [ 998.120562][T12742] wlan1: Trigger new scan to find an IBSS to join [ 998.395444][T25147] netlink: 'syz.1.6867': attribute type 21 has an invalid length. [ 998.415433][T25147] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6867'. [ 999.075230][T12759] wlan1: Creating new IBSS network, BSSID 8a:db:47:6e:80:34 [ 999.687178][T25199] netlink: 'syz.2.6886': attribute type 21 has an invalid length. [ 999.723351][T25202] netlink: 128 bytes leftover after parsing attributes in process `syz.0.6885'. [ 999.799637][T25202] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 999.819718][T25202] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 999.945472][T25207] netlink: 'syz.2.6890': attribute type 10 has an invalid length. [ 999.966991][T25207] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6890'. [ 999.996983][T25207] batman_adv: batadv0: Adding interface: veth0_vlan [ 1000.036724][T25207] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1000.073989][T25212] netlink: 2739 bytes leftover after parsing attributes in process `syz.4.6891'. [ 1000.094544][T25207] batman_adv: batadv0: Interface activated: veth0_vlan [ 1001.493548][T25265] device syzkaller0 entered promiscuous mode [ 1001.518761][T25270] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.6916'. [ 1004.963517][T25320] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6932'. [ 1005.425322][T25330] cgroup: fork rejected by pids controller in /syz1 [ 1005.773308][T25355] netlink: 'syz.2.6945': attribute type 2 has an invalid length. [ 1005.788228][T25355] netlink: 'syz.2.6945': attribute type 1 has an invalid length. [ 1005.798367][T25355] netlink: 'syz.2.6945': attribute type 4 has an invalid length. [ 1005.831210][T25355] netlink: 208312 bytes leftover after parsing attributes in process `syz.2.6945'. [ 1006.026114][T25364] netlink: 'syz.0.6949': attribute type 29 has an invalid length. [ 1006.037358][T25364] netlink: 'syz.0.6949': attribute type 29 has an invalid length. [ 1006.133539][T25364] netlink: 'syz.0.6949': attribute type 29 has an invalid length. [ 1006.169058][T25367] netlink: 'syz.0.6949': attribute type 29 has an invalid length. [ 1007.651457][T21542] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1007.661215][T21542] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1007.674021][T21542] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1007.682050][T21542] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1007.690029][T21542] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1007.697648][T21542] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1008.044499][T25385] chnl_net:caif_netlink_parms(): no params data found [ 1008.238065][T25385] bridge0: port 1(bridge_slave_0) entered blocking state [ 1008.253681][T25385] bridge0: port 1(bridge_slave_0) entered disabled state [ 1008.265844][T25385] device bridge_slave_0 entered promiscuous mode [ 1008.278553][T25385] bridge0: port 2(bridge_slave_1) entered blocking state [ 1008.293412][T25385] bridge0: port 2(bridge_slave_1) entered disabled state [ 1008.304459][T25385] device bridge_slave_1 entered promiscuous mode [ 1008.346863][T25385] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1008.367991][T25385] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1008.413323][T25385] team0: Port device team_slave_0 added [ 1008.428925][T25385] team0: Port device team_slave_1 added [ 1008.467788][T25385] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1008.476172][T25385] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1008.510420][T25385] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1008.530901][T25385] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1008.538235][T25385] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1008.576784][T25385] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1009.789525][ T4289] Bluetooth: hci0: command 0x0409 tx timeout [ 1011.869421][ T4289] Bluetooth: hci0: command 0x041b tx timeout [ 1013.949436][ T4289] Bluetooth: hci0: command 0x040f tx timeout [ 1016.029467][ T4289] Bluetooth: hci0: command 0x0419 tx timeout [ 1029.141169][T12732] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1032.909840][ T4317] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 1-.... } 2655 jiffies s: 117377 root: 0x2/. [ 1032.933559][ T4317] rcu: blocking rcu_node structures (internal RCU debug): [ 1032.943471][ T4317] Sending NMI from CPU 0 to CPUs 1: [ 1032.948821][ C1] NMI backtrace for cpu 1 [ 1032.948833][ C1] CPU: 1 PID: 25369 Comm: syz.3.6951 Not tainted syzkaller #0 [ 1032.948849][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1032.948859][ C1] RIP: 0010:__perf_event_header__init_id+0x31f/0x530 [ 1032.948891][ C1] Code: 00 74 08 4c 89 ef e8 50 ed 2e 00 4d 89 65 00 49 bd 00 00 00 00 00 fc ff df 4c 89 f6 48 81 e6 40 00 01 00 31 ff e8 d1 c3 dd ff <4c> 89 f0 48 25 40 00 01 00 74 6e e8 e1 bf dd ff 49 8d bf e0 02 00 [ 1032.948904][ C1] RSP: 0018:ffffc900001e03d0 EFLAGS: 00000046 [ 1032.948917][ C1] RAX: ffffffff81a46e2f RBX: 0000000000000010 RCX: ffff88802bdb3c00 [ 1032.948928][ C1] RDX: 0000000000000100 RSI: 0000000000010000 RDI: 0000000000000000 [ 1032.948938][ C1] RBP: ffffc900001e0800 R08: ffffffff8fa25048 R09: ffffffff8fa25058 [ 1032.948949][ C1] R10: ffffffff8fa25050 R11: ffffffff8fa25043 R12: 000000f0808bfe6f [ 1032.948960][ C1] R13: dffffc0000000000 R14: 00000000000f200c R15: ffff888033969200 [ 1032.948971][ C1] FS: 00007f4a4c8bc6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1032.948984][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1032.948994][ C1] CR2: 0000001b3130aff8 CR3: 0000000031703000 CR4: 00000000003506e0 [ 1032.949007][ C1] DR0: 0000200000000300 DR1: 0000200000000300 DR2: 0000000000000000 [ 1032.949017][ C1] DR3: 0000000000008d24 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1032.949027][ C1] Call Trace: [ 1032.949034][ C1] [ 1032.949043][ C1] perf_prepare_sample+0x18b/0x2020 [ 1032.949068][ C1] ? read_lock_is_recursive+0x10/0x10 [ 1032.949089][ C1] ? perf_callchain+0x190/0x190 [ 1032.949112][ C1] perf_event_output_forward+0x197/0x2f0 [ 1032.949133][ C1] ? perf_event_output_forward+0xbe/0x2f0 [ 1032.949153][ C1] ? perf_get_page_size+0x430/0x430 [ 1032.949176][ C1] ? __perf_event_account_interrupt+0x187/0x280 [ 1032.949195][ C1] __perf_event_overflow+0x457/0x630 [ 1032.949216][ C1] perf_swevent_event+0x315/0x570 [ 1032.949236][ C1] ? perf_tp_event+0xc10/0xc10 [ 1032.949255][ C1] ? perf_trace_buf_alloc+0x300/0x300 [ 1032.949279][ C1] ? __perf_event_overflow+0x50a/0x630 [ 1032.949305][ C1] perf_tp_event+0x36b/0xc10 [ 1032.949327][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1032.949350][ C1] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 1032.949371][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 1032.949405][ C1] ? kvm_sched_clock_read+0x14/0x40 [ 1032.949421][ C1] ? sched_clock_cpu+0x6e/0x260 [ 1032.949538][ C1] perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1032.949562][ C1] perf_trace_preemptirq_template+0x268/0x320 [ 1032.949584][ C1] ? asm_sysvec_irq_work+0x16/0x20 [ 1032.949603][ C1] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 1032.949624][ C1] ? __irq_exit_rcu+0x147/0x230 [ 1032.949639][ C1] ? irq_exit_rcu+0x20/0x20 [ 1032.949654][ C1] ? asm_sysvec_irq_work+0x16/0x20 [ 1032.949672][ C1] trace_irq_enable_rcuidle+0xd3/0x140 [ 1032.949692][ C1] trace_hardirqs_on+0x24/0x40 [ 1032.949710][ C1] asm_sysvec_irq_work+0x16/0x20 [ 1032.949734][ C1] RIP: 0010:rcu_read_unlock_special+0x7f/0x510 [ 1032.949751][ C1] Code: eb 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 2b 42 c7 44 2b 08 f8 f3 f3 f3 65 44 8b 35 a2 7c 95 7e 41 f7 c6 00 00 f0 00 74 40 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 42 c7 44 2b 08 [ 1032.949763][ C1] RSP: 0018:ffffc900001e0c40 EFLAGS: 00000206 [ 1032.949775][ C1] RAX: fc4358499bee7300 RBX: 1ffff9200003c190 RCX: fc4358499bee7300 [ 1032.949787][ C1] RDX: dffffc0000000000 RSI: ffffffff8a8c17a0 RDI: ffffffff8adf5de0 [ 1032.949798][ C1] RBP: ffffc900001e0d30 R08: ffffffff90b1025f R09: 1ffffffff216204b [ 1032.949809][ C1] R10: dffffc0000000000 R11: fffffbfff216204c R12: 0000000000000246 [ 1032.949820][ C1] R13: dffffc0000000000 R14: ffff8880b8f3bb00 R15: 0000000000000002 [ 1032.949841][ C1] ? __rcu_read_unlock+0xd0/0xd0 [ 1032.949862][ C1] __rcu_read_unlock+0x78/0xd0 [ 1032.949877][ C1] rebalance_domains+0x86f/0x9d0 [ 1032.949900][ C1] ? rebalance_domains+0x12b/0x9d0 [ 1032.949922][ C1] handle_softirqs+0x291/0x910 [ 1032.949938][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 1032.949953][ C1] ? do_softirq+0x210/0x210 [ 1032.949965][ C1] ? hrtimer_interrupt+0x850/0x980 [ 1032.949984][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 1032.949999][ C1] __irq_exit_rcu+0x13b/0x230 [ 1032.950012][ C1] ? irq_exit_rcu+0x20/0x20 [ 1032.950030][ C1] irq_exit_rcu+0x5/0x20 [ 1032.950043][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 1032.950058][ C1] [ 1032.950063][ C1] [ 1032.950069][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1032.950087][ C1] RIP: 0010:expand_files+0x0/0x810 [ 1032.950109][ C1] Code: f7 ff ff ff 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 f2 d6 98 ff 4c 89 e7 e8 5a dc 50 08 89 e8 eb e0 66 0f 1f 44 00 00 <55> 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4 e0 48 81 ec 00 01 [ 1032.950121][ C1] RSP: 0018:ffffc90004befe30 EFLAGS: 00000287 [ 1032.950132][ C1] RAX: ffffffff81e921ea RBX: 0000000000000100 RCX: 0000000000000002 [ 1032.950142][ C1] RDX: ffff88802bdb3c00 RSI: 0000000000000012 RDI: ffff888040eb7840 [ 1032.950153][ C1] RBP: ffff888040eb7840 R08: 0000000000000003 R09: 0000000000000004 [ 1032.950163][ C1] R10: dffffc0000000000 R11: fffff5200097dfb8 R12: 0000000000000012 [ 1032.950173][ C1] R13: ffff888040eb7898 R14: ffff88807da69f80 R15: dffffc0000000000 [ 1032.950188][ C1] ? alloc_fd+0x20a/0x640 [ 1032.950209][ C1] alloc_fd+0x228/0x640 [ 1032.950232][ C1] __sys_socket+0x10d/0x190 [ 1032.950255][ C1] __x64_sys_socket+0x76/0x80 [ 1032.950282][ C1] do_syscall_64+0x4c/0xa0 [ 1032.950301][ C1] ? clear_bhb_loop+0x60/0xb0 [ 1032.950319][ C1] ? clear_bhb_loop+0x60/0xb0 [ 1032.950338][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1032.950356][ C1] RIP: 0033:0x7f4a4b99e019 [ 1032.950370][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1032.950382][ C1] RSP: 002b:00007f4a4c8bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1032.950396][ C1] RAX: ffffffffffffffda RBX: 00007f4a4bc25fa0 RCX: 00007f4a4b99e019 [ 1032.950407][ C1] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000010 [ 1032.950416][ C1] RBP: 00007f4a4ba3500c R08: 0000000000000000 R09: 0000000000000000 [ 1032.950425][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1032.950434][ C1] R13: 00007f4a4bc26038 R14: 00007f4a4bc25fa0 R15: 00007ffc60aa66d8 [ 1032.950451][ C1]