last executing test programs: 5.828994511s ago: executing program 4 (id=10244): socket$kcm(0xa, 0x3, 0x73) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x9}, 0x10c027, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x200048cc) socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xa1, 0x0, 0x0, 0x0, 0x0, 0x5, 0xd4202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3, 0x400, 0x0, 0x0, 0x0, 0x0, 0x22}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x5, 0x4, &(0x7f0000000d80)=ANY=[], &(0x7f0000000c80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4000000}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r1, 0xfff}, 0x50) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x11003, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0xb9, 0x0, 0x0, 0x11}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0xd0}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.661914935s ago: executing program 0 (id=10245): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x1, 0x98, &(0x7f00000001c0)=""/152}, 0x94) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[], &(0x7f0000000340)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc6, 0x2}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0xb, &(0x7f0000000000), 0xe) sendmsg$inet(r2, &(0x7f00000007c0)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000080)="92", 0x1}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x158}, 0x24000840) close(r2) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x1f4, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4}, 0x50) openat$cgroup_type(r1, &(0x7f00000001c0), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000ff0700000046020000000000850010007f00000095007d9dc3c83eae"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x32}, 0x94) socket$kcm(0x11, 0x2, 0x0) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r4, 0x107, 0x12, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0xf, 0x4, 0x8, 0xb}, 0x50) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)=ANY=[@ANYRES32=r5, @ANYRES32=r0, @ANYBLOB="324a73924dfea9515e2144cd859aa4c30700"/28, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r6, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x10000) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000007c0)="d80000004a0081064e007c05e8fe55a10a000404018b2d5ed48e9a4002020a600e41b0000900ac00060311000000160015000a87572a6ea28959b561c1d67f6f94007125cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f", 0x6c}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)={r6}) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) 5.333860263s ago: executing program 4 (id=10250): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$kcm(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x100000001}, 0x4000, 0x2, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0500000004000000040000000500000000000000", @ANYRES32, @ANYBLOB="00002d870c693409cf5c00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000340)={0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x800, r2}, 0x38) sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x5, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x1, 0x17, &(0x7f0000000600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x5}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x890}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffff7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @generic={0x8, 0x1, 0x5, 0x1, 0x3ff}], &(0x7f0000000800)='GPL\x00', 0x0, 0x42, &(0x7f0000000840)=""/66, 0x41000, 0x8, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x8, &(0x7f00000008c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000900)={0x2, 0x1, 0x0, 0x6bf553b}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000a40), 0x10, 0x8}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000bc0)=r3, 0x4) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f00000005c0), 0x4) socket$kcm(0x11, 0x200000000000003, 0x300) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000180)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000580)="02044a00ea0e0000000000001eafbcea06e105000000000000001104ee1606d4b8bf4a8207f0ffff74c43824cee8440000", 0x31}, {&(0x7f0000000340)="126873159fca3fa38fb198e9a6b363ceb3e6d803ab766b7a38e451d14e0b3457474fe6a51671e4124fcea96a873b10996816e100ed8a93b0a9053db57d60973369f525c24533658551c3091cb88d3b", 0x4f}, {&(0x7f0000000200)="088d85d1f409000a3164ae439862807a158983661a6d2341f7", 0x19}, {&(0x7f0000000040)="df3b46a13300000000000000", 0xc}, {&(0x7f0000001480)="b72abab9439ca41f5cf14d643508a15668ec280cfe4ea416cf769dbf978a8191bbe006e0da50029176c0f24e3ff4d3e895a2afbf52cef2fe1ca31edd842b126ec4be67e6e3624b9ddf806fc146c645ec1d37fe7e3b025c156d5d520104b53f7fb2af436201cfd5dca170edea5a190e4786bfaac544b60f514d7ef420526c467f14790dcfa5ab915d7dbcdf2765bbcad014c991f8b829c79f53586de79f0b987ad796f9de4a6e53136a07a39ab1f5a2ce30aded70a9b72d1beff7e8b6405fd6331e5635ee71e809be2d58f412dcd7b2e856d692dbfed19045ff13244acce351b6e450395568063569c71ea80a04f83fbe6ad1d0862fb97f816576c4844da65d751ee1fdc522ae1158670de297cdb2117bc0adc1486e016a6bcc922a162fce6a9ecc8c42b0c44c566004eda037864e5f339bbb0998cdaf2b8e49ae003659bc033668f7c8e550197ed95c420461254ba1883dbd9403672d579cee85c37f103ee9a350a768286017158784baeb063c8c684b91b022b0db2238b679092a1f6909f0cd9228500e088f5cc7bac4c0dc56e80fedac93554aec79715ce02e8bf3fcbd70382f619bfe3dcf06890d8542022ee58bdfb075d319c9fc8474cadc8de5c3dd3f682d3f68324d0af7a727064053ad84c94643eef190783c616467628f84620044c084b80e3e57bfcdf293c9c36b4474a52398b35e49e2ad4a4ac090bffc5cd27d3c69b4ae5f841d5b0766ccd36d25eb58d8f01621a05744b79ede39019ab9d7a1946353d8f3b7f833ce1a102a8c97a9e3f32138ffafd305448f2518ccdb7eef594a890eaeaff3f876f742fec22669a97085ed93b18228ecbe9e354e8f69967ca749fd2b1cf026665ca912e3fc0188b294519078b46676052de4fe22798290bd1e232c9791fc01ddb4ae776b5769143df2867042e8a3ddfa8e786bd8a244076956d4ab137939ad381650dd4fefd2b942a98d6f2edfd7019ae473e7608647b86d643e8ff3d7d4e89ed826e4b8c6e8fed224c528d805ade85c5b45261b2692c0f403dec050bd973b0999df214689f4402dd1598a16b0c7671e5e204a00b06376ddee7cb99292a8b835c0b451642b71f2ffa1aeea56255817b2384bfe4f8213ccfc1f762f250592896102e5f6d34cdd726bc0f86af52fd7c4483d32e23e5af770e960c7445b8e67a6086f0cadcd22d0d4bdadc31b5a94dd687379dc6e078210ccc71f8e67eb58d330394425ab17e55d1ca8f868f6bf738af291d2293c3dfa2ccff25061ded22878b3cc6532d19e5a00d1f0f1b9de35305fac2c6cfd5d77a2b02618735b7d392738bd5cd3eabb7039c790a9f193913f16e06605d405d6a0cf0011a2e5f935d8563fef1722692dd266c3d320b9f5eeb2a4b2f72155522f0ed72ff1efa0b6ee78e70d3d45241609e7f83fd548e872bc197d7bcfe1af71159baa11ad667a0ead3986b2b06500ba2615ee966ea86ca68d02de4802bd9ef18dac5ba53ca98b90df49ef4e3268ceee538973620e5a60513ea330989642626420b67dceeb2c45b079348796923ad1fba5a99e6b150cf97ba2a570150053309c6dca7fa352fa1678c9b919fbc47ae0a84175a7fc25a00fa5888cb017e8d8225fadb29e34bd3c5bbccfb22a83255fec3967c991d5b3e6719ade82fb7ef85c8a4b9e7ad8ef2a3a7bc78de424572224affb1f9e0c5a969e61ee2ebb4f247bfa09384bdad04438f2efbfae303d47c3afe7e8d3a157b2a6f37572ea3ecc441dfb208ba755f781f144e58d80aea590abcfccbe8678ec6de47511f9d61cc408cbbe90eeab2cffe6d1a48dc3eb4e48e228fd43cafd7ff2c85c3ed52e99fe16887be28fcd2cd4ba4cac414c92c96294fa7d628e4356c748c173f790a7f30071d0bd53817c78d163249c7402b222b8f28668cae7afd17b97dbaf10b75b61409ca6f5b285d1ab09207c5a91c68b0d4b5da6d6b5a495c8debd7f4400e56d9e22d1cc330f782f2b5441a31b9ccf35aa1a151219cdcff5ab8b240af5b5a751eca67773c057412a935e3a7a367b2bcd28463904ee040a586d6f4f969cee56d55b6b4d97d1fe93b67e2f6bd47925054c4702ec8969a1a6211ea8f6783ca0e8ae333922ce19eceb24e2ff714a0208d2489a62f299aa50cdbfe5a826e872ab231bbddf5bd2fca92d4460379e05e13ff34a200fd921dcb67a002873bda8d86536cddaccb54eb72dd4e399fe9195ad5574ad85d9ed2eaae4106234f0a8db05a230ff377b59b54fd0919d1b86b938622ae6098f003db7f4d45d6874f54c33064ce6184dccc99fece2d994e9572d4840b0cbdd704fd70b4f625912d48a512339f883533768f09a4f614583dfb72defe713ee38f61184df279461b7d35becd8e67d01f0ec27e901d88215554d5a69db373a662085733d09ad9153e7d432c94f872ff7cd72995b3a581ea17722ed13a191b366208f75661112b1a7d42c252c907488ca8dd8f819d4618b0053d4bcddb3b5975cb8615ebc472e052552ee74d5253174a2b0cb96e1eaf6349b6c39be975123ee72b0ffe1367df7aba54de26c9135a3422d21067034551be5efc5daf8b8f59bc725e4fd171378fd9f16a785f1b0378823c85eec521e0b2aca70b7b72b719a20eb2fb0addc0b05851c8e181607f49dad7323bc255309097584c2099574db1ed7940fd16796aef19d30acd714dc1f898716df64db87d852eddf2f86e78fd7fd64868b4cb6cc626efcdea49c4a2779a0e777bbe23968e14233a810d9883680894de93023a8deae51ccbf32e6d1e53618ebee95c761221a33bc3263fff0f5ae23e14dba0418cf3f31effcb36956e06c57a17620044260419a208ae1d2296ec9472d44be74a8ed0a33a23181acdef8c7d2695ce9485ed8d17d9f6f30b9b128ee0ba15c42cbf6059bcfef008c09db8855343f79c3ce1c4d79077c8a62237d4e400a5aa88e7424f2f99df6c2070d6ed071f4968376581e20e52d64e9c4f8a6f73bb33f5b6b62c1deecc85bf789565fde14e4454306ed8f09af08afb360ee4fb40dd5dca0be43ccff75e5c0ef85ea7c521cb4840d61e99e1ce4661e721446d5a571cddffbc3643ec9b58237fd416376906bdca09485c2c80f82b23e8e7bbf22035fdbcacd804ae3771fd616901184ced46987d533017eef717e9b34a5531c3efe2d77c9b6cb0617382d69951545378a4118e71c64a1f16d096a8f933580922083d0536b90ae1715c63f682e8241b42e1646b0c52e34aa9c91efe2b6b787ce0747d4ff0dd07d6ebc9ce27e0ef35705eb7b78763a9829b464523ff3ed9078aff6ee29e6e7a59a5243825e8bb9235f8e49a9dfb5932536666c3dc75b29e515dbca4c84268cf23cd7b6da6814328a3cb26d7b1d6c28e20b36f9a2c9e2fcf663c314f72f37d2b8f405cfc686a6b35400435be0eab01709c2c4b3005491cbb0b560e33547b77ba9f25f01b194e20534199a3786ddfaf0a75aafb65cd4df4da7b5f98fe72a8bc7d045339fd41508cecca791c717a10d4fed8aa69eec80955bd899a6f8aaf3411be40568149e631ccbe17c68f85e87b58da81ba78def8b1a48c49b2dc7613f7d6ea8b158bed077666d37d1caba9a23b7cb2772e780f70872113e5bcaebaf9f9499f651dc894be3bba1e99d58b33d60c0eda397df91d7cf9fb072f247fa9a9f59c4f59c4284a3832ff0a1f9ce8f6346cb5c08a9dcb2851c7f169af688fc13f00cf9519ade547671698caaa3f4d4921fee83753b9ab0875707836343eddb5b87beca6aae023c9571b8e389ff3f4c692b6fb19686105249ce033116777d919ceb4559a67ee6b6ad9d4b53d2be24315429de3bf201107fe7dff9cbc92dbf9173391d555b0a1b8ea3252fd7d7fd15d8a3cc70cecdbdd43c4edcc4bb2fbbf646d5ec7dad0d3156a513d14184e0c316f8155e774f7dcea485f904828edf28510d692b66b1500c5a704371c2188a2812bd323de012f36a79674082b5f5e9f7f4ce1a75ed854b71555e9fcd1f0322c22a9e543674c79a74404e08e61860f505dc56e1b52977b9a9af18be4064b5f6aa7c891382bbbe65e70a4cee33176570341a525fb6b25c0b20bfa3f2ee4a01584f259f43c3b63a2dfc376f435827211379ab3ca8912cbe01e4f837920666fbda682f6954d1c156f21e12547b885f485c38f62e765013144be8ca92b1d4872790a5c02671517f6a8f0ceb247e08c64268ad8970b57bb6d077c9b8ebe7fb1183087c9a3baee06100609204be588621253b9b120c08db9f28c2d38c9bc3f59018bb7216d73186048770d1e556faa49df23a40a64b40cdda2041dccf5619db09b7a7795fd7eb631c0e0bffc3b64422bf6acd84b7fae8bd05b057260a4d7c4851829c7bbf0b6f27c5db0ff10f42df3528f79dc9bbd591965259cd0389deb124b1fadc5dfd3ade9742d29261379ea3d98929512371dec991f0636fbda5dac355a04e363beeb4751781d9cef3a0b6ac6500895d223ad43ed75cac8b0a868253fffa10bf6c2de99c687fd056e075cf0632b6d8ed2263ca08ad95b6f335a3b6d8ab7801422ac8597441ac1bbe289b50af31eb221d19a2d3177d4ad1056d616295e89471e65d811b8fa4fe2c0c12793f43ef7e75c7f657f6c26ca9cbae63ce99301069ab257ae77c38778d35afd326d569c626a68f3904b2c376dfaa05568892f346f86fb05e71fb751e09cd22525cb63512a7d2e4670bd31109b87818278e66dc73fa9667e35c5bc6588cd36d2b62592a4103803d93c194f8edd5d20c6597231321b909bbb3c1d13408e5cf27728883e33305000000000000004892dfedd17a1066f1145163e1a31ba9a3e3cee925e55d794b89462a0a092a639ccd4a24514083cb68224c87c18f0bb39ff721cc598e686b5fef169bc30f9ec6df397905f8340f6ae7ad826aac774cc46bfb9dfe8192e9ef10e8355d7c2810269eb73c7ecb8d3ffa33437142b8e596cdb778cd3cdda5bbbd09a8ea919929adbc63ff1004490c45a9ea59def65fabc884c39beac1b74a218f59c5e31ba85dcc4b8bd81d7a66d8aaf0edb64b505f760442e16fb7f07a069aba88601c3ace27762cef8196da3d44b14796b04e7fa3bab37209190a1de6e6ecfd99353279ef643766814fa7fac7254eba59bff3546bf21afc7445a4f1bc92c7b013f34962ff029e0f2926acf6c8a25fecea5b0b810656c981535492a2a4159dcfd0bf98085dc9612159fa0ad837a22eaffce80405367931ef3eacbf5a663175acc306eb075c52265d0c6dfaab30bb997fd7b71c2e0bf02b408c3b0b85f8ca7cec337655e1c2db77c306f9283b632ae95667451004235e76820d2c438bdee1b1afbc90", 0xeb5}], 0x5}, 0x40000) r5 = socket$kcm(0x2, 0x200000000000001, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x141841, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r7, 0x29, 0x4d, 0x0, 0x0) ioctl$TUNSETLINK(r6, 0x400454cd, 0x30a) close(r6) sendmsg$inet(r5, &(0x7f0000000580)={&(0x7f00000000c0)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000140)="996822ce3899d7", 0x7}], 0x1, &(0x7f0000000480)=[@ip_ttl={{0x14, 0x0, 0x2, 0x4972}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_ttl={{0x14, 0x0, 0x2, 0xffffffff}}, @ip_ttl={{0x14, 0x0, 0x2, 0xffff9d27}}], 0x60}, 0x844) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 4.757381576s ago: executing program 1 (id=10256): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x7, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21ca0000cf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b262341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f9ac2f7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$kcm(0x10, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0xd6, 0x0, 0x0, &(0x7f00000002c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x98}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x5248, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xf, 0x4}, 0x0, 0x2, 0xfffffffe, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef59510525ba56dcd79a36c23d3b9844e1571a86ea1698fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$kcm(0xf, 0x3, 0x2) socket$kcm(0xf, 0x3, 0x2) socket$kcm(0xf, 0x3, 0x2) 4.748639567s ago: executing program 3 (id=10257): perf_event_open$cgroup(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x300, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="600000001e007f109e", 0x2a}, {&(0x7f0000000140)="78cafb73fc02010700000000ef02258f2e440ab8f9e6aaeb1ae2f6e8bcb5ee52dc06b6c9ad11cb5dbc249798093c5102a1bca0b6050000004f6e6b788b3219c233e60ddc36024a99a63e7238fe9f9b06f96137c8af12b6", 0x98}], 0x2}, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000040007ab385506ae7424000061198c0000000000950000000000000074241d4e0ec29bbfb9e8dde5fc8ef43fbffb699e4498ad36b4ca498afa2224b15a3cb77152a27e9ae133f194180a1548928b7487f62c2b97f6ab2cdd55f45baf4fe60dcf40082f032bbefd17d92b4a024de0940ccfcf50fab1e8d118bcae58eab81b3b8e79469647f4354747a32b2e2843d0aa2eaae871fc0631d20d7a02a89f9629274d7035a3"], &(0x7f0000000080)='syzkaller\x00'}, 0x80) 4.729925707s ago: executing program 4 (id=10258): openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) close(0x3) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x104007, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b20, &(0x7f0000000040)={'wlan1\x00', @multicast}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x5, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r1 = socket$kcm(0x23, 0x5, 0x0) close(r1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 4.629899089s ago: executing program 0 (id=10260): ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, &(0x7f00000003c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;\x02\xc5\xb0\xba\x12\'QXp\x19\x1b\xf4\x01\x02\xbc\xbf\xc0\xf0\x10\xfe\xd3\\yy\xa4\xf1\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc61)\x01\xc5Y\xab\x90d\xe4P\xb9a\"T\x93\v\x04RE]\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03\xeaU\x00\x00\x00\x00') write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000000000000000000000000000007fffffff0001000000000071273fa79d93014b8e3381b6"], 0xfffffffffffffead) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000000611179000000000063014800000000009500090000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0xf2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xffffffffffffffff, 0x6}, 0x108, 0xc8, 0x0, 0x1, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540), 0x0, 0x0, 0x0, 0x20040051}, 0x24054004) recvmsg$unix(r0, &(0x7f0000000340)={&(0x7f0000000080), 0x6e, &(0x7f0000000300)=[{&(0x7f0000000100)=""/90, 0x5a}, {&(0x7f0000000200)=""/158, 0x9e}, {&(0x7f00000002c0)=""/49, 0x31}], 0x3}, 0x611181cb0bf0e490) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfdef) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, &(0x7f00000003c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;\x02\xc5\xb0\xba\x12\'QXp\x19\x1b\xf4\x01\x02\xbc\xbf\xc0\xf0\x10\xfe\xd3\\yy\xa4\xf1\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc61)\x01\xc5Y\xab\x90d\xe4P\xb9a\"T\x93\v\x04RE]\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03\xeaU\x00\x00\x00\x00') (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000000000000000000000000000007fffffff0001000000000071273fa79d93014b8e3381b6"], 0xfffffffffffffead) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000000611179000000000063014800000000009500090000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) (async) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0xf2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xffffffffffffffff, 0x6}, 0x108, 0xc8, 0x0, 0x1, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0xa) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) (async) sendmsg$unix(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540), 0x0, 0x0, 0x0, 0x20040051}, 0x24054004) (async) recvmsg$unix(r0, &(0x7f0000000340)={&(0x7f0000000080), 0x6e, &(0x7f0000000300)=[{&(0x7f0000000100)=""/90, 0x5a}, {&(0x7f0000000200)=""/158, 0x9e}, {&(0x7f00000002c0)=""/49, 0x31}], 0x3}, 0x611181cb0bf0e490) (async) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfdef) (async) 4.550689522s ago: executing program 3 (id=10261): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x2}, @array={0x0, 0x0, 0x0, 0xa, 0x3, {0x0, 0x2000000}}]}}, &(0x7f00000000c0)=""/196, 0x3e, 0xc4, 0x1}, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x8, 0x0, 0xc2fa}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000040)="3c00000033000b1229ae3f7f03b261130124fc60100c034001410000002000179215a2681cf6e50400003d490d20b735b16b6a44799406db26a57b35", 0x3c}], 0x1}, 0x0) 4.523471172s ago: executing program 1 (id=10262): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x8, 0x0, 0xc2fa}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000040)="3c00000033000b1229ae3f7f03b261130124fc60100c034001410000002c00179215a2681cf6e50400003d490d20b735b16b6a44799406db26a57b35", 0x3c}], 0x1}, 0x0) 4.515232122s ago: executing program 4 (id=10263): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000c0000000400000002000084fdf7ffff0a000000020000000000000005000000020000000400000600000000000000010500000020000000006100302e615f5f61006100"], 0x0, 0x58}, 0x28) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20104, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2d1}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x19, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) 4.341673577s ago: executing program 4 (id=10264): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x1c}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f00000004c0)="df034affffffffffff0000000000", 0x0, 0x1, 0x0, 0x0, 0xe10535a769635f87, 0x0, 0x0, 0x4}, 0x1e) socket$kcm(0x2c, 0x3, 0x0) socket$kcm(0x2c, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x4000, 0x1, 0xc2ba, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4210, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022003505d25a806f8c6394f97e24fc60", 0x14}], 0x1, 0x0, 0x0, 0x74000000}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0xff, 0x0, 0xffffffffffffffff, 0x8010, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000003, 0x0, @perf_bp={0x0, 0xf50a43945a8ef38c}, 0xce6b9b20411c70f4, 0x800000000000ca, 0x0, 0x9, 0xffffffbffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x3, 0xffffffffffffffff, 0xb) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20488, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x10000, 0x1, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000040000000800000001", @ANYRES32=0x1, @ANYBLOB="0100000000000000991db3e4a3d13e64e8c10000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) recvmsg$unix(r4, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[@ANYRES8=r5, @ANYRES32=r6], 0x9a) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0xa4}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1010000}, 0x48) 4.340601797s ago: executing program 3 (id=10265): r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%pK \x00'}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_clone(0x220800, 0x0, 0x0, &(0x7f0000000940), &(0x7f0000000980), &(0x7f00000009c0)="2beb967c346cfd7701c94570c80b4b1c7dfdf16afcd4e3ff23ba617f84265348507823676d1e0a451906af71dac9ed5a608540c77f525d4ccee3b50a3b14ab0b75f82722e935667c3d68f983401318ff8831ba6c25c3f3ba18a7b5eb45b7512c6affbf7feeda3bdfca93179c0a553c2d6c4a65ca994a8b783887bba468868eead92c5f7765cee505078f88c5b6a2313572c7559dbf27fd46fdea544813d8244ae581df430a8f47f88f1a208e774c9af459a764418c2b1e2803f294acb9d26cf5e2faf061a1fff7ff84b6957747c79a07af9611b899c50fcf399cc2170297") r8 = syz_clone(0x40000, &(0x7f0000000cc0)="c06ca95a675787485f48d354335bb9f066692a54cd3743", 0x17, &(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000d80)="1358a3cc680380cf2cf84b9f5692bf952b5ab8c49c1ff9c053cda09c") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x5, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, [@map_fd={0x18, 0x8, 0x1, 0x0, r4}]}, &(0x7f0000000240)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x8, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000008c0)={0x0, 0x8, 0x8, 0x4}, 0x10, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000ac0)=[{0x1, 0x3, 0xc, 0x4}, {0x5, 0x1, 0x8, 0x1a}, {0x3, 0x5, 0xe, 0x2}, {0x0, 0x1, 0x6, 0x9}, {0x5, 0x1, 0x3, 0x2}, {0x4, 0x2, 0x2, 0xa}, {0x3, 0x5, 0xb, 0x6}], 0x10, 0x8a}, 0x94) r9 = bpf$ITER_CREATE(0x21, &(0x7f0000000dc0), 0x8) r10 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000e00)='memory.pressure\x00', 0x2, 0x0) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6, '\x00', r3, 0xffffffffffffffff, 0x1, 0x0, 0x3}, 0x50) r12 = syz_clone(0x8000, &(0x7f0000000ec0)="685976c4a1191db942fe8754426e99698c335399842972fe8ba60eb9d8", 0x1d, &(0x7f0000000f00), 0x0, &(0x7f0000000f80)="caf9067ef117a84a82cf173ebc1db3605ad9fe15380986ae2488237e8f88b36197cc81883d222d89b410ab6c2063e530088e3a796c41c80b22434f48ddc6fb55aa3b6214c8aa6bb2ee630d9ee0bf1470e5783fe68b734eb5309b2c3d17829a8d0c1756d082dff1dec2622d79b7e517657317da8adbcbaed479234a75f54e45946da3768dfe6adf210944f23ec45f799a60bbc53726d0b84056efb95d720346dfa1a8e77f") r13 = gettid() r14 = syz_clone(0x800, &(0x7f0000001040)="80b42a571cbe82edbc6bc9fc8937d76e76018d67259b51ca0252d22d19a8cc597a9c8bb22526f267a7c0187c5567f56a3be2b0f8a3441d839d0a833569fc0525a355cd38f2aef657d10cf34205c4191f62ebd2f714ec096bd9fd12f0bb501103bfde76851c844d1ae64244", 0x6b, &(0x7f00000010c0), &(0x7f0000001100), &(0x7f0000001140)="7b2240930e4ea42eb9eb648e2df7442e9a2eb9cfe66f1719295aa54273745d4e79d194da44ee589039ad4c76b4bb0cc43e9a8a90ca8b0b2ed603c70ea4738429c0ad895a21924b20e85e453295d1e50eee931049336346a9b8180ee673dbb45824a924bcd17aa468dce0bfe8521ec3fba3825572c89d00cb023205c7694558e362fa6a678789a4219d34596fcf39d31f79dd30ee63d92a42355e9d965df3d36c6cc6d7fc9f3234b1303875f4a79199bd7bbb5d13f5d8f6e09c656f325bc997cf33c5869b7824dff493c05cf4da14b2017fd9f4f5e2f0") sendmsg$unix(r6, &(0x7f00000013c0)={&(0x7f0000000400)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000800)=[{&(0x7f0000000480)="e827c64889d0c2df6d0ed8106cfadea982d8e973dbc27d4289277c7037536e9692d1fd157d8e167e01af9a70724805de4c33c48bd3e478c2b74a2593c3dc20f2e8c3402fc42f61d03ab9a0ba795afeda7abb4ea5d83b6e45e448620c47530795ca66de47093f8b41590086c31e83a947122db221f5a0ddd238770d876a15de9b99b3fe06a69f", 0x86}, {&(0x7f0000000540)="4e3f9634b5bd6c8522d603996ec6976e082b8997641590e662e0f7ac979d533213b3701f87e5a9cc2447de373aca5939a150ba0f42056bf3c370068d8afc5504ba9c02c6ee561fa3f27815fc955cbda3cf4295e2956bd6e702df5db37706cc99e081c147b2e2bfc26ab4015a74", 0x6d}, {0x0}, {&(0x7f00000006c0)="4c9c45d156cac4f254", 0x9}], 0x4, &(0x7f0000001240)=[@rights={{0x18, 0x1, 0x1, [r4, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r2]}}, @cred={{0x1c, 0x1, 0x2, {r7, 0xee00, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r8, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r12, 0xffffffffffffffff, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r13, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r14, 0xffffffffffffffff, 0xffffffffffffffff}}}], 0x118, 0xc010}, 0x8000) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001500)={@map, 0xc, 0x1, 0x40, &(0x7f0000001400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f0000001440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001480)=[0x0, 0x0], &(0x7f00000014c0)=[0x0, 0x0], 0x0}, 0x40) r16 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001780)={0x18, 0x18, &(0x7f0000001580)=@raw=[@map_fd={0x18, 0x8, 0x1, 0x0, r11}, @call={0x85, 0x0, 0x0, 0x6f}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x74}, @ringbuf_query, @map_fd={0x18, 0xa, 0x1, 0x0, r9}, @ringbuf_query, @alu={0x7, 0x1, 0x5, 0x1, 0x8, 0x6, 0xfffffffffffffff0}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}], &(0x7f0000001640)='syzkaller\x00', 0xfffff001, 0x0, 0x0, 0x40f00, 0x10, '\x00', r3, 0x0, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f00000016c0)={0x5, 0xf, 0x6, 0x6}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000001700)=[r11, r11, 0xffffffffffffffff, r4, r11], &(0x7f0000001740)=[{0x4, 0x5, 0xf}, {0x5, 0x1, 0xc, 0xc}, {0x1, 0x1, 0x1, 0xa}], 0x10, 0x8}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001540)={@cgroup=r9, r9, 0x50, 0x2, r10, @void, @value=r16, @void, @void, r15}, 0x20) recvmsg$unix(r5, &(0x7f0000001ec0)={&(0x7f0000001840)=@abs, 0x6e, &(0x7f0000001d80)=[{&(0x7f00000018c0)=""/108, 0x6c}, {0x0}, {&(0x7f0000001980)=""/233, 0xe9}, {&(0x7f0000001a80)=""/110, 0x6e}, {&(0x7f0000001b00)=""/224, 0xe0}, {0x0}], 0x6, &(0x7f0000001e00)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x90}, 0x20033a638e34f23f) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002100)=@bpf_ext={0x1c, 0x1, &(0x7f0000001f40)=@raw=[@alu={0x4, 0x0, 0x3, 0x7, 0x4, 0x1}], &(0x7f0000001f80)='syzkaller\x00', 0x3, 0x9a, &(0x7f0000001fc0)=""/154, 0x41100, 0x4, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2890, r17, 0x3, &(0x7f0000002080)=[r24, r4, r23, r20], &(0x7f00000020c0)=[{0x3, 0x2, 0x7, 0x2}, {0x5, 0x5, 0xe, 0x1}, {0x1, 0x1, 0x7, 0x3}], 0x10, 0x1a1}, 0x94) r26 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)={0x3, 0x4, 0x4, 0xa, 0x0, r20, 0x6, '\x00', r3, r20, 0x2, 0x4, 0x5}, 0x50) r27 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b0000000000050000002f6a6f247d000000000000", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=r3, @ANYRES32, @ANYBLOB="050000000300"/28], 0x50) r28 = syz_clone(0x88080000, &(0x7f0000003380), 0x0, &(0x7f00000033c0), &(0x7f0000003400), &(0x7f0000003440)="f214fa61c52e8da7fa7924483c01b616af85d431d337a2227911f8fe2f38318c65ab7f286fb095c83e47b8095ac49a43fec9e33937dd0e9ba1b2e052ef07b3176de6d35e90b12bfccd8d8df5eb4be197d039a7ae0febd04a79e2d104cc08fbe0bb146a277b0edebd840b0f364ba53a611d37af9dbb25fef3830f03ab4e3bb81aba44af5c748da4de70213b85e21daf7dd9b9e2fa") sendmsg$unix(r25, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003240)=[{&(0x7f00000021c0)}, {&(0x7f0000002240)="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", 0xe00}], 0x2, &(0x7f0000003500)=[@rights={{0x18, 0x1, 0x1, [r26, r17]}}, @rights={{0x14, 0x1, 0x1, [r23]}}, @rights={{0x34, 0x1, 0x1, [r25, r21, r27, r22, r9, r24, r17, r10, r2]}}, @cred={{0x1c, 0x1, 0x2, {r14, r18, r19}}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {r28, r18, r19}}}], 0xb8, 0x800}, 0x0) r29 = getpid() perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r29, 0x0, 0xffffffffffffffff, 0x6) sendmsg$unix(r1, &(0x7f00000001c0)={&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000140)=[{&(0x7f00000000c0)="70beb43a24114d790c03b1abdefc13ea4029900571c77d75f45eb9c5ef5f66fc607101591dc6077f1a7cc179d8a339ff00fc8cdbb6da33ddf93f1bfdde3bd8bc63bdc6cb43ef97ba47ae679cd6902eb36ca7c60a3ca34246c3e9531e26235628e18fb9c7f8075151be8e8aa1a7cd", 0x6e}], 0x1, &(0x7f0000000180)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff, r19}}}, @cred={{0x1c, 0x1, 0x2, {r29, 0xffffffffffffffff, 0xee01}}}], 0x40}, 0x4000040) close(r1) setsockopt$sock_attach_bpf(r0, 0x84, 0x6e, &(0x7f0000000000), 0x10) 4.340193867s ago: executing program 0 (id=10266): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000500)={'syzkaller0\x00', @link_local}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x28}, 0x94) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000089", @ANYRESDEC], 0xffdd) 4.289776357s ago: executing program 1 (id=10267): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xb, 0x100, 0x1108, 0x9, 0x1}, 0x50) bpf$MAP_LOOKUP_BATCH(0x1b, 0x0, 0x0) 3.857900568s ago: executing program 1 (id=10269): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$kcm(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x100000001}, 0x4000, 0x2, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0500000004000000040000000500000000000000", @ANYRES32, @ANYBLOB="00002d870c693409cf5c00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000340)={0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x800, r2}, 0x38) sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x5, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x1, 0x17, &(0x7f0000000600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x5}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x890}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffff7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @generic={0x8, 0x1, 0x5, 0x1, 0x3ff}], &(0x7f0000000800)='GPL\x00', 0x0, 0x42, &(0x7f0000000840)=""/66, 0x41000, 0x8, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x8, &(0x7f00000008c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000900)={0x2, 0x1, 0x0, 0x6bf553b}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000a40), 0x10, 0x8}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000bc0)=r3, 0x4) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f00000005c0), 0x4) socket$kcm(0x11, 0x200000000000003, 0x300) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000180)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000580)="02044a00ea0e0000000000001eafbcea06e105000000000000001104ee1606d4b8bf4a8207f0ffff74c43824cee8440000", 0x31}, {&(0x7f0000000340)="126873159fca3fa38fb198e9a6b363ceb3e6d803ab766b7a38e451d14e0b3457474fe6a51671e4124fcea96a873b10996816e100ed8a93b0a9053db57d60973369f525c24533658551c3091cb88d3b", 0x4f}, {&(0x7f0000000200)="088d85d1f409000a3164ae439862807a158983661a6d2341f7", 0x19}, {&(0x7f0000000040)="df3b46a13300000000000000", 0xc}, {&(0x7f0000001480)="b72abab9439ca41f5cf14d643508a15668ec280cfe4ea416cf769dbf978a8191bbe006e0da50029176c0f24e3ff4d3e895a2afbf52cef2fe1ca31edd842b126ec4be67e6e3624b9ddf806fc146c645ec1d37fe7e3b025c156d5d520104b53f7fb2af436201cfd5dca170edea5a190e4786bfaac544b60f514d7ef420526c467f14790dcfa5ab915d7dbcdf2765bbcad014c991f8b829c79f53586de79f0b987ad796f9de4a6e53136a07a39ab1f5a2ce30aded70a9b72d1beff7e8b6405fd6331e5635ee71e809be2d58f412dcd7b2e856d692dbfed19045ff13244acce351b6e450395568063569c71ea80a04f83fbe6ad1d0862fb97f816576c4844da65d751ee1fdc522ae1158670de297cdb2117bc0adc1486e016a6bcc922a162fce6a9ecc8c42b0c44c566004eda037864e5f339bbb0998cdaf2b8e49ae003659bc033668f7c8e550197ed95c420461254ba1883dbd9403672d579cee85c37f103ee9a350a768286017158784baeb063c8c684b91b022b0db2238b679092a1f6909f0cd9228500e088f5cc7bac4c0dc56e80fedac93554aec79715ce02e8bf3fcbd70382f619bfe3dcf06890d8542022ee58bdfb075d319c9fc8474cadc8de5c3dd3f682d3f68324d0af7a727064053ad84c94643eef190783c616467628f84620044c084b80e3e57bfcdf293c9c36b4474a52398b35e49e2ad4a4ac090bffc5cd27d3c69b4ae5f841d5b0766ccd36d25eb58d8f01621a05744b79ede39019ab9d7a1946353d8f3b7f833ce1a102a8c97a9e3f32138ffafd305448f2518ccdb7eef594a890eaeaff3f876f742fec22669a97085ed93b18228ecbe9e354e8f69967ca749fd2b1cf026665ca912e3fc0188b294519078b46676052de4fe22798290bd1e232c9791fc01ddb4ae776b5769143df2867042e8a3ddfa8e786bd8a244076956d4ab137939ad381650dd4fefd2b942a98d6f2edfd7019ae473e7608647b86d643e8ff3d7d4e89ed826e4b8c6e8fed224c528d805ade85c5b45261b2692c0f403dec050bd973b0999df214689f4402dd1598a16b0c7671e5e204a00b06376ddee7cb99292a8b835c0b451642b71f2ffa1aeea56255817b2384bfe4f8213ccfc1f762f250592896102e5f6d34cdd726bc0f86af52fd7c4483d32e23e5af770e960c7445b8e67a6086f0cadcd22d0d4bdadc31b5a94dd687379dc6e078210ccc71f8e67eb58d330394425ab17e55d1ca8f868f6bf738af291d2293c3dfa2ccff25061ded22878b3cc6532d19e5a00d1f0f1b9de35305fac2c6cfd5d77a2b02618735b7d392738bd5cd3eabb7039c790a9f193913f16e06605d405d6a0cf0011a2e5f935d8563fef1722692dd266c3d320b9f5eeb2a4b2f72155522f0ed72ff1efa0b6ee78e70d3d45241609e7f83fd548e872bc197d7bcfe1af71159baa11ad667a0ead3986b2b06500ba2615ee966ea86ca68d02de4802bd9ef18dac5ba53ca98b90df49ef4e3268ceee538973620e5a60513ea330989642626420b67dceeb2c45b079348796923ad1fba5a99e6b150cf97ba2a570150053309c6dca7fa352fa1678c9b919fbc47ae0a84175a7fc25a00fa5888cb017e8d8225fadb29e34bd3c5bbccfb22a83255fec3967c991d5b3e6719ade82fb7ef85c8a4b9e7ad8ef2a3a7bc78de424572224affb1f9e0c5a969e61ee2ebb4f247bfa09384bdad04438f2efbfae303d47c3afe7e8d3a157b2a6f37572ea3ecc441dfb208ba755f781f144e58d80aea590abcfccbe8678ec6de47511f9d61cc408cbbe90eeab2cffe6d1a48dc3eb4e48e228fd43cafd7ff2c85c3ed52e99fe16887be28fcd2cd4ba4cac414c92c96294fa7d628e4356c748c173f790a7f30071d0bd53817c78d163249c7402b222b8f28668cae7afd17b97dbaf10b75b61409ca6f5b285d1ab09207c5a91c68b0d4b5da6d6b5a495c8debd7f4400e56d9e22d1cc330f782f2b5441a31b9ccf35aa1a151219cdcff5ab8b240af5b5a751eca67773c057412a935e3a7a367b2bcd28463904ee040a586d6f4f969cee56d55b6b4d97d1fe93b67e2f6bd47925054c4702ec8969a1a6211ea8f6783ca0e8ae333922ce19eceb24e2ff714a0208d2489a62f299aa50cdbfe5a826e872ab231bbddf5bd2fca92d4460379e05e13ff34a200fd921dcb67a002873bda8d86536cddaccb54eb72dd4e399fe9195ad5574ad85d9ed2eaae4106234f0a8db05a230ff377b59b54fd0919d1b86b938622ae6098f003db7f4d45d6874f54c33064ce6184dccc99fece2d994e9572d4840b0cbdd704fd70b4f625912d48a512339f883533768f09a4f614583dfb72defe713ee38f61184df279461b7d35becd8e67d01f0ec27e901d88215554d5a69db373a662085733d09ad9153e7d432c94f872ff7cd72995b3a581ea17722ed13a191b366208f75661112b1a7d42c252c907488ca8dd8f819d4618b0053d4bcddb3b5975cb8615ebc472e052552ee74d5253174a2b0cb96e1eaf6349b6c39be975123ee72b0ffe1367df7aba54de26c9135a3422d21067034551be5efc5daf8b8f59bc725e4fd171378fd9f16a785f1b0378823c85eec521e0b2aca70b7b72b719a20eb2fb0addc0b05851c8e181607f49dad7323bc255309097584c2099574db1ed7940fd16796aef19d30acd714dc1f898716df64db87d852eddf2f86e78fd7fd64868b4cb6cc626efcdea49c4a2779a0e777bbe23968e14233a810d9883680894de93023a8deae51ccbf32e6d1e53618ebee95c761221a33bc3263fff0f5ae23e14dba0418cf3f31effcb36956e06c57a17620044260419a208ae1d2296ec9472d44be74a8ed0a33a23181acdef8c7d2695ce9485ed8d17d9f6f30b9b128ee0ba15c42cbf6059bcfef008c09db8855343f79c3ce1c4d79077c8a62237d4e400a5aa88e7424f2f99df6c2070d6ed071f4968376581e20e52d64e9c4f8a6f73bb33f5b6b62c1deecc85bf789565fde14e4454306ed8f09af08afb360ee4fb40dd5dca0be43ccff75e5c0ef85ea7c521cb4840d61e99e1ce4661e721446d5a571cddffbc3643ec9b58237fd416376906bdca09485c2c80f82b23e8e7bbf22035fdbcacd804ae3771fd616901184ced46987d533017eef717e9b34a5531c3efe2d77c9b6cb0617382d69951545378a4118e71c64a1f16d096a8f933580922083d0536b90ae1715c63f682e8241b42e1646b0c52e34aa9c91efe2b6b787ce0747d4ff0dd07d6ebc9ce27e0ef35705eb7b78763a9829b464523ff3ed9078aff6ee29e6e7a59a5243825e8bb9235f8e49a9dfb5932536666c3dc75b29e515dbca4c84268cf23cd7b6da6814328a3cb26d7b1d6c28e20b36f9a2c9e2fcf663c314f72f37d2b8f405cfc686a6b35400435be0eab01709c2c4b3005491cbb0b560e33547b77ba9f25f01b194e20534199a3786ddfaf0a75aafb65cd4df4da7b5f98fe72a8bc7d045339fd41508cecca791c717a10d4fed8aa69eec80955bd899a6f8aaf3411be40568149e631ccbe17c68f85e87b58da81ba78def8b1a48c49b2dc7613f7d6ea8b158bed077666d37d1caba9a23b7cb2772e780f70872113e5bcaebaf9f9499f651dc894be3bba1e99d58b33d60c0eda397df91d7cf9fb072f247fa9a9f59c4f59c4284a3832ff0a1f9ce8f6346cb5c08a9dcb2851c7f169af688fc13f00cf9519ade547671698caaa3f4d4921fee83753b9ab0875707836343eddb5b87beca6aae023c9571b8e389ff3f4c692b6fb19686105249ce033116777d919ceb4559a67ee6b6ad9d4b53d2be24315429de3bf201107fe7dff9cbc92dbf9173391d555b0a1b8ea3252fd7d7fd15d8a3cc70cecdbdd43c4edcc4bb2fbbf646d5ec7dad0d3156a513d14184e0c316f8155e774f7dcea485f904828edf28510d692b66b1500c5a704371c2188a2812bd323de012f36a79674082b5f5e9f7f4ce1a75ed854b71555e9fcd1f0322c22a9e543674c79a74404e08e61860f505dc56e1b52977b9a9af18be4064b5f6aa7c891382bbbe65e70a4cee33176570341a525fb6b25c0b20bfa3f2ee4a01584f259f43c3b63a2dfc376f435827211379ab3ca8912cbe01e4f837920666fbda682f6954d1c156f21e12547b885f485c38f62e765013144be8ca92b1d4872790a5c02671517f6a8f0ceb247e08c64268ad8970b57bb6d077c9b8ebe7fb1183087c9a3baee06100609204be588621253b9b120c08db9f28c2d38c9bc3f59018bb7216d73186048770d1e556faa49df23a40a64b40cdda2041dccf5619db09b7a7795fd7eb631c0e0bffc3b64422bf6acd84b7fae8bd05b057260a4d7c4851829c7bbf0b6f27c5db0ff10f42df3528f79dc9bbd591965259cd0389deb124b1fadc5dfd3ade9742d29261379ea3d98929512371dec991f0636fbda5dac355a04e363beeb4751781d9cef3a0b6ac6500895d223ad43ed75cac8b0a868253fffa10bf6c2de99c687fd056e075cf0632b6d8ed2263ca08ad95b6f335a3b6d8ab7801422ac8597441ac1bbe289b50af31eb221d19a2d3177d4ad1056d616295e89471e65d811b8fa4fe2c0c12793f43ef7e75c7f657f6c26ca9cbae63ce99301069ab257ae77c38778d35afd326d569c626a68f3904b2c376dfaa05568892f346f86fb05e71fb751e09cd22525cb63512a7d2e4670bd31109b87818278e66dc73fa9667e35c5bc6588cd36d2b62592a4103803d93c194f8edd5d20c6597231321b909bbb3c1d13408e5cf27728883e33305000000000000004892dfedd17a1066f1145163e1a31ba9a3e3cee925e55d794b89462a0a092a639ccd4a24514083cb68224c87c18f0bb39ff721cc598e686b5fef169bc30f9ec6df397905f8340f6ae7ad826aac774cc46bfb9dfe8192e9ef10e8355d7c2810269eb73c7ecb8d3ffa33437142b8e596cdb778cd3cdda5bbbd09a8ea919929adbc63ff1004490c45a9ea59def65fabc884c39beac1b74a218f59c5e31ba85dcc4b8bd81d7a66d8aaf0edb64b505f760442e16fb7f07a069aba88601c3ace27762cef8196da3d44b14796b04e7fa3bab37209190a1de6e6ecfd99353279ef643766814fa7fac7254eba59bff3546bf21afc7445a4f1bc92c7b013f34962ff029e0f2926acf6c8a25fecea5b0b810656c981535492a2a4159dcfd0bf98085dc9612159fa0ad837a22eaffce80405367931ef3eacbf5a663175acc306eb075c52265d0c6dfaab30bb997fd7b71c2e0bf02b408c3b0b85f8ca7cec337655e1c2db77c306f9283b632ae95667451004235e76820d2c438bdee1b1afbc90", 0xeb5}], 0x5}, 0x40000) r5 = socket$kcm(0x2, 0x200000000000001, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x141841, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r7, 0x29, 0x4d, 0x0, 0x0) ioctl$TUNSETLINK(r6, 0x400454cd, 0x30a) close(r6) sendmsg$inet(r5, &(0x7f0000000580)={&(0x7f00000000c0)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000140)="996822ce3899d7", 0x7}], 0x1, &(0x7f0000000480)=[@ip_ttl={{0x14, 0x0, 0x2, 0x4972}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_ttl={{0x14, 0x0, 0x2, 0xffffffff}}, @ip_ttl={{0x14, 0x0, 0x2, 0xffff9d27}}], 0x60}, 0x844) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 3.535921416s ago: executing program 3 (id=10270): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8600, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe, 0x4}, 0x0, 0xac5e, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x8}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r0, 0x0, 0x19, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000030000000085000000a8000000850000000f00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x7, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x69, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000d00)=""/242, 0xf2}, {&(0x7f0000000240)=""/205, 0xcd}, {&(0x7f0000000380)=""/210, 0xd2}, {&(0x7f00000006c0)=""/188, 0xbc}, {&(0x7f0000000f40)=""/213, 0xd5}, {&(0x7f0000002100)=""/4077, 0xfed}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f0000000b00)=""/231, 0xe7}, {0x0}], 0x9}, 0x40012100) r2 = perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x46da}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x4, 0x200}, 0x0, 0x200000000000001, 0xffffffffffffffff, 0x0) socketpair(0x2b, 0x1, 0x5, &(0x7f0000000000)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0xf4a}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)}, 0x0) recvmsg$kcm(r1, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) 3.173226804s ago: executing program 2 (id=10271): r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000007000000890704ac14140f0011000000000000000000400001000000fc000000000000001400000000000000010000000200000004000000000000001c000000000000000000000008"], 0x68}, 0x0) 2.829883843s ago: executing program 2 (id=10272): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0xb8, 0x8001, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c6, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x5, 0xc2ba, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="611570000000000061136c0000000000bfa000000000000007000000ee0016055e03010000000000160500000000000069163e0000000000bf07000000000000260507000fff07206706000020000000140600000ee60060bf500000000000002f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05002000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ace0600006e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc0da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d00c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e2738270001562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000815266b2c9e1bfadc7498e9dda5d000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631822a11dc3c693962895496d4f6e9cc54db6c7205a6b26f92121ef53e553acdf42068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710eec53f1b11cced7bc3c8da0c44d2fbf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f8709d87b27f8a5d9121fdc058447b728f134f72062fc4b1ca0780b1a7af137ff7b4ff139604faf0453b65586f65c7943d56b52f06c870edf0c5d744b5272b44c23480b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61940aabc86b94f8cbde4d47060400e722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154672fea96aedf346279ec00000000000000000000d535d41b0067f01e2e54b9154d876020b669640ead4ca44631fadf7c4ac39a1b331dbdcd52b36df021b731ef1f92330d347f88ced5c1aaadbcdd8d2257e3a9a7c7494fadf9be36f7a2334ee6e9446fa1fd486f85d672a77dc5bd21463994d49f12016305a1e394d292b66840fe32b40ad665d241a8b8a32b3100450c32832789aa8a096f41201b585cd76631c88cf958e9e9047f5af1730c5e83db12460a0768fd4b62be6c41eed307048bac8d1f7f164574241e06027654b248dcc38749eee0c1ee7c61b3f6411a559c3d45637b11e440ed5a99109b8e71d28c3d677af5f0499c6d3fc6a129775056958c9df824ebe5fa9fb306b24a8a8334910627d03efe69d4b61c4345f048c5da8aca16cea848fa77d2507c920a6bd654b00e07789382ed902c80deeff2fd5c78f42e4353e5360c3e55962efd1331e6736eaf4ee27736fa54803ee8ec1a15266ffcd8b30368740b584c2559e691e542cab3d49db327db62328f159d1e0900b3e23e84dedcd1377aa15dbeab7db181bd66980c3557c7d9f7377fcb6023accb5c368a121acf70e5f4c3f2a0ea07011c7149ea979cab2ee65cf7ffa29152b7a8fed89575e6e6fd77d4d9463d21775abac886ee6a1f2d7d8523840438a73d6307a87e2f525867fc3af7ab74520a773ae26bae74cdd405a211e8833e1ba523cde51d04a7ca6732"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xb, &(0x7f0000000bc0)=ANY=[@ANYBLOB="18000015000000001f00000000000000180100002020642500002020207b1af8ff006859549bc4e22a9f5b8c6fdf6c34def37f24331bc2b9a4d41f7b72450badfef8ffffff0302000008000000b70300000920000085000015c372d1afb46df1deb30c8974432c44f95e8fd5a42344a72c7eeebdbee8063f80c2d6f6678f5c537b80900210a0c0270477f57b"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39) r3 = openat$cgroup_int(r0, &(0x7f0000000280)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f00000007c0)=ANY=[], 0x6) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000004c0), 0x2, 0x0) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/101, 0x65}, {&(0x7f0000000180)=""/2, 0x2}], 0x2, 0x0, 0x48}, 0x1e01) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmsg$inet(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000001c0)}, 0x24000000) r6 = socket$kcm(0x29, 0x1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={0xffffffffffffffff, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000640)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, &(0x7f0000000680)=[0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x10, &(0x7f0000000700)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0x22, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) sendmsg$inet(r6, &(0x7f00000009c0)={&(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000300)="720f2ce5f94c43dcabd0b1fcf567beb5ddd66cb8e033e810b866ab728095b51869469ec9cfce4e2ccef62585498afeed5d50ad50ee7ebb7c045ee51b24156d324dc1a63f885ea3dbf60d85d3b6913a45c2d92fd5f5f9b0ddfb6aa3f8bee40921220067bc895820e0c6e083b137788f9e66a41ecf96a268444a3224d7ac664a264f9399e47d8632", 0x87}, {&(0x7f00000003c0)="aa99badea50b7a0dc4a32afe435a621466dd462a98242b2854a745984990fbde3819b8aba05b70ea7eeb956aef5d192e99a406ee73360058e113f97ec4023cdf6990c276b5536cc01a546a90614511e1aeb8910752b008842f7520f70ae5169e72d84931da120c4992d014cd4583a83505af234ccca1f3a6f62ba51a1dc126699e55b6cee59b419478cf4d01ac130145c5b6421e763192c6a7c1b685bb41b5456491e45abf6a5e0fe07443ab9bd0f98a", 0xb0}, {&(0x7f0000000540)="3ed228e14e999eb4a034917a1a640efd2a7866776a94b3e5c30bd000d6b094e16710efc36f4d1d5fae456107a2833ab52daa1d941f02849e988eed6e573a7ad098e3720876f1ddb51881fc33eb2867a765c389181b134d5e2cb2685a6768cdee4e07bc760bea46a41f7c032b3066008f26dd3c00b8f1a2ab6f69154a0602ad9238f26e4afb593e315a70e081b50b60ab32d98d6cada16fd279ab2120885bdd8dfa36ae", 0xa3}], 0x3, &(0x7f0000000a80)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=r7, @ANYBLOB="ffffffff000000000000000040000000000000000000000007000000890b5900000000ffffffff442493010a01010200000007ffffffff00000001ac1e000100000000e000000200000002008eff299fb6a0b2d3a5fc9f1deec52f272e5147bffdc7b21503cf6b45146333e8d252edc45de394dd8404ce8541c3b5c7df5c7195855b19064d7d1498104bbf5a9cab0208a876e03b1f5e2993ca95a6e1df4054fc786dcf2825e59847003c67747bfacb5030f6ceb7392521d7591369cbefe1999fba13a68db7c7f659282106921ff605fa48d2cb2216bc3306b1bb434c8d4dcfc3486d2dac54755c200117b66eb9944334770fc193"], 0x60}, 0x4810) 1.885405035s ago: executing program 2 (id=10273): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61154c000000000061138c0000000000bfa000000000000007000000080013002d03010000000000950017b8000000006916000000000000bf67000000000000350607000fff07206706000002000000160300000ee6fe5fbf500000000000000f650000000000006507f9ff01000000070700004ddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369289aa6812b8e007e733a9a4f19de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03cc86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f674629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800030cffa651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a60100c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40446d7074be86a912a5ac00f7ffffffffffffff000000000000c1eb2d91fb79ea00000000000000bb0d0000000000000000001fe4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642894cacd473b543ccb5f0d7b63924f17c67b00631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809f905f12f6106f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad0fceee5f339550130a497c37758537650fe6db89da3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3116dbc7e2bf2402a75fd7a557317c66dd255ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0453b65586f65c7943d54b52f06c870edf0c5d644b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a57ff52f657a6749b94a42b25e9321fc2cc17dc4a29b9cba8ded5de439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61dc18402cde8bf777b2eaa45c940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db009acaba9eaea93f3b563ab9000000ff000000000077a99fb5b0a43749ca477c9c7ca20bd428d8f77bb920ad0db4c1da671bfad7f109b776476a54939e621232cd115ba9f37057ad891fea2353f3ad9c042c64a5ecf80f4e4cf927ae39347c22822375c26edf2754695c16780429e03759691adb63553e9c4561528ded5f35bb20e98b2e6d01dbfcde82608359c50881324524db0dbe21efba4f0fc338f4b0b11cb028d1063b3bacaab92fb7f9d2971440f873ec261d54c1570adef8004c91896fcd74c9e03dfd9a781210c0346ed1b02a44c64adad8a3f238a8ddf7207c45057c02e922b942f15ddcfbfb00"/1747], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x50}, 0x48) 1.720243849s ago: executing program 2 (id=10274): r0 = socket$kcm(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x11b, 0x4, 0x0, 0x0) (async, rerun: 32) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (rerun: 32) ioctl$TUNSETFILTEREBPF(r1, 0x40086602, &(0x7f0000000940)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) setsockopt$sock_attach_bpf(r5, 0x1, 0x10, &(0x7f0000001280), 0x4) (async) sendmsg$inet(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0x2}], 0x1}, 0x20000801) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x7, &(0x7f0000000080)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x2a, &(0x7f0000000100)=""/42, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x2, 0xb, 0x10000, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[0xffffffffffffffff], 0x0, 0x10, 0xfffffffe}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000300)=r6, 0x4) (async) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000340)={r2}) close(r3) r7 = socket$kcm(0x10, 0x100000000002, 0x4) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x2, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xe, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, &(0x7f0000000080)=0x1000000, 0x0}, 0x20) (async) r8 = socket$kcm(0x11, 0x200000000000002, 0x300) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8916, &(0x7f0000000980)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12t\x02\x006\xe3\xbd\\b\x00\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x01\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(\x04\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x02\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x04.\x9aL\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff, 0xffffffffffffffff}) close(r4) (async) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0x12, &(0x7f0000000340)=r5, 0xffffffffffffff6d) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x31, 0x0, 0x0, 0x10, 0x1000}, 0xfffffffffffffecf) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 387.325381ms ago: executing program 1 (id=10278): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x2, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x1e, 0x4, 0x0) r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89fa, &(0x7f0000000900)={'sit0\x00', @random="0000230c1100"}) r1 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000001140)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac141411e0000001000000002800000000000000000000000700000094040007441405"], 0x48}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000001540)=@tipc, 0x80, 0x0}, 0x0) 329.963042ms ago: executing program 2 (id=10279): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$kcm(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x100000001}, 0x4000, 0x2, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0500000004000000040000000500000000000000", @ANYRES32, @ANYBLOB="00002d870c693409cf5c00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000340)={0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x800, r2}, 0x38) sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x5, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x1, 0x17, &(0x7f0000000600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x5}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x890}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffff7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @generic={0x8, 0x1, 0x5, 0x1, 0x3ff}], &(0x7f0000000800)='GPL\x00', 0x0, 0x42, &(0x7f0000000840)=""/66, 0x41000, 0x8, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x8, &(0x7f00000008c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000900)={0x2, 0x1, 0x0, 0x6bf553b}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000a40), 0x10, 0x8}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000bc0)=r3, 0x4) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f00000005c0), 0x4) socket$kcm(0x11, 0x200000000000003, 0x300) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000180)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000580)="02044a00ea0e0000000000001eafbcea06e105000000000000001104ee1606d4b8bf4a8207f0ffff74c43824cee8440000", 0x31}, {&(0x7f0000000340)="126873159fca3fa38fb198e9a6b363ceb3e6d803ab766b7a38e451d14e0b3457474fe6a51671e4124fcea96a873b10996816e100ed8a93b0a9053db57d60973369f525c24533658551c3091cb88d3b", 0x4f}, {&(0x7f0000000200)="088d85d1f409000a3164ae439862807a158983661a6d2341f7", 0x19}, {&(0x7f0000000040)="df3b46a13300000000000000", 0xc}, {&(0x7f0000001480)="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", 0xeb5}], 0x5}, 0x40000) r5 = socket$kcm(0x2, 0x200000000000001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x141841, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r7, 0x29, 0x4d, 0x0, 0x0) ioctl$TUNSETLINK(r6, 0x400454cd, 0x30a) close(r6) sendmsg$inet(r5, &(0x7f0000000580)={&(0x7f00000000c0)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000140)="996822ce3899d7", 0x7}], 0x1, &(0x7f0000000480)=[@ip_ttl={{0x14, 0x0, 0x2, 0x4972}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_ttl={{0x14, 0x0, 0x2, 0xffffffff}}, @ip_ttl={{0x14, 0x0, 0x2, 0xffff9d27}}], 0x60}, 0x844) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 219.667295ms ago: executing program 0 (id=10280): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xb, 0x100, 0x1108, 0x9, 0x1}, 0x50) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x3, r0}, 0x38) 163.687356ms ago: executing program 3 (id=10281): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x29, 0x7, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2c, 0x3, 0x0) close(0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0xe, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r3 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3c, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xd, 0x0, &(0x7f00000001c0), 0x0, 0x200, 0x7f, &(0x7f0000000380)=""/127, 0x40f00, 0x35, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x4, 0xb, 0x3, 0x400000}, 0x10, 0xffffffffffffffff, r2, 0x2, 0x0, &(0x7f0000000440)=[{0x2, 0x1, 0xe, 0xb}, {0x5, 0x1, 0x4, 0x4}], 0x10, 0x4}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000600)={r1, r4}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x1b, &(0x7f0000000040), 0x4) 93.927328ms ago: executing program 1 (id=10282): socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) recvmsg$kcm(r0, &(0x7f0000000fc0)={&(0x7f0000000940)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000000e80)=[{&(0x7f00000009c0)=""/249, 0xf9}, {&(0x7f0000000ac0)=""/30, 0x1e}, {&(0x7f0000000b00)=""/164, 0xa4}, {&(0x7f0000000bc0)=""/147, 0x93}, {&(0x7f0000000c80)=""/239, 0xef}, {&(0x7f0000000d80)=""/36, 0x24}, {&(0x7f0000000dc0)=""/68, 0x44}, {&(0x7f0000000e40)=""/2, 0x2}], 0x8, &(0x7f0000000f00)=""/130, 0x82}, 0x12002) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x0, 0x0, 0x0, 0x6, 0xb1, &(0x7f0000000200)=""/177, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x94) sendmsg$inet(r1, &(0x7f0000000900)={&(0x7f0000000040)={0x2, 0x4e22, @remote}, 0x68, &(0x7f0000000800)=[{&(0x7f00000002c0)="336218e09b7b0e7f7bf1164058a5b2dd16ba7689379ab5491d2bc4cdf3b3df2e58b308de99e08062fb25d373eb55e8d9d3595080d3dcdfc2216ba676c4d8b6646006a348be95f70c47a0705906ea5164475791701779915b9d07108642640cb219aa54e7f989f8f85d3ad2b2afdba9bc27ad62aba3379e01429fe98edc4afd9452e27490f1c0d3e9d17778273a42b701b5d776d59f1f7def7194273ecc1f2a9581c2e3", 0xa3}, {&(0x7f0000000380)="62c750f3702f346bccbf4fee8f804b2c921b7df45ea650f6842d5a2643fa6160f2f6eb4d6cfb6a9b7889cf4989ca0784f564c7f7a18ec90f2ce770ca2f042fef6bfe7f94970bc031bbc29a4ef853cc0aaa06e1e802ba584946566fd6317c84bdba3edd8b84f642e9", 0x68}, {&(0x7f00000005c0)="b692ab4dc0a7544d7afd47306b77ffc556f5ec9d6669eb009f8c36b20c1eb64b9ab1a8eb4a2222ef06484271dead8cf2c5f102cdaccd85472ccc17ba76a3db759795a614412f5a4619bac2799adbc42d44d79f13a86ea7371f339245a97d9c00e9d2eaf8c222d029fc71", 0x6a}, {&(0x7f0000000640)="7fe11b2a4957475f3d168a204375028750024f70b66a29511abc8b4d7284c6c8c06800fa61bbbcd454333ee515d9eb27b04ec7ca822925a7f4b11db538bda8eb23d56352ffd58e0bcf192945b412827f08ed4f6c9e4797a00bbc", 0x5a}, {&(0x7f00000006c0)="2cf6fa99a43f1af113487f675e6aa8fe6605b402b3fa7a62019d9e85f78c7a519dcc6b8221618558c712c7c2cbec1e54e4db81539c08072fa4f7caeb83eb75b6586a6b6d5bf0e8224df1c7f03d9f9905117a9806e365a0568731b67d133e595b3a4f2c83ccd36f7dad4744ac1128075af7f5f96c07949b8fb2b8757066f17d0a7e99c31ad63d8e78302122c1ab4c5c5913682b77f17ea3cd0f3ac8f18cd3fbec264525d8d64f08c7", 0xa8}, {&(0x7f0000000780)="251ef6fc705c9faa34523a6caa1d3327215f823096084db8ecb109f3b87500205d615dfba7786f172c07bf926a79344e30f13b4f6c573df7dacaf91bb27cb31ea052ecef67e89951a74b82c5fda20d2d0d11b913d3915c7f145bd0c3fd90076b8add33e3cce26faefc4f7cb5f09132c56ed9f291e7ca8530", 0x78}], 0x6, &(0x7f0000000880)=[@ip_tos_u8={{0x11}}, @ip_retopts={{0x34, 0x0, 0x7, {[@timestamp_addr={0x44, 0x24, 0x28, 0x1, 0x9, [{@multicast2, 0xff}, {@multicast1, 0xc53}, {@loopback, 0x3}, {@remote, 0x5}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}], 0x68}, 0x40000) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000400)={'veth0_to_bridge\x00', 0x400}) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000)=r2, 0x40) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000003c21c00b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0xfca6}, {&(0x7f0000001400)="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", 0xa91}], 0x3}, 0x0) 53.081478ms ago: executing program 2 (id=10283): r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000040)=0x5, 0x12) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='io.latency\x00', 0x2, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000140)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) r4 = openat$cgroup_ro(r1, &(0x7f0000000180)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(r4, 0x400454c9, &(0x7f00000001c0)=0xfffffffe) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@fallback=r3, 0x11, 0x1, 0x9, &(0x7f0000000200)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x0}, 0x40) openat$cgroup_devices(r1, &(0x7f0000000340)='devices.deny\x00', 0x2, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x7, 0x0, r4, 0x7, '\x00', 0x0, r5, 0x1, 0x4, 0x1}, 0x50) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000380)={@map=r7, r4, 0x16, 0x15, r5, @void, @value=r4, @void, @void, r6}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={r4, 0x58, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000500)={r8, 0x4, 0x18}, 0xc) openat$cgroup_int(r2, &(0x7f0000000540)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendmsg(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000580)="40041801d47c05f3c092ac71c85b683a7da5a61f26621dffe8fc6f2990bc8548e101c3cb9fb9e8b598ab60c84b8bcc981c259c1cca9ef5b4419e6f581b8fc9bbb20acfa16aab93f057108e4904ddd1036005599b3291d6fb4e10f73b454862c235a78102a6bee566d33bba66b0b429f6119bff8ec573640885236011dd521485d1218e0938f2c50d32e54ef1a491e1c8667532d3cfabb763f80973d8080a84b752a7928f6bba3dff29878961854463d58329cfc70270292a49a70d3a54d95827640297ec4801aabcb3cc4550bd99ed7757ba4b8f9b6186f0011e", 0xda}], 0x1}, 0x24004041) write$cgroup_devices(r5, &(0x7f0000000700)={'a', ' *:* ', 'r\x00'}, 0x8) r11 = perf_event_open(&(0x7f0000000880)={0x4, 0x80, 0x0, 0x3, 0x6, 0x2, 0x0, 0x5, 0x12000, 0xd, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7, 0x2, @perf_config_ext={0x0, 0x5}, 0x0, 0x1, 0x8, 0x8, 0xd, 0x6bf2, 0xd, 0x0, 0x2, 0x0, 0x2}, 0xffffffffffffffff, 0x5, r4, 0x2) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000840)={@fallback=r11, 0x20, 0x1, 0x8000, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000780)=[0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0]}, 0x40) unlink(&(0x7f0000000900)='./file0\x00') bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001940)={r4, &(0x7f0000000940)="64db330ab7010ec5bc883e46a157294dcae8ea5760977f3083e79462f2888a2a188d0c2cc0bfad7aa02decef64d873342d8ca7fc2fce347b0f0acf268334ec92a6ed86912aed98401743603e4200ccf195da03510ec8b04647d4f7b3946d7c085fea0b05bfdc35f04b3908e0ec073000e27f70b9813f5d60c0e44ed548ee8c96d7f4b7fe89959b0867b4cdbec8507008e53763c1049c9e5ebb23df421cf60f37ec18a5e5116a32beb7aad80e9c2aacfab06e2a56fec91c983ae8411a45d40c15beb8a355ddf10b2c2830e72c26c2006faa60ad9c7e933b183a3558c18aa379440e48821a2b723427464807f55736d8b2a1c20b44697d89c0a07b19b38088426f07e85417464f1cd26ee1e05a3946924b732598cbf9d5f3084ef66fbfd5ef7b7dc9d4942693fd1a8431cb21fd27ea9f276e776cc62c4912751218e0edb2ddc19c084a6a5b66704b91e4a44e2ba7bfdfe01019f828d7a31e54e642bf1a4cc52cbf27ab9c2b7822bbce1ff7bcb09b54db7524349a3c6935a091dada9886b9eea2e6ac909e46b2b806066db2c001bf34d694b694e2ea2f19f8b471945bcefcf472e604b121ca606d925fcf9d96bfb4ec623434bef233295d248afd3221ad6bcd62740770e7f6db56807d2fbe899d1770f1c3cd94baaf8e5f145c2463ce68d52c360da822be3c00887605d0184fb8e57a8ee72d408da6fb2b90f187fd2be712b585c0ebf7a2ebad91fc1198b56d385c447bef18eed097eec54d42a2aab8d2b88a5f0d165ff8957533bc3f20160ab853af35e870791a242db384872f0e545f7feeb732cba597de2c9d9abfa5e50d3795957c0ee3db4f447efa428472951b944bf49944bc4324af2ae668dadc258960727512f7a81203fcc3f8523fb5b35aaf39257ef40231605afb16af40bfc6cafd5e2c22cf72548dcd14e73316103dd84435acc67d813d260dd7c85a10f7d1d39dcfc9e507c10702309211b4da34c7502a2d30f4c21e3fc4b1105e4e6fc305130db49bcd45f4772a683538b740627d94d18ba307c8b7849244452a677c11f12197b845341c440be4c2d99fe73129b05a6caef4b17affd2259e112ee9479b5f0cc711bfb0352f154da0b4ca2937f9dacfb30d68593aa7bb43ae89f9f176728ad6df95b8fa0a6ec3fb7729b04bf67579d7955bcdf34430f293469662dbcbd03603ab9558a059f5d6e9005bb55d3a3bbf998dc0d80484f637f295949bccb06653f054dbde400d6a540f1d851eeeb7d14ce45f50edf3dccc3d3896fade7d840bd7b1819ad84dec6b6ff88ca40d8cc2589fb47cda20c82a19dcaff33e5f7817ba5f688003148cd7967a65fdb0f51c4052b7ec2062fc890db35d337b534edfd3d2f177ec7e09a619f6b87c2de7b0f0284a5c8cccfc56817ad592bddc203c3e25f2227e54056137bd5d9a6fc25e3eded8116cc01e8c2a2b38cd66d645306cfeb7cfbf700e591129e639f2054efb35b9e779bc0c77947433b7a6160b28f7344858f68277e623fe2c27ce626bd20d9d5615d941f2ab0bcbc6a22d2c00fb009fb51c0fc532bc10eab42084be998f71265362c9fb1d15611b198b5097c1979158c6f6f0a8f8f5d23bc71d73c7cfe05ae1dd6f5a1e26a8df3bec566d62ea8450425d0fcddc04380e86d56355e661664a7e65ac925f37316f510b1892034d242a3ecd32a866d74a11572eac0669212eee80e4ebadd6f4b3749d59491abb2990e319cff966db175e9575f33220b75af773a58e94872ca0b112fdfda94b5713784496f0b0ef1459ebf81f26f3ce6260d2c454524f62cb67b301ccdfb9fa84a7468ab84ed6aae4098fe87132ec40d0976856e446327e20ea9e3f4dd44726fda315ad4aa57ded8ccac01262b9272ed07f4161ae75aad68a54038a2ac7e3ac60a7b1fc75196707fbd9abf13fe80bae11efda9ae7d1dfcd6932e1b1c165b4f3a95cabbe5b6eefc2d5c32fd4115048a19d387662ba8fc0d0bf5c055e2b756fd8b67558da4c5850fa31febb61da455a1968da13349c39d289a572600602ca0656e92cf7c9254a36e2950bcc890fab00ef7b03a8d9877808f241f3972216dc25e3f8ffb5c9bb314a3e9d2bd091b4abc49e2ad9afaed2d0a1454b3a684b8951bf6f594d54d5f12a996c38ae3a8960e9691843e4b785d059494fa391340cc14940d07e569e313c6c0cafcb4b6ac88ea375336081583ca7f9a18d96046c8b717fe64a744beab735b81823f60d69a7e667ca00a22b8ac69e73f0d97a58c71794dc8fbaebada07da0d468cc54df5965c1e8257e1b2205efdb4e2ad3c71a65d51c78b67284561f46999ea09e3d788bf3daa79ea6f9f858e07743e8abcf4c58a308c8f65fadc62faaaa13854348a67f038a5243d2448983f631623291ecdd0987287d72861a64dab3eab94898bb62824abb234fc4ef799e1e1c881432ffab6ce8a29bfb98b0139400a07d68b1ea36c5d2ea344fecb3d95a96a72b8c6964460b0b7d0b182688ae2af10ce29d7d498349ee21eda7a6d0bf98d33b9dbdf9a3691d8c95797b6c65670ef5530301af27eda38c3b6d50a9f1ad451f152719e3a37ebf0822d7be305df165710ca05f7ca5f49ae17fa49f9da56bbf9046ca3f45c4a71f66a48fb222131a6f21b74e6205326651e63d88abf21abd71f5cfef36333308e026447be3a92661adbe3eb2f80fdd5702d70809b98609edac048dcc1dc189dbb7d9c722cd9c4a0fa6a286f4307576905fba5d30f6c7dfee28de2054e910974c30aacb6effa47af586f81098692e6b97ce496f342b8475f4ffc184c986b1ca9d1443af6f16f8219a37fa8d0c4be9f62e7f7d38eb3c99d126764f90604e280def94f1485a0d06620cb4a6eff725be671fa8e551d82480019ce3c62adf6b42efa98a4bb9284391d3c888be1e717f520470f32d389668f7700e40966e5cf542a3be10b968605148a8a67600516066b60e731074b3e675e80a0d9f3841ade5aab70e4024333e13f8eafa40b0bae03677f3ff3180500ea7f506cba0407a009d0596677213307d582948b9efad61dc9f017e9ed16ec9baaf442b7e9d54b7df408e1449e37456ee532dd1f3a5e2bca6ef13cef3829d4092226fc7d5d5441676cdabce3da7f497eceae274806cc8b288213eeff1b1f292f1ec1ac780e562463b6c3148d06debc125a6afdb953b98602568c4295590eeea4e160ff1797bae3e75b71a364ed288462f4aea6001d1206316a497ce8df31f448b2d5190e502e5082289119b70a6d062c45e3fe5db50cd80727727a571f4456f08ed320a71e7a54732a47ffe715895c9332f190b040ee113d70ddf786991faeeb84d0422023d1e2bddc9cafc197f8e7fcb0dfd9734feac1adf2a2e2e00fc6211dbe4e4b883ce7b4d77d9d9e1108cc7f9cc7a0d5d14c1f3437cb0c5f339f3ad80802749d68ed905d57abf43803ea6f34588eb0d3591f0a9f4175ce683af2b6218f68bf9989183ebacfbebb4bbee5a272df3b4368937f78c92787b00111f23e57c42de04a0e5753cb8e9bc5547cf17f66d769b127b743e23153e4a4a884ba776f47aacb09c8899c8647de6f19fe12e5711b8ea601e971c01a36fea2dab96092fb83cf62ad888e0f2754d273ce3fe37be8d4330a74716dd127e7150f4a969b916048d48d433e49cd496062441c4b9b5a3b586010ecd416c74b1921c9aad7def918006cc003f81549f4262ff1bcf0d5bd955fbbeaf10d6a92c16509b31eaa4fed067a44c0e9a7afa298b862219d8b84cb58a546cb8ac4141ecedcdcade49d43ec45d62c4ea1b9eaa2f4f39be548303f35b0ed2c9d0f04d8e2a653b30cdb791b35adaba70f51ad5ca3256d9c213f4c3d35ea12bef76f3d8413ecbe373deb3ed6eaa35d4e8ba012a77728d307e126784325363d56c27bd8f93d61857eb3af4183ee1b01dbac69119c9f60355cd5f936cbffd6448a87ea3416a566f5491b4e5227f6ee93328b136f4db3278701ab86b538aa11ca21f6baa4551937a978b162d94f1caaf7a5df7272c79244deba399c517557b3bab3c23696f7cfdfaffca4d9654a89ff1cb96f28848f0aaea69ad52e9800635c0cbf02c0211a2b8b5e6f9cea8c22da065824c4e9513bbb14ea06237a191756194c5e431e9ea477b9b02adc78bcdfdbcbd7787762994e6881f914cc850a16a07f78c7bd0ef297fbe075d1837bd15fee1135bd7ebd32d6bba072f062de736203325e7b807291881e4118108f014f125e43a8610a8f9c1548fb5a5bc55ef3fb46777b0e145cfc21ebbee3df5714b5b31b3d48a1e42b597956851d89b6c799a0c83699b2aef5881c3bd0d5f3c500ebfcfd8f4f041400f272c17525a094ca33f4aac619e6ab2e82d806eabf4712cd88e3906e3fba7bf501f81097c37ecd2e6458a5f404a8cd96c66508e6398352ce46c8d49f6e75bd9ac0338e17ae0f16a2fc5acb958dc2cb58aa44a931ad49758e8f3b0be72b7f5c9b5e2031805dc22dccde080bae3962a946573253a239f950ca15ba77aeedd9a181586bfde81bf4472804071b242bf8654b89608981b3b2cfa463f33ea0ec48dbb5144c9c1210778e84519ef54dcd20be8c17c5a820ba360f1d2e60687d872f6538124420d6a349be1a960a7b039a63ebce93bae415c7f8406292e0411ca3b9bfde37af26df4ac9179753eb73f869d5a0e9044c1fba482a652fe2cf4e73ed99045c522b31a97cf733014e21e7004e36634195165f8fac539bc3911e97f814a586bdc609f0d9e2907d9b00be29cdc4f22654fe4f699616871e0eb24263b7cfa111df3355c53e430f7c998a46af2919e66ff1a1659a7360b95d68dae3496ed808d62a966d7c304348d02ac7394cc619222a00e06757eaf90f35071beaa3034418d51c0de977325c7385a24f6d6e3262b0103879283b9dd4c0ddbc728e0627ed8b10e9da841f201c88e157a4c75f3b6fef18fccf4fc7ea71ad521aa72b955d62920a0fb7d2ea8226eda028248479b4dbca3df3dc89fdd0f18fb26afa71d6528c01c6850d0c3cdd2a948d4a89336fb9d450c8a276338facb0de44f8e741fcb9b5d882d3cfcffc92aabaf8d881f601acef6e1ba5e4707c59ba0c087223ac658f6148b5ff66de11a9db61a28fced7961306390272efa1c8d4b939a5234e1bfb627fa92d8fce54c4771fcd5eb7bf8a78fd6a7ea6a9fb6f26ab220810688677c5ee2d3df7526472dac013f583815d75b95345732768f29d482b876606691e57a78c7085273bf8f10f2b59c63d995fc1dea7bc11bf9b8116dfa0b5af31dc6b23fcdcb8205ad07bf74fe9aceb73da073e1383faa8d3cb3e83c5bc7992177082a0be8abacc7a671d00d015bcaf7a3012b2d9ceb01bd861321b75248b77b7b5d2ac23678e7d4b966fda6219d548b7b66205a5f24af14d4fe5969df09fea38e14db7e44c02a005ecff0245a0144f529687ec8fc9da64649aa967e0a6c8b9d82738fa7388dc54962dea05471f9368269e8c9eafffe34d1759ba4af3d9a21bd445700fe439dcb6074a12168103add0d1091eb2145538209231dbde0f1c9184fd31870dfe56967edb08c52d18a3a255095e8a7d780424907f8c78c4027723bfc914aff57dce08cc30ed72f3773abbf4f1071738156c7ea6ea157b529715a277d4ffebb379ae58ddf0f2e1464512b03248bc130a5d16b318120c36166ab0a30a445ebd409cfb8cd0d36a28bab4090549bceea9df76c7ace4cd6ade74fbc924f1a6861ab5c62de78537e64ab95dc1980119f71340ee86279eb5b4ceab7846dab2f52a44782d837d5beb27d404b6aa897141edb89cf3543b1b9"}, 0x20) sendmsg$kcm(r12, &(0x7f0000001b40)={&(0x7f0000001980)=@l2={0x1f, 0x9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8, 0x1}, 0x80, &(0x7f0000001b00)=[{&(0x7f0000001a00)="5e7282e6e3f665d88dfc9c88a95587d7da1b331e1f2c9c84b1b6bca3dbaf451f1c860a9d79a5d7f2788baedc4a214bf793186d2bfbad72d0aeffce95cea9fe66a8a6dede8d", 0x45}, {&(0x7f0000001a80)="c360884070b4f109f3bd8306461284f2302aa8505ac26a86a4fd9b6e3013f947a64a0e41d0f77ec6217f1771ad09acf23e8f87a44ba7a867f10d68eb6269b91d476a3d26eb439c60760d64b6f0ba2db36415be75cc420c65bdd90559f629af657f96d723fa720b8fd1a6a1370c9dd752b001d96a6726f31bc1e8515225e8", 0x7e}], 0x2}, 0x1) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000001d40)={0x2, 0x1, &(0x7f0000001b80)=@raw=[@call={0x85, 0x0, 0x0, 0x56}], &(0x7f0000001bc0)='syzkaller\x00', 0xfffffff9, 0x63, &(0x7f0000001c00)=""/99, 0x41000, 0x3, '\x00', r9, @fallback=0x34, r12, 0x8, &(0x7f0000001c80)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001cc0)={0x0, 0x6, 0x6, 0x4}, 0x10, 0xffffffffffffffff, r5, 0x0, &(0x7f0000001d00)=[r7, r12, r5, r12, r7, r7, r5, r10], 0x0, 0x10, 0xfffffc00}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001f00)={@fallback=r11, 0x4, 0x0, 0x3ff, &(0x7f0000001e00)=[0x0], 0x1, 0x0, &(0x7f0000001e40)=[0x0], &(0x7f0000001e80)=[0x0, 0x0], &(0x7f0000001ec0)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001fc0)={0xffffffffffffffff, r4, 0x0, 0x2, &(0x7f0000001f80)='r\x00', 0x0}, 0x30) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001f40)={@ifindex=r9, r13, 0x7, 0x24, r7, @void, @void, @void, @value=r16, r15}, 0x20) ioctl$TUNSETLINK(r14, 0x400454cd, 0x304) ioctl$TUNSETCARRIER(r12, 0x400454e2, &(0x7f0000002000)=0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002300)={r13, 0xe0, &(0x7f0000002200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000002040)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f0000002080)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000020c0)=[0x0, 0x0, 0x0], 0x0, 0x20, &(0x7f0000002100)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000002140), &(0x7f0000002180), 0x8, 0xb5, 0x8, 0x8, &(0x7f00000021c0)}}, 0x10) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r11, 0x4008240b, &(0x7f0000002380)={0x5, 0x80, 0x3, 0x2, 0xa, 0x2, 0x0, 0xfffffffffffffffb, 0x8282, 0xad0318cf70f36c56, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000002340), 0xa}, 0x8000, 0x6, 0x80000001, 0x2, 0x3, 0x9, 0x9, 0x0, 0x3, 0x0, 0x7fff}) 0s ago: executing program 0 (id=10284): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x13, &(0x7f00000009c0)=@framed={{0x18, 0x9}, [@printk={@p={0x18, 0x1, 0x0, 0xa0}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x1, 0xa, 0x6}, {}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, @printk={@p, {0x3, 0x0, 0x6}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x5}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) kernel console output (not intermixed with test programs): _slave_1 [ 1303.136412][T32391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1303.149146][T32391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1303.167360][T32391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1303.181960][T32391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1303.198474][T32391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1303.219327][T32391] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1303.238699][T32391] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1303.248806][T32391] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1303.260376][T32391] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1303.275681][T32391] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1303.291919][T19736] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1303.304695][T19736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1303.623522][T19728] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1303.631807][T19728] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1303.652453][T28402] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1303.728789][ T7996] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1303.761980][ T7996] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1303.789432][T32560] netlink: 14 bytes leftover after parsing attributes in process `syz.2.9133'. [ 1303.821806][T28402] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1304.241137][T32575] FAULT_INJECTION: forcing a failure. [ 1304.241137][T32575] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1304.267523][T32573] netlink: 2 bytes leftover after parsing attributes in process `syz.2.9139'. [ 1304.347785][T32575] CPU: 0 PID: 32575 Comm: syz.1.9071 Not tainted syzkaller #0 [ 1304.355470][T32575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1304.365912][T32575] Call Trace: [ 1304.369421][T32575] [ 1304.372384][T32575] dump_stack_lvl+0x188/0x24e [ 1304.377184][T32575] ? show_regs_print_info+0x12/0x12 [ 1304.382714][T32575] ? load_image+0x410/0x410 [ 1304.387444][T32575] ? __lock_acquire+0x7c40/0x7c40 [ 1304.392723][T32575] should_fail_ex+0x390/0x4c0 [ 1304.397630][T32575] _copy_from_user+0x2c/0x170 [ 1304.403040][T32575] iovec_from_user+0x143/0x360 [ 1304.408031][T32575] __import_iovec+0x6c/0x510 [ 1304.412753][T32575] ? __might_fault+0xa6/0x120 [ 1304.417870][T32575] import_iovec+0x6f/0xa0 [ 1304.422452][T32575] ___sys_recvmsg+0x4b2/0x590 [ 1304.427451][T32575] ? __sys_recvmsg+0x2a0/0x2a0 [ 1304.432355][T32575] ? common_file_perm+0x171/0x1c0 [ 1304.439085][T32575] ? __fget_files+0x3fc/0x460 [ 1304.444529][T32575] __x64_sys_recvmsg+0x20d/0x2e0 [ 1304.449862][T32575] ? ___sys_recvmsg+0x590/0x590 [ 1304.455041][T32575] ? lockdep_hardirqs_on+0x94/0x140 [ 1304.460584][T32575] do_syscall_64+0x4c/0xa0 [ 1304.465215][T32575] ? clear_bhb_loop+0x60/0xb0 [ 1304.470050][T32575] ? clear_bhb_loop+0x60/0xb0 [ 1304.474773][T32575] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1304.480704][T32575] RIP: 0033:0x7ff81079e0d9 [ 1304.485499][T32575] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1304.505846][T32575] RSP: 002b:00007ff811732028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1304.514796][T32575] RAX: ffffffffffffffda RBX: 00007ff810a26090 RCX: 00007ff81079e0d9 [ 1304.523148][T32575] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 1304.531238][T32575] RBP: 00007ff811732090 R08: 0000000000000000 R09: 0000000000000000 [ 1304.539328][T32575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1304.547674][T32575] R13: 00007ff810a26128 R14: 00007ff810a26090 R15: 00007fff87821598 [ 1304.555686][T32575] [ 1305.293924][T21777] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1305.305147][T21777] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1305.314721][T21777] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1305.324553][T21777] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1305.332981][T21777] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1305.343129][T21777] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1305.969503][T32603] netlink: 14 bytes leftover after parsing attributes in process `syz.4.9148'. [ 1306.097916][T32611] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.9149'. [ 1306.137261][T32611] validate_nla: 6 callbacks suppressed [ 1306.137278][T32611] netlink: 'syz.0.9149': attribute type 10 has an invalid length. [ 1306.159222][T32611] netlink: 2 bytes leftover after parsing attributes in process `syz.0.9149'. [ 1306.195585][T32611] bridge0: port 3(hsr0) entered disabled state [ 1306.317719][T32617] netlink: 'syz.1.9151': attribute type 10 has an invalid length. [ 1306.356537][T32617] netlink: 2 bytes leftover after parsing attributes in process `syz.1.9151'. [ 1306.378048][T32617] device hsr0 entered promiscuous mode [ 1306.388495][T32617] bridge0: port 3(hsr0) entered blocking state [ 1306.419684][T32617] bridge0: port 3(hsr0) entered disabled state [ 1306.471782][T32617] bridge0: port 3(hsr0) entered blocking state [ 1306.478636][T32617] bridge0: port 3(hsr0) entered forwarding state [ 1306.511592][T32594] chnl_net:caif_netlink_parms(): no params data found [ 1306.760710][T32594] bridge0: port 1(bridge_slave_0) entered blocking state [ 1306.794523][T32594] bridge0: port 1(bridge_slave_0) entered disabled state [ 1306.804123][T32594] device bridge_slave_0 entered promiscuous mode [ 1306.814859][T32594] bridge0: port 2(bridge_slave_1) entered blocking state [ 1306.822487][T32594] bridge0: port 2(bridge_slave_1) entered disabled state [ 1306.832760][T32594] device bridge_slave_1 entered promiscuous mode [ 1306.908039][T32594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1306.976643][T28402] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1307.070199][T32594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1307.308703][T32594] team0: Port device team_slave_0 added [ 1307.403140][T32594] team0: Port device team_slave_1 added [ 1307.540095][T32594] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1307.547679][T32594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1307.575020][T32594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1307.588710][T32594] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1307.617605][T32594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1307.754265][T32594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1307.785464][T21777] Bluetooth: hci0: command 0x0409 tx timeout [ 1309.853365][ T4274] Bluetooth: hci0: command 0x041b tx timeout [ 1310.099299][T32594] device hsr_slave_0 entered promiscuous mode [ 1310.125904][T32594] device hsr_slave_1 entered promiscuous mode [ 1310.142978][T32594] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1310.151465][T32594] Cannot create hsr debugfs directory [ 1310.279063][T28402] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1310.554537][T32659] netlink: 'syz.4.9166': attribute type 10 has an invalid length. [ 1310.570022][T32666] netlink: 'syz.3.9168': attribute type 29 has an invalid length. [ 1310.588959][T32659] netlink: 2 bytes leftover after parsing attributes in process `syz.4.9166'. [ 1310.624515][T32666] netlink: 'syz.3.9168': attribute type 29 has an invalid length. [ 1310.686668][T32665] netlink: 'syz.3.9168': attribute type 29 has an invalid length. [ 1310.732143][T28402] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1310.767845][T32667] netlink: 'syz.3.9168': attribute type 29 has an invalid length. [ 1310.815036][T32669] netlink: 'syz.1.9169': attribute type 3 has an invalid length. [ 1310.829546][T32669] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.9169'. [ 1311.054260][T32671] netlink: 212168 bytes leftover after parsing attributes in process `syz.4.9170'. [ 1311.587709][T28402] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1311.705878][T32671] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1311.717759][T32671] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1311.730657][T32671] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1311.935879][ T4274] Bluetooth: hci0: command 0x040f tx timeout [ 1312.598069][T32707] netlink: 'syz.0.9181': attribute type 2 has an invalid length. [ 1312.682817][T32709] netdevsim netdevsim3: Direct firmware load for Ö failed with error -2 [ 1312.691577][T32709] netdevsim netdevsim3: Falling back to sysfs fallback for: Ö [ 1312.857719][T32714] netlink: 'syz.3.9182': attribute type 2 has an invalid length. [ 1312.866214][T32720] netlink: 'syz.1.9184': attribute type 29 has an invalid length. [ 1313.001866][T32727] netlink: 'syz.0.9185': attribute type 29 has an invalid length. [ 1313.852337][T32727] netlink: 'syz.0.9185': attribute type 29 has an invalid length. [ 1313.905321][T32720] netlink: 'syz.1.9184': attribute type 29 has an invalid length. [ 1314.019663][ T4274] Bluetooth: hci0: command 0x0419 tx timeout [ 1314.582476][T32741] netlink: 'syz.3.9189': attribute type 10 has an invalid length. [ 1314.604085][T32741] netlink: 2 bytes leftover after parsing attributes in process `syz.3.9189'. [ 1315.014643][T32594] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1315.241869][T32594] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1315.263381][T32594] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1315.392051][T32594] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1315.790828][T32764] netlink: 'syz.0.9194': attribute type 2 has an invalid length. [ 1315.924169][T32594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1315.963506][ T7996] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1315.980224][ T7996] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1316.137456][T32594] 8021q: adding VLAN 0 to HW filter on device team0 [ 1316.191064][ T7996] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1316.297421][ T7996] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1316.324397][ T308] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.9195'. [ 1316.358852][ T7996] bridge0: port 1(bridge_slave_0) entered blocking state [ 1316.367533][ T7996] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1316.598895][ T308] netlink: 'syz.3.9195': attribute type 10 has an invalid length. [ 1316.613119][ T308] netlink: 2 bytes leftover after parsing attributes in process `syz.3.9195'. [ 1316.628421][ T308] bridge0: port 3(hsr0) entered disabled state [ 1316.726327][ T7996] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1316.744004][ T7996] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1316.768489][ T7996] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1316.800026][ T7996] bridge0: port 2(bridge_slave_1) entered blocking state [ 1316.808799][ T7996] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1317.127148][ T7996] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1317.157026][ T7996] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1317.204035][ T7996] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1317.244573][ T7996] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1317.264679][ T7996] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1317.313701][ T7996] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1317.354545][ T7996] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1317.800376][T19745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1317.824468][T19745] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1317.935146][ T344] netdevsim netdevsim0: Direct firmware load for Ö failed with error -2 [ 1317.939355][T19745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1317.965377][T19745] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1317.965770][ T344] netdevsim netdevsim0: Falling back to sysfs fallback for: Ö [ 1317.992081][T32594] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1318.012639][ T341] netlink: 'syz.3.9206': attribute type 2 has an invalid length. [ 1318.029668][ T347] netlink: 'syz.0.9205': attribute type 2 has an invalid length. [ 1318.329567][T28402] device hsr_slave_0 left promiscuous mode [ 1318.346069][T28402] device hsr_slave_1 left promiscuous mode [ 1318.368801][T28402] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1318.376768][T28402] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1318.387696][ T359] netlink: 'syz.3.9208': attribute type 29 has an invalid length. [ 1318.414067][T28402] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1318.422089][T28402] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1318.444163][T28402] bridge0: port 2(hsr0) entered disabled state [ 1318.457410][T28402] device bridge_slave_0 left promiscuous mode [ 1318.472650][T28402] bridge0: port 1(bridge_slave_0) entered disabled state [ 1318.536533][T28402] device veth1_macvtap left promiscuous mode [ 1318.556635][T28402] device veth0_macvtap left promiscuous mode [ 1319.769240][T28402] team0 (unregistering): Port device team_slave_1 removed [ 1319.823202][T28402] team0 (unregistering): Port device team_slave_0 removed [ 1320.328951][ T359] netlink: 'syz.3.9208': attribute type 29 has an invalid length. [ 1320.346606][ T378] netlink: 164 bytes leftover after parsing attributes in process `syz.4.9214'. [ 1320.952317][T19704] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1320.970432][T19704] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1321.007246][T32594] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1321.060393][ T398] netlink: 'syz.3.9218': attribute type 2 has an invalid length. [ 1321.147359][T19728] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1321.169281][T19728] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1321.255237][T32594] device veth0_vlan entered promiscuous mode [ 1321.276195][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1321.295008][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1321.351390][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1321.376129][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1321.399023][T32594] device veth1_vlan entered promiscuous mode [ 1321.516749][T19745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1321.547494][T19745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1321.568579][T32594] device veth0_macvtap entered promiscuous mode [ 1321.582667][T32594] device veth1_macvtap entered promiscuous mode [ 1321.612246][T32594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1321.626246][T32594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1321.637130][T32594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1321.649802][T32594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1321.675073][T32594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1321.697317][T32594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1321.762377][T32594] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1321.797194][T19736] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1321.860531][T19736] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1321.893784][T19736] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1321.933464][T19736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1321.987019][T32594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1322.041760][T32594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1322.081153][T32594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1322.113712][T32594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1322.202403][T32594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1322.386433][T32594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1322.540718][T32594] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1322.565618][T19736] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1322.597600][T19736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1322.639563][ T419] FAULT_INJECTION: forcing a failure. [ 1322.639563][ T419] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1322.645772][T32594] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1322.681356][ T419] CPU: 0 PID: 419 Comm: syz.0.9227 Not tainted syzkaller #0 [ 1322.689504][ T419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1322.700637][ T419] Call Trace: [ 1322.703964][ T419] [ 1322.707552][ T419] dump_stack_lvl+0x188/0x24e [ 1322.712394][ T419] ? show_regs_print_info+0x12/0x12 [ 1322.718952][ T419] ? load_image+0x410/0x410 [ 1322.723494][ T419] ? __lock_acquire+0x7c40/0x7c40 [ 1322.724335][T32594] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1322.728719][ T419] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1322.743803][ T419] should_fail_ex+0x390/0x4c0 [ 1322.748838][ T419] _copy_from_user+0x2c/0x170 [ 1322.751585][T32594] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1322.753899][ T419] ___sys_sendmsg+0x1c3/0x360 [ 1322.753945][ T419] ? __sys_sendmsg+0x2a0/0x2a0 [ 1322.754001][ T419] ? __lock_acquire+0x7c40/0x7c40 [ 1322.754065][ T419] __se_sys_sendmsg+0x1c3/0x2b0 [ 1322.773346][T32594] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1322.774086][ T419] ? __x64_sys_sendmsg+0x80/0x80 [ 1322.798810][ T419] ? lockdep_hardirqs_on+0x94/0x140 [ 1322.804414][ T419] do_syscall_64+0x4c/0xa0 [ 1322.809060][ T419] ? clear_bhb_loop+0x60/0xb0 [ 1322.813787][ T419] ? clear_bhb_loop+0x60/0xb0 [ 1322.819249][ T419] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1322.825446][ T419] RIP: 0033:0x7fce9a39e0d9 [ 1322.830155][ T419] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1322.851107][ T419] RSP: 002b:00007fce9b1fd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1322.859565][ T419] RAX: ffffffffffffffda RBX: 00007fce9a625fa0 RCX: 00007fce9a39e0d9 [ 1322.869750][ T419] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1322.878116][ T419] RBP: 00007fce9b1fd090 R08: 0000000000000000 R09: 0000000000000000 [ 1322.886135][ T419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1322.894220][ T419] R13: 00007fce9a626038 R14: 00007fce9a625fa0 R15: 00007ffee49f52f8 [ 1322.902342][ T419] [ 1322.920170][ T425] netlink: 14 bytes leftover after parsing attributes in process `syz.3.9230'. [ 1323.008535][ T422] netlink: 'syz.4.9229': attribute type 13 has an invalid length. [ 1323.036592][ T422] netlink: 152 bytes leftover after parsing attributes in process `syz.4.9229'. [ 1323.060665][ T422] erspan0: refused to change device tx_queue_len [ 1323.073524][ T422] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1323.118533][T19704] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1323.152635][T19704] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1323.168191][T28402] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1323.200316][T28402] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1323.214505][T28402] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1323.224633][T19704] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1323.661227][ T440] netlink: 'syz.0.9232': attribute type 2 has an invalid length. [ 1327.464771][ T512] netlink: 8281 bytes leftover after parsing attributes in process `syz.3.9238'. [ 1327.505553][ T515] netlink: 'syz.4.9239': attribute type 29 has an invalid length. [ 1327.537725][ T514] netlink: 'syz.1.9237': attribute type 29 has an invalid length. [ 1327.559246][ T515] netlink: 'syz.4.9239': attribute type 29 has an invalid length. [ 1327.596651][ T518] netlink: 'syz.4.9239': attribute type 1 has an invalid length. [ 1327.647170][ T518] netlink: 152 bytes leftover after parsing attributes in process `syz.4.9239'. [ 1327.687124][ T514] netlink: 'syz.1.9237': attribute type 29 has an invalid length. [ 1327.716478][ T517] netlink: 14 bytes leftover after parsing attributes in process `syz.2.9240'. [ 1327.825395][ T525] netlink: 17861 bytes leftover after parsing attributes in process `syz.3.9241'. [ 1327.873111][ T517] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1327.941621][ T517] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1328.066815][T21777] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1328.082028][T21777] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1328.094872][T21777] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1328.109107][T21777] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1328.119088][T21777] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1328.128349][T21777] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1330.845641][ T517] bond0 (unregistering): Released all slaves [ 1330.983907][ T510] netlink: 'syz.4.9239': attribute type 29 has an invalid length. [ 1331.012236][ T520] netlink: 'syz.1.9237': attribute type 29 has an invalid length. [ 1331.119545][ T499] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1331.231207][ T499] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1331.442388][ T499] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1331.487934][ T534] netlink: 'syz.1.9243': attribute type 10 has an invalid length. [ 1331.517520][ T534] netlink: 2 bytes leftover after parsing attributes in process `syz.1.9243'. [ 1331.610902][ T499] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1331.635821][ T544] netlink: 'syz.3.9246': attribute type 2 has an invalid length. [ 1331.653340][ T528] chnl_net:caif_netlink_parms(): no params data found [ 1332.071974][ T528] bridge0: port 1(bridge_slave_0) entered blocking state [ 1332.096420][ T528] bridge0: port 1(bridge_slave_0) entered disabled state [ 1332.168094][ T528] device bridge_slave_0 entered promiscuous mode [ 1332.241877][ T528] bridge0: port 2(bridge_slave_1) entered blocking state [ 1332.282762][ T528] bridge0: port 2(bridge_slave_1) entered disabled state [ 1332.332362][ T528] device bridge_slave_1 entered promiscuous mode [ 1332.555081][ T528] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1332.602818][ T499] device 0 left promiscuous mode [ 1332.875523][ T528] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1332.976735][ T4274] Bluetooth: hci4: command 0x0409 tx timeout [ 1333.129923][ T499] bridge0: port 4(ip6gretap0) entered disabled state [ 1333.490935][ T590] netlink: 'syz.3.9256': attribute type 29 has an invalid length. [ 1333.536578][ T499] device ip6gretap0 left promiscuous mode [ 1333.560517][ T499] bridge0: port 4(ip6gretap0) entered disabled state [ 1333.624548][ T528] team0: Port device team_slave_0 added [ 1333.652802][ T590] netlink: 'syz.3.9256': attribute type 29 has an invalid length. [ 1333.709896][ T587] netlink: 'syz.3.9256': attribute type 29 has an invalid length. [ 1333.776321][ T528] team0: Port device team_slave_1 added [ 1333.865807][ T591] netlink: 'syz.3.9256': attribute type 29 has an invalid length. [ 1333.883341][ T600] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.9257'. [ 1334.179799][ T605] netlink: 'syz.4.9259': attribute type 10 has an invalid length. [ 1334.193738][ T605] netlink: 2 bytes leftover after parsing attributes in process `syz.4.9259'. [ 1334.220428][ T610] netlink: 'syz.3.9260': attribute type 2 has an invalid length. [ 1334.253919][ T528] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1334.288491][ T528] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1334.364183][ T528] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1334.451847][ T528] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1334.484474][ T528] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1334.531145][ T528] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1335.054105][ T4274] Bluetooth: hci4: command 0x041b tx timeout [ 1335.124437][ T528] device hsr_slave_0 entered promiscuous mode [ 1335.165785][ T528] device hsr_slave_1 entered promiscuous mode [ 1335.525135][ T463] bridge0: port 2(bridge_slave_1) entered disabled state [ 1335.852173][ T651] netlink: 2 bytes leftover after parsing attributes in process `syz.3.9272'. [ 1335.928205][ T651] bridge0: port 3(hsr0) entered blocking state [ 1335.959840][ T651] bridge0: port 3(hsr0) entered disabled state [ 1336.049956][ T651] bridge0: port 3(hsr0) entered blocking state [ 1336.056592][ T651] bridge0: port 3(hsr0) entered forwarding state [ 1336.418327][ T662] validate_nla: 2 callbacks suppressed [ 1336.418362][ T662] netlink: 'syz.1.9273': attribute type 2 has an invalid length. [ 1337.138995][T21777] Bluetooth: hci4: command 0x040f tx timeout [ 1338.425874][ T691] FAULT_INJECTION: forcing a failure. [ 1338.425874][ T691] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1338.453027][ T691] CPU: 0 PID: 691 Comm: syz.3.9282 Not tainted syzkaller #0 [ 1338.460920][ T691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1338.471184][ T691] Call Trace: [ 1338.474596][ T691] [ 1338.477581][ T691] dump_stack_lvl+0x188/0x24e [ 1338.482634][ T691] ? show_regs_print_info+0x12/0x12 [ 1338.487986][ T691] ? load_image+0x410/0x410 [ 1338.492592][ T691] ? __lock_acquire+0x7c40/0x7c40 [ 1338.497661][ T691] should_fail_ex+0x390/0x4c0 [ 1338.502467][ T691] _copy_from_user+0x2c/0x170 [ 1338.507175][ T691] iovec_from_user+0x143/0x360 [ 1338.512079][ T691] __import_iovec+0x6c/0x510 [ 1338.516808][ T691] import_iovec+0x6f/0xa0 [ 1338.521200][ T691] ___sys_sendmsg+0x252/0x360 [ 1338.525997][ T691] ? __sys_sendmsg+0x2a0/0x2a0 [ 1338.530939][ T691] ? __lock_acquire+0x7c40/0x7c40 [ 1338.536026][ T691] __se_sys_sendmsg+0x1c3/0x2b0 [ 1338.541164][ T691] ? __x64_sys_sendmsg+0x80/0x80 [ 1338.546144][ T691] ? lockdep_hardirqs_on+0x94/0x140 [ 1338.551354][ T691] do_syscall_64+0x4c/0xa0 [ 1338.555803][ T691] ? clear_bhb_loop+0x60/0xb0 [ 1338.560498][ T691] ? clear_bhb_loop+0x60/0xb0 [ 1338.565472][ T691] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1338.571383][ T691] RIP: 0033:0x7fd97c99e0d9 [ 1338.575807][ T691] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1338.596150][ T691] RSP: 002b:00007fd97abf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1338.604571][ T691] RAX: ffffffffffffffda RBX: 00007fd97cc25fa0 RCX: 00007fd97c99e0d9 [ 1338.612651][ T691] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1338.620730][ T691] RBP: 00007fd97abf6090 R08: 0000000000000000 R09: 0000000000000000 [ 1338.628731][ T691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1338.636717][ T691] R13: 00007fd97cc26038 R14: 00007fd97cc25fa0 R15: 00007ffe07127158 [ 1338.644744][ T691] [ 1338.653628][ T698] netlink: 'syz.2.9290': attribute type 29 has an invalid length. [ 1338.689071][ T698] netlink: 'syz.2.9290': attribute type 29 has an invalid length. [ 1338.731176][ T695] netlink: 'syz.2.9290': attribute type 29 has an invalid length. [ 1338.821288][ T701] FAULT_INJECTION: forcing a failure. [ 1338.821288][ T701] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1338.843555][ T701] CPU: 0 PID: 701 Comm: syz.2.9290 Not tainted syzkaller #0 [ 1338.851432][ T701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1338.862020][ T701] Call Trace: [ 1338.865421][ T701] [ 1338.868940][ T701] dump_stack_lvl+0x188/0x24e [ 1338.873957][ T701] ? show_regs_print_info+0x12/0x12 [ 1338.880165][ T701] ? load_image+0x410/0x410 [ 1338.885154][ T701] ? __might_fault+0xa6/0x120 [ 1338.890774][ T701] should_fail_ex+0x390/0x4c0 [ 1338.897923][ T701] copyout+0x1b/0x120 [ 1338.902850][ T701] _copy_to_iter+0x482/0x1050 [ 1338.908156][ T701] ? iov_iter_init+0x1f0/0x1f0 [ 1338.915832][ T701] ? __virt_addr_valid+0x188/0x540 [ 1338.922520][ T701] ? __virt_addr_valid+0x467/0x540 [ 1338.928736][ T701] ? __phys_addr_symbol+0x2b/0x70 [ 1338.935625][ T701] ? __check_object_size+0x4f6/0xa70 [ 1338.942902][ T701] __skb_datagram_iter+0xde/0x740 [ 1338.949513][ T701] ? sock_load_diag_module+0x130/0x130 [ 1338.956128][ T701] ? skb_copy_datagram_iter+0x290/0x290 [ 1338.963108][ T701] skb_copy_datagram_iter+0xd7/0x290 [ 1338.970086][ T701] netlink_recvmsg+0x2d0/0xe00 [ 1338.976048][ T701] ? netlink_sendmsg+0xbd0/0xbd0 [ 1338.981396][ T701] ? aa_af_perm+0x340/0x340 [ 1338.986556][ T701] ? __might_fault+0xa6/0x120 [ 1338.991638][ T701] ? bpf_lsm_socket_recvmsg+0x5/0x10 [ 1338.997424][ T701] ? security_socket_recvmsg+0x85/0xb0 [ 1338.998795][ T528] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1339.003081][ T701] ? netlink_sendmsg+0xbd0/0xbd0 [ 1339.003111][ T701] ____sys_recvmsg+0x2c8/0x5b0 [ 1339.003143][ T701] ? __sys_recvmsg_sock+0x40/0x40 [ 1339.003174][ T701] ? import_iovec+0x6f/0xa0 [ 1339.003198][ T701] ___sys_recvmsg+0x210/0x590 [ 1339.034701][ T701] ? __sys_recvmsg+0x2a0/0x2a0 [ 1339.039517][ T701] ? common_file_perm+0x171/0x1c0 [ 1339.044604][ T701] ? __fget_files+0x3fc/0x460 [ 1339.049421][ T701] __x64_sys_recvmsg+0x20d/0x2e0 [ 1339.054585][ T701] ? ___sys_recvmsg+0x590/0x590 [ 1339.059538][ T701] ? lockdep_hardirqs_on+0x94/0x140 [ 1339.065179][ T701] do_syscall_64+0x4c/0xa0 [ 1339.070138][ T701] ? clear_bhb_loop+0x60/0xb0 [ 1339.074877][ T701] ? clear_bhb_loop+0x60/0xb0 [ 1339.079804][ T701] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1339.086162][ T701] RIP: 0033:0x7fc742d9e0d9 [ 1339.091488][ T701] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1339.111387][ T701] RSP: 002b:00007fc740ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1339.119921][ T701] RAX: ffffffffffffffda RBX: 00007fc743026180 RCX: 00007fc742d9e0d9 [ 1339.128001][ T701] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 1339.136165][ T701] RBP: 00007fc740ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 1339.144152][ T701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1339.152761][ T701] R13: 00007fc743026218 R14: 00007fc743026180 R15: 00007fff3c4e3458 [ 1339.161194][ T701] [ 1339.208038][ T709] netlink: 'syz.3.9284': attribute type 10 has an invalid length. [ 1339.223002][ T4274] Bluetooth: hci4: command 0x0419 tx timeout [ 1339.231385][ T709] netlink: 2 bytes leftover after parsing attributes in process `syz.3.9284'. [ 1339.401026][ T528] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1339.420293][ T528] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1339.440113][ T701] netlink: 'syz.2.9290': attribute type 29 has an invalid length. [ 1339.481945][ T713] netlink: 'syz.1.9285': attribute type 2 has an invalid length. [ 1339.504592][ T528] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1339.563163][ T499] device hsr_slave_0 left promiscuous mode [ 1339.570469][ T499] device hsr_slave_1 left promiscuous mode [ 1339.603927][ T499] bridge0: port 2(bridge_slave_1) entered disabled state [ 1339.629401][ T499] bridge0: port 1(bridge_slave_0) entered disabled state [ 1339.838254][ T499] device veth1_macvtap left promiscuous mode [ 1339.848167][ T499] device veth0_macvtap left promiscuous mode [ 1339.891267][ T734] netlink: 'syz.1.9288': attribute type 29 has an invalid length. [ 1340.528821][ T499] team0 (unregistering): Port device macvlan0 removed [ 1340.924539][ T499] team0 (unregistering): Port device team_slave_1 removed [ 1340.975211][ T499] team0 (unregistering): Port device team_slave_0 removed [ 1341.481547][ T722] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1341.485416][ T734] netlink: 'syz.1.9288': attribute type 29 has an invalid length. [ 1341.492277][ T722] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1341.516713][ T722] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1341.528268][ T740] netlink: 'syz.1.9288': attribute type 1 has an invalid length. [ 1341.538660][ T740] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9288'. [ 1341.563932][ T758] netlink: 14 bytes leftover after parsing attributes in process `syz.4.9295'. [ 1341.851254][ T528] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1341.877974][ T763] netlink: 'syz.2.9296': attribute type 10 has an invalid length. [ 1341.909564][ T763] netlink: 2 bytes leftover after parsing attributes in process `syz.2.9296'. [ 1341.933462][ T763] device hsr0 entered promiscuous mode [ 1341.958964][ T763] bridge0: port 3(hsr0) entered blocking state [ 1341.984154][ T763] bridge0: port 3(hsr0) entered disabled state [ 1342.038301][ T763] bridge0: port 3(hsr0) entered blocking state [ 1342.046056][ T763] bridge0: port 3(hsr0) entered forwarding state [ 1342.068507][T21777] Bluetooth: hci3: unexpected event 0x3c length: 151 > 7 [ 1342.097156][ T774] netlink: 'syz.3.9299': attribute type 2 has an invalid length. [ 1342.222099][ T462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1342.244320][ T462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1342.304053][ T528] 8021q: adding VLAN 0 to HW filter on device team0 [ 1342.385218][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1342.399577][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1342.427382][ T788] netlink: 'syz.2.9305': attribute type 29 has an invalid length. [ 1342.443120][ T463] bridge0: port 1(bridge_slave_0) entered blocking state [ 1342.450487][ T463] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1342.539554][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1342.548512][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1342.593658][ T785] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.9304'. [ 1342.640268][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1342.649756][ T463] bridge0: port 2(bridge_slave_1) entered blocking state [ 1342.657347][ T463] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1342.667917][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1342.677803][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1342.688201][ T788] netlink: 'syz.2.9305': attribute type 29 has an invalid length. [ 1342.753512][ T797] netlink: 'syz.2.9305': attribute type 29 has an invalid length. [ 1342.819487][ T801] netlink: 'syz.2.9305': attribute type 29 has an invalid length. [ 1342.847022][ T798] netlink: 'syz.4.9304': attribute type 10 has an invalid length. [ 1342.855713][ T798] netlink: 2 bytes leftover after parsing attributes in process `syz.4.9304'. [ 1342.866405][ T798] bridge0: port 3(hsr0) entered disabled state [ 1343.339828][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1343.368534][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1343.421841][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1343.456984][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1343.478364][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1343.511767][ T528] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1343.570572][ T528] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1343.646101][ T809] netlink: 14 bytes leftover after parsing attributes in process `syz.2.9308'. [ 1343.688995][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1343.715616][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1343.766963][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1343.796621][ T819] netlink: 'syz.3.9310': attribute type 29 has an invalid length. [ 1343.805437][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1343.975078][ T824] netlink: 152 bytes leftover after parsing attributes in process `syz.3.9310'. [ 1344.015285][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1344.051984][ T825] delete_channel: no stack [ 1344.248611][ T833] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9312'. [ 1344.334080][ T835] device syz_tun entered promiscuous mode [ 1344.851742][ T852] mac80211_hwsim hwsim108 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1344.891289][ T848] netlink: 2 bytes leftover after parsing attributes in process `syz.1.9315'. [ 1344.953251][ T851] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9317'. [ 1345.033721][ T465] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1345.063234][ T465] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1345.255238][ T528] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1345.384304][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1345.434610][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1345.811611][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1345.826544][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1345.933551][ T528] device veth0_vlan entered promiscuous mode [ 1345.955165][ T877] netlink: 2 bytes leftover after parsing attributes in process `syz.2.9323'. [ 1346.002448][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1346.043615][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1346.117039][ T528] device veth1_vlan entered promiscuous mode [ 1346.314658][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1346.361835][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1346.405313][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1346.430246][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1346.480313][ T528] device veth0_macvtap entered promiscuous mode [ 1346.529467][ T528] device veth1_macvtap entered promiscuous mode [ 1346.599960][ T528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1346.631652][ T528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1346.659854][ T528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1346.703850][ T528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1346.744287][ T528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1346.778269][ T528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1346.792368][ T528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1346.818621][ T528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1346.834620][ T528] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1346.860017][ T528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1346.908904][ T528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1346.950346][ T528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1346.970529][ T528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1346.981435][ T528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1346.994474][ T528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1347.007253][ T528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1347.031017][ T528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1347.049028][ T528] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1347.066291][ T909] validate_nla: 11 callbacks suppressed [ 1347.066345][ T909] netlink: 'syz.3.9330': attribute type 10 has an invalid length. [ 1347.093349][ T909] netlink: 2 bytes leftover after parsing attributes in process `syz.3.9330'. [ 1347.127707][ T465] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1347.164632][ T465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1347.189454][ T465] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1347.223606][ T465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1347.259072][ T906] ÿÿÿÿÿÿ: renamed from vlan1 [ 1347.293571][ T465] wlan1: Trigger new scan to find an IBSS to join [ 1347.309911][ T528] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1347.350346][ T528] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1347.365703][ T528] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1347.378868][ T528] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1347.758072][ T465] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1347.804418][ T465] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1347.827417][ T934] netlink: 14 bytes leftover after parsing attributes in process `syz.1.9335'. [ 1347.909832][ T934] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1347.940825][ T934] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1347.968228][ T934] bond0 (unregistering): Released all slaves [ 1351.301085][ T499] wlan1: Trigger new scan to find an IBSS to join [ 1351.940777][ T465] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1352.002881][ T465] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1352.010859][ T465] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1352.050763][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1352.206427][ T954] FAULT_INJECTION: forcing a failure. [ 1352.206427][ T954] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1352.221788][ T463] wlan1: Creating new IBSS network, BSSID 02:c9:13:26:d9:b4 [ 1352.246940][ T954] CPU: 0 PID: 954 Comm: syz.0.9236 Not tainted syzkaller #0 [ 1352.254468][ T954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1352.264857][ T954] Call Trace: [ 1352.268327][ T954] [ 1352.271270][ T954] dump_stack_lvl+0x188/0x24e [ 1352.275977][ T954] ? show_regs_print_info+0x12/0x12 [ 1352.281198][ T954] ? load_image+0x410/0x410 [ 1352.285810][ T954] ? __lock_acquire+0x7c40/0x7c40 [ 1352.290940][ T954] should_fail_ex+0x390/0x4c0 [ 1352.295758][ T954] _copy_from_user+0x2c/0x170 [ 1352.300639][ T954] __sys_bpf+0x2ea/0x780 [ 1352.305270][ T954] ? bpf_link_show_fdinfo+0x380/0x380 [ 1352.310788][ T954] ? lock_chain_count+0x20/0x20 [ 1352.315710][ T954] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1352.321962][ T954] __x64_sys_bpf+0x78/0x90 [ 1352.326567][ T954] do_syscall_64+0x4c/0xa0 [ 1352.331247][ T954] ? clear_bhb_loop+0x60/0xb0 [ 1352.335991][ T954] ? clear_bhb_loop+0x60/0xb0 [ 1352.340945][ T954] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1352.347145][ T954] RIP: 0033:0x7f8c67d9e0d9 [ 1352.351577][ T954] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1352.371540][ T954] RSP: 002b:00007f8c68cc6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1352.380056][ T954] RAX: ffffffffffffffda RBX: 00007f8c68025fa0 RCX: 00007f8c67d9e0d9 [ 1352.388328][ T954] RDX: 0000000000000038 RSI: 0000200000000340 RDI: 0000000000000019 [ 1352.396398][ T954] RBP: 00007f8c68cc6090 R08: 0000000000000000 R09: 0000000000000000 [ 1352.404679][ T954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1352.413002][ T954] R13: 00007f8c68026038 R14: 00007f8c68025fa0 R15: 00007ffc08e86288 [ 1352.422243][ T954] [ 1352.560750][ T957] netlink: 'syz.1.9342': attribute type 10 has an invalid length. [ 1352.578733][ T957] netlink: 2 bytes leftover after parsing attributes in process `syz.1.9342'. [ 1353.721706][ T4274] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1353.732504][ T4274] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1353.742247][T31324] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1353.750573][T31324] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1353.758877][T31324] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1353.767622][T31324] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1354.522397][ T986] chnl_net:caif_netlink_parms(): no params data found [ 1354.949226][ T499] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1355.119314][ T1014] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.9354'. [ 1355.262253][ T499] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1355.343918][ T1014] netlink: 'syz.1.9354': attribute type 10 has an invalid length. [ 1355.370566][ T1014] netlink: 2 bytes leftover after parsing attributes in process `syz.1.9354'. [ 1355.387699][ T1014] bridge0: port 3(hsr0) entered disabled state [ 1355.428757][ T1022] netlink: 14 bytes leftover after parsing attributes in process `syz.3.9356'. [ 1355.530309][ T499] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1355.581928][ T1027] netlink: 'syz.3.9356': attribute type 10 has an invalid length. [ 1355.607803][ T1027] bridge0: port 2(bridge_slave_1) entered disabled state [ 1355.629879][ T1027] device bridge_slave_1 left promiscuous mode [ 1355.642416][ T1027] bridge0: port 2(bridge_slave_1) entered disabled state [ 1355.690613][ T1027] device bridge_slave_1 entered promiscuous mode [ 1355.707407][ T1027] team0: Port device bridge_slave_1 added [ 1355.719772][ T986] bridge0: port 1(bridge_slave_0) entered blocking state [ 1355.729785][ T986] bridge0: port 1(bridge_slave_0) entered disabled state [ 1355.744332][ T986] device bridge_slave_0 entered promiscuous mode [ 1355.781879][ T499] batman_adv: batadv0: Removing interface: netdevsim0 [ 1355.822008][ T499] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1355.846122][ T986] bridge0: port 2(bridge_slave_1) entered blocking state [ 1355.853841][T31324] Bluetooth: hci1: command 0x0409 tx timeout [ 1355.881403][ T986] bridge0: port 2(bridge_slave_1) entered disabled state [ 1355.918061][ T986] device bridge_slave_1 entered promiscuous mode [ 1355.955730][ T1039] netlink: 'syz.2.9360': attribute type 2 has an invalid length. [ 1356.081673][ T986] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1356.147622][ T986] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1356.397810][ T986] team0: Port device team_slave_0 added [ 1356.464917][ T986] team0: Port device team_slave_1 added [ 1356.800446][ T986] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1356.823086][ T986] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1356.889340][ T986] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1357.134010][ T986] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1357.141182][ T986] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1357.282906][ T986] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1357.445506][ T986] device hsr_slave_0 entered promiscuous mode [ 1357.526303][ T986] device hsr_slave_1 entered promiscuous mode [ 1357.551539][ T986] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1357.604988][ T986] Cannot create hsr debugfs directory [ 1357.929502][ T1076] netlink: 'syz.1.9373': attribute type 10 has an invalid length. [ 1357.948987][T21777] Bluetooth: hci1: command 0x041b tx timeout [ 1357.952206][ T1076] device veth1_macvtap left promiscuous mode [ 1358.034566][ T1080] netlink: 'syz.3.9374': attribute type 2 has an invalid length. [ 1358.608637][ T1100] netlink: 'syz.1.9378': attribute type 1 has an invalid length. [ 1358.650529][ T1100] netlink: 35975 bytes leftover after parsing attributes in process `syz.1.9378'. [ 1358.679111][ T1103] netlink: 'syz.3.9379': attribute type 14 has an invalid length. [ 1358.699691][ T1103] netlink: 156 bytes leftover after parsing attributes in process `syz.3.9379'. [ 1359.291184][ T1124] netlink: 'syz.1.9385': attribute type 2 has an invalid length. [ 1359.891345][ T1133] device syzkaller0 entered promiscuous mode [ 1360.013264][T31324] Bluetooth: hci1: command 0x040f tx timeout [ 1362.102141][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.102602][T31324] Bluetooth: hci1: command 0x0419 tx timeout [ 1362.109463][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1363.718927][ T1166] netlink: 'syz.0.9395': attribute type 10 has an invalid length. [ 1363.731590][ T1166] netlink: 2 bytes leftover after parsing attributes in process `syz.0.9395'. [ 1363.745222][ T1166] device hsr0 entered promiscuous mode [ 1363.752301][ T1166] bridge0: port 3(hsr0) entered blocking state [ 1363.787801][ T1166] bridge0: port 3(hsr0) entered disabled state [ 1363.824693][ T1166] bridge0: port 3(hsr0) entered blocking state [ 1363.830986][ T1166] bridge0: port 3(hsr0) entered forwarding state [ 1363.849053][ T1176] netlink: 'syz.1.9397': attribute type 2 has an invalid length. [ 1364.075142][ T986] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1364.208318][ T986] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1364.250420][ T986] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1364.262408][ T986] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1364.704000][ T1210] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.9403'. [ 1365.371141][ T1210] netlink: 'syz.3.9403': attribute type 10 has an invalid length. [ 1365.388134][ T1210] netlink: 2 bytes leftover after parsing attributes in process `syz.3.9403'. [ 1365.443792][ T1210] bridge0: port 3(hsr0) entered disabled state [ 1365.809686][ T1226] netlink: 'syz.0.9407': attribute type 2 has an invalid length. [ 1365.833608][ T1226] netlink: 'syz.0.9407': attribute type 8 has an invalid length. [ 1365.924505][ T1226] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9407'. [ 1366.057235][ T1234] netlink: 'syz.2.9410': attribute type 10 has an invalid length. [ 1366.077378][ T1234] netlink: 2 bytes leftover after parsing attributes in process `syz.2.9410'. [ 1366.159312][ T499] device hsr_slave_0 left promiscuous mode [ 1366.193616][ T499] device hsr_slave_1 left promiscuous mode [ 1366.235651][ T499] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1366.258762][ T499] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1366.271553][ T1245] FAULT_INJECTION: forcing a failure. [ 1366.271553][ T1245] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1366.308144][ T1245] CPU: 0 PID: 1245 Comm: syz.2.9413 Not tainted syzkaller #0 [ 1366.314323][ T499] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1366.317233][ T1245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1366.336815][ T1245] Call Trace: [ 1366.340611][ T1245] [ 1366.343808][ T1245] dump_stack_lvl+0x188/0x24e [ 1366.348607][ T1245] ? show_regs_print_info+0x12/0x12 [ 1366.353848][ T1245] ? load_image+0x410/0x410 [ 1366.359133][ T1245] ? __might_fault+0xa6/0x120 [ 1366.364314][ T1245] should_fail_ex+0x390/0x4c0 [ 1366.369147][ T1245] copyin+0x1b/0x120 [ 1366.373782][ T1245] _copy_from_iter+0x447/0x1130 [ 1366.379650][ T1245] ? copyout_mc+0x110/0x110 [ 1366.384608][ T1245] ? __virt_addr_valid+0x188/0x540 [ 1366.390065][ T1245] ? __virt_addr_valid+0x188/0x540 [ 1366.396107][ T1245] ? __virt_addr_valid+0x467/0x540 [ 1366.401680][ T1245] ? __phys_addr_symbol+0x2b/0x70 [ 1366.407123][ T1245] ? __check_object_size+0x4f6/0xa70 [ 1366.413757][ T1245] netlink_sendmsg+0x755/0xbd0 [ 1366.420999][ T1245] ? netlink_getsockopt+0x550/0x550 [ 1366.426965][ T1245] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1366.433262][ T1245] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1366.439031][ T1245] ? security_socket_sendmsg+0x7c/0xa0 [ 1366.445780][ T1245] ? netlink_getsockopt+0x550/0x550 [ 1366.455200][ T1245] ____sys_sendmsg+0x5ed/0x9a0 [ 1366.462210][ T1245] ? __sys_sendmsg_sock+0x30/0x30 [ 1366.467609][ T1245] ? __import_iovec+0x306/0x510 [ 1366.475055][ T1245] ? import_iovec+0x6f/0xa0 [ 1366.480523][ T1245] ___sys_sendmsg+0x2a2/0x360 [ 1366.485974][ T1245] ? __sys_sendmsg+0x2a0/0x2a0 [ 1366.491471][ T1245] ? __lock_acquire+0x7c40/0x7c40 [ 1366.497581][ T1245] __se_sys_sendmsg+0x1c3/0x2b0 [ 1366.503320][ T1245] ? __x64_sys_sendmsg+0x80/0x80 [ 1366.509821][ T1245] ? lockdep_hardirqs_on+0x94/0x140 [ 1366.517363][ T1245] do_syscall_64+0x4c/0xa0 [ 1366.523834][ T1245] ? clear_bhb_loop+0x60/0xb0 [ 1366.529089][ T1245] ? clear_bhb_loop+0x60/0xb0 [ 1366.534714][ T1245] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1366.542036][ T1245] RIP: 0033:0x7fc742d9e0d9 [ 1366.546969][ T1245] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1366.570385][ T1245] RSP: 002b:00007fc743bb2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1366.579471][ T1245] RAX: ffffffffffffffda RBX: 00007fc743025fa0 RCX: 00007fc742d9e0d9 [ 1366.588996][ T1245] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1366.597534][ T1245] RBP: 00007fc743bb2090 R08: 0000000000000000 R09: 0000000000000000 [ 1366.606481][ T1245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1366.615718][ T1245] R13: 00007fc743026038 R14: 00007fc743025fa0 R15: 00007fff3c4e3458 [ 1366.623951][ T1245] [ 1366.644070][ T499] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1366.655271][ T499] device bridge_slave_1 left promiscuous mode [ 1366.677878][ T499] bridge0: port 2(bridge_slave_1) entered disabled state [ 1366.707010][ T499] device bridge_slave_0 left promiscuous mode [ 1366.727259][ T499] bridge0: port 1(bridge_slave_0) entered disabled state [ 1366.875660][ T499] device veth1_macvtap left promiscuous mode [ 1366.895415][ T499] device veth0_macvtap left promiscuous mode [ 1368.349121][ T499] team0 (unregistering): Port device team_slave_1 removed [ 1369.127317][ T1242] netlink: 'syz.3.9411': attribute type 2 has an invalid length. [ 1369.239654][ T986] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1369.293871][T21777] Bluetooth: hci2: command 0x0406 tx timeout [ 1369.380727][ T1313] netlink: 'syz.1.9422': attribute type 2 has an invalid length. [ 1369.389935][ T1313] netlink: 'syz.1.9422': attribute type 8 has an invalid length. [ 1369.398660][ T1313] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9422'. [ 1369.420284][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1369.450153][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1369.529592][ T986] 8021q: adding VLAN 0 to HW filter on device team0 [ 1369.639759][ T1327] FAULT_INJECTION: forcing a failure. [ 1369.639759][ T1327] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1369.673368][ T1327] CPU: 1 PID: 1327 Comm: syz.0.9426 Not tainted syzkaller #0 [ 1369.681774][ T1327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1369.694139][ T1327] Call Trace: [ 1369.698065][ T1327] [ 1369.701132][ T1327] dump_stack_lvl+0x188/0x24e [ 1369.706743][ T1327] ? show_regs_print_info+0x12/0x12 [ 1369.713576][ T1327] ? load_image+0x410/0x410 [ 1369.718520][ T1327] ? __lock_acquire+0x7c40/0x7c40 [ 1369.724081][ T1327] should_fail_ex+0x390/0x4c0 [ 1369.728968][ T1327] _copy_to_user+0x2c/0x130 [ 1369.733588][ T1327] simple_read_from_buffer+0xe3/0x150 [ 1369.739138][ T1327] proc_fail_nth_read+0x1a6/0x220 [ 1369.745238][ T1327] ? proc_fault_inject_write+0x310/0x310 [ 1369.751008][ T1327] ? fsnotify_perm+0x248/0x550 [ 1369.756670][ T1327] ? proc_fault_inject_write+0x310/0x310 [ 1369.763227][ T1327] vfs_read+0x2db/0x960 [ 1369.768195][ T1327] ? kernel_read+0x1e0/0x1e0 [ 1369.773561][ T1327] ? __fget_files+0x28/0x460 [ 1369.779938][ T1327] ? __fget_files+0x3fc/0x460 [ 1369.785185][ T1327] ? __fdget_pos+0x2ae/0x360 [ 1369.790843][ T1327] ? ksys_read+0x70/0x260 [ 1369.796914][ T1327] ksys_read+0x14d/0x260 [ 1369.801302][ T1327] ? vfs_write+0x9a0/0x9a0 [ 1369.806528][ T1327] ? syscall_enter_from_user_mode+0x2a/0x80 [ 1369.812537][ T1327] do_syscall_64+0x4c/0xa0 [ 1369.817607][ T1327] ? clear_bhb_loop+0x60/0xb0 [ 1369.823087][ T1327] ? clear_bhb_loop+0x60/0xb0 [ 1369.828036][ T1327] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1369.834357][ T1327] RIP: 0033:0x7f8c67d5e90e [ 1369.838969][ T1327] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1369.859552][ T1327] RSP: 002b:00007f8c68cc5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1369.868225][ T1327] RAX: ffffffffffffffda RBX: 00007f8c68cc66c0 RCX: 00007f8c67d5e90e [ 1369.878076][ T1327] RDX: 000000000000000f RSI: 00007f8c68cc60a0 RDI: 0000000000000007 [ 1369.886692][ T1327] RBP: 00007f8c68cc6090 R08: 0000000000000000 R09: 0000000000000000 [ 1369.895262][ T1327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1369.903898][ T1327] R13: 00007f8c68026038 R14: 00007f8c68025fa0 R15: 00007ffc08e86288 [ 1369.912782][ T1327] [ 1369.953991][ T465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1369.989580][ T465] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1370.017895][ T465] bridge0: port 1(bridge_slave_0) entered blocking state [ 1370.025146][ T465] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1370.054827][ T465] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1370.083327][ T465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1370.102718][ T465] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1370.170284][ T465] bridge0: port 2(bridge_slave_1) entered blocking state [ 1370.177685][ T465] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1370.642221][ T461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1370.696662][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1370.730097][ T461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1370.755638][ T461] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1370.872651][ T461] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1370.892698][ T461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1370.947494][ T461] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1370.959995][ T461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1371.004227][ T461] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1371.037154][ T986] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1371.073984][ T986] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1371.127594][ T461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1371.156285][ T461] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1371.204491][ T1365] netlink: 'syz.0.9432': attribute type 1 has an invalid length. [ 1371.225636][ T1365] netlink: 152 bytes leftover after parsing attributes in process `syz.0.9432'. [ 1371.280009][ T1369] netlink: 'syz.3.9434': attribute type 2 has an invalid length. [ 1371.338817][ T1373] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9436'. [ 1371.452809][ T1376] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9437'. [ 1371.479845][ T1376] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9437'. [ 1371.498485][ T1376] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9437'. [ 1371.510287][ T1377] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9437'. [ 1371.737088][ T462] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1371.763247][ T462] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1371.792571][ T986] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1371.958296][ T1384] netlink: 'syz.2.9438': attribute type 2 has an invalid length. [ 1371.980825][ T1384] netlink: 'syz.2.9438': attribute type 8 has an invalid length. [ 1372.021539][ T1384] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9438'. [ 1373.549121][ T461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1373.570724][ T461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1373.695415][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1373.728760][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1373.757284][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1373.797197][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1373.844059][ T1427] netlink: 'syz.1.9449': attribute type 10 has an invalid length. [ 1373.852724][ T1427] netlink: 2 bytes leftover after parsing attributes in process `syz.1.9449'. [ 1373.875429][ T1427] bridge0: port 3(hsr0) entered blocking state [ 1373.882564][ T1427] bridge0: port 3(hsr0) entered disabled state [ 1373.918232][ T1427] bridge0: port 3(hsr0) entered blocking state [ 1373.925539][ T1427] bridge0: port 3(hsr0) entered forwarding state [ 1373.948425][ T1432] netlink: 'syz.0.9450': attribute type 2 has an invalid length. [ 1373.963657][ T986] device veth0_vlan entered promiscuous mode [ 1374.008533][ T986] device veth1_vlan entered promiscuous mode [ 1374.114341][ T461] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1374.127751][ T461] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1374.199925][ T461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1374.229909][ T461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1374.264141][ T986] device veth0_macvtap entered promiscuous mode [ 1374.316610][ T986] device veth1_macvtap entered promiscuous mode [ 1374.378615][ T986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1374.418804][ T1447] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.9454'. [ 1374.447657][ T986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1374.479988][ T986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1374.519576][ T986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1374.550727][ T986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1374.601163][ T986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1374.641955][ T986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1374.679302][ T986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1374.727829][ T986] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1374.751323][ T1447] netlink: 'syz.0.9454': attribute type 10 has an invalid length. [ 1374.767964][ T1447] netlink: 2 bytes leftover after parsing attributes in process `syz.0.9454'. [ 1374.788834][ T1447] bridge0: port 3(hsr0) entered disabled state [ 1374.856777][ T465] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1374.883682][ T465] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1374.901691][ T465] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1374.915320][ T465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1374.995256][ T986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1375.024238][ T986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1375.049108][ T986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1375.066567][ T986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1375.081958][ T986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1375.094290][ T986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1375.110287][ T986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1375.124095][ T986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1375.137373][ T986] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1375.223094][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1375.232124][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1375.663558][ T986] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1375.704239][ T986] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1375.792987][ T986] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1375.802384][ T986] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1376.251062][ T499] device hsr_slave_0 left promiscuous mode [ 1376.280143][ T499] device hsr_slave_1 left promiscuous mode [ 1376.313611][ T499] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1376.335751][ T499] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1376.358265][ T499] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1376.389332][ T499] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1376.421489][ T499] bridge0: port 3(hsr0) entered disabled state [ 1376.443357][ T499] device bridge_slave_1 left promiscuous mode [ 1376.467846][ T499] bridge0: port 2(bridge_slave_1) entered disabled state [ 1376.506461][ T499] device bridge_slave_0 left promiscuous mode [ 1376.533486][ T499] bridge0: port 1(bridge_slave_0) entered disabled state [ 1376.635141][ T499] device veth1_macvtap left promiscuous mode [ 1376.673150][ T499] device veth0_macvtap left promiscuous mode [ 1376.689408][ T1498] netlink: 'syz.3.9470': attribute type 3 has an invalid length. [ 1376.699254][ T1498] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.9470'. [ 1379.488473][ T1503] netlink: 'syz.0.9472': attribute type 19 has an invalid length. [ 1379.496798][ T1503] netlink: 156 bytes leftover after parsing attributes in process `syz.0.9472'. [ 1379.507920][ T1506] netlink: 14 bytes leftover after parsing attributes in process `syz.3.9473'. [ 1379.553062][ T500] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1379.601066][ T500] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1379.667873][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1379.751002][ T460] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1379.804715][ T460] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1379.842374][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1380.443625][ T1536] ÿÿÿÿÿÿ: renamed from vlan1 [ 1380.465585][ T1535] netlink: 'syz.4.9482': attribute type 10 has an invalid length. [ 1380.477220][ T1535] netlink: 2 bytes leftover after parsing attributes in process `syz.4.9482'. [ 1380.489464][ T1535] device hsr0 entered promiscuous mode [ 1380.504892][ T1535] bridge0: port 3(hsr0) entered blocking state [ 1380.517697][ T1535] bridge0: port 3(hsr0) entered disabled state [ 1380.559101][ T1535] bridge0: port 3(hsr0) entered blocking state [ 1380.566217][ T1535] bridge0: port 3(hsr0) entered forwarding state [ 1380.786205][ T1544] netlink: 14 bytes leftover after parsing attributes in process `syz.3.9486'. [ 1382.238764][ T461] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1382.497294][ T1571] netlink: 'syz.3.9493': attribute type 10 has an invalid length. [ 1382.557285][ T1571] netlink: 2 bytes leftover after parsing attributes in process `syz.3.9493'. [ 1382.642392][ T1571] bridge0: port 2(hsr0) entered blocking state [ 1382.683546][ T1571] bridge0: port 2(hsr0) entered disabled state [ 1382.719144][ T1571] bridge0: port 2(hsr0) entered blocking state [ 1382.727342][ T1571] bridge0: port 2(hsr0) entered forwarding state [ 1383.021891][ T1579] ÿÿÿÿÿÿ: renamed from vlan1 [ 1383.249174][ T1586] device syzkaller0 entered promiscuous mode [ 1383.270087][ T1590] netlink: 14 bytes leftover after parsing attributes in process `syz.0.9500'. [ 1383.379740][ T1590] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1383.408358][ T1600] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.9502'. [ 1383.421256][ T1590] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1383.464443][ T1590] bond0 (unregistering): Released all slaves [ 1383.488969][ T1600] netlink: 'syz.3.9502': attribute type 10 has an invalid length. [ 1383.505629][ T1600] netlink: 2 bytes leftover after parsing attributes in process `syz.3.9502'. [ 1383.543601][ T1600] bridge0: port 2(hsr0) entered disabled state [ 1384.401635][ T1625] netlink: 'syz.1.9512': attribute type 2 has an invalid length. [ 1384.412262][ T1625] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.9512'. [ 1386.960723][ T1636] netlink: 14 bytes leftover after parsing attributes in process `syz.4.9517'. [ 1387.133588][ T1636] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1387.173358][ T1636] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1387.225178][ T1636] bond0 (unregistering): Released all slaves [ 1387.240005][ T1645] netlink: 'syz.1.9519': attribute type 2 has an invalid length. [ 1387.266967][ T1648] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9521'. [ 1387.279161][ T1650] netlink: 'syz.0.9522': attribute type 2 has an invalid length. [ 1387.478011][ T1655] netlink: 'syz.0.9522': attribute type 10 has an invalid length. [ 1387.743881][ T1655] team0: Device hsr_slave_0 failed to register rx_handler [ 1387.877265][ T1657] netlink: 'syz.1.9524': attribute type 10 has an invalid length. [ 1387.893423][ T1657] netlink: 2 bytes leftover after parsing attributes in process `syz.1.9524'. [ 1388.786803][ T1677] netlink: 'syz.2.9532': attribute type 29 has an invalid length. [ 1388.855491][ T1677] netlink: 'syz.2.9532': attribute type 29 has an invalid length. [ 1388.867670][ T1685] netlink: 'syz.2.9532': attribute type 29 has an invalid length. [ 1388.881228][ T1686] netlink: 'syz.0.9531': attribute type 29 has an invalid length. [ 1388.906274][ T1686] netlink: 'syz.0.9531': attribute type 29 has an invalid length. [ 1388.962295][ T1682] netlink: 'syz.0.9531': attribute type 29 has an invalid length. [ 1389.346401][ T1699] netlink: 2 bytes leftover after parsing attributes in process `syz.2.9538'. [ 1389.829690][ T1710] netlink: 188 bytes leftover after parsing attributes in process `syz.2.9543'. [ 1390.248341][ T1731] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.9548'. [ 1390.785408][ T1747] netlink: 2 bytes leftover after parsing attributes in process `syz.3.9554'. [ 1390.823319][ T1747] bridge0: port 2(hsr0) entered blocking state [ 1390.841298][ T1747] bridge0: port 2(hsr0) entered disabled state [ 1390.880593][ T1747] bridge0: port 2(hsr0) entered blocking state [ 1390.888443][ T1747] bridge0: port 2(hsr0) entered forwarding state [ 1391.646615][ T1776] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.9562'. [ 1391.728549][ T1771] netlink: 2 bytes leftover after parsing attributes in process `syz.2.9562'. [ 1391.782558][ T1771] bridge0: port 3(hsr0) entered disabled state [ 1392.443531][ T1802] validate_nla: 11 callbacks suppressed [ 1392.443574][ T1802] netlink: 'syz.2.9572': attribute type 10 has an invalid length. [ 1392.563903][ T1802] netlink: 2 bytes leftover after parsing attributes in process `syz.2.9572'. [ 1392.647005][ T1802] bridge0: port 3(hsr0) entered blocking state [ 1392.700304][ T1802] bridge0: port 3(hsr0) entered disabled state [ 1393.044136][ T1802] bridge0: port 3(hsr0) entered blocking state [ 1393.050519][ T1802] bridge0: port 3(hsr0) entered forwarding state [ 1393.087690][ T1817] netlink: 'syz.1.9577': attribute type 2 has an invalid length. [ 1393.463605][ T1835] netlink: 'syz.0.9585': attribute type 39 has an invalid length. [ 1393.678347][ T1842] netlink: 'syz.1.9588': attribute type 10 has an invalid length. [ 1393.695876][ T1842] netlink: 2 bytes leftover after parsing attributes in process `syz.1.9588'. [ 1393.856182][ T1850] netlink: 14 bytes leftover after parsing attributes in process `syz.0.9592'. [ 1393.920071][ T1853] netlink: 'syz.4.9591': attribute type 10 has an invalid length. [ 1393.943784][ T1850] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9592'. [ 1393.953531][ T1853] netlink: 2 bytes leftover after parsing attributes in process `syz.4.9591'. [ 1393.975934][ T1852] netlink: 'syz.1.9593': attribute type 2 has an invalid length. [ 1394.414498][T21777] Bluetooth: hci4: ISO packet for unknown connection handle 1854 [ 1394.779261][ T1896] netlink: 'syz.3.9609': attribute type 2 has an invalid length. [ 1394.849868][ T1899] netlink: 'syz.4.9606': attribute type 10 has an invalid length. [ 1394.862246][ T1899] netlink: 2 bytes leftover after parsing attributes in process `syz.4.9606'. [ 1395.160433][ T1909] netlink: 'syz.4.9613': attribute type 29 has an invalid length. [ 1395.196213][ T1909] netlink: 'syz.4.9613': attribute type 29 has an invalid length. [ 1396.045749][ T1928] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.9617'. [ 1397.831753][ T1982] validate_nla: 6 callbacks suppressed [ 1397.831807][ T1982] netlink: 'syz.0.9638': attribute type 2 has an invalid length. [ 1398.130953][ T1990] netlink: 'syz.1.9639': attribute type 10 has an invalid length. [ 1398.151422][ T1986] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.9640'. [ 1398.238803][ T1990] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9639'. [ 1398.316577][ T1990] device ipvlan1 entered promiscuous mode [ 1398.345875][ T1990] bridge0: port 4(ipvlan1) entered blocking state [ 1398.357545][ T1990] bridge0: port 4(ipvlan1) entered disabled state [ 1398.377059][ T1990] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1398.407404][ T1991] netlink: 'syz.4.9640': attribute type 10 has an invalid length. [ 1398.442945][ T1991] netlink: 2 bytes leftover after parsing attributes in process `syz.4.9640'. [ 1398.455502][ T1991] bridge0: port 3(hsr0) entered disabled state [ 1399.041080][ T2010] netlink: 'syz.3.9647': attribute type 3 has an invalid length. [ 1399.067129][ T2010] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.9647'. [ 1399.711599][ T2025] netlink: 'syz.3.9652': attribute type 10 has an invalid length. [ 1399.726185][ T2025] netlink: 2 bytes leftover after parsing attributes in process `syz.3.9652'. [ 1399.744372][ T2030] netlink: 'syz.0.9653': attribute type 2 has an invalid length. [ 1401.560774][ T2070] netlink: 'syz.4.9668': attribute type 10 has an invalid length. [ 1401.581039][ T2070] netlink: 2 bytes leftover after parsing attributes in process `syz.4.9668'. [ 1401.610924][ T2070] bridge0: port 3(hsr0) entered blocking state [ 1401.628541][ T2070] bridge0: port 3(hsr0) entered disabled state [ 1401.644042][ T2070] bridge0: port 3(hsr0) entered blocking state [ 1401.651132][ T2070] bridge0: port 3(hsr0) entered forwarding state [ 1401.938807][ T2080] ÿÿÿÿÿÿ: renamed from vlan1 [ 1401.961236][ T2081] netlink: 'syz.2.9672': attribute type 2 has an invalid length. [ 1402.032298][ T2082] netlink: 14 bytes leftover after parsing attributes in process `syz.0.9671'. [ 1402.184515][ T2092] FAULT_INJECTION: forcing a failure. [ 1402.184515][ T2092] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1402.203473][ T2089] netlink: 'syz.4.9675': attribute type 4 has an invalid length. [ 1402.227111][ T2091] netlink: 'syz.2.9677': attribute type 29 has an invalid length. [ 1402.240361][ T2089] netlink: 60519 bytes leftover after parsing attributes in process `syz.4.9675'. [ 1402.257290][ T2092] CPU: 0 PID: 2092 Comm: syz.3.9676 Not tainted syzkaller #0 [ 1402.265544][ T2092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1402.277291][ T2092] Call Trace: [ 1402.281354][ T2092] [ 1402.285440][ T2092] dump_stack_lvl+0x188/0x24e [ 1402.290519][ T2092] ? show_regs_print_info+0x12/0x12 [ 1402.297979][ T2092] ? load_image+0x410/0x410 [ 1402.303407][ T2092] ? __lock_acquire+0x7c40/0x7c40 [ 1402.313452][ T2092] should_fail_ex+0x390/0x4c0 [ 1402.320449][ T2092] _copy_from_user+0x2c/0x170 [ 1402.325974][ T2092] iovec_from_user+0x143/0x360 [ 1402.331498][ T2092] __import_iovec+0x6c/0x510 [ 1402.337305][ T2092] import_iovec+0x6f/0xa0 [ 1402.341881][ T2092] ___sys_sendmsg+0x252/0x360 [ 1402.347128][ T2092] ? __sys_sendmsg+0x2a0/0x2a0 [ 1402.352113][ T2092] ? __lock_acquire+0x7c40/0x7c40 [ 1402.357905][ T2092] __se_sys_sendmsg+0x1c3/0x2b0 [ 1402.363473][ T2092] ? __x64_sys_sendmsg+0x80/0x80 [ 1402.369186][ T2092] ? lockdep_hardirqs_on+0x94/0x140 [ 1402.374694][ T2092] do_syscall_64+0x4c/0xa0 [ 1402.379228][ T2092] ? clear_bhb_loop+0x60/0xb0 [ 1402.384126][ T2092] ? clear_bhb_loop+0x60/0xb0 [ 1402.389153][ T2092] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1402.395185][ T2092] RIP: 0033:0x7fd97c99e0d9 [ 1402.399656][ T2092] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1402.420791][ T2092] RSP: 002b:00007fd97abf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1402.432557][ T2092] RAX: ffffffffffffffda RBX: 00007fd97cc25fa0 RCX: 00007fd97c99e0d9 [ 1402.441883][ T2092] RDX: 0000000004008014 RSI: 0000200000000040 RDI: 0000000000000006 [ 1402.450047][ T2092] RBP: 00007fd97abf6090 R08: 0000000000000000 R09: 0000000000000000 [ 1402.458717][ T2092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1402.469760][ T2092] R13: 00007fd97cc26038 R14: 00007fd97cc25fa0 R15: 00007ffe07127158 [ 1402.482006][ T2092] [ 1403.238995][ T2118] validate_nla: 4 callbacks suppressed [ 1403.239196][ T2118] netlink: 'syz.1.9685': attribute type 39 has an invalid length. [ 1403.518244][ T2124] netlink: 'syz.4.9687': attribute type 2 has an invalid length. [ 1404.027044][ T2143] netlink: 'syz.1.9695': attribute type 11 has an invalid length. [ 1404.047230][ T2143] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.9695'. [ 1404.117421][ T2141] netlink: 'syz.3.9696': attribute type 10 has an invalid length. [ 1404.143779][ T2143] netlink: 'syz.1.9695': attribute type 11 has an invalid length. [ 1404.153581][ T2141] netlink: 2 bytes leftover after parsing attributes in process `syz.3.9696'. [ 1404.208070][ T2143] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.9695'. [ 1404.363858][ T2142] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1404.622624][ T2157] FAULT_INJECTION: forcing a failure. [ 1404.622624][ T2157] name failslab, interval 1, probability 0, space 0, times 0 [ 1404.677402][ T2157] CPU: 1 PID: 2157 Comm: syz.4.9701 Not tainted syzkaller #0 [ 1404.685395][ T2157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1404.695790][ T2157] Call Trace: [ 1404.699124][ T2157] [ 1404.702261][ T2157] dump_stack_lvl+0x188/0x24e [ 1404.707075][ T2157] ? show_regs_print_info+0x12/0x12 [ 1404.712481][ T2157] ? load_image+0x410/0x410 [ 1404.717131][ T2157] ? __might_sleep+0xd0/0xd0 [ 1404.721861][ T2157] ? __lock_acquire+0x7c40/0x7c40 [ 1404.727051][ T2157] should_fail_ex+0x390/0x4c0 [ 1404.732143][ T2157] should_failslab+0x5/0x20 [ 1404.737337][ T2157] slab_pre_alloc_hook+0x59/0x300 [ 1404.742604][ T2157] ? tipc_nl_compat_doit+0x1d6/0x610 [ 1404.748117][ T2157] __kmem_cache_alloc_node+0x4f/0x270 [ 1404.753882][ T2157] ? tipc_nl_compat_doit+0x1d6/0x610 [ 1404.759702][ T2157] __kmalloc+0xa3/0x240 [ 1404.764775][ T2157] tipc_nl_compat_doit+0x1d6/0x610 [ 1404.770204][ T2157] ? end_current_label_crit_section+0x170/0x170 [ 1404.776642][ T2157] ? perf_trace_lock_acquire+0x101/0x3f0 [ 1404.782296][ T2157] ? tipc_nl_compat_bearer_enable+0x610/0x610 [ 1404.788684][ T2157] ? bpf_lsm_capable+0x5/0x10 [ 1404.794331][ T2157] ? security_capable+0x85/0xb0 [ 1404.799374][ T2157] tipc_nl_compat_recv+0x536/0xaf0 [ 1404.805034][ T2157] ? tipc_netlink_compat_stop+0x20/0x20 [ 1404.810761][ T2157] ? __mutex_trylock_common+0x15c/0x260 [ 1404.816351][ T2157] ? tipc_nl_bearer_disable+0x30/0x30 [ 1404.821814][ T2157] ? tipc_nl_compat_dumpit+0x770/0x770 [ 1404.827303][ T2157] ? rcu_is_watching+0x11/0xa0 [ 1404.832117][ T2157] ? trace_contention_end+0x5f/0x170 [ 1404.837618][ T2157] genl_family_rcv_msg_doit+0x22f/0x350 [ 1404.843582][ T2157] ? lockdep_hardirqs_on+0x94/0x140 [ 1404.848809][ T2157] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1404.854818][ T2157] ? memset+0x1e/0x40 [ 1404.859862][ T2157] ? genl_get_cmd+0x55f/0x8b0 [ 1404.865381][ T2157] genl_rcv_msg+0x601/0x790 [ 1404.870155][ T2157] ? genl_bind+0x360/0x360 [ 1404.874666][ T2157] ? tipc_netlink_compat_stop+0x20/0x20 [ 1404.880538][ T2157] netlink_rcv_skb+0x1ef/0x440 [ 1404.885511][ T2157] ? genl_bind+0x360/0x360 [ 1404.890165][ T2157] ? netlink_ack+0x1160/0x1160 [ 1404.895673][ T2157] ? down_read+0x1a8/0x2d0 [ 1404.901271][ T2157] genl_rcv+0x24/0x40 [ 1404.906400][ T2157] netlink_unicast+0x7ad/0x920 [ 1404.911469][ T2157] netlink_sendmsg+0x8ad/0xbd0 [ 1404.916271][ T2157] ? netlink_getsockopt+0x550/0x550 [ 1404.923678][ T2157] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1404.930726][ T2157] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1404.936403][ T2157] ? security_socket_sendmsg+0x7c/0xa0 [ 1404.942387][ T2157] ? netlink_getsockopt+0x550/0x550 [ 1404.947614][ T2157] ____sys_sendmsg+0x5ed/0x9a0 [ 1404.952569][ T2157] ? __sys_sendmsg_sock+0x30/0x30 [ 1404.957893][ T2157] ? __import_iovec+0x306/0x510 [ 1404.962998][ T2157] ? import_iovec+0x6f/0xa0 [ 1404.967656][ T2157] ___sys_sendmsg+0x2a2/0x360 [ 1404.972641][ T2157] ? __sys_sendmsg+0x2a0/0x2a0 [ 1404.977934][ T2157] ? __lock_acquire+0x7c40/0x7c40 [ 1404.983094][ T2157] __se_sys_sendmsg+0x1c3/0x2b0 [ 1404.988244][ T2157] ? __x64_sys_sendmsg+0x80/0x80 [ 1404.993235][ T2157] ? lockdep_hardirqs_on+0x94/0x140 [ 1404.998455][ T2157] do_syscall_64+0x4c/0xa0 [ 1405.002883][ T2157] ? clear_bhb_loop+0x60/0xb0 [ 1405.007567][ T2157] ? clear_bhb_loop+0x60/0xb0 [ 1405.012352][ T2157] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1405.018278][ T2157] RIP: 0033:0x7fd52459e0d9 [ 1405.022720][ T2157] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1405.042515][ T2157] RSP: 002b:00007fd5254ad028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1405.051131][ T2157] RAX: ffffffffffffffda RBX: 00007fd524825fa0 RCX: 00007fd52459e0d9 [ 1405.059216][ T2157] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1405.067561][ T2157] RBP: 00007fd5254ad090 R08: 0000000000000000 R09: 0000000000000000 [ 1405.075634][ T2157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1405.083791][ T2157] R13: 00007fd524826038 R14: 00007fd524825fa0 R15: 00007ffef81275e8 [ 1405.092089][ T2157] [ 1405.514682][ T2167] netlink: 'syz.4.9703': attribute type 2 has an invalid length. [ 1405.782326][ T2184] netlink: 'syz.1.9711': attribute type 10 has an invalid length. [ 1405.811516][ T2184] netlink: 2 bytes leftover after parsing attributes in process `syz.1.9711'. [ 1406.475468][ T2208] netlink: 'syz.3.9719': attribute type 2 has an invalid length. [ 1406.726459][ T2216] netlink: 14 bytes leftover after parsing attributes in process `syz.4.9720'. [ 1409.243696][ T2221] netlink: 'syz.4.9724': attribute type 10 has an invalid length. [ 1409.268107][ T2221] netlink: 2 bytes leftover after parsing attributes in process `syz.4.9724'. [ 1409.310474][ T2227] FAULT_INJECTION: forcing a failure. [ 1409.310474][ T2227] name failslab, interval 1, probability 0, space 0, times 0 [ 1409.341745][ T2227] CPU: 0 PID: 2227 Comm: syz.2.9726 Not tainted syzkaller #0 [ 1409.349628][ T2227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1409.360065][ T2227] Call Trace: [ 1409.363386][ T2227] [ 1409.366497][ T2227] dump_stack_lvl+0x188/0x24e [ 1409.371315][ T2227] ? show_regs_print_info+0x12/0x12 [ 1409.376774][ T2227] ? load_image+0x410/0x410 [ 1409.381509][ T2227] ? __might_sleep+0xd0/0xd0 [ 1409.386145][ T2227] ? __lock_acquire+0x7c40/0x7c40 [ 1409.391235][ T2227] should_fail_ex+0x390/0x4c0 [ 1409.396595][ T2227] should_failslab+0x5/0x20 [ 1409.401248][ T2227] slab_pre_alloc_hook+0x59/0x300 [ 1409.407131][ T2227] kmem_cache_alloc_node+0x5a/0x310 [ 1409.412437][ T2227] ? __alloc_skb+0xf9/0x7d0 [ 1409.417630][ T2227] __alloc_skb+0xf9/0x7d0 [ 1409.423502][ T2227] netlink_sendmsg+0x654/0xbd0 [ 1409.428878][ T2227] ? netlink_getsockopt+0x550/0x550 [ 1409.434569][ T2227] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1409.441210][ T2227] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1409.446625][ T2227] ? security_socket_sendmsg+0x7c/0xa0 [ 1409.452305][ T2227] ? netlink_getsockopt+0x550/0x550 [ 1409.457753][ T2227] ____sys_sendmsg+0x5ed/0x9a0 [ 1409.462938][ T2227] ? __sys_sendmsg_sock+0x30/0x30 [ 1409.468197][ T2227] ? __import_iovec+0x306/0x510 [ 1409.473138][ T2227] ? import_iovec+0x6f/0xa0 [ 1409.477813][ T2227] ___sys_sendmsg+0x2a2/0x360 [ 1409.482584][ T2227] ? __sys_sendmsg+0x2a0/0x2a0 [ 1409.487513][ T2227] ? __lock_acquire+0x7c40/0x7c40 [ 1409.492721][ T2227] __se_sys_sendmsg+0x1c3/0x2b0 [ 1409.497620][ T2227] ? __x64_sys_sendmsg+0x80/0x80 [ 1409.502893][ T2227] ? lockdep_hardirqs_on+0x94/0x140 [ 1409.508158][ T2227] do_syscall_64+0x4c/0xa0 [ 1409.512616][ T2227] ? clear_bhb_loop+0x60/0xb0 [ 1409.517333][ T2227] ? clear_bhb_loop+0x60/0xb0 [ 1409.522319][ T2227] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1409.528439][ T2227] RIP: 0033:0x7fc742d9e0d9 [ 1409.533261][ T2227] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1409.539041][ T2230] netlink: 'syz.0.9727': attribute type 29 has an invalid length. [ 1409.553685][ T2227] RSP: 002b:00007fc743bb2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1409.553726][ T2227] RAX: ffffffffffffffda RBX: 00007fc743025fa0 RCX: 00007fc742d9e0d9 [ 1409.553739][ T2227] RDX: 0000000004008014 RSI: 0000200000000040 RDI: 0000000000000006 [ 1409.553751][ T2227] RBP: 00007fc743bb2090 R08: 0000000000000000 R09: 0000000000000000 [ 1409.553762][ T2227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1409.553772][ T2227] R13: 00007fc743026038 R14: 00007fc743025fa0 R15: 00007fff3c4e3458 [ 1409.553813][ T2227] [ 1409.673669][ T2230] netlink: 'syz.0.9727': attribute type 29 has an invalid length. [ 1409.726650][ T2238] netlink: 'syz.0.9727': attribute type 29 has an invalid length. [ 1409.797574][ T2234] netlink: 'syz.0.9727': attribute type 29 has an invalid length. [ 1409.940463][ T2247] netlink: 'syz.1.9732': attribute type 2 has an invalid length. [ 1410.055430][ T2248] netlink: 'syz.3.9733': attribute type 11 has an invalid length. [ 1410.068557][ T2248] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.9733'. [ 1410.094498][ T2251] netlink: 14 bytes leftover after parsing attributes in process `syz.4.9734'. [ 1410.156986][ T2252] netlink: 'syz.3.9733': attribute type 11 has an invalid length. [ 1410.204209][ T2252] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.9733'. [ 1411.180835][ T2244] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1411.212161][ T2267] netlink: 'syz.4.9739': attribute type 10 has an invalid length. [ 1411.233235][ T2267] netlink: 2 bytes leftover after parsing attributes in process `syz.4.9739'. [ 1411.367730][ T2269] netlink: 'syz.0.9740': attribute type 27 has an invalid length. [ 1411.398109][ T2269] netlink: 164 bytes leftover after parsing attributes in process `syz.0.9740'. [ 1411.604960][ T2281] netlink: 'syz.0.9740': attribute type 29 has an invalid length. [ 1411.633198][ T2281] netlink: 'syz.0.9740': attribute type 29 has an invalid length. [ 1412.542626][ T2305] netlink: 'syz.2.9752': attribute type 11 has an invalid length. [ 1412.584887][ T2305] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.9752'. [ 1412.666332][ T2308] netlink: 'syz.2.9752': attribute type 11 has an invalid length. [ 1412.774834][ T2308] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.9752'. [ 1412.905237][ T2303] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1413.266549][ T461] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1413.468558][ T2344] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9768'. [ 1414.652191][ T2374] validate_nla: 3 callbacks suppressed [ 1414.652204][ T2374] netlink: 'syz.4.9775': attribute type 3 has an invalid length. [ 1414.666368][ T2374] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.9775'. [ 1414.774556][ T2370] netlink: 'syz.0.9773': attribute type 11 has an invalid length. [ 1414.793854][ T2370] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.9773'. [ 1414.835084][ T2370] netlink: 'syz.0.9773': attribute type 11 has an invalid length. [ 1414.843757][ T2370] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.9773'. [ 1415.035644][ T2368] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1415.174624][ T2385] netlink: 'syz.4.9778': attribute type 2 has an invalid length. [ 1415.369997][ T2399] netlink: 'syz.1.9781': attribute type 29 has an invalid length. [ 1415.409795][ T2399] netlink: 'syz.1.9781': attribute type 29 has an invalid length. [ 1415.452083][ T2406] netlink: 'syz.1.9781': attribute type 29 has an invalid length. [ 1415.478010][ T2407] netlink: 'syz.4.9785': attribute type 39 has an invalid length. [ 1415.499510][ T2403] netlink: 14 bytes leftover after parsing attributes in process `syz.3.9784'. [ 1415.577358][ T2399] netlink: 'syz.1.9781': attribute type 29 has an invalid length. [ 1416.258198][ T2435] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9795'. [ 1416.301186][ T2435] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9795'. [ 1416.477185][ T2439] netdevsim netdevsim2: Direct firmware load for Ö failed with error -2 [ 1416.510228][ T2439] netdevsim netdevsim2: Falling back to sysfs fallback for: Ö [ 1416.524143][T21777] Bluetooth: hci1: unexpected event 0x08 length: 15 > 4 [ 1416.577502][ T2451] netlink: 'syz.2.9796': attribute type 2 has an invalid length. [ 1416.854323][ T2464] netlink: 'syz.3.9803': attribute type 29 has an invalid length. [ 1416.869734][ T2464] netlink: 'syz.3.9803': attribute type 29 has an invalid length. [ 1417.586074][ T2497] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9814'. [ 1417.893216][ T2511] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.9818'. [ 1417.942749][ T2513] netdevsim netdevsim4: Direct firmware load for Ö failed with error -2 [ 1417.968028][ T2513] netdevsim netdevsim4: Falling back to sysfs fallback for: Ö [ 1418.326915][ T2520] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.9820'. [ 1418.343516][ T2520] netlink: 2 bytes leftover after parsing attributes in process `syz.3.9820'. [ 1418.359912][ T2520] bridge0: port 2(hsr0) entered disabled state [ 1418.574619][T21777] Bluetooth: hci1: command 0x0406 tx timeout [ 1419.152731][ T2545] FAULT_INJECTION: forcing a failure. [ 1419.152731][ T2545] name failslab, interval 1, probability 0, space 0, times 0 [ 1419.181358][ T2545] CPU: 0 PID: 2545 Comm: syz.1.9827 Not tainted syzkaller #0 [ 1419.188945][ T2545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1419.200607][ T2545] Call Trace: [ 1419.204017][ T2545] [ 1419.207346][ T2545] dump_stack_lvl+0x188/0x24e [ 1419.212257][ T2545] ? show_regs_print_info+0x12/0x12 [ 1419.217861][ T2545] ? load_image+0x410/0x410 [ 1419.222432][ T2545] ? __might_sleep+0xd0/0xd0 [ 1419.227339][ T2545] ? __lock_acquire+0x7c40/0x7c40 [ 1419.232477][ T2545] ? slab_free_freelist_hook+0x133/0x1b0 [ 1419.239785][ T2545] should_fail_ex+0x390/0x4c0 [ 1419.244895][ T2545] should_failslab+0x5/0x20 [ 1419.250583][ T2545] slab_pre_alloc_hook+0x59/0x300 [ 1419.256799][ T2545] ? tipc_nl_compat_doit+0x431/0x610 [ 1419.262327][ T2545] kmem_cache_alloc_node+0x5a/0x310 [ 1419.268537][ T2545] ? __alloc_skb+0xf9/0x7d0 [ 1419.273451][ T2545] __alloc_skb+0xf9/0x7d0 [ 1419.278183][ T2545] tipc_get_err_tlv+0x41/0x330 [ 1419.282994][ T2545] tipc_nl_compat_recv+0x7b8/0xaf0 [ 1419.288547][ T2545] ? tipc_netlink_compat_stop+0x20/0x20 [ 1419.294599][ T2545] ? __mutex_trylock_common+0x15c/0x260 [ 1419.301639][ T2545] ? tipc_nl_bearer_disable+0x30/0x30 [ 1419.307403][ T2545] ? tipc_nl_compat_dumpit+0x770/0x770 [ 1419.313188][ T2545] ? rcu_is_watching+0x11/0xa0 [ 1419.318484][ T2545] ? trace_contention_end+0x5f/0x170 [ 1419.324095][ T2545] genl_family_rcv_msg_doit+0x22f/0x350 [ 1419.330481][ T2545] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1419.336439][ T2545] ? memset+0x1e/0x40 [ 1419.340988][ T2545] ? genl_get_cmd+0x55f/0x8b0 [ 1419.345727][ T2545] genl_rcv_msg+0x601/0x790 [ 1419.350495][ T2545] ? genl_bind+0x360/0x360 [ 1419.355215][ T2545] ? tipc_netlink_compat_stop+0x20/0x20 [ 1419.360846][ T2545] netlink_rcv_skb+0x1ef/0x440 [ 1419.365719][ T2545] ? genl_bind+0x360/0x360 [ 1419.370285][ T2545] ? netlink_ack+0x1160/0x1160 [ 1419.375373][ T2545] ? down_read+0x1a8/0x2d0 [ 1419.380120][ T2545] genl_rcv+0x24/0x40 [ 1419.384239][ T2545] netlink_unicast+0x7ad/0x920 [ 1419.389154][ T2545] netlink_sendmsg+0x8ad/0xbd0 [ 1419.394086][ T2545] ? netlink_getsockopt+0x550/0x550 [ 1419.399735][ T2545] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1419.405809][ T2545] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1419.411581][ T2545] ? security_socket_sendmsg+0x7c/0xa0 [ 1419.417178][ T2545] ? netlink_getsockopt+0x550/0x550 [ 1419.424658][ T2545] ____sys_sendmsg+0x5ed/0x9a0 [ 1419.429894][ T2545] ? __sys_sendmsg_sock+0x30/0x30 [ 1419.435224][ T2545] ? __import_iovec+0x306/0x510 [ 1419.440664][ T2545] ? import_iovec+0x6f/0xa0 [ 1419.445482][ T2545] ___sys_sendmsg+0x2a2/0x360 [ 1419.450208][ T2545] ? __sys_sendmsg+0x2a0/0x2a0 [ 1419.455053][ T2545] ? __lock_acquire+0x7c40/0x7c40 [ 1419.460253][ T2545] __se_sys_sendmsg+0x1c3/0x2b0 [ 1419.465239][ T2545] ? __x64_sys_sendmsg+0x80/0x80 [ 1419.470336][ T2545] ? lockdep_hardirqs_on+0x94/0x140 [ 1419.476095][ T2545] do_syscall_64+0x4c/0xa0 [ 1419.480797][ T2545] ? clear_bhb_loop+0x60/0xb0 [ 1419.485689][ T2545] ? clear_bhb_loop+0x60/0xb0 [ 1419.490487][ T2545] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1419.496651][ T2545] RIP: 0033:0x7ff81079e0d9 [ 1419.502432][ T2545] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1419.523119][ T2545] RSP: 002b:00007ff811753028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1419.532342][ T2545] RAX: ffffffffffffffda RBX: 00007ff810a25fa0 RCX: 00007ff81079e0d9 [ 1419.541748][ T2545] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1419.550016][ T2545] RBP: 00007ff811753090 R08: 0000000000000000 R09: 0000000000000000 [ 1419.559980][ T2545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1419.568436][ T2545] R13: 00007ff810a26038 R14: 00007ff810a25fa0 R15: 00007fff87821598 [ 1419.577361][ T2545] [ 1420.202734][ T2565] netdevsim netdevsim1: Direct firmware load for Ö failed with error -2 [ 1420.259644][ T2565] netdevsim netdevsim1: Falling back to sysfs fallback for: Ö [ 1420.499497][T21777] Bluetooth: hci5: command 0x0406 tx timeout [ 1420.610259][ T2591] validate_nla: 4 callbacks suppressed [ 1420.610280][ T2591] netlink: 'syz.3.9840': attribute type 39 has an invalid length. [ 1420.995650][ T2577] netlink: 'syz.1.9834': attribute type 2 has an invalid length. [ 1421.106576][ T2601] netlink: 'syz.3.9843': attribute type 29 has an invalid length. [ 1421.151282][ T2601] netlink: 'syz.3.9843': attribute type 29 has an invalid length. [ 1421.181913][ T2608] netlink: 'syz.3.9843': attribute type 29 has an invalid length. [ 1421.282963][ T2601] netlink: 'syz.3.9843': attribute type 29 has an invalid length. [ 1421.682032][ T2628] netlink: 'syz.4.9851': attribute type 2 has an invalid length. [ 1421.705705][ T2631] netlink: 'syz.4.9851': attribute type 2 has an invalid length. [ 1421.712911][ T2628] __nla_validate_parse: 1 callbacks suppressed [ 1421.712929][ T2628] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.9851'. [ 1421.738906][ T2631] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.9851'. [ 1422.296037][ T2648] netdevsim netdevsim1: Direct firmware load for Ö failed with error -2 [ 1422.329333][ T2648] netdevsim netdevsim1: Falling back to sysfs fallback for: Ö [ 1422.411399][ T2657] netlink: 'syz.1.9857': attribute type 2 has an invalid length. [ 1422.674331][ T2662] netlink: 'syz.4.9861': attribute type 1 has an invalid length. [ 1422.683884][ T2662] netlink: 112865 bytes leftover after parsing attributes in process `syz.4.9861'. [ 1423.389628][ T2686] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.9866'. [ 1423.465577][ T2688] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9869'. [ 1423.536163][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.544162][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1424.155527][ T2712] netdevsim netdevsim2: Direct firmware load for Ö failed with error -2 [ 1424.167756][ T2712] netdevsim netdevsim2: Falling back to sysfs fallback for: Ö [ 1424.464609][ T2726] netlink: 156 bytes leftover after parsing attributes in process `syz.0.9881'. [ 1424.858008][ T2740] tc_dump_action: action bad kind [ 1424.914405][ T2738] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.9884'. [ 1424.965053][ T2743] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.9886'. [ 1426.951720][ T2796] netdevsim netdevsim4: Direct firmware load for Ö failed with error -2 [ 1426.991685][ T2796] netdevsim netdevsim4: Falling back to sysfs fallback for: Ö [ 1427.033227][ T2802] validate_nla: 10 callbacks suppressed [ 1427.033259][ T2802] netlink: 'syz.4.9899': attribute type 2 has an invalid length. [ 1427.720167][ T2812] netlink: 'syz.2.9902': attribute type 3 has an invalid length. [ 1427.753037][ T2812] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.9902'. [ 1427.913761][ T2821] netdevsim netdevsim3: Direct firmware load for Ö failed with error -2 [ 1427.955215][ T2821] netdevsim netdevsim3: Falling back to sysfs fallback for: Ö [ 1427.988275][ T2827] netlink: 'syz.3.9903': attribute type 2 has an invalid length. [ 1428.751638][ T2858] netlink: 'syz.2.9916': attribute type 2 has an invalid length. [ 1429.478154][ T2876] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9922'. [ 1430.293183][ T2894] netlink: 'syz.0.9928': attribute type 2 has an invalid length. [ 1430.501369][ T2902] netlink: 146340 bytes leftover after parsing attributes in process `syz.3.9930'. [ 1430.544867][ T2902] openvswitch: netlink: Key type 386 is out of range max 32 [ 1430.606144][ T2901] netdevsim netdevsim2: Direct firmware load for Ö failed with error -2 [ 1430.626851][ T2902] netlink: 'syz.3.9930': attribute type 29 has an invalid length. [ 1430.645124][ T2901] netdevsim netdevsim2: Falling back to sysfs fallback for: Ö [ 1430.687327][ T2902] netlink: 'syz.3.9930': attribute type 29 has an invalid length. [ 1430.703828][ T2906] netlink: 'syz.3.9930': attribute type 29 has an invalid length. [ 1430.714300][ T2909] netlink: 'syz.3.9930': attribute type 29 has an invalid length. [ 1430.733082][T31324] Bluetooth: hci0: command 0x0406 tx timeout [ 1430.754366][ T2907] netlink: 'syz.2.9929': attribute type 2 has an invalid length. [ 1430.912321][ T2908] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.9932'. [ 1430.996081][ T2908] netlink: 2 bytes leftover after parsing attributes in process `syz.0.9932'. [ 1432.543109][ T2941] validate_nla: 1 callbacks suppressed [ 1432.543144][ T2941] netlink: 'syz.0.9943': attribute type 2 has an invalid length. [ 1433.532147][ T2973] netlink: 'syz.3.9953': attribute type 3 has an invalid length. [ 1433.574614][ T2973] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9953'. [ 1433.767044][ T2983] netdevsim netdevsim0: Direct firmware load for Ö failed with error -2 [ 1433.801515][ T2983] netdevsim netdevsim0: Falling back to sysfs fallback for: Ö [ 1433.886653][ T2990] netlink: 'syz.0.9955': attribute type 2 has an invalid length. [ 1434.006175][ T2993] netlink: 'syz.2.9959': attribute type 2 has an invalid length. [ 1434.445325][ T3004] netlink: 'syz.3.9962': attribute type 10 has an invalid length. [ 1434.466867][ T3004] netlink: 2 bytes leftover after parsing attributes in process `syz.3.9962'. [ 1434.494373][ T3004] bridge0: port 2(hsr0) entered blocking state [ 1434.499067][ T3009] netlink: 'syz.4.9965': attribute type 29 has an invalid length. [ 1434.514058][ T3004] bridge0: port 2(hsr0) entered disabled state [ 1434.543888][ T3004] bridge0: port 2(hsr0) entered blocking state [ 1434.550946][ T3004] bridge0: port 2(hsr0) entered forwarding state [ 1434.578425][ T3009] netlink: 'syz.4.9965': attribute type 29 has an invalid length. [ 1434.601785][ T3012] netlink: 'syz.4.9965': attribute type 29 has an invalid length. [ 1434.718605][ T3009] netlink: 'syz.4.9965': attribute type 29 has an invalid length. [ 1435.114101][ T3035] netlink: 'syz.1.9971': attribute type 10 has an invalid length. [ 1435.122061][ T3035] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9971'. [ 1435.159003][ T3031] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9970'. [ 1435.186758][ T3035] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9971'. [ 1438.499084][ T3045] device sit0 entered promiscuous mode [ 1438.529881][ T3049] validate_nla: 1 callbacks suppressed [ 1438.529900][ T3049] netlink: 'syz.0.9976': attribute type 10 has an invalid length. [ 1438.545972][ T3049] netlink: 2 bytes leftover after parsing attributes in process `syz.0.9976'. [ 1438.555801][ T3049] bridge0: port 3(hsr0) entered blocking state [ 1438.564640][ T3049] bridge0: port 3(hsr0) entered disabled state [ 1438.581710][ T3049] bridge0: port 3(hsr0) entered blocking state [ 1438.588555][ T3049] bridge0: port 3(hsr0) entered forwarding state [ 1438.693369][ T3059] netdevsim netdevsim3: Direct firmware load for Ö failed with error -2 [ 1438.734843][ T3059] netdevsim netdevsim3: Falling back to sysfs fallback for: Ö [ 1438.789027][ T3060] netlink: 'syz.3.9978': attribute type 2 has an invalid length. [ 1438.955091][ T3073] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.9982'. [ 1439.048771][ T3077] netlink: 'syz.0.9982': attribute type 10 has an invalid length. [ 1439.106546][ T3077] netlink: 2 bytes leftover after parsing attributes in process `syz.0.9982'. [ 1439.168054][ T3077] bridge0: port 3(hsr0) entered disabled state [ 1439.416459][ T3084] netlink: 'syz.1.9987': attribute type 39 has an invalid length. [ 1439.453973][ T3085] netlink: 'syz.4.9986': attribute type 21 has an invalid length. [ 1439.506111][ T3085] netlink: 156 bytes leftover after parsing attributes in process `syz.4.9986'. [ 1440.101937][ T3106] netlink: 'syz.4.9995': attribute type 2 has an invalid length. [ 1440.180017][ T3101] netlink: 'syz.2.9993': attribute type 11 has an invalid length. [ 1440.210274][ T3101] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.9993'. [ 1440.318205][ T3103] netlink: 'syz.0.9994': attribute type 11 has an invalid length. [ 1440.397538][ T3103] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.9994'. [ 1440.643304][ T3110] netlink: 'syz.2.9993': attribute type 11 has an invalid length. [ 1440.670423][ T3110] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.9993'. [ 1440.719983][ T3112] netlink: 'syz.0.9994': attribute type 11 has an invalid length. [ 1440.741026][ T3100] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1440.830365][ T3112] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.9994'. [ 1440.905519][ T3102] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1441.152169][ T3124] netlink: 'syz.0.10002': attribute type 2 has an invalid length. [ 1441.500166][ T3141] netlink: 'syz.1.10004': attribute type 10 has an invalid length. [ 1441.560352][ T3141] netlink: 2 bytes leftover after parsing attributes in process `syz.1.10004'. [ 1441.831315][ T3145] netlink: 'syz.0.10007': attribute type 10 has an invalid length. [ 1441.839173][ T3147] netlink: 'syz.3.10006': attribute type 29 has an invalid length. [ 1441.874181][ T3145] netlink: 2 bytes leftover after parsing attributes in process `syz.0.10007'. [ 1441.904795][ T3145] bridge0: port 3(hsr0) entered blocking state [ 1441.916593][ T3145] bridge0: port 3(hsr0) entered disabled state [ 1441.952399][ T3145] bridge0: port 3(hsr0) entered blocking state [ 1441.959501][ T3145] bridge0: port 3(hsr0) entered forwarding state [ 1442.081070][ T3156] netlink: 'syz.2.10010': attribute type 11 has an invalid length. [ 1442.163908][ T3156] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.10010'. [ 1442.235469][ T3164] netlink: 'syz.2.10010': attribute type 11 has an invalid length. [ 1442.382167][ T3154] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1442.782975][ T3167] netlink: 'syz.1.10014': attribute type 11 has an invalid length. [ 1442.890725][ T3167] netlink: 'syz.1.10014': attribute type 11 has an invalid length. [ 1443.194437][ T3166] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1443.800234][ T3214] netlink: 'syz.2.10029': attribute type 11 has an invalid length. [ 1443.898212][ T3219] netlink: 'syz.2.10029': attribute type 11 has an invalid length. [ 1443.984391][ T3219] __nla_validate_parse: 4 callbacks suppressed [ 1443.984411][ T3219] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.10029'. [ 1444.157718][ T3212] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1444.170540][ T3226] validate_nla: 13 callbacks suppressed [ 1444.170560][ T3226] netlink: 'syz.1.10032': attribute type 2 has an invalid length. [ 1444.203700][ T3226] netlink: 175020 bytes leftover after parsing attributes in process `syz.1.10032'. [ 1444.462192][ T3237] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.10036'. [ 1444.487987][ T3237] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.10036'. [ 1444.590393][ T3230] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1447.489816][ T3240] netlink: 'syz.2.10038': attribute type 10 has an invalid length. [ 1447.501115][ T3240] netlink: 2 bytes leftover after parsing attributes in process `syz.2.10038'. [ 1447.772489][ T3258] netlink: 'syz.4.10044': attribute type 10 has an invalid length. [ 1447.814143][ T3258] netlink: 2 bytes leftover after parsing attributes in process `syz.4.10044'. [ 1447.822747][ T3263] nla_validate_range_unsigned: 2 callbacks suppressed [ 1447.826512][ T3263] netlink: 'syz.3.10048': attribute type 11 has an invalid length. [ 1447.919288][ T3263] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.10048'. [ 1447.992516][ T3265] netlink: 'syz.3.10048': attribute type 11 has an invalid length. [ 1448.155688][ T3265] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.10048'. [ 1448.583181][ T3262] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1449.338958][ T3289] netlink: 'syz.2.10055': attribute type 29 has an invalid length. [ 1449.389568][ T3289] netlink: 'syz.2.10055': attribute type 29 has an invalid length. [ 1449.450354][ T3293] netlink: 'syz.2.10055': attribute type 29 has an invalid length. [ 1449.476463][ T3294] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.10054'. [ 1449.505869][ T3291] netlink: 'syz.0.10056': attribute type 10 has an invalid length. [ 1449.533743][ T3291] netlink: 2 bytes leftover after parsing attributes in process `syz.0.10056'. [ 1449.572605][ T3294] netlink: 'syz.3.10054': attribute type 10 has an invalid length. [ 1449.582272][ T3294] netlink: 2 bytes leftover after parsing attributes in process `syz.3.10054'. [ 1449.613488][ T3294] bridge0: port 2(hsr0) entered disabled state [ 1449.638253][ T3289] netlink: 'syz.2.10055': attribute type 29 has an invalid length. [ 1450.153473][ T3310] FAULT_INJECTION: forcing a failure. [ 1450.153473][ T3310] name failslab, interval 1, probability 0, space 0, times 0 [ 1450.183762][ T3310] CPU: 0 PID: 3310 Comm: syz.2.10062 Not tainted syzkaller #0 [ 1450.191684][ T3310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1450.202566][ T3310] Call Trace: [ 1450.205887][ T3310] [ 1450.208997][ T3310] dump_stack_lvl+0x188/0x24e [ 1450.213782][ T3310] ? show_regs_print_info+0x12/0x12 [ 1450.219367][ T3310] ? load_image+0x410/0x410 [ 1450.224669][ T3310] ? __might_sleep+0xd0/0xd0 [ 1450.229306][ T3310] ? __lock_acquire+0x7c40/0x7c40 [ 1450.234389][ T3310] should_fail_ex+0x390/0x4c0 [ 1450.239672][ T3310] should_failslab+0x5/0x20 [ 1450.244487][ T3310] slab_pre_alloc_hook+0x59/0x300 [ 1450.250577][ T3310] kmem_cache_alloc_node+0x5a/0x310 [ 1450.256243][ T3310] ? __alloc_skb+0xf9/0x7d0 [ 1450.260913][ T3310] __alloc_skb+0xf9/0x7d0 [ 1450.260935][ T3314] netlink: 'syz.1.10064': attribute type 11 has an invalid length. [ 1450.265422][ T3310] netlink_ack+0x373/0x1160 [ 1450.265516][ T3310] ? genl_bind+0x360/0x360 [ 1450.265541][ T3310] ? netlink_dump+0xcd0/0xcd0 [ 1450.265603][ T3310] netlink_rcv_skb+0x26d/0x440 [ 1450.292039][ T3310] ? genl_bind+0x360/0x360 [ 1450.294365][ T3314] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.10064'. [ 1450.296490][ T3310] ? netlink_ack+0x1160/0x1160 [ 1450.311708][ T3310] ? down_read+0x1a8/0x2d0 [ 1450.316849][ T3310] genl_rcv+0x24/0x40 [ 1450.321236][ T3310] netlink_unicast+0x7ad/0x920 [ 1450.326532][ T3310] netlink_sendmsg+0x8ad/0xbd0 [ 1450.332788][ T3310] ? netlink_getsockopt+0x550/0x550 [ 1450.339766][ T3310] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1450.346362][ T3310] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1450.354009][ T3314] netlink: 'syz.1.10064': attribute type 11 has an invalid length. [ 1450.355114][ T3310] ? security_socket_sendmsg+0x7c/0xa0 [ 1450.370273][ T3310] ? netlink_getsockopt+0x550/0x550 [ 1450.374812][ T3314] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.10064'. [ 1450.375948][ T3310] ____sys_sendmsg+0x5ed/0x9a0 [ 1450.391965][ T3310] ? __sys_sendmsg_sock+0x30/0x30 [ 1450.397223][ T3310] ? __import_iovec+0x306/0x510 [ 1450.403303][ T3310] ? import_iovec+0x6f/0xa0 [ 1450.408417][ T3310] ___sys_sendmsg+0x2a2/0x360 [ 1450.414584][ T3310] ? __sys_sendmsg+0x2a0/0x2a0 [ 1450.419907][ T3310] ? __lock_acquire+0x7c40/0x7c40 [ 1450.427334][ T3310] __se_sys_sendmsg+0x1c3/0x2b0 [ 1450.432460][ T3310] ? __x64_sys_sendmsg+0x80/0x80 [ 1450.437602][ T3310] ? lockdep_hardirqs_on+0x94/0x140 [ 1450.443128][ T3310] do_syscall_64+0x4c/0xa0 [ 1450.447704][ T3310] ? clear_bhb_loop+0x60/0xb0 [ 1450.452825][ T3310] ? clear_bhb_loop+0x60/0xb0 [ 1450.458354][ T3310] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1450.464747][ T3310] RIP: 0033:0x7fc742d9e0d9 [ 1450.469210][ T3310] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1450.489647][ T3310] RSP: 002b:00007fc743bb2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1450.498310][ T3310] RAX: ffffffffffffffda RBX: 00007fc743025fa0 RCX: 00007fc742d9e0d9 [ 1450.506943][ T3310] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1450.515086][ T3310] RBP: 00007fc743bb2090 R08: 0000000000000000 R09: 0000000000000000 [ 1450.523112][ T3310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1450.531797][ T3310] R13: 00007fc743026038 R14: 00007fc743025fa0 R15: 00007fff3c4e3458 [ 1450.540112][ T3310] [ 1450.735084][ T3313] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1450.886534][ T3327] device batadv0 entered promiscuous mode [ 1450.932698][ T3327] netlink: 65035 bytes leftover after parsing attributes in process `syz.0.10068'. [ 1450.975242][ T3325] netlink: 'syz.4.10069': attribute type 10 has an invalid length. [ 1451.023059][ T3325] netlink: 2 bytes leftover after parsing attributes in process `syz.4.10069'. [ 1451.114859][ T3330] netlink: 'syz.3.10080': attribute type 11 has an invalid length. [ 1451.195406][ T3330] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.10080'. [ 1451.287500][ T3330] netlink: 'syz.3.10080': attribute type 11 has an invalid length. [ 1451.380192][ T3330] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.10080'. [ 1451.560339][ T3329] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1451.575265][ T3343] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.10071'. [ 1451.626453][ T3343] netlink: 'syz.0.10071': attribute type 10 has an invalid length. [ 1451.717335][ T3343] bridge0: port 3(hsr0) entered disabled state [ 1452.842089][ T3378] netlink: 'syz.2.10084': attribute type 10 has an invalid length. [ 1453.176564][ T3389] netlink: 'syz.4.10088': attribute type 11 has an invalid length. [ 1453.272193][ T3389] netlink: 'syz.4.10088': attribute type 11 has an invalid length. [ 1453.408158][ T3388] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1453.440881][ T3398] netlink: 'syz.1.10090': attribute type 10 has an invalid length. [ 1453.485117][ T3398] bridge0: port 3(hsr0) entered disabled state [ 1454.237814][ T3423] bridge0: port 3(hsr0) entered blocking state [ 1454.350729][ T3423] bridge0: port 3(hsr0) entered disabled state [ 1454.410329][ T3423] bridge0: port 3(hsr0) entered blocking state [ 1454.417460][ T3423] bridge0: port 3(hsr0) entered forwarding state [ 1454.997141][ T3441] validate_nla: 3 callbacks suppressed [ 1454.997374][ T3441] netlink: 'syz.1.10105': attribute type 2 has an invalid length. [ 1455.091470][ T3443] netlink: 'syz.2.10106': attribute type 11 has an invalid length. [ 1455.161078][ T3443] __nla_validate_parse: 8 callbacks suppressed [ 1455.161110][ T3443] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.10106'. [ 1455.300375][ T3452] netlink: 14 bytes leftover after parsing attributes in process `syz.3.10108'. [ 1455.364376][ T3442] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1456.271715][ T3484] netlink: 'syz.2.10119': attribute type 3 has an invalid length. [ 1456.298705][ T3484] netlink: 13435 bytes leftover after parsing attributes in process `syz.2.10119'. [ 1456.332995][T21777] Bluetooth: hci4: command 0x0406 tx timeout [ 1456.439727][ T3491] netlink: 'syz.0.10121': attribute type 2 has an invalid length. [ 1456.957564][ T3503] netlink: 'syz.3.10126': attribute type 11 has an invalid length. [ 1457.072064][ T3503] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.10126'. [ 1457.583931][ T3502] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1458.121486][ T3530] netlink: 'syz.1.10135': attribute type 29 has an invalid length. [ 1458.134668][ T3530] netlink: 'syz.1.10135': attribute type 29 has an invalid length. [ 1458.164721][ T3534] netlink: 'syz.1.10135': attribute type 29 has an invalid length. [ 1458.212308][ T3530] netlink: 'syz.1.10135': attribute type 29 has an invalid length. [ 1458.302767][ T3536] netlink: 'syz.3.10137': attribute type 2 has an invalid length. [ 1458.342358][ T3538] netlink: 'syz.0.10138': attribute type 29 has an invalid length. [ 1458.371212][ T3538] netlink: 'syz.0.10138': attribute type 29 has an invalid length. [ 1458.799227][ T3553] netlink: 'syz.1.10145': attribute type 11 has an invalid length. [ 1458.848628][ T3553] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.10145'. [ 1459.059338][ T3551] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1459.309194][ T3560] netlink: 2 bytes leftover after parsing attributes in process `syz.2.10147'. [ 1459.586876][ T3568] netlink: 2 bytes leftover after parsing attributes in process `syz.4.10151'. [ 1459.620210][ T3574] netlink: 128 bytes leftover after parsing attributes in process `syz.2.10152'. [ 1459.670636][ T3574] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1459.778621][ T3574] pimreg: tun_chr_ioctl cmd 2147767511 [ 1459.816627][ T3574] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.10152'. [ 1460.154448][ T3597] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.10159'. [ 1460.180018][ T3593] netlink: 'syz.3.10160': attribute type 11 has an invalid length. [ 1460.192512][ T3597] validate_nla: 6 callbacks suppressed [ 1460.192530][ T3597] netlink: 'syz.4.10159': attribute type 10 has an invalid length. [ 1460.207325][ T3593] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.10160'. [ 1460.228158][ T3597] netlink: 2 bytes leftover after parsing attributes in process `syz.4.10159'. [ 1460.245976][ T3595] netlink: 'syz.3.10160': attribute type 11 has an invalid length. [ 1460.258302][ T3597] bridge0: port 3(hsr0) entered disabled state [ 1460.364597][ T3595] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.10160'. [ 1460.449447][ T3591] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1461.751952][ T3645] netlink: 'syz.2.10178': attribute type 10 has an invalid length. [ 1461.776015][ T3645] netlink: 2 bytes leftover after parsing attributes in process `syz.2.10178'. [ 1461.830782][ T3642] netlink: 'syz.1.10176': attribute type 11 has an invalid length. [ 1461.873301][ T3642] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.10176'. [ 1461.925152][ T3649] netlink: 'syz.1.10176': attribute type 11 has an invalid length. [ 1462.041633][ T3651] netlink: 'syz.0.10180': attribute type 10 has an invalid length. [ 1462.061690][ T3651] netlink: 2 bytes leftover after parsing attributes in process `syz.0.10180'. [ 1462.086036][ T3651] bridge0: port 3(hsr0) entered blocking state [ 1462.108279][ T3651] bridge0: port 3(hsr0) entered disabled state [ 1462.130267][ T3649] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.10176'. [ 1462.168029][ T3651] bridge0: port 3(hsr0) entered blocking state [ 1462.175724][ T3651] bridge0: port 3(hsr0) entered forwarding state [ 1462.341631][ T3640] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1463.028768][ T3681] netlink: 'syz.2.10192': attribute type 29 has an invalid length. [ 1463.056368][ T3681] netlink: 'syz.2.10192': attribute type 29 has an invalid length. [ 1463.086883][ T3680] netlink: 'syz.2.10192': attribute type 29 has an invalid length. [ 1463.118974][ T3685] netlink: 'syz.2.10192': attribute type 29 has an invalid length. [ 1463.137937][ T3690] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10196'. [ 1463.487824][ T3699] netlink: 'syz.3.10197': attribute type 29 has an invalid length. [ 1466.073152][ T3699] netlink: 'syz.3.10197': attribute type 29 has an invalid length. [ 1466.231398][ T3729] FAULT_INJECTION: forcing a failure. [ 1466.231398][ T3729] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1466.303049][ T3729] CPU: 1 PID: 3729 Comm: syz.2.10208 Not tainted syzkaller #0 [ 1466.310954][ T3729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1466.321677][ T3729] Call Trace: [ 1466.325162][ T3729] [ 1466.328133][ T3729] dump_stack_lvl+0x188/0x24e [ 1466.332988][ T3729] ? show_regs_print_info+0x12/0x12 [ 1466.338244][ T3729] ? load_image+0x410/0x410 [ 1466.342981][ T3729] ? __lock_acquire+0x7c40/0x7c40 [ 1466.348432][ T3729] should_fail_ex+0x390/0x4c0 [ 1466.353208][ T3729] _copy_from_user+0x2c/0x170 [ 1466.357978][ T3729] kstrtouint_from_user+0xda/0x170 [ 1466.359329][ T3737] netlink: 17861 bytes leftover after parsing attributes in process `syz.3.10210'. [ 1466.363385][ T3729] ? kstrtol_from_user+0x190/0x190 [ 1466.363476][ T3729] proc_fail_nth_write+0x8b/0x200 [ 1466.363502][ T3729] ? proc_fail_nth_read+0x220/0x220 [ 1466.363525][ T3729] ? common_file_perm+0x171/0x1c0 [ 1466.394245][ T3729] ? proc_fail_nth_read+0x220/0x220 [ 1466.399492][ T3729] vfs_write+0x2dc/0x9a0 [ 1466.403799][ T3729] ? file_end_write+0x250/0x250 [ 1466.408969][ T3729] ? __fget_files+0x28/0x460 [ 1466.413709][ T3729] ? __fget_files+0x3fc/0x460 [ 1466.418541][ T3729] ? __fdget_pos+0x2ae/0x360 [ 1466.423440][ T3729] ? ksys_write+0x70/0x260 [ 1466.427953][ T3729] ksys_write+0x14d/0x260 [ 1466.432340][ T3729] ? __ia32_sys_read+0x80/0x80 [ 1466.437271][ T3729] ? lockdep_hardirqs_on+0x94/0x140 [ 1466.442774][ T3729] do_syscall_64+0x4c/0xa0 [ 1466.447647][ T3729] ? clear_bhb_loop+0x60/0xb0 [ 1466.452356][ T3729] ? clear_bhb_loop+0x60/0xb0 [ 1466.457064][ T3729] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1466.463069][ T3729] RIP: 0033:0x7fc742d5e90e [ 1466.467488][ T3729] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1466.487821][ T3729] RSP: 002b:00007fc743bb1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1466.496361][ T3729] RAX: ffffffffffffffda RBX: 00007fc743bb26c0 RCX: 00007fc742d5e90e [ 1466.504519][ T3729] RDX: 0000000000000001 RSI: 00007fc743bb20a0 RDI: 0000000000000005 [ 1466.512691][ T3729] RBP: 00007fc743bb2090 R08: 0000000000000000 R09: 0000000000000000 [ 1466.520719][ T3729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1466.528722][ T3729] R13: 00007fc743026038 R14: 00007fc743025fa0 R15: 00007fff3c4e3458 [ 1466.537895][ T3729] [ 1467.155649][ T3758] netlink: 'syz.4.10219': attribute type 21 has an invalid length. [ 1467.188537][ T3758] netlink: 'syz.4.10219': attribute type 6 has an invalid length. [ 1467.197132][ T3758] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10219'. [ 1467.450883][ T3771] netlink: 14 bytes leftover after parsing attributes in process `syz.4.10223'. [ 1467.567258][ T3773] netlink: 'syz.2.10224': attribute type 2 has an invalid length. [ 1468.317009][ T3803] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10235'. [ 1468.696959][ T3814] netlink: 'syz.4.10239': attribute type 2 has an invalid length. [ 1468.785072][ T3811] netlink: 'syz.0.10238': attribute type 29 has an invalid length. [ 1468.834357][ T3811] netlink: 'syz.0.10238': attribute type 29 has an invalid length. [ 1468.886634][ T3815] netlink: 'syz.0.10238': attribute type 29 has an invalid length. [ 1468.901229][ T3822] netlink: 'syz.0.10238': attribute type 29 has an invalid length. [ 1469.294376][ T3836] netlink: 'syz.1.10247': attribute type 39 has an invalid length. [ 1471.401584][ T3901] validate_nla: 1 callbacks suppressed [ 1471.401622][ T3901] netlink: 'syz.3.10270': attribute type 29 has an invalid length. [ 1474.249081][ T3901] netlink: 'syz.3.10270': attribute type 29 has an invalid length. [ 1474.734718][T31324] ------------[ cut here ]------------ [ 1474.741015][T31324] WARNING: CPU: 1 PID: 31324 at net/bluetooth/hci_conn.c:670 hci_conn_timeout+0x24f/0x450 [ 1474.751654][T31324] Modules linked in: [ 1474.755828][T31324] CPU: 1 PID: 31324 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 1474.764144][T31324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1474.775252][T31324] Workqueue: hci1 hci_conn_timeout [ 1474.780408][T31324] RIP: 0010:hci_conn_timeout+0x24f/0x450 [ 1474.786667][T31324] Code: 21 8e e8 44 c8 99 f8 48 8b 35 75 78 e7 04 bf 08 00 00 00 48 89 da 5b 41 5c 41 5d 41 5e 41 5f 5d e9 76 8e 1a f8 e8 61 9b 48 f8 <0f> 0b e9 35 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c dd fd [ 1474.807585][T31324] RSP: 0018:ffffc90003237c08 EFLAGS: 00010293 [ 1474.815217][T31324] RAX: ffffffff893992bf RBX: ffff8880281b4330 RCX: ffff8880793e1e00 [ 1474.823964][T31324] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 1474.833049][T31324] RBP: 00000000ffffffff R08: ffff8880281b4013 R09: 1ffff11005036802 [ 1474.841515][T31324] R10: dffffc0000000000 R11: ffffed1005036803 R12: ffffffff815576b4 [ 1474.849595][T31324] R13: dffffc0000000000 R14: ffff8880281b4000 R15: ffff8880281b4010 [ 1474.858614][T31324] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1474.868311][T31324] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1474.875857][T31324] CR2: 00007f143b9870a0 CR3: 0000000079539000 CR4: 00000000003506e0 [ 1474.884251][T31324] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1474.893645][T31324] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1474.906000][T31324] Call Trace: [ 1474.909576][T31324] [ 1474.912952][T31324] ? process_one_work+0x7b4/0x1160 [ 1474.919817][T31324] process_one_work+0x8ab/0x1160 [ 1474.927424][T31324] ? worker_detach_from_pool+0x240/0x240 [ 1474.933534][T31324] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1474.939816][T31324] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1474.946004][T31324] ? wq_worker_running+0x97/0x190 [ 1474.951339][T31324] worker_thread+0xaf5/0x12a0 [ 1474.956769][T31324] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1474.963108][T31324] kthread+0x29d/0x330 [ 1474.967536][T31324] ? worker_clr_flags+0x1a0/0x1a0 [ 1474.972626][T31324] ? kthread_blkcg+0xd0/0xd0 [ 1474.977331][T31324] ret_from_fork+0x1f/0x30 [ 1474.981915][T31324] [ 1474.985139][T31324] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1474.992703][T31324] CPU: 1 PID: 31324 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 1475.000491][T31324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1475.010684][T31324] Workqueue: hci1 hci_conn_timeout [ 1475.016279][T31324] Call Trace: [ 1475.019843][T31324] [ 1475.022793][T31324] dump_stack_lvl+0x188/0x24e [ 1475.027897][T31324] ? memcpy+0x3c/0x60 [ 1475.031993][T31324] ? show_regs_print_info+0x12/0x12 [ 1475.037405][T31324] ? load_image+0x410/0x410 [ 1475.042046][T31324] panic+0x2d3/0x710 [ 1475.046237][T31324] ? bpf_jit_dump+0xd0/0xd0 [ 1475.050852][T31324] ? ret_from_fork+0x1f/0x30 [ 1475.055558][T31324] __warn+0x2f8/0x4f0 [ 1475.059650][T31324] ? hci_conn_timeout+0x24f/0x450 [ 1475.064717][T31324] ? hci_conn_timeout+0x24f/0x450 [ 1475.069771][T31324] report_bug+0x2ba/0x4f0 [ 1475.074182][T31324] ? hci_conn_timeout+0x24f/0x450 [ 1475.079242][T31324] handle_bug+0x3a/0x70 [ 1475.083439][T31324] exc_invalid_op+0x16/0x40 [ 1475.088231][T31324] asm_exc_invalid_op+0x16/0x20 [ 1475.093256][T31324] RIP: 0010:hci_conn_timeout+0x24f/0x450 [ 1475.099009][T31324] Code: 21 8e e8 44 c8 99 f8 48 8b 35 75 78 e7 04 bf 08 00 00 00 48 89 da 5b 41 5c 41 5d 41 5e 41 5f 5d e9 76 8e 1a f8 e8 61 9b 48 f8 <0f> 0b e9 35 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c dd fd [ 1475.118729][T31324] RSP: 0018:ffffc90003237c08 EFLAGS: 00010293 [ 1475.124997][T31324] RAX: ffffffff893992bf RBX: ffff8880281b4330 RCX: ffff8880793e1e00 [ 1475.133254][T31324] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 1475.141540][T31324] RBP: 00000000ffffffff R08: ffff8880281b4013 R09: 1ffff11005036802 [ 1475.149781][T31324] R10: dffffc0000000000 R11: ffffed1005036803 R12: ffffffff815576b4 [ 1475.158296][T31324] R13: dffffc0000000000 R14: ffff8880281b4000 R15: ffff8880281b4010 [ 1475.161932][ T3958] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10286'. [ 1475.175963][T31324] ? process_one_work+0x7b4/0x1160 [ 1475.181630][T31324] ? hci_conn_timeout+0x24f/0x450 [ 1475.186706][T31324] ? hci_conn_timeout+0x24f/0x450 [ 1475.192049][T31324] ? process_one_work+0x7b4/0x1160 [ 1475.197493][T31324] process_one_work+0x8ab/0x1160 [ 1475.202483][T31324] ? worker_detach_from_pool+0x240/0x240 [ 1475.208154][T31324] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1475.213233][T31324] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1475.218925][T31324] ? wq_worker_running+0x97/0x190 [ 1475.224005][T31324] worker_thread+0xaf5/0x12a0 [ 1475.229134][T31324] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1475.235363][T31324] kthread+0x29d/0x330 [ 1475.239645][T31324] ? worker_clr_flags+0x1a0/0x1a0 [ 1475.245427][T31324] ? kthread_blkcg+0xd0/0xd0 [ 1475.250132][T31324] ret_from_fork+0x1f/0x30 [ 1475.254640][T31324] [ 1475.258099][T31324] Kernel Offset: disabled [ 1475.262583][T31324] Rebooting in 86400 seconds..